last executing test programs: 1m27.907401697s ago: executing program 1 (id=1619): socket(0x2, 0xa, 0x300) r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r0}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'team_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="70000000ffffffffffff0180c200000e0800450000780000000000177c2275e687350016c82f9078ac1e0001e000000164006558006490780200000004000000020000002915a94a11"], 0x8a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000037f8000000000000000000000000f2645f89cf1830bc"], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m26.849721866s ago: executing program 1 (id=1621): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) io_submit(0x0, 0x0, &(0x7f0000000800)) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r6, 0x40f, &(0x7f0000000000)) ioctl$IOC_PR_PREEMPT(r5, 0x40046109, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)={0x10, 0x1407, 0x1, 0x70bd26, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40011}, 0x20800) 1m22.444277404s ago: executing program 1 (id=1625): socket(0x2b, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') read$FUSE(r0, &(0x7f00000045c0)={0x2020}, 0x2020) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x4b8, 0xffffffff, 0x100, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0xe7, 0x33, 0x5, 0x0, 0x8000, 0x1000, 0x200}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x120, 0x160, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d4], 0x5, 0x9, 0x1}}, @common=@dst={{0x48}, {0x0, 0x5, 0x1, [0x2, 0xa, 0xfffa, 0xe311, 0x4, 0x1000, 0x7ff, 0x7, 0x543, 0x8000, 0x40, 0x3, 0x5, 0x8, 0x9, 0x3], 0xa}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x5, 0x19, "938847910c123d5dea662dae80cb47d09c174093dd2a7f3fc0ce5f5ad5af"}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0x3c, 0x2, 0x57, 0x4, 0x8, @mcast1, @dev={0xfe, 0x80, '\x00', 0x40}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff, 0xff, 0xff, 0xffffffff], [0xff, 0xff, 0xffffff00], [0xffffff00, 0x0, 0xff000000, 0xff], 0x2008}}, @common=@icmp6={{0x28}, {0xd, "ae1f", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) syz_usb_control_io$hid(r1, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000100)={0x0, 0xff, 0x2, &(0x7f0000000240)={0xa1, "1a9c66bf2f615e427b2644e953449f2507f206b2855cd8c82b1b9951cf5a1dee93"}}) 1m15.987434192s ago: executing program 1 (id=1634): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0xffc4}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) write$binfmt_aout(r1, 0x0, 0x0) 1m15.675391034s ago: executing program 1 (id=1637): socket(0x2, 0xa, 0x300) r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000080)=@udp6=r0}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'team_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="70000000ffffffffffff0180c200000e0800450000780000000000177c2275e687350016c82f9078ac1e0001e000000164006558006490780200000004000000020000002915a94a11e4"], 0x8a) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x410cd}, 0x400c084) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000008085", @ANYRES32=r2, @ANYBLOB="00000000010000801801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000600b70300000d0000008500000006000000852000000400000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m15.502237549s ago: executing program 1 (id=1640): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0) 59.195594384s ago: executing program 32 (id=1640): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0) 15.880882042s ago: executing program 0 (id=1740): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000001c0), 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(r1, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x77, 0x141301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000040)={0x80, 0x8, 0x2fd, 0x4, 0x0, 0x5, 0x0}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x10000f1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x19f49a9}], 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x8000ffa1}, {0xfffffff9, 0x80000}]}}) 14.445246534s ago: executing program 0 (id=1743): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x80, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$key(0xf, 0x3, 0x2) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) sendmsg$key(r2, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) 14.354145613s ago: executing program 4 (id=1744): sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 12.629236716s ago: executing program 0 (id=1747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x6c}}, 0x0) 11.184034567s ago: executing program 0 (id=1750): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x400000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102400, 0x19000) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11.032929238s ago: executing program 2 (id=1751): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f00000015c0)=""/102400, 0x19000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)="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", 0x154}], 0x1}, 0x6004c084) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040)={0xa35, 0x6, 0xffff, 0x3}, 0x8) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x3}) sendto$inet(r2, &(0x7f0000000100)="ab", 0x34000, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 9.998544389s ago: executing program 2 (id=1754): socket(0x2, 0xa, 0x300) r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r0}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'team_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="70000000ffffffffffff0180c200000e0800450000780000000000177c2275e687350016c8"], 0x8a) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x410cd}, 0x400c084) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000", @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000008085", @ANYRES32=r2, @ANYBLOB="00000000010000801801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000600b70300000d0000008500000006000000852000000400000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9.684921841s ago: executing program 4 (id=1756): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d"], 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.595343304s ago: executing program 2 (id=1757): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000009000000030000004f0c000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x7f, 0x584e4f53, 0x3, 0x2, 0x7, 0x7, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r1, 0x0, 0x578410eb) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000080)) 9.287615824s ago: executing program 3 (id=1758): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) accept$alg(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40040) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x800, 0x7, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b2", 0x5d}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[], 0x48) pselect6(0x40, &(0x7f0000000000)={0x4, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x2000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) 8.190535391s ago: executing program 3 (id=1759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) setresuid(0x0, 0xee00, 0x0) setgroups(0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r3}, 0x38) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0200000001000000502b97ad2c82f0bce200519d85ecb70000000088738fc99fb77fe39536c33e89aeb900"/63], 0x24, 0x1) 7.068752744s ago: executing program 2 (id=1760): bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000200), 0x0}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'team_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="70000000ffffffffffff0180c200000e0800450000780000000000177c2275e687350016c82f9078ac1e0001e000000164006558006490780200000004000000020000002915a94a11e4"], 0x8a) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYBLOB="00000000000037f8000000000000000000000000f2645f89cf1830bc"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000008085", @ANYRES32=r0, @ANYBLOB="00000000010000801801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000600b70300000d0000008500000006000000852000000400000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.056996404s ago: executing program 3 (id=1761): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x80, 0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) sendmsg$key(r3, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) 6.885457192s ago: executing program 4 (id=1762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 6.514097618s ago: executing program 2 (id=1763): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="1201000300000020b804020500000000000000000000000100807f0904000000637b9707010000090501020000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000100)={'wlan1\x00', @random="0100008dffff"}) 6.312705972s ago: executing program 4 (id=1764): openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x24}}, 0x0) 6.238228288s ago: executing program 0 (id=1765): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) io_submit(0x0, 0x0, &(0x7f0000000800)) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x40f, &(0x7f0000000000)) ioctl$IOC_PR_PREEMPT(r5, 0x40046109, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)={0x10, 0x1407, 0x1, 0x70bd26, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40011}, 0x20800) 6.211010225s ago: executing program 3 (id=1766): socket(0x2, 0xa, 0x300) r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r0}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'team_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="70000000ffffffffffff0180c200000e0800450000780000000000177c2275e687350016c8"], 0x8a) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x410cd}, 0x400c084) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000", @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000008085", @ANYRES32=r2, @ANYBLOB="00000000010000801801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000600b70300000d0000008500000006000000852000000400000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.583128187s ago: executing program 0 (id=1767): socket(0x2b, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') read$FUSE(r1, &(0x7f00000045c0)={0x2020}, 0x2020) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x4b8, 0xffffffff, 0x100, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0xe7, 0x33, 0x5, 0x0, 0x8000, 0x1000, 0x200}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x120, 0x160, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d4], 0x5, 0x9, 0x1}}, @common=@dst={{0x48}, {0x0, 0x5, 0x1, [0x2, 0xa, 0xfffa, 0xe311, 0x4, 0x1000, 0x7ff, 0x7, 0x543, 0x8000, 0x40, 0x3, 0x5, 0x8, 0x9, 0x3], 0xa}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x5, 0x19, "938847910c123d5dea662dae80cb47d09c174093dd2a7f3fc0ce5f5ad5af"}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0x3c, 0x2, 0x57, 0x4, 0x8, @mcast1, @dev={0xfe, 0x80, '\x00', 0x40}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff, 0xff, 0xff, 0xffffffff], [0xff, 0xff, 0xffffff00], [0xffffff00, 0x0, 0xff000000, 0xff], 0x2008}}, @common=@icmp6={{0x28}, {0xd, "ae1f", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) syz_usb_control_io$hid(r2, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000100)={0x0, 0xff, 0x2, &(0x7f0000000240)={0xa1, "1a9c66bf2f615e427b2644e953449f2507f206b2855cd8c82b1b9951cf5a1dee93"}}) ioctl$TIOCSIG(r0, 0x40045436, 0x14) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE(r4, 0x40187542, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x4}, 0x94) socket$tipc(0x1e, 0x5, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./cgroup/../file0\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8a301, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) eventfd(0xff7ffff7) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000000020108000000000000000005000004080008400000000000000000000000001730"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x8000) 1.263226569s ago: executing program 2 (id=1768): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) accept$alg(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40040) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x800, 0x7, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b2", 0x5d}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[], 0x48) pselect6(0x40, &(0x7f0000000000)={0x4, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x2000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) 1.249876292s ago: executing program 3 (id=1769): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000180)) write$dsp(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004380), 0x34000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102400, 0x19000) close_range(r0, 0xffffffffffffffff, 0x0) 1.222014097s ago: executing program 4 (id=1770): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) setresuid(0x0, 0xee00, 0x0) setgroups(0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r3}, 0x38) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0200000001000000502b97ad2c82f0bce200519d85ecb70000000088738fc99fb77fe39536c33e89aeb900"/63], 0x24, 0x1) 959.525µs ago: executing program 4 (id=1771): socket(0x2, 0xa, 0x300) r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 3 (id=1772): r0 = socket(0x10, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r3], 0x2c}}, 0x4000000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000009c0)=ANY=[@ANYRES16, @ANYBLOB="00042dbd7000fcdbdfb0a785c1a9e22cd0000100000005002e005fc30000000008002c0001d67b049c7baa6fa900000005002d00a4996013c55fb66cda585deb1f910a8baa8adac6165fd38a19ec7cfde2b70bfe4d1414d131924f76cc5e84fe9d2676436c541ef600000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc8003, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x5) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000300000055880400000b0000000000000000000000000000d6457708236b5f1b409aae98b85b97752972025742629c36"], &(0x7f00000000c0)='GPL\x00', 0xb, 0xf7, &(0x7f0000000480)=""/247, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x3ff, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0xd, 0x67, 0xd411}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x2, 0x1, 0x6, 0xb}, {0x1, 0x4, 0x3, 0x8}, {0x1, 0x5, 0xa, 0x9}, {0x1, 0x4, 0x7, 0xa}, {0x5, 0x5, 0x10, 0x7}, {0x4, 0x3, 0x9, 0x2}], 0x10, 0xd}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) kernel console output (not intermixed with test programs): nk: 36 bytes leftover after parsing attributes in process `syz.4.110'. [ 124.952915][ T6163] 9p: Bad value for 'rfdno' [ 125.078069][ T10] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 125.112147][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.112733][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 125.112772][ T10] usb 3-1: media controller created [ 125.157472][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.292716][ T6152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.293337][ T6152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.309963][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 125.416742][ T10] DVB: Unable to find symbol dib7000p_attach() [ 125.416759][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 125.460000][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 125.462533][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.462564][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.462611][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 125.462633][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.567860][ T9] usb 2-1: config 0 descriptor?? [ 125.587258][ T9] hub 2-1:0.0: USB hub found [ 125.640039][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 125.640060][ T10] Registered IR keymap rc-empty [ 125.640528][ T10] dvb-usb: could not initialize remote control. [ 125.640538][ T10] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 125.743065][ T10] usb 3-1: USB disconnect, device number 3 [ 125.790074][ T9] hub 2-1:0.0: 1 port detected [ 125.859753][ T6189] overlayfs: missing 'lowerdir' [ 125.908777][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.118'. [ 126.096666][ T10] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 126.229083][ T9] usb 2-1: USB disconnect, device number 2 [ 126.998649][ T6222] overlayfs: missing 'lowerdir' [ 127.038014][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 127.040949][ T995] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 127.199979][ T995] usb 5-1: Using ep0 maxpacket: 32 [ 127.202444][ T995] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 127.202473][ T995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.220969][ T995] usb 5-1: config 0 descriptor?? [ 127.481951][ T995] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 127.491686][ T995] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 127.495309][ T995] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 127.495450][ T995] usb 5-1: media controller created [ 127.598433][ T995] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.687380][ T6214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.703195][ T6214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.854467][ T995] DVB: Unable to find symbol dib7000p_attach() [ 127.854483][ T995] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 127.949920][ T995] rc_core: IR keymap rc-dib0700-rc5 not found [ 127.949940][ T995] Registered IR keymap rc-empty [ 127.950235][ T995] dvb-usb: could not initialize remote control. [ 127.950244][ T995] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 128.000230][ T995] usb 5-1: USB disconnect, device number 3 [ 128.154007][ T6251] tipc: Started in network mode [ 128.154044][ T6251] tipc: Node identity 7a51d50eba89, cluster identity 4711 [ 128.154463][ T6251] tipc: Enabled bearer , priority 0 [ 128.155680][ T6251] syzkaller0: entered promiscuous mode [ 128.155698][ T6251] syzkaller0: entered allmulticast mode [ 128.228968][ T6251] tipc: Resetting bearer [ 128.243548][ T995] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 128.349948][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 128.380494][ T6249] tipc: Resetting bearer [ 128.441582][ T6257] overlayfs: missing 'lowerdir' [ 128.499963][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 128.504171][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.504205][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.504245][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 128.504270][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.508633][ T10] usb 1-1: config 0 descriptor?? [ 128.520427][ T6249] tipc: Disabling bearer [ 128.566457][ T10] hub 1-1:0.0: USB hub found [ 128.686723][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.147'. [ 128.713991][ T10] hub 1-1:0.0: 1 port detected [ 129.154240][ T10] usb 1-1: USB disconnect, device number 5 [ 129.302075][ T5961] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 129.450136][ T5961] usb 4-1: Using ep0 maxpacket: 32 [ 129.452587][ T5961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.452620][ T5961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.452660][ T5961] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 129.452684][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.506221][ T5961] usb 4-1: config 0 descriptor?? [ 129.515829][ T5961] hub 4-1:0.0: USB hub found [ 129.711433][ T5961] hub 4-1:0.0: 1 port detected [ 129.794421][ T6286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.159'. [ 129.849963][ T5859] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 129.991930][ T6290] overlayfs: missing 'lowerdir' [ 130.010219][ T5859] usb 3-1: Using ep0 maxpacket: 32 [ 130.015954][ T5859] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 130.015976][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.058043][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'. [ 130.265836][ T5859] usb 3-1: config 0 descriptor?? [ 130.712584][ T5906] hub 4-1:0.0: activate --> -90 [ 130.727159][ T5859] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 130.830805][ T5859] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 130.838453][ T5859] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 130.839084][ T5859] usb 3-1: media controller created [ 130.934063][ T5906] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 130.936619][ T10] usb 4-1: USB disconnect, device number 3 [ 130.951960][ T1444] usb 4-1: Failed to suspend device, error -19 [ 130.971100][ T6279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.007341][ T5859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.007756][ T6279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.323085][ T5859] DVB: Unable to find symbol dib7000p_attach() [ 131.323100][ T5859] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 131.460069][ T5859] rc_core: IR keymap rc-dib0700-rc5 not found [ 131.460090][ T5859] Registered IR keymap rc-empty [ 131.460386][ T5859] dvb-usb: could not initialize remote control. [ 131.460397][ T5859] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 131.490134][ T5859] usb 3-1: USB disconnect, device number 4 [ 131.780421][ T5859] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 131.979946][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 132.025982][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.173'. [ 132.129927][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 132.132220][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.132253][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.132293][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 132.132317][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.170059][ T6334] overlayfs: missing 'lowerdir' [ 132.633259][ T10] usb 4-1: config 0 descriptor?? [ 132.701710][ T10] hub 4-1:0.0: USB hub found [ 132.940011][ T10] hub 4-1:0.0: 1 port detected [ 133.444512][ T6355] batadv0: entered promiscuous mode [ 133.495202][ T6355] bond0: entered promiscuous mode [ 133.495286][ T6355] bond_slave_0: entered promiscuous mode [ 133.495634][ T6355] bond_slave_1: entered promiscuous mode [ 133.503493][ T6355] debugfs: 'hsr1' already exists in 'hsr' [ 133.503523][ T6355] Cannot create hsr debugfs directory [ 133.535518][ T6355] hsr1: entered allmulticast mode [ 133.535541][ T6355] batadv0: entered allmulticast mode [ 133.535620][ T6355] bond0: entered allmulticast mode [ 133.535636][ T6355] bond_slave_0: entered allmulticast mode [ 133.535655][ T6355] bond_slave_1: entered allmulticast mode [ 133.569023][ T6355] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 133.595381][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.595472][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.390984][ T10] usb 4-1: USB disconnect, device number 4 [ 134.476194][ T6352] 9p: Bad value for 'rfdno' [ 134.820211][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 134.979907][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 134.982012][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.982043][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.982071][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 134.982087][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.995945][ T31] usb 1-1: config 0 descriptor?? [ 135.058971][ T31] hub 1-1:0.0: USB hub found [ 135.326942][ T31] hub 1-1:0.0: 1 port detected [ 135.523898][ T6380] overlayfs: missing 'lowerdir' [ 135.621397][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.189'. [ 136.464632][ T5866] hub 1-1:0.0: activate --> -90 [ 136.869626][ T5866] usb 1-1-port1: cannot disable (err = -71) [ 136.892234][ T5866] usb 1-1: USB disconnect, device number 6 [ 136.892358][ T43] usb 1-1: Failed to suspend device, error -71 [ 137.324627][ T6407] netlink: 'syz.3.196': attribute type 2 has an invalid length. [ 137.324690][ T6407] netlink: 36 bytes leftover after parsing attributes in process `syz.3.196'. [ 137.617214][ T6415] 9p: Bad value for 'rfdno' [ 139.003633][ T6423] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 139.957411][ T6433] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.207'. [ 140.550649][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'. [ 140.639934][ T995] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 140.742388][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 140.789957][ T995] usb 5-1: Using ep0 maxpacket: 32 [ 140.792331][ T995] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.792364][ T995] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.792404][ T995] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 140.792428][ T995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.851961][ T995] usb 5-1: config 0 descriptor?? [ 140.868027][ T995] hub 5-1:0.0: USB hub found [ 141.050682][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 141.425759][ T995] hub 5-1:0.0: 1 port detected [ 141.427260][ T10] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 141.427288][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.519243][ T10] usb 3-1: config 0 descriptor?? [ 141.740494][ T10] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 141.817078][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 141.819072][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 141.819619][ T10] usb 3-1: media controller created [ 141.851305][ T995] hub 5-1:0.0: activate --> -90 [ 141.954149][ T6452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.969766][ T6452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.035086][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.483632][ T995] usb 5-1-port1: cannot disable (err = -71) [ 142.489184][ T6382] usb 5-1: USB disconnect, device number 4 [ 142.507889][ T86] usb 5-1: Failed to suspend device, error -71 [ 142.680146][ T10] DVB: Unable to find symbol dib7000p_attach() [ 142.680163][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 142.849952][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 142.849974][ T10] Registered IR keymap rc-empty [ 142.850281][ T10] dvb-usb: could not initialize remote control. [ 142.850291][ T10] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 142.856741][ T10] usb 3-1: USB disconnect, device number 5 [ 142.978729][ T10] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 143.919567][ T6479] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.221'. [ 144.474035][ T6489] 9p: Bad value for 'wfdno' [ 149.570152][ T6516] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.234'. [ 150.599192][ T6537] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.239'. [ 151.772582][ T6559] libceph: resolve '96.' (ret=-3): failed [ 152.261731][ T6550] netlink: 20 bytes leftover after parsing attributes in process `syz.0.245'. [ 152.359269][ T6561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.247'. [ 153.069342][ T6561] nbd: socks must be embedded in a SOCK_ITEM attr [ 156.616483][ T5790] udevd[5790]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 156.693413][ T5790] udevd[5790]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 156.795562][ T6583] input: syz1 as /devices/virtual/input/input10 [ 159.061308][ T6603] libceph: resolve '96.' (ret=-3): failed [ 160.054956][ T6620] netlink: 20 bytes leftover after parsing attributes in process `syz.4.267'. [ 161.469826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 161.479825][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 161.489823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 161.499818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 161.509832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 161.519820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 161.529824][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 161.539822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 161.549819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 161.559820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 162.082479][ T6656] overlayfs: failed to resolve './file2': -2 [ 162.152537][ T67] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.920015][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 167.089930][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 167.092263][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.092293][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.092331][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 167.092353][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.155144][ T10] usb 3-1: config 0 descriptor?? [ 167.186192][ T10] hub 3-1:0.0: USB hub found [ 167.370647][ T10] hub 3-1:0.0: 1 port detected [ 168.310200][ T10] hub 3-1:0.0: activate --> -90 [ 168.439463][ T6746] mkiss: ax0: crc mode is auto. [ 168.678453][ T10] usb 3-1-port1: cannot disable (err = -71) [ 168.679093][ T36] usb 3-1: USB disconnect, device number 6 [ 168.679361][ T1507] usb 3-1: Failed to suspend device, error -19 [ 169.115648][ T6773] capability: warning: `syz.4.329' uses 32-bit capabilities (legacy support in use) [ 173.833645][ T6789] netlink: 20 bytes leftover after parsing attributes in process `syz.3.336'. [ 174.152108][ T6797] tipc: Started in network mode [ 174.152142][ T6797] tipc: Node identity c219c8f34ecc, cluster identity 4711 [ 174.152319][ T6797] tipc: Enabled bearer , priority 0 [ 174.153162][ T6797] syzkaller0: entered promiscuous mode [ 174.153185][ T6797] syzkaller0: entered allmulticast mode [ 174.313878][ T6800] tipc: Resetting bearer [ 174.351145][ T6796] tipc: Resetting bearer [ 174.999615][ T6796] tipc: Disabling bearer [ 175.259962][ T995] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 175.409886][ T995] usb 1-1: Using ep0 maxpacket: 32 [ 175.412334][ T995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.412367][ T995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.412407][ T995] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 175.412430][ T995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.456463][ T995] usb 1-1: config 0 descriptor?? [ 175.499235][ T995] hub 1-1:0.0: USB hub found [ 175.687089][ T995] hub 1-1:0.0: 1 port detected [ 176.308362][ T995] hub 1-1:0.0: activate --> -90 [ 176.506006][ T6839] tipc: Started in network mode [ 176.506418][ T6839] tipc: Node identity 62a400639fcf, cluster identity 4711 [ 176.525222][ T6839] tipc: Enabled bearer , priority 0 [ 176.526030][ T6839] syzkaller0: entered promiscuous mode [ 176.526054][ T6839] syzkaller0: entered allmulticast mode [ 176.683715][ T6842] tipc: Resetting bearer [ 176.714159][ T6837] tipc: Resetting bearer [ 176.727010][ T995] usb 1-1-port1: cannot disable (err = -71) [ 176.727723][ T10] usb 1-1: USB disconnect, device number 7 [ 176.727961][ T3564] usb 1-1: Failed to suspend device, error -19 [ 176.890736][ T6837] tipc: Disabling bearer [ 178.197159][ T6870] libceph: resolve '96.' (ret=-3): failed [ 178.298544][ T6872] 9p: Bad value for 'wfdno' [ 178.344969][ T6865] mkiss: ax0: crc mode is auto. [ 178.609900][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 178.759924][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 178.763621][ T10] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 178.763650][ T10] usb 1-1: config 0 has no interface number 0 [ 178.763695][ T10] usb 1-1: config 0 interface 106 altsetting 7 has an endpoint descriptor with address 0x95, changing to 0x85 [ 178.763722][ T10] usb 1-1: config 0 interface 106 altsetting 7 bulk endpoint 0x85 has invalid maxpacket 16 [ 178.763749][ T10] usb 1-1: config 0 interface 106 altsetting 7 bulk endpoint 0xA has invalid maxpacket 1023 [ 178.763773][ T10] usb 1-1: config 0 interface 106 has no altsetting 0 [ 178.769077][ T10] usb 1-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=a3.1e [ 178.769106][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.769128][ T10] usb 1-1: Product: syz [ 178.769144][ T10] usb 1-1: Manufacturer: syz [ 178.769159][ T10] usb 1-1: SerialNumber: syz [ 178.904071][ T10] usb 1-1: config 0 descriptor?? [ 178.905105][ T6872] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 178.905398][ T6872] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 179.110185][ T6872] vivid-001: disconnect [ 179.129187][ C0] usb 1-1: NFC: Urb failure (status -71) [ 179.144489][ T6871] vivid-001: reconnect [ 179.162816][ C0] usb 1-1: NFC: Urb failure (status -71) [ 179.167514][ T10] usb 1-1: NFC: Unable to get FW version [ 179.181965][ T10] pn533_usb 1-1:0.106: probe with driver pn533_usb failed with error -71 [ 179.208996][ T5881] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 179.257460][ T10] usb 1-1: USB disconnect, device number 8 [ 179.369922][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 179.372272][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.372305][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.372345][ T5881] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 179.372371][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.406003][ T5881] usb 2-1: config 0 descriptor?? [ 179.442966][ T5881] hub 2-1:0.0: USB hub found [ 179.623374][ T5881] hub 2-1:0.0: 1 port detected [ 180.080044][ T6907] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.390'. [ 180.222524][ T5881] hub 2-1:0.0: activate --> -90 [ 180.625677][ T5881] usb 2-1-port1: cannot disable (err = -71) [ 180.626464][ T158] usb 2-1: Failed to suspend device, error -71 [ 180.638361][ T5866] usb 2-1: USB disconnect, device number 3 [ 180.891719][ T6924] libceph: resolve '96.' (ret=-3): failed [ 181.050012][ T6929] 9p: Bad value for 'wfdno' [ 181.299919][ T5866] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 181.451885][ T5866] usb 3-1: Using ep0 maxpacket: 16 [ 181.454265][ T5866] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 181.454290][ T5866] usb 3-1: config 0 has no interface number 0 [ 181.454336][ T5866] usb 3-1: config 0 interface 106 altsetting 7 has an endpoint descriptor with address 0x95, changing to 0x85 [ 181.454363][ T5866] usb 3-1: config 0 interface 106 altsetting 7 bulk endpoint 0x85 has invalid maxpacket 16 [ 181.454389][ T5866] usb 3-1: config 0 interface 106 altsetting 7 bulk endpoint 0xA has invalid maxpacket 1023 [ 181.454414][ T5866] usb 3-1: config 0 interface 106 has no altsetting 0 [ 181.460897][ T5866] usb 3-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=a3.1e [ 181.460925][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.460946][ T5866] usb 3-1: Product: syz [ 181.460961][ T5866] usb 3-1: Manufacturer: syz [ 181.460975][ T5866] usb 3-1: SerialNumber: syz [ 181.560219][ T5866] usb 3-1: config 0 descriptor?? [ 181.562805][ T6929] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 181.562949][ T6929] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 181.764469][ T6929] vivid-000: disconnect [ 181.768958][ C1] usb 3-1: NFC: Urb failure (status -71) [ 181.777644][ T6926] vivid-000: reconnect [ 181.784497][ C1] usb 3-1: NFC: Urb failure (status -71) [ 181.786776][ T5866] usb 3-1: NFC: Unable to get FW version [ 181.787322][ T5866] pn533_usb 3-1:0.106: probe with driver pn533_usb failed with error -71 [ 181.828031][ T5866] usb 3-1: USB disconnect, device number 7 [ 182.766453][ T6966] libceph: resolve '96.' (ret=-3): failed [ 182.882629][ T6969] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.418'. [ 183.211737][ T6983] 9p: Bad value for 'wfdno' [ 183.489931][ T995] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 183.549946][ T811] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 183.639914][ T995] usb 5-1: Using ep0 maxpacket: 16 [ 183.642194][ T995] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 183.642220][ T995] usb 5-1: config 0 has no interface number 0 [ 183.642265][ T995] usb 5-1: config 0 interface 106 altsetting 7 has an endpoint descriptor with address 0x95, changing to 0x85 [ 183.642293][ T995] usb 5-1: config 0 interface 106 altsetting 7 bulk endpoint 0x85 has invalid maxpacket 16 [ 183.642318][ T995] usb 5-1: config 0 interface 106 altsetting 7 bulk endpoint 0xA has invalid maxpacket 1023 [ 183.642343][ T995] usb 5-1: config 0 interface 106 has no altsetting 0 [ 183.651284][ T995] usb 5-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=a3.1e [ 183.651361][ T995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.651417][ T995] usb 5-1: Product: syz [ 183.651472][ T995] usb 5-1: Manufacturer: syz [ 183.651520][ T995] usb 5-1: SerialNumber: syz [ 183.746075][ T995] usb 5-1: config 0 descriptor?? [ 183.746907][ T6983] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 183.747036][ T6983] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 183.769820][ T811] usb 4-1: Using ep0 maxpacket: 32 [ 183.772153][ T811] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.772179][ T811] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 183.772216][ T811] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 183.772249][ T811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.827722][ T811] usb 4-1: config 0 descriptor?? [ 184.001409][ T6983] vivid-004: disconnect [ 184.046621][ C0] usb 5-1: NFC: Urb failure (status -71) [ 184.080942][ C0] usb 5-1: NFC: Urb failure (status -71) [ 184.083527][ T6981] vivid-004: reconnect [ 184.083886][ T995] usb 5-1: NFC: Unable to get FW version [ 184.084425][ T995] pn533_usb 5-1:0.106: probe with driver pn533_usb failed with error -71 [ 184.135399][ T995] usb 5-1: USB disconnect, device number 5 [ 184.262080][ T7005] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.433'. [ 185.109534][ T7035] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.447'. [ 185.273005][ T7040] 9p: Bad value for 'wfdno' [ 185.510469][ T7046] overlayfs: missing 'lowerdir' [ 185.530653][ T995] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 185.553138][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.453'. [ 185.688227][ T995] usb 1-1: Using ep0 maxpacket: 16 [ 185.697063][ T995] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 185.697090][ T995] usb 1-1: config 0 has no interface number 0 [ 185.697137][ T995] usb 1-1: config 0 interface 106 altsetting 7 has an endpoint descriptor with address 0x95, changing to 0x85 [ 185.697165][ T995] usb 1-1: config 0 interface 106 altsetting 7 bulk endpoint 0x85 has invalid maxpacket 16 [ 185.697191][ T995] usb 1-1: config 0 interface 106 altsetting 7 bulk endpoint 0xA has invalid maxpacket 1023 [ 185.697216][ T995] usb 1-1: config 0 interface 106 has no altsetting 0 [ 185.733175][ T995] usb 1-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=a3.1e [ 185.733273][ T995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.733327][ T995] usb 1-1: Product: syz [ 185.733368][ T995] usb 1-1: Manufacturer: syz [ 185.733407][ T995] usb 1-1: SerialNumber: syz [ 185.799308][ T995] usb 1-1: config 0 descriptor?? [ 185.803457][ T7040] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 185.812946][ T7040] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 186.032869][ T7040] vivid-001: disconnect [ 186.056232][ C0] usb 1-1: NFC: Urb failure (status -71) [ 186.065906][ C0] usb 1-1: NFC: Urb failure (status -71) [ 186.068191][ T995] usb 1-1: NFC: Unable to get FW version [ 186.068506][ T995] pn533_usb 1-1:0.106: probe with driver pn533_usb failed with error -71 [ 186.129518][ T7039] vivid-001: reconnect [ 186.206610][ T995] usb 1-1: USB disconnect, device number 9 [ 186.271526][ T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 186.353725][ T5881] usb 4-1: USB disconnect, device number 5 [ 186.436289][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 186.436323][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.436347][ T10] usb 3-1: Product: syz [ 186.436365][ T10] usb 3-1: Manufacturer: syz [ 186.436382][ T10] usb 3-1: SerialNumber: syz [ 186.487963][ T10] usb 3-1: config 0 descriptor?? [ 186.740217][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 187.110840][ T7082] overlayfs: missing 'lowerdir' [ 187.150762][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 187.379580][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 188.610125][ T7104] 9p: Bad value for 'wfdno' [ 188.799466][ T7117] overlayfs: failed to resolve './file2': -2 [ 188.879962][ T5866] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 189.030793][ T6382] usb 3-1: USB disconnect, device number 8 [ 189.040034][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 189.046224][ T5866] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 189.046322][ T5866] usb 2-1: config 0 has no interface number 0 [ 189.046425][ T5866] usb 2-1: config 0 interface 106 altsetting 7 has an endpoint descriptor with address 0x95, changing to 0x85 [ 189.046493][ T5866] usb 2-1: config 0 interface 106 altsetting 7 bulk endpoint 0x85 has invalid maxpacket 16 [ 189.046567][ T5866] usb 2-1: config 0 interface 106 altsetting 7 bulk endpoint 0xA has invalid maxpacket 1023 [ 189.046630][ T5866] usb 2-1: config 0 interface 106 has no altsetting 0 [ 189.116395][ T5866] usb 2-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=a3.1e [ 189.116427][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.116449][ T5866] usb 2-1: Product: syz [ 189.116464][ T5866] usb 2-1: Manufacturer: syz [ 189.116479][ T5866] usb 2-1: SerialNumber: syz [ 189.206709][ T5866] usb 2-1: config 0 descriptor?? [ 189.207549][ T7104] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 189.207676][ T7104] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 189.484841][ T7134] overlayfs: missing 'lowerdir' [ 189.537350][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.484'. [ 189.662916][ T7104] vivid-003: disconnect [ 189.671673][ T7103] vivid-003: reconnect [ 189.675456][ C1] usb 2-1: NFC: Urb failure (status -71) [ 189.690207][ C1] usb 2-1: NFC: Urb failure (status -71) [ 189.699653][ T5866] usb 2-1: NFC: Unable to get FW version [ 189.710017][ T5866] pn533_usb 2-1:0.106: probe with driver pn533_usb failed with error -71 [ 190.589889][ T5866] usb 2-1: USB disconnect, device number 4 [ 191.593520][ T7155] overlayfs: failed to resolve './file2': -2 [ 191.616618][ T7153] netlink: 'syz.3.491': attribute type 72 has an invalid length. [ 191.832340][ T7163] ALSA: mixer_oss: invalid OSS volume '' [ 191.979955][ T10] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 192.137632][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 192.137666][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.137688][ T10] usb 5-1: Product: syz [ 192.137704][ T10] usb 5-1: Manufacturer: syz [ 192.137719][ T10] usb 5-1: SerialNumber: syz [ 192.200272][ T10] usb 5-1: config 0 descriptor?? [ 192.425315][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 192.459495][ T7175] overlayfs: missing 'lowerdir' [ 192.496378][ T7175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'. [ 193.365441][ T7173] mkiss: ax0: crc mode is auto. [ 194.179448][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 194.468504][ T7192] netlink: 'syz.0.505': attribute type 72 has an invalid length. [ 194.967810][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.967886][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.147374][ T7194] mkiss: ax0: crc mode is auto. [ 195.243913][ T7202] overlayfs: failed to resolve './file2': -2 [ 195.245615][ T10] usb 5-1: USB disconnect, device number 6 [ 195.553844][ T7212] overlayfs: missing 'lowerdir' [ 195.585363][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'. [ 196.088318][ T7230] netlink: 'syz.2.518': attribute type 72 has an invalid length. [ 196.274360][ T7234] ALSA: mixer_oss: invalid OSS volume '' [ 197.402662][ T811] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 198.134910][ T811] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 198.134943][ T811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.134964][ T811] usb 1-1: Product: syz [ 198.134978][ T811] usb 1-1: Manufacturer: syz [ 198.134993][ T811] usb 1-1: SerialNumber: syz [ 198.226865][ T811] usb 1-1: config 0 descriptor?? [ 198.436971][ T811] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 199.085948][ T7269] ALSA: mixer_oss: invalid OSS volume '' [ 200.359179][ T811] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 200.622481][ T7272] libceph: resolve '96.' (ret=-3): failed [ 201.492777][ T7254] usb 1-1: USB disconnect, device number 10 [ 201.647150][ T7303] mkiss: ax0: crc mode is auto. [ 202.134579][ T7318] netlink: 'syz.4.549': attribute type 72 has an invalid length. [ 202.579925][ T811] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 202.739120][ T811] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 202.739151][ T811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.739171][ T811] usb 5-1: Product: syz [ 202.739186][ T811] usb 5-1: Manufacturer: syz [ 202.739201][ T811] usb 5-1: SerialNumber: syz [ 202.791319][ T811] usb 5-1: config 0 descriptor?? [ 203.021310][ T811] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 203.426382][ T7349] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.565'. [ 203.913290][ T7361] 9p: Bad value for 'wfdno' [ 204.138922][ T811] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 204.219965][ T5881] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 204.381376][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 204.396581][ T5881] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 204.396609][ T5881] usb 2-1: config 0 has no interface number 0 [ 204.396654][ T5881] usb 2-1: config 0 interface 106 altsetting 7 has an endpoint descriptor with address 0x95, changing to 0x85 [ 204.396682][ T5881] usb 2-1: config 0 interface 106 altsetting 7 bulk endpoint 0x85 has invalid maxpacket 16 [ 204.396708][ T5881] usb 2-1: config 0 interface 106 altsetting 7 bulk endpoint 0xA has invalid maxpacket 1023 [ 204.396733][ T5881] usb 2-1: config 0 interface 106 has no altsetting 0 [ 204.411502][ T5881] usb 2-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=a3.1e [ 204.411585][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.411638][ T5881] usb 2-1: Product: syz [ 204.411678][ T5881] usb 2-1: Manufacturer: syz [ 204.411714][ T5881] usb 2-1: SerialNumber: syz [ 204.498025][ T5881] usb 2-1: config 0 descriptor?? [ 204.506624][ T7361] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 204.506763][ T7361] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 204.727304][ T7361] vivid-003: disconnect [ 204.758391][ C0] usb 2-1: NFC: Urb failure (status -71) [ 204.759148][ C0] usb 2-1: NFC: Urb failure (status -71) [ 204.765386][ T7360] vivid-003: reconnect [ 204.778071][ T5881] usb 2-1: NFC: Unable to get FW version [ 204.778652][ T5881] pn533_usb 2-1:0.106: probe with driver pn533_usb failed with error -71 [ 204.836364][ T5881] usb 2-1: USB disconnect, device number 5 [ 205.870576][ T995] usb 5-1: USB disconnect, device number 7 [ 209.980094][ T811] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 210.149486][ T811] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 210.149519][ T811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.149552][ T811] usb 3-1: Product: syz [ 210.149567][ T811] usb 3-1: Manufacturer: syz [ 210.149581][ T811] usb 3-1: SerialNumber: syz [ 210.199402][ T811] usb 3-1: config 0 descriptor?? [ 210.259889][ T36] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 210.420038][ T36] usb 2-1: Using ep0 maxpacket: 32 [ 210.420478][ T811] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 210.425939][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.426184][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.426228][ T36] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 210.426253][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.757872][ T36] usb 2-1: config 0 descriptor?? [ 210.803353][ T36] hub 2-1:0.0: USB hub found [ 210.965370][ T36] hub 2-1:0.0: 1 port detected [ 211.607190][ T811] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 211.651993][ T36] hub 2-1:0.0: activate --> -90 [ 212.050696][ T36] usb 2-1-port1: cannot disable (err = -71) [ 212.051687][ T86] usb 2-1: Failed to suspend device, error -71 [ 212.051981][ T10] usb 2-1: USB disconnect, device number 6 [ 212.326217][ T7526] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.640'. [ 212.728257][ T995] usb 3-1: USB disconnect, device number 9 [ 213.377482][ T7554] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.652'. [ 214.345056][ T7566] netlink: 'syz.1.657': attribute type 2 has an invalid length. [ 214.345122][ T7566] netlink: 36 bytes leftover after parsing attributes in process `syz.1.657'. [ 214.402707][ T7577] 9p: Bad value for 'rfdno' [ 214.846546][ T7584] ======================================================= [ 214.846546][ T7584] WARNING: The mand mount option has been deprecated and [ 214.846546][ T7584] and is ignored by this kernel. Remove the mand [ 214.846546][ T7584] option from the mount to silence this warning. [ 214.846546][ T7584] ======================================================= [ 214.888974][ T7584] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 217.257456][ T7598] netlink: 'syz.1.668': attribute type 72 has an invalid length. [ 218.402760][ T7620] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.679'. [ 218.425177][ T7618] netlink: 'syz.4.678': attribute type 2 has an invalid length. [ 218.425240][ T7618] netlink: 36 bytes leftover after parsing attributes in process `syz.4.678'. [ 218.476571][ T7618] 9p: Bad value for 'rfdno' [ 222.149071][ T7653] libceph: resolve '96.' (ret=-3): failed [ 223.740121][ T7680] libceph: resolve '96.' (ret=-3): failed [ 227.849976][ T7696] Bluetooth: hci1: command 0x0406 tx timeout [ 227.850235][ T7696] Bluetooth: hci2: command 0x0406 tx timeout [ 228.094246][ T5804] Bluetooth: hci0: command 0x0406 tx timeout [ 228.094284][ T5804] Bluetooth: hci3: command 0x0406 tx timeout [ 228.737733][ T7703] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 230.708499][ T7705] netlink: 'syz.4.697': attribute type 2 has an invalid length. [ 230.708541][ T7705] netlink: 36 bytes leftover after parsing attributes in process `syz.4.697'. [ 230.761106][ T7711] 9p: Bad value for 'rfdno' [ 231.885010][ T7726] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.720'. [ 233.416035][ T7750] block device autoloading is deprecated and will be removed. [ 234.523771][ T7761] libceph: resolve '96.' (ret=-3): failed [ 235.583837][ T7776] input: syz0 as /devices/virtual/input/input11 [ 238.980251][ T7802] libceph: resolve '96.' (ret=-3): failed [ 240.859930][ T1248] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 241.864184][ T1248] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 241.864215][ T1248] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.864242][ T1248] usb 2-1: config 0 has no interface number 0 [ 241.864287][ T1248] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 241.864314][ T1248] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 241.864337][ T1248] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 241.864363][ T1248] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 241.864391][ T1248] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 241.864416][ T1248] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 241.869672][ T1248] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 241.869702][ T1248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.869723][ T1248] usb 2-1: Product: syz [ 241.872087][ T1248] usb 2-1: Manufacturer: syz [ 241.872139][ T1248] usb 2-1: SerialNumber: syz [ 241.909947][ T1248] usb 2-1: config 0 descriptor?? [ 241.917755][ T7833] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 241.955989][ T1248] microtek usb (rev 0.4.3): will this work? Command EP is not usually 12 [ 241.956032][ T1248] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 241.956063][ T1248] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 242.012653][ T1248] scsi host1: microtekX6 [ 242.058713][ T191] microtek usb (rev 0.4.3): error -90 submitting URB [ 242.103377][ T72] microtek usb (rev 0.4.3): error -90 submitting URB [ 242.119921][ T72] microtek usb (rev 0.4.3): error -90 submitting URB [ 242.159902][ T72] microtek usb (rev 0.4.3): error -90 submitting URB [ 242.224278][ T1248] usb 2-1: USB disconnect, device number 7 [ 246.902532][ T7904] libceph: resolve '96.' (ret=-3): failed [ 248.185845][ T7914] netlink: 20 bytes leftover after parsing attributes in process `syz.4.788'. [ 249.352422][ T1441] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.931095][ T7953] nfs: Unknown parameter 'ÿÿÿÿ' [ 253.247691][ T7956] 9p: Bad value for 'wfdno' [ 253.814311][ T7961] netlink: 20 bytes leftover after parsing attributes in process `syz.1.804'. [ 254.104363][ T5881] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 254.269873][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 254.272358][ T5881] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 254.272384][ T5881] usb 5-1: config 0 has no interface number 0 [ 254.272428][ T5881] usb 5-1: config 0 interface 106 altsetting 7 has an endpoint descriptor with address 0x95, changing to 0x85 [ 254.272455][ T5881] usb 5-1: config 0 interface 106 altsetting 7 bulk endpoint 0x85 has invalid maxpacket 16 [ 254.272481][ T5881] usb 5-1: config 0 interface 106 altsetting 7 bulk endpoint 0xA has invalid maxpacket 1023 [ 254.272505][ T5881] usb 5-1: config 0 interface 106 has no altsetting 0 [ 254.275509][ T5881] usb 5-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=a3.1e [ 254.275536][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.275556][ T5881] usb 5-1: Product: syz [ 254.275570][ T5881] usb 5-1: Manufacturer: syz [ 254.275585][ T5881] usb 5-1: SerialNumber: syz [ 254.400826][ T5881] usb 5-1: config 0 descriptor?? [ 254.401903][ T7956] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 254.402183][ T7956] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 254.604707][ T7956] vivid-004: disconnect [ 254.617719][ C0] usb 5-1: NFC: Urb failure (status -71) [ 254.620983][ C0] usb 5-1: NFC: Urb failure (status -71) [ 254.645447][ T7955] vivid-004: reconnect [ 254.651396][ T5881] usb 5-1: NFC: Unable to get FW version [ 254.652327][ T5881] pn533_usb 5-1:0.106: probe with driver pn533_usb failed with error -71 [ 254.739931][ T1248] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 254.772151][ T5881] usb 5-1: USB disconnect, device number 8 [ 254.910150][ T1248] usb 2-1: Using ep0 maxpacket: 8 [ 254.912066][ T1248] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 254.912091][ T1248] usb 2-1: config 0 has no interface number 0 [ 254.912136][ T1248] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 254.912178][ T1248] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 254.912201][ T1248] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.999106][ T1248] usb 2-1: config 0 descriptor?? [ 255.024161][ T1248] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 256.287727][ T7996] 9p: Bad value for 'wfdno' [ 256.343604][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.343677][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.549907][ T1248] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 256.859846][ T1248] usb 3-1: Using ep0 maxpacket: 16 [ 256.901000][ T1248] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 256.901030][ T1248] usb 3-1: config 0 has no interface number 0 [ 256.901084][ T1248] usb 3-1: config 0 interface 106 altsetting 7 has an endpoint descriptor with address 0x95, changing to 0x85 [ 256.901110][ T1248] usb 3-1: config 0 interface 106 altsetting 7 bulk endpoint 0x85 has invalid maxpacket 16 [ 256.901135][ T1248] usb 3-1: config 0 interface 106 altsetting 7 bulk endpoint 0xA has invalid maxpacket 1023 [ 256.901178][ T1248] usb 3-1: config 0 interface 106 has no altsetting 0 [ 256.906165][ T1248] usb 3-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=a3.1e [ 256.906192][ T1248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.906211][ T1248] usb 3-1: Product: syz [ 256.906226][ T1248] usb 3-1: Manufacturer: syz [ 256.906240][ T1248] usb 3-1: SerialNumber: syz [ 257.915908][ T1248] usb 3-1: config 0 descriptor?? [ 257.931706][ T7996] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 257.931899][ T7996] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 258.142498][ T7996] vivid-000: disconnect [ 258.173440][ C0] usb 3-1: NFC: Urb failure (status -71) [ 258.176947][ C0] usb 3-1: NFC: Urb failure (status -71) [ 258.180642][ T1248] usb 3-1: NFC: Unable to get FW version [ 258.180934][ T1248] pn533_usb 3-1:0.106: probe with driver pn533_usb failed with error -71 [ 258.290193][ T7992] vivid-000: reconnect [ 258.345040][ T1248] usb 3-1: USB disconnect, device number 10 [ 260.346356][ T8040] warning: `syz.0.836' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 263.679339][ T8063] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.848'. [ 265.645048][ T7965] Zero length message leads to an empty skb [ 265.780116][ T1248] usb 2-1: USB disconnect, device number 8 [ 268.223679][ T811] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 268.449964][ T811] usb 3-1: Using ep0 maxpacket: 32 [ 268.453698][ T811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.453732][ T811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.453771][ T811] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 268.453796][ T811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.531167][ T811] usb 3-1: config 0 descriptor?? [ 268.546390][ T811] hub 3-1:0.0: USB hub found [ 268.750235][ T811] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 268.791506][ T811] usbhid 3-1:0.0: can't add hid device: -71 [ 268.791626][ T811] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 268.816786][ T811] usb 3-1: USB disconnect, device number 11 [ 271.976124][ T8157] overlayfs: failed to resolve './file2': -2 [ 272.144132][ T8155] mkiss: ax0: crc mode is auto. [ 274.492381][ T8201] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(16) [ 274.492494][ T8201] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 274.581761][ T8198] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 274.582472][ T8198] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 274.642549][ T8198] vhci_hcd vhci_hcd.0: Device attached [ 274.642624][ T8201] vhci_hcd vhci_hcd.0: Device attached [ 274.716079][ T8202] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(14) [ 274.716106][ T8202] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 274.723420][ T8202] vhci_hcd vhci_hcd.0: Device attached [ 274.743928][ T8207] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(13) [ 274.743961][ T8207] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 274.744017][ T8207] vhci_hcd vhci_hcd.0: Device attached [ 274.781705][ T8198] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 274.784956][ T8198] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 274.832711][ T8198] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(23) [ 274.832731][ T8198] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 274.854839][ T8201] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 274.881144][ T8198] vhci_hcd vhci_hcd.0: Device attached [ 274.969848][ T5859] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 275.020934][ T8210] vhci_hcd: connection closed [ 275.027503][ T8204] vhci_hcd: connection closed [ 275.028254][ T8209] vhci_hcd: connection closed [ 275.028437][ T8200] vhci_hcd: connection reset by peer [ 275.029414][ T8214] vhci_hcd: connection closed [ 275.109568][ T1441] vhci_hcd vhci_hcd.2: stop threads [ 275.111232][ T1441] vhci_hcd vhci_hcd.2: release socket [ 275.155408][ T1441] vhci_hcd vhci_hcd.2: disconnect device [ 275.156298][ T1441] vhci_hcd vhci_hcd.2: stop threads [ 275.156333][ T1441] vhci_hcd vhci_hcd.2: release socket [ 275.156405][ T1441] vhci_hcd vhci_hcd.2: disconnect device [ 275.166465][ T1441] vhci_hcd vhci_hcd.2: stop threads [ 275.166483][ T1441] vhci_hcd vhci_hcd.2: release socket [ 275.166616][ T1441] vhci_hcd vhci_hcd.2: disconnect device [ 275.167586][ T1441] vhci_hcd vhci_hcd.2: stop threads [ 275.167627][ T1441] vhci_hcd vhci_hcd.2: release socket [ 275.192013][ T1441] vhci_hcd vhci_hcd.2: disconnect device [ 275.192757][ T1441] vhci_hcd vhci_hcd.2: stop threads [ 275.192818][ T1441] vhci_hcd vhci_hcd.2: release socket [ 275.193035][ T1441] vhci_hcd vhci_hcd.2: disconnect device [ 275.600389][ T811] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 275.772043][ T811] usb 5-1: Using ep0 maxpacket: 16 [ 275.774807][ T811] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 275.774840][ T811] usb 5-1: config 0 interface 0 has no altsetting 0 [ 275.777874][ T811] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 275.777901][ T811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.777922][ T811] usb 5-1: Product: syz [ 275.777937][ T811] usb 5-1: Manufacturer: syz [ 275.777953][ T811] usb 5-1: SerialNumber: syz [ 275.959976][ T811] usb 5-1: config 0 descriptor?? [ 277.132738][ T811] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 277.550007][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 277.556861][ T811] rc_core: IR keymap rc-imon-pad not found [ 277.556880][ T811] Registered IR keymap rc-empty [ 277.556979][ T811] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 277.556997][ T811] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 277.559612][ T811] imon:send_packet: packet tx failed (-71) [ 277.570040][ T811] imon 5-1:0.0: remote input dev register failed [ 277.570220][ T811] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 278.167350][ T8266] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 278.167405][ T8266] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 278.853069][ T811] imon 5-1:0.0: unable to initialize intf0, err 0 [ 278.853091][ T811] imon:imon_probe: failed to initialize context! [ 278.853104][ T811] imon 5-1:0.0: unable to register, err -19 [ 278.925213][ T811] usb 5-1: USB disconnect, device number 9 [ 280.231473][ T5859] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 281.819894][ T6382] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 284.218783][ T8365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.962'. [ 284.328160][ T6382] usb 5-1: unable to get BOS descriptor or descriptor too short [ 284.329276][ T6382] usb 5-1: no configurations [ 284.329290][ T6382] usb 5-1: can't read configurations, error -22 [ 285.266342][ T8363] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.267569][ T8363] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.856091][ T8363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.903606][ T8363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.246137][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.247874][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.248619][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.248662][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.972502][ T1248] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 288.469958][ T1248] usb 3-1: Using ep0 maxpacket: 32 [ 288.472235][ T1248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.472267][ T1248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.472307][ T1248] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 288.472330][ T1248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.523996][ T1248] usb 3-1: config 0 descriptor?? [ 288.538489][ T1248] hub 3-1:0.0: USB hub found [ 288.759410][ T1248] hub 3-1:0.0: 1 port detected [ 290.420386][ T1248] hub 3-1:0.0: activate --> -90 [ 290.459871][ T5881] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 290.617960][ T5881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.618016][ T5881] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.618600][ T5881] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 290.618626][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.702484][ T5881] usb 1-1: config 0 descriptor?? [ 290.724535][ T1248] usb 3-1-port1: cannot disable (err = -71) [ 290.725109][ T811] usb 3-1: USB disconnect, device number 12 [ 290.725330][ T315] usb 3-1: Failed to suspend device, error -19 [ 290.731706][ T5881] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 290.858176][ T8503] libceph: resolve '96.' (ret=-3): failed [ 291.578108][ T8510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.608050][ T8510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.703008][ T8511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.706661][ T8511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.764314][ T8510] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 291.764600][ T8510] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 291.764659][ T8510] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 291.845666][ T5881] usb 1-1: USB disconnect, device number 11 [ 296.759928][ T6382] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 296.919883][ T6382] usb 3-1: Using ep0 maxpacket: 32 [ 296.923968][ T6382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.924001][ T6382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.924042][ T6382] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 296.924066][ T6382] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.982140][ T6382] usb 3-1: config 0 descriptor?? [ 297.001067][ T6382] hub 3-1:0.0: USB hub found [ 297.146668][ T8568] libceph: resolve '96.' (ret=-3): failed [ 297.365221][ T6382] hub 3-1:0.0: 1 port detected [ 298.023284][ T995] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 299.039857][ T6382] hub 3-1:0.0: activate --> -90 [ 299.114567][ T995] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.114594][ T995] usb 1-1: config 0 has no interfaces? [ 299.123827][ T995] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 299.123856][ T995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.123875][ T995] usb 1-1: Product: syz [ 299.123889][ T995] usb 1-1: Manufacturer: syz [ 299.123902][ T995] usb 1-1: SerialNumber: syz [ 299.175877][ T995] usb 1-1: config 0 descriptor?? [ 299.442175][ T5866] usb 3-1-port1: cannot disable (err = -71) [ 299.443334][ T995] usb 3-1: USB disconnect, device number 13 [ 300.299706][ T8607] libceph: resolve '96.' (ret=-3): failed [ 300.914814][ T5866] usb 1-1: USB disconnect, device number 12 [ 301.818630][ T8625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1075'. [ 302.472174][ T8594] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 302.529025][ T8643] dummy0: entered allmulticast mode [ 303.266624][ T8631] dummy0: left allmulticast mode [ 303.977325][ T8651] libceph: resolve '96.' (ret=-3): failed [ 304.413424][ T8656] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1083'. [ 307.384233][ T8687] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1100'. [ 307.489861][ T36] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 307.666440][ T36] usb 2-1: config 0 has an invalid interface number: 32 but max is 1 [ 307.666487][ T36] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.666507][ T36] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 307.666528][ T36] usb 2-1: config 0 has no interface number 0 [ 307.666574][ T36] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 307.666609][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.895367][ T36] usb 2-1: config 0 descriptor?? [ 308.184012][ T36] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 308.184065][ T36] dvb-usb: bulk message failed: -22 (3/0) [ 308.277947][ T36] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 308.309387][ T36] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 308.309443][ T36] usb 2-1: media controller created [ 308.332950][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.375924][ T36] dvb-usb: bulk message failed: -22 (6/0) [ 308.376051][ T36] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 308.604508][ T36] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 308.918500][ T36] dvb-usb: schedule remote query interval to 150 msecs. [ 308.918525][ T36] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 308.949630][ T36] usb 2-1: USB disconnect, device number 9 [ 309.148598][ T36] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 311.116913][ T8714] debugfs: 'ptm0' already exists in 'caif_serial' [ 311.965445][ T8742] dummy0: entered allmulticast mode [ 313.102851][ T8730] dummy0: left allmulticast mode [ 316.953195][ T8805] dummy0: entered allmulticast mode [ 317.801383][ T8792] dummy0: left allmulticast mode [ 317.812085][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.812847][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.585628][ T8821] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 320.704847][ T8852] dummy0: entered allmulticast mode [ 321.157276][ T8839] dummy0: left allmulticast mode [ 323.413423][ T8862] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 323.413452][ T8862] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 323.413604][ T8862] vhci_hcd vhci_hcd.0: Device attached [ 323.460525][ T8862] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 323.460554][ T8862] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 323.460629][ T8862] vhci_hcd vhci_hcd.0: Device attached [ 323.520262][ T8862] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(15) [ 323.520293][ T8862] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 323.520368][ T8862] vhci_hcd vhci_hcd.0: Device attached [ 323.582462][ T8862] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 323.587696][ T8862] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 323.602480][ T8871] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(17) [ 323.602553][ T8871] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 323.602804][ T8871] vhci_hcd vhci_hcd.0: Device attached [ 323.631996][ T8862] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(24) [ 323.632025][ T8862] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 323.632115][ T8862] vhci_hcd vhci_hcd.0: Device attached [ 323.652906][ T8862] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 323.679917][ T995] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 323.811663][ T8873] vhci_hcd: connection closed [ 323.811969][ T8869] vhci_hcd: connection closed [ 323.812509][ T3564] vhci_hcd vhci_hcd.1: stop threads [ 323.812535][ T3564] vhci_hcd vhci_hcd.1: release socket [ 323.812603][ T3564] vhci_hcd vhci_hcd.1: disconnect device [ 323.812885][ T3564] vhci_hcd vhci_hcd.1: stop threads [ 323.812899][ T3564] vhci_hcd vhci_hcd.1: release socket [ 323.812934][ T3564] vhci_hcd vhci_hcd.1: disconnect device [ 323.812990][ T8876] vhci_hcd: connection closed [ 323.813507][ T3564] vhci_hcd vhci_hcd.1: stop threads [ 323.813524][ T3564] vhci_hcd vhci_hcd.1: release socket [ 323.813562][ T3564] vhci_hcd vhci_hcd.1: disconnect device [ 323.816097][ T8865] vhci_hcd: connection reset by peer [ 323.819396][ T8867] vhci_hcd: connection closed [ 323.819689][ T8336] vhci_hcd vhci_hcd.1: stop threads [ 323.819709][ T8336] vhci_hcd vhci_hcd.1: release socket [ 324.017671][ T8336] vhci_hcd vhci_hcd.1: disconnect device [ 324.021336][ T8336] vhci_hcd vhci_hcd.1: stop threads [ 324.021432][ T8336] vhci_hcd vhci_hcd.1: release socket [ 324.115234][ T8336] vhci_hcd vhci_hcd.1: disconnect device [ 324.857113][ T37] audit: type=1326 audit(1774275474.396:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8882 comm="syz.2.1160" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a1c1cc799 code=0x0 [ 326.651411][ T1248] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 327.135539][ T1248] usb 2-1: Using ep0 maxpacket: 32 [ 327.174110][ T1248] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.174143][ T1248] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.174183][ T1248] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 327.174207][ T1248] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.190547][ T1248] usb 2-1: config 0 descriptor?? [ 327.202209][ T1248] hub 2-1:0.0: USB hub found [ 327.399596][ T1248] hub 2-1:0.0: 1 port detected [ 328.561964][ T1248] hub 2-1:0.0: activate --> -90 [ 329.109898][ T995] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 329.262876][ T1248] usb 2-1-port1: cannot disable (err = -71) [ 329.263717][ T8336] usb 2-1: Failed to suspend device, error -71 [ 329.269679][ T811] usb 2-1: USB disconnect, device number 10 [ 329.611023][ T1248] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 329.761181][ T1248] usb 3-1: Using ep0 maxpacket: 32 [ 329.763491][ T1248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.763521][ T1248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.763560][ T1248] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 329.763583][ T1248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.821752][ T1248] usb 3-1: config 0 descriptor?? [ 329.835643][ T1248] hub 3-1:0.0: USB hub found [ 330.030598][ T1248] hub 3-1:0.0: 1 port detected [ 330.794199][ T1248] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 330.794227][ T1248] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 330.818130][ T1248] usbhid 3-1:0.0: can't add hid device: -71 [ 330.818265][ T1248] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 331.132765][ T1248] usb 3-1: USB disconnect, device number 14 [ 333.317845][ T9011] 9p: Bad value for 'wfdno' [ 333.348957][ T9010] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 333.622890][ T995] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 333.769831][ T995] usb 1-1: Using ep0 maxpacket: 16 [ 333.774060][ T995] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 333.774088][ T995] usb 1-1: config 0 has no interface number 0 [ 333.774134][ T995] usb 1-1: config 0 interface 106 altsetting 7 has an endpoint descriptor with address 0x95, changing to 0x85 [ 333.774160][ T995] usb 1-1: config 0 interface 106 altsetting 7 bulk endpoint 0x85 has invalid maxpacket 16 [ 333.774186][ T995] usb 1-1: config 0 interface 106 altsetting 7 bulk endpoint 0xA has invalid maxpacket 1023 [ 333.774211][ T995] usb 1-1: config 0 interface 106 has no altsetting 0 [ 333.830201][ T995] usb 1-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=a3.1e [ 333.830285][ T995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.830346][ T995] usb 1-1: Product: syz [ 333.830380][ T995] usb 1-1: Manufacturer: syz [ 333.830425][ T995] usb 1-1: SerialNumber: syz [ 334.016059][ T995] usb 1-1: config 0 descriptor?? [ 334.017111][ T9011] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 334.017305][ T9011] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 334.222516][ T9011] vivid-001: disconnect [ 334.231632][ C0] usb 1-1: NFC: Urb failure (status -71) [ 334.234192][ C0] usb 1-1: NFC: Urb failure (status -71) [ 334.237227][ T995] usb 1-1: NFC: Unable to get FW version [ 334.244551][ T995] pn533_usb 1-1:0.106: probe with driver pn533_usb failed with error -71 [ 334.267544][ T9008] vivid-001: reconnect [ 334.277507][ T995] usb 1-1: USB disconnect, device number 13 [ 341.702508][ T9110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.392282][ T9135] nfs: Unknown parameter 'ÿÿÿÿ' [ 351.456678][ T9170] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1265'. [ 354.570855][ T9189] mkiss: ax0: crc mode is auto. [ 355.230041][ T6190] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 356.448938][ T9225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.122801][ T6190] usb 2-1: config 0 has an invalid interface number: 32 but max is 1 [ 359.122857][ T6190] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.122897][ T6190] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 359.122937][ T6190] usb 2-1: config 0 has no interface number 0 [ 359.123005][ T6190] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 359.123028][ T6190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.129433][ T6190] usb 2-1: config 0 descriptor?? [ 359.142089][ T6190] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 359.142190][ T6190] dvb-usb: bulk message failed: -22 (3/0) [ 359.147652][ T6190] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 359.148818][ T6190] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 359.148923][ T6190] usb 2-1: media controller created [ 359.151551][ T6190] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 359.157596][ T6190] dvb-usb: bulk message failed: -22 (6/0) [ 359.157703][ T6190] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 359.164113][ T6190] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 359.307313][ T6190] dvb-usb: schedule remote query interval to 150 msecs. [ 359.307335][ T6190] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 359.485859][ T1248] dvb-usb: bulk message failed: -22 (1/0) [ 359.485914][ T1248] dvb-usb: error while querying for an remote control event. [ 359.564827][ T6190] usb 2-1: USB disconnect, device number 11 [ 359.880284][ T6190] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 360.709870][ T5866] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 360.880248][ T5866] usb 2-1: Using ep0 maxpacket: 32 [ 361.287825][ T5866] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 361.287857][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.314964][ T5866] usb 2-1: config 0 descriptor?? [ 361.522885][ T5866] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 361.537135][ T5866] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 361.538839][ T5866] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 361.538893][ T5866] usb 2-1: media controller created [ 361.586570][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 361.605590][ T5859] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 362.974391][ T9287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.974908][ T9287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.418288][ T5866] DVB: Unable to find symbol dib7000p_attach() [ 363.418304][ T5866] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 363.909815][ T5866] rc_core: IR keymap rc-dib0700-rc5 not found [ 363.909835][ T5866] Registered IR keymap rc-empty [ 363.910428][ T5866] dvb-usb: could not initialize remote control. [ 363.910453][ T5866] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 364.827191][ T5866] usb 2-1: USB disconnect, device number 12 [ 365.177254][ T5866] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 366.203019][ T5859] usb 5-1: unable to get BOS descriptor or descriptor too short [ 366.321574][ T5859] usb 5-1: no configurations [ 366.321592][ T5859] usb 5-1: can't read configurations, error -22 [ 367.705651][ T9316] Bluetooth: MGMT ver 1.23 [ 372.137138][ T9342] overlayfs: missing 'lowerdir' [ 373.204833][ T9352] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1333'. [ 373.205749][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1312'. [ 375.622575][ T5859] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 375.798786][ T5859] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 375.798818][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.798839][ T5859] usb 2-1: Product: syz [ 375.798853][ T5859] usb 2-1: Manufacturer: syz [ 375.798873][ T5859] usb 2-1: SerialNumber: syz [ 375.819762][ T5859] usb 2-1: config 0 descriptor?? [ 375.826368][ T5859] hub 2-1:0.0: bad descriptor, ignoring hub [ 375.826406][ T5859] hub 2-1:0.0: probe with driver hub failed with error -5 [ 376.007464][ T9399] overlayfs: missing 'lowerdir' [ 376.031894][ T5859] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 376.970440][ T5859] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 376.970546][ T5859] dib0700: firmware download failed at 7 with -22 [ 377.032012][ T5859] usb 2-1: USB disconnect, device number 13 [ 379.317193][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.317265][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.401492][ T9441] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1362'. [ 379.821732][ T9450] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 379.942921][ T9433] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.943293][ T9433] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.310869][ T9433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.339536][ T9433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.579851][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.599754][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.599955][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.062170][ T9542] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1411'. [ 383.121457][ T9543] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 387.735346][ T9595] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 390.509904][ T995] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 390.809492][ T9631] binder: 9628:9631 ioctl c0306201 0 returned -14 [ 391.114760][ T995] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 391.114788][ T995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.114806][ T995] usb 2-1: Product: syz [ 391.114819][ T995] usb 2-1: Manufacturer: syz [ 391.114832][ T995] usb 2-1: SerialNumber: syz [ 391.986047][ T995] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 392.099913][ T5880] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 393.500216][ T9617] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 393.619742][ T5880] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 393.621109][ T5880] ath9k_htc: Failed to initialize the device [ 393.716608][ T9652] mkiss: ax0: crc mode is auto. [ 394.613748][ T995] usb 2-1: USB disconnect, device number 14 [ 394.693528][ T995] usb 2-1: ath9k_htc: USB layer deinitialized [ 396.589826][ T5859] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 396.745456][ T5859] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 396.745492][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.745511][ T5859] usb 5-1: Product: syz [ 396.745524][ T5859] usb 5-1: Manufacturer: syz [ 396.745538][ T5859] usb 5-1: SerialNumber: syz [ 396.789305][ T5859] usb 5-1: config 0 descriptor?? [ 397.017119][ T5859] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 397.224042][ T5859] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 397.319835][ T995] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 397.504471][ T995] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.504509][ T995] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 397.504539][ T995] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 397.504556][ T995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.480534][ T995] usb 3-1: config 0 descriptor?? [ 399.636385][ T995] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 399.683773][ T995] usb 5-1: USB disconnect, device number 14 [ 400.689564][ T9707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.696239][ T9707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.315835][ T6382] usb 3-1: USB disconnect, device number 15 [ 402.443271][ T5859] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 402.611614][ T9717] overlayfs: missing 'lowerdir' [ 402.664387][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1479'. [ 402.793906][ T5859] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 402.793933][ T5859] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.793951][ T5859] usb 2-1: config 0 has no interface number 0 [ 402.793994][ T5859] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 402.794018][ T5859] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 402.794875][ T5859] usb 2-1: config 0 interface 146 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 402.798683][ T5859] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 402.798712][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.798733][ T5859] usb 2-1: Product: syz [ 402.798748][ T5859] usb 2-1: Manufacturer: syz [ 402.798777][ T5859] usb 2-1: SerialNumber: syz [ 402.900415][ T5859] usb 2-1: config 0 descriptor?? [ 402.937918][ T5859] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 403.253065][ T5859] usb 2-1: USB disconnect, device number 15 [ 403.929834][ T995] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 403.970576][ T9735] netlink: 'syz.0.1485': attribute type 8 has an invalid length. [ 404.085528][ T995] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 404.085559][ T995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.085581][ T995] usb 3-1: Product: syz [ 404.085596][ T995] usb 3-1: Manufacturer: syz [ 404.085611][ T995] usb 3-1: SerialNumber: syz [ 404.123977][ T995] usb 3-1: config 0 descriptor?? [ 404.327859][ T9748] overlayfs: missing 'lowerdir' [ 404.350313][ T995] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 404.371612][ T9748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1491'. [ 404.429853][ T6382] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 404.589832][ T6382] usb 1-1: Using ep0 maxpacket: 32 [ 404.591703][ T6382] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.591771][ T6382] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 404.591812][ T6382] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 404.591835][ T6382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.620320][ T6382] usb 1-1: config 0 descriptor?? [ 404.651807][ T6382] hub 1-1:0.0: bad descriptor, ignoring hub [ 404.651847][ T6382] hub 1-1:0.0: probe with driver hub failed with error -5 [ 404.669354][ T6382] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 404.956932][ T995] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 406.355609][ T6382] usb 3-1: USB disconnect, device number 16 [ 407.036721][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 407.051476][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 407.052759][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 407.054275][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 407.055088][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 407.417537][ T9877] chnl_net:caif_netlink_parms(): no params data found [ 407.452616][ T6382] usb 1-1: USB disconnect, device number 14 [ 407.643469][ T9758] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 408.285598][ T995] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 408.692133][ T995] usb 5-1: Using ep0 maxpacket: 16 [ 408.736880][ T995] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 408.736911][ T995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.736932][ T995] usb 5-1: Product: syz [ 408.736947][ T995] usb 5-1: Manufacturer: syz [ 408.736962][ T995] usb 5-1: SerialNumber: syz [ 409.233373][ T5809] Bluetooth: hci5: command tx timeout [ 409.671012][ T9877] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.671276][ T9877] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.671602][ T9877] bridge_slave_0: entered allmulticast mode [ 409.675058][ T9877] bridge_slave_0: entered promiscuous mode [ 409.710285][ T9877] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.710453][ T9877] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.710709][ T9877] bridge_slave_1: entered allmulticast mode [ 409.768058][ T9877] bridge_slave_1: entered promiscuous mode [ 409.846244][ T995] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 409.896487][ T995] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 409.896936][ T995] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 409.897046][ T995] usb 5-1: media controller created [ 409.958684][ T995] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 410.235020][ T995] zl10353_read_register: readreg error (reg=127, ret==-110) [ 410.399794][ T5866] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 410.472227][ T995] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 410.489464][ T6382] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 410.500109][ T995] usb 5-1: USB disconnect, device number 15 [ 410.537012][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.584288][ T5866] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 410.584316][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.584334][ T5866] usb 2-1: Product: syz [ 410.584347][ T5866] usb 2-1: Manufacturer: syz [ 410.584361][ T5866] usb 2-1: SerialNumber: syz [ 410.621769][ T9877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.639786][ T5866] usb 2-1: config 0 descriptor?? [ 410.641501][ T9877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.662656][ T6382] usb 3-1: Using ep0 maxpacket: 32 [ 410.665018][ T6382] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.665062][ T6382] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 410.665150][ T6382] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 410.665171][ T6382] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.746623][ T6382] usb 3-1: config 0 descriptor?? [ 410.765081][ T6382] hub 3-1:0.0: bad descriptor, ignoring hub [ 410.765114][ T6382] hub 3-1:0.0: probe with driver hub failed with error -5 [ 410.793520][ T6382] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 410.843113][ T9877] team0: Port device team_slave_0 added [ 410.848504][ T5866] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 410.877240][ T9918] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1561'. [ 411.018946][ T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.073073][ T9877] team0: Port device team_slave_1 added [ 411.289911][ T5809] Bluetooth: hci5: command tx timeout [ 411.346749][ T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.395620][ T9877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.397395][ T9877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.397425][ T9877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.402503][ T9877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.402518][ T9877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.402557][ T9877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.490378][ T5866] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 411.552085][ T9877] hsr_slave_0: entered promiscuous mode [ 411.553473][ T9877] hsr_slave_1: entered promiscuous mode [ 411.566004][ T9877] debugfs: 'hsr0' already exists in 'hsr' [ 411.566058][ T9877] Cannot create hsr debugfs directory [ 411.655821][ T9927] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 411.792200][ T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.019988][ T5880] usb 2-1: USB disconnect, device number 16 [ 413.370199][ T5809] Bluetooth: hci5: command tx timeout [ 413.618794][ T9952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.014630][ T6382] usb 3-1: USB disconnect, device number 17 [ 415.176897][ T9957] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1572'. [ 415.224950][ T67] bridge_slave_1: left allmulticast mode [ 415.225128][ T67] bridge_slave_1: left promiscuous mode [ 415.254180][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.310164][ T67] bridge_slave_0: left allmulticast mode [ 415.310194][ T67] bridge_slave_0: left promiscuous mode [ 415.311852][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.450042][ T5809] Bluetooth: hci5: command tx timeout [ 415.732972][ T995] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 415.895340][ T1248] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 416.135868][ T995] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 416.153943][ T995] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 416.153970][ T995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 416.154000][ T995] usb 1-1: Product: syz [ 416.154013][ T995] usb 1-1: Manufacturer: syz [ 416.154025][ T995] usb 1-1: SerialNumber: syz [ 416.199869][ T1248] usb 5-1: device descriptor read/64, error -71 [ 416.440018][ T1248] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 416.570822][ T1248] usb 5-1: device descriptor read/64, error -71 [ 416.639129][ T995] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 416.661469][ T995] usb 1-1: USB disconnect, device number 15 [ 416.680316][ T1248] usb usb5-port1: attempt power cycle [ 416.683945][ T995] usblp0: removed [ 417.019861][ T1248] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 417.041898][ T1248] usb 5-1: device descriptor read/8, error -71 [ 417.080598][ T67] bond0 (unregistering): left promiscuous mode [ 417.080621][ T67] bond_slave_0: left promiscuous mode [ 417.080871][ T67] bond_slave_1: left promiscuous mode [ 417.133038][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.160542][ T67] bond_slave_0: left allmulticast mode [ 417.180727][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.211028][ T67] bond_slave_1: left allmulticast mode [ 417.214168][ T67] bond0 (unregistering): Released all slaves [ 417.279903][ T1248] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 417.314957][ T1248] usb 5-1: device descriptor read/8, error -71 [ 417.434246][ T1248] usb usb5-port1: unable to enumerate USB device [ 417.451177][ T67] tipc: Left network mode [ 418.113546][ T9979] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 418.113571][ T9979] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 418.113742][ T9979] vhci_hcd vhci_hcd.0: Device attached [ 418.137862][ T9979] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 418.137924][ T9979] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 418.138061][ T9979] vhci_hcd vhci_hcd.0: Device attached [ 418.148411][ T9979] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(15) [ 418.148480][ T9979] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 418.148812][ T9979] vhci_hcd vhci_hcd.0: Device attached [ 418.153679][ T9979] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 418.159313][ T9979] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 418.166826][ T9979] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(21) [ 418.166849][ T9979] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 418.166899][ T9979] vhci_hcd vhci_hcd.0: Device attached [ 418.185138][ T9979] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 418.258631][ T9986] vhci_hcd: connection closed [ 418.259113][ T12] vhci_hcd vhci_hcd.2: stop threads [ 418.259139][ T12] vhci_hcd vhci_hcd.2: release socket [ 418.259177][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 418.284872][ T9982] vhci_hcd: connection closed [ 418.285139][ T9984] vhci_hcd: connection closed [ 418.285361][ T9980] vhci_hcd: connection closed [ 418.288260][ T315] vhci_hcd vhci_hcd.2: stop threads [ 418.288285][ T315] vhci_hcd vhci_hcd.2: release socket [ 418.288324][ T315] vhci_hcd vhci_hcd.2: disconnect device [ 418.288616][ T315] vhci_hcd vhci_hcd.2: stop threads [ 418.288632][ T315] vhci_hcd vhci_hcd.2: release socket [ 418.288667][ T315] vhci_hcd vhci_hcd.2: disconnect device [ 418.288957][ T315] vhci_hcd vhci_hcd.2: stop threads [ 418.288971][ T315] vhci_hcd vhci_hcd.2: release socket [ 418.289006][ T315] vhci_hcd vhci_hcd.2: disconnect device [ 419.970972][ T1248] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 420.119911][ T1248] usb 1-1: Using ep0 maxpacket: 32 [ 420.132001][ T1248] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.132100][ T1248] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 420.132191][ T1248] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 420.132400][ T1248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.188716][ T1248] usb 1-1: config 0 descriptor?? [ 420.221118][ T1248] hub 1-1:0.0: bad descriptor, ignoring hub [ 420.221154][ T1248] hub 1-1:0.0: probe with driver hub failed with error -5 [ 420.224374][ T1248] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 420.577072][ T67] batadv0: left promiscuous mode [ 420.789963][ T67] hsr_slave_0: left promiscuous mode [ 420.909221][ T67] hsr_slave_1: left promiscuous mode [ 421.109712][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.242767][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.281894][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.281920][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.393820][ T67] veth1_macvtap: left promiscuous mode [ 421.394017][ T67] veth0_macvtap: left promiscuous mode [ 421.394266][ T67] veth1_vlan: left promiscuous mode [ 421.395452][ T67] veth0_vlan: left promiscuous mode [ 421.708276][T10030] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 423.280090][ T36] usb 1-1: USB disconnect, device number 16 [ 425.261027][ T67] team0 (unregistering): Port device team_slave_1 removed [ 425.610736][ T67] team0 (unregistering): Port device team_slave_0 removed [ 425.845472][T10041] syzkaller0: entered promiscuous mode [ 425.845497][T10041] syzkaller0: entered allmulticast mode [ 427.016555][ T9877] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 427.571351][ T9877] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 427.631653][ T9877] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 427.689892][ T9877] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 427.839765][ T36] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 428.120027][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 429.021118][ T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.021169][ T36] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 429.021211][ T36] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 429.021227][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.027413][ T36] usb 5-1: config 0 descriptor?? [ 429.056127][ T36] hub 5-1:0.0: bad descriptor, ignoring hub [ 429.056197][ T36] hub 5-1:0.0: probe with driver hub failed with error -5 [ 429.065803][ T36] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 429.650245][ T995] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 430.431527][ T995] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.431579][ T995] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 430.431618][ T995] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 430.431640][ T995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.462916][ T995] usb 3-1: config 0 descriptor?? [ 430.498288][ T9877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.516469][ T995] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 430.545484][ T9877] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.572531][ T7109] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.580379][ T7109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.627664][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.627793][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.900264][T10110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.900814][T10110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.003565][ T36] usb 5-1: USB disconnect, device number 20 [ 431.028174][ T5880] usb 3-1: USB disconnect, device number 18 [ 431.839943][ T36] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 432.979921][ T36] usb 5-1: Using ep0 maxpacket: 16 [ 432.984874][ T36] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 432.984892][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.984905][ T36] usb 5-1: Product: syz [ 432.984915][ T36] usb 5-1: Manufacturer: syz [ 432.984924][ T36] usb 5-1: SerialNumber: syz [ 433.204081][T10125] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 433.266173][ T36] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 433.291601][ T36] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 433.292036][ T36] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 433.292086][ T36] usb 5-1: media controller created [ 433.346876][ T9877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.362859][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 433.550523][ T9877] veth0_vlan: entered promiscuous mode [ 433.583636][ T9877] veth1_vlan: entered promiscuous mode [ 433.622691][ T36] zl10353_read_register: readreg error (reg=127, ret==-110) [ 433.681437][ T36] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 433.689496][ T36] usb 5-1: USB disconnect, device number 21 [ 433.871817][ T9877] veth0_macvtap: entered promiscuous mode [ 433.915771][ T9877] veth1_macvtap: entered promiscuous mode [ 433.953528][ T9877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.987302][ T9877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.496423][ T315] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.516073][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.603018][ T8336] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.685453][ T8336] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.323679][T10145] dummy0: entered allmulticast mode [ 436.339381][T10145] dummy0: left allmulticast mode [ 437.018681][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.018703][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.749048][ T1441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.749862][ T1441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.521251][T10164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.733067][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.733948][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.264735][T10184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.479803][ T1248] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 445.569334][T10189] dummy0: entered allmulticast mode [ 445.961693][T10182] dummy0: left allmulticast mode [ 446.260595][ T1248] usb 2-1: Using ep0 maxpacket: 16 [ 446.417007][ T1248] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 446.417645][ T1248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.417666][ T1248] usb 2-1: Product: syz [ 446.417679][ T1248] usb 2-1: Manufacturer: syz [ 446.417693][ T1248] usb 2-1: SerialNumber: syz [ 446.727749][T10192] mkiss: ax0: crc mode is auto. [ 447.225366][ T1248] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 447.455655][ T1248] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 447.456011][ T1248] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 447.456056][ T1248] usb 2-1: media controller created [ 448.892760][ T1248] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 449.089028][ T1248] zl10353_read_register: readreg error (reg=127, ret==-71) [ 449.135356][T10201] netlink: 'syz.3.1633': attribute type 8 has an invalid length. [ 449.185907][ T1248] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 449.219970][ T1248] usb 2-1: USB disconnect, device number 17 [ 449.429783][ T36] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 449.509803][ T7254] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 449.589846][ T36] usb 5-1: Using ep0 maxpacket: 16 [ 449.597989][ T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.598040][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 449.598067][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 449.598088][ T36] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 449.598128][ T36] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 449.599405][ T36] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 449.599434][ T36] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 449.599457][ T36] usb 5-1: Manufacturer: syz [ 449.609778][ T811] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 449.619603][ T36] usb 5-1: config 0 descriptor?? [ 449.629851][ T6382] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 449.660575][ T7254] usb 1-1: Using ep0 maxpacket: 16 [ 449.711522][ T7254] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 449.711547][ T7254] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.711566][ T7254] usb 1-1: Product: syz [ 449.711579][ T7254] usb 1-1: Manufacturer: syz [ 449.711592][ T7254] usb 1-1: SerialNumber: syz [ 449.773357][ T811] usb 3-1: config 0 has an invalid interface number: 32 but max is 1 [ 449.773383][ T811] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.773402][ T811] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 449.773478][ T811] usb 3-1: config 0 has no interface number 0 [ 449.773523][ T811] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 449.773544][ T811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.791316][ T6382] usb 4-1: Using ep0 maxpacket: 16 [ 449.845823][ T6382] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 449.846234][ T6382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.846256][ T6382] usb 4-1: Product: syz [ 449.846270][ T6382] usb 4-1: Manufacturer: syz [ 449.846284][ T6382] usb 4-1: SerialNumber: syz [ 449.894208][ T811] usb 3-1: config 0 descriptor?? [ 449.944799][ T811] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 449.944856][ T811] dvb-usb: bulk message failed: -22 (3/0) [ 449.996862][ T7254] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 450.004563][ T36] rc_core: IR keymap rc-hauppauge not found [ 450.004763][ T36] Registered IR keymap rc-empty [ 450.030044][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 450.033695][ T811] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 450.038095][ T811] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 450.038602][ T811] usb 3-1: media controller created [ 450.052295][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 450.077651][ T7254] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 450.098811][ T811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 450.129540][ T36] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 450.183041][ T36] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input17 [ 450.184858][T10219] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 450.185723][ T7254] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 450.185775][ T7254] usb 1-1: media controller created [ 450.209328][T10206] dvb-usb: bulk message failed: -22 (4/0) [ 450.291148][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 450.292270][ T811] dvb-usb: bulk message failed: -22 (6/0) [ 450.293474][ T811] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 450.309910][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 450.340538][ T811] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 450.341140][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 450.361783][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 450.390070][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 450.403832][ T6382] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 450.411495][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 450.431355][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 450.450252][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 450.457669][ T7254] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 450.467072][ T811] dvb-usb: schedule remote query interval to 150 msecs. [ 450.471765][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 450.479077][ T811] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 450.498499][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 450.510831][T10214] dvb-usb: bulk message failed: -22 (4/0) [ 450.621310][ T5866] dvb-usb: bulk message failed: -22 (1/0) [ 450.621333][ T5866] dvb-usb: error while querying for an remote control event. [ 450.656843][ T811] usb 3-1: USB disconnect, device number 19 [ 450.663646][ T36] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 450.663722][ T36] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 450.664481][ T7254] zl10353_read_register: readreg error (reg=127, ret==-71) [ 450.686067][ T6382] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 450.687138][ T6382] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 450.687258][ T6382] usb 4-1: media controller created [ 450.755043][ T36] usb 5-1: USB disconnect, device number 22 [ 450.818347][ T6382] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 450.945149][ T6382] zl10353_read_register: readreg error (reg=127, ret==-71) [ 451.024898][ T811] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 451.329961][ T7254] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 451.747790][ T7254] usb 1-1: USB disconnect, device number 17 [ 452.161335][ T6382] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 452.203497][ T6382] usb 4-1: USB disconnect, device number 6 [ 454.422496][ T7109] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.401482][T10273] netlink: 'syz.4.1654': attribute type 8 has an invalid length. [ 457.334818][ T7254] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 457.492835][ T7254] usb 1-1: Using ep0 maxpacket: 16 [ 457.497043][ T7254] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 457.497062][ T7254] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.497075][ T7254] usb 1-1: Product: syz [ 457.497085][ T7254] usb 1-1: Manufacturer: syz [ 457.497095][ T7254] usb 1-1: SerialNumber: syz [ 457.756481][ T7254] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 458.756802][ T7254] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 458.757257][ T7254] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 458.757310][ T7254] usb 1-1: media controller created [ 458.794162][ T7254] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 460.344897][ T7254] zl10353_read_register: readreg error (reg=127, ret==-32) [ 460.890003][T10291] binder: 10290:10291 ioctl 4018620d 0 returned -22 [ 461.008193][ T7254] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 461.219793][ T7254] usb 1-1: USB disconnect, device number 18 [ 464.741917][ T5880] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 465.025594][ T5880] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.025653][ T5880] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 465.025698][ T5880] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 465.025724][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.654913][ T5880] usb 5-1: config 0 descriptor?? [ 465.684114][ T5880] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 466.579839][ T5859] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 466.759839][ T5859] usb 4-1: Using ep0 maxpacket: 32 [ 466.811056][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.811103][ T5859] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 466.811126][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.942752][ T5859] usb 4-1: config 0 descriptor?? [ 466.967062][ T5859] hub 4-1:0.0: bad descriptor, ignoring hub [ 466.967100][ T5859] hub 4-1:0.0: probe with driver hub failed with error -5 [ 467.005461][ T5859] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 467.256550][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 467.278014][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 467.279378][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 467.299543][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 467.309917][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 467.773439][ T36] usb 5-1: USB disconnect, device number 23 [ 468.869781][T10333] chnl_net:caif_netlink_parms(): no params data found [ 469.050125][ T6382] usb 4-1: USB disconnect, device number 7 [ 469.371935][ T60] Bluetooth: hci0: command tx timeout [ 471.543612][ T60] Bluetooth: hci0: command tx timeout [ 473.885291][T10366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.919732][ T60] Bluetooth: hci0: command tx timeout [ 475.930013][ T60] Bluetooth: hci0: command tx timeout [ 477.309790][ T5859] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 477.390149][T10333] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.390285][T10333] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.390476][T10333] bridge_slave_0: entered allmulticast mode [ 477.392743][T10333] bridge_slave_0: entered promiscuous mode [ 477.431100][T10333] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.431231][T10333] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.431427][T10333] bridge_slave_1: entered allmulticast mode [ 477.433784][T10333] bridge_slave_1: entered promiscuous mode [ 477.484068][ T5859] usb 3-1: config 0 has an invalid interface number: 32 but max is 1 [ 477.484093][ T5859] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.484111][ T5859] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 477.484128][ T5859] usb 3-1: config 0 has no interface number 0 [ 477.484170][ T5859] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 477.484190][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.559764][ T5859] usb 3-1: config 0 descriptor?? [ 477.578983][ T5859] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 477.579017][ T5859] dvb-usb: bulk message failed: -22 (3/0) [ 477.597804][ T5859] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 477.608584][ T5859] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 477.608645][ T5859] usb 3-1: media controller created [ 477.633020][ T5859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 477.650814][ T5859] dvb-usb: bulk message failed: -22 (6/0) [ 477.650894][ T5859] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 477.658316][ T5859] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 477.691490][ T5859] dvb-usb: schedule remote query interval to 150 msecs. [ 477.691511][ T5859] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 477.791532][ T5859] usb 3-1: USB disconnect, device number 20 [ 477.984403][ T36] dvb-usb: bulk message failed: -22 (1/0) [ 477.984431][ T36] dvb-usb: error while querying for an remote control event. [ 478.156056][T10399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.111649][ T5859] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 483.122960][ T1441] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.734650][T10333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.891965][ T1441] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.009849][ T1248] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 484.094098][T10333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.161513][ T1248] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 484.163403][ T1248] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 484.163431][ T1248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 484.163444][ T1248] usb 1-1: Product: syz [ 484.163453][ T1248] usb 1-1: Manufacturer: syz [ 484.163463][ T1248] usb 1-1: SerialNumber: syz [ 484.497878][ T1441] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.992372][ T1248] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 485.194481][ T7254] usb 1-1: USB disconnect, device number 19 [ 485.315498][ T7254] usblp0: removed [ 485.367178][T10333] team0: Port device team_slave_0 added [ 485.377990][T10333] team0: Port device team_slave_1 added [ 485.544114][ T1441] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.711521][T10333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.711534][T10333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.711555][T10333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.719337][T10333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.719347][T10333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.719364][T10333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.094525][T10434] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 487.036914][T10333] hsr_slave_0: entered promiscuous mode [ 487.042948][T10333] hsr_slave_1: entered promiscuous mode [ 487.044961][T10333] debugfs: 'hsr0' already exists in 'hsr' [ 487.045025][T10333] Cannot create hsr debugfs directory [ 488.419819][ T5880] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 488.541535][ T1441] bridge_slave_1: left allmulticast mode [ 488.541555][ T1441] bridge_slave_1: left promiscuous mode [ 488.541712][ T1441] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.242631][ T1441] bridge_slave_0: left allmulticast mode [ 489.242740][ T1441] bridge_slave_0: left promiscuous mode [ 489.246230][ T1441] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.632914][ T1441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.691593][ T1441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.746284][ T1441] bond0 (unregistering): Released all slaves [ 490.746792][T10471] nfs: Unknown parameter 'ÿÿÿÿ' [ 491.086752][ T5880] usb 4-1: unable to get BOS descriptor or descriptor too short [ 491.182941][ T5880] usb 4-1: no configurations [ 491.182953][ T5880] usb 4-1: can't read configurations, error -22 [ 492.059804][ T7254] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 493.065472][ T7254] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 493.089537][ T7254] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 493.089565][ T7254] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 493.089584][ T7254] usb 1-1: Product: syz [ 493.089597][ T7254] usb 1-1: Manufacturer: syz [ 493.089611][ T7254] usb 1-1: SerialNumber: syz [ 496.339427][T10494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.010799][ T7254] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 498.036870][ T7254] usb 1-1: USB disconnect, device number 20 [ 498.526639][ T7254] usblp0: removed [ 500.181955][ T5880] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 500.329793][ T5880] usb 1-1: Using ep0 maxpacket: 16 [ 500.356004][ T5880] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 500.356044][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.356064][ T5880] usb 1-1: Product: syz [ 500.356080][ T5880] usb 1-1: Manufacturer: syz [ 500.356094][ T5880] usb 1-1: SerialNumber: syz [ 501.365594][ T5880] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 501.380890][ T5880] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 501.381276][ T5880] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 501.381324][ T5880] usb 1-1: media controller created [ 501.443924][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 501.491915][ T1441] hsr_slave_0: left promiscuous mode [ 501.567964][ T1441] hsr_slave_1: left promiscuous mode [ 501.611672][ T1441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.611699][ T1441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.656012][ T1441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.656038][ T1441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.020662][ T5880] zl10353_read_register: readreg error (reg=127, ret==-110) [ 502.096958][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.097021][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.302412][ T1441] veth1_macvtap: left promiscuous mode [ 502.302480][ T1441] veth0_macvtap: left promiscuous mode [ 502.302646][ T1441] veth1_vlan: left promiscuous mode [ 502.303624][ T1441] veth0_vlan: left promiscuous mode [ 502.320181][ T5880] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 502.373814][ T5880] usb 1-1: USB disconnect, device number 21 [ 502.968725][ T1441] team0 (unregistering): Port device team_slave_1 removed [ 503.030251][ T1441] team0 (unregistering): Port device team_slave_0 removed [ 503.205758][T10526] dummy0: entered allmulticast mode [ 503.205854][T10526] dummy0: left allmulticast mode [ 503.595048][T10546] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 504.561738][ T995] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 504.637191][T10333] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 505.517518][T10333] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 505.533158][ T995] usb 5-1: config 0 has an invalid interface number: 32 but max is 1 [ 505.533186][ T995] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.533206][ T995] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 505.533225][ T995] usb 5-1: config 0 has no interface number 0 [ 505.533269][ T995] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 505.533291][ T995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.547878][ T995] usb 5-1: config 0 descriptor?? [ 506.074738][ T995] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 506.074774][ T995] dvb-usb: bulk message failed: -22 (3/0) [ 506.110325][ T995] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 506.111482][ T995] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 506.111521][ T995] usb 5-1: media controller created [ 506.112750][ T995] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 506.168810][T10333] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 506.177550][ T995] dvb-usb: bulk message failed: -22 (6/0) [ 506.177634][ T995] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 506.230725][ T995] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input20 [ 506.249212][T10333] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 506.267191][ T995] dvb-usb: schedule remote query interval to 150 msecs. [ 506.267249][ T995] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 506.290441][ T995] usb 5-1: USB disconnect, device number 24 [ 507.051628][ T995] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 508.548855][T10333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.800261][T10593] dummy0: entered allmulticast mode [ 508.849091][T10333] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.898425][ T191] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.898692][ T191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.931763][T10583] dummy0: left allmulticast mode [ 509.297759][T10595] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 510.458854][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.459118][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.491720][ T5880] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 513.536424][T10333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.770792][ T5880] usb 5-1: config 0 has an invalid interface number: 32 but max is 1 [ 513.770822][ T5880] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.770841][ T5880] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 513.770861][ T5880] usb 5-1: config 0 has no interface number 0 [ 513.770904][ T5880] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 513.770926][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.826568][ T5880] usb 5-1: config 0 descriptor?? [ 513.858842][ T5880] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 513.858894][ T5880] dvb-usb: bulk message failed: -22 (3/0) [ 513.905471][ T5880] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 513.917110][ T5880] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 513.917263][ T5880] usb 5-1: media controller created [ 513.944450][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 514.003082][ T5880] dvb-usb: bulk message failed: -22 (6/0) [ 514.003136][ T5880] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 514.006100][ T5880] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21 [ 514.045705][ T5880] dvb-usb: schedule remote query interval to 150 msecs. [ 514.045755][ T5880] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 514.122477][ T6382] usb 5-1: USB disconnect, device number 25 [ 514.437470][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 514.910254][ T6382] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 515.461204][T10670] dummy0: entered allmulticast mode [ 515.463130][T10667] dummy0: left allmulticast mode [ 515.809793][ T995] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 515.912323][T10333] veth0_vlan: entered promiscuous mode [ 515.959854][ T995] usb 5-1: Using ep0 maxpacket: 8 [ 515.961837][ T995] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 515.961859][ T995] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.961876][ T995] usb 5-1: config 0 has no interface number 0 [ 515.961915][ T995] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 515.961952][ T995] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 515.961972][ T995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.047343][ T995] usb 5-1: config 0 descriptor?? [ 516.064179][ T995] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 516.066230][T10333] veth1_vlan: entered promiscuous mode [ 516.605575][ T995] usb 5-1: USB disconnect, device number 26 [ 516.613991][T10333] veth0_macvtap: entered promiscuous mode [ 516.675238][T10333] veth1_macvtap: entered promiscuous mode [ 516.758333][T10333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.787591][T10333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.831130][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.831704][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.832188][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.832558][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.954202][ T5859] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 519.124838][T10713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.516847][ T7109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.516918][ T7109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.555988][ T5859] usb 3-1: device descriptor read/all, error -71 [ 523.835760][ T3564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.835801][ T3564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.060763][ T995] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 525.511782][ T995] usb 1-1: Using ep0 maxpacket: 16 [ 525.640444][ T995] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 525.640474][ T995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.640493][ T995] usb 1-1: Product: syz [ 525.640506][ T995] usb 1-1: Manufacturer: syz [ 525.640520][ T995] usb 1-1: SerialNumber: syz [ 525.800065][ T5859] ================================================================== [ 525.800147][ T5859] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 525.800269][ T5859] Read of size 8 at addr ffffc9000e541008 by task kworker/1:3/5859 [ 525.800289][ T5859] [ 525.800340][ T5859] CPU: 1 UID: 0 PID: 5859 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 525.800370][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 525.800382][ T5859] Workqueue: usb_hub_wq hub_event [ 525.800461][ T5859] Call Trace: [ 525.800471][ T5859] [ 525.800482][ T5859] dump_stack_lvl+0xe8/0x150 [ 525.800580][ T5859] print_report+0xba/0x230 [ 525.800631][ T5859] ? __list_add_valid_or_report+0x4e/0x130 [ 525.800696][ T5859] kasan_report+0x117/0x150 [ 525.800757][ T5859] ? __list_add_valid_or_report+0x4e/0x130 [ 525.800792][ T5859] __list_add_valid_or_report+0x4e/0x130 [ 525.800818][ T5859] kcov_remote_stop+0x457/0x680 [ 525.800865][ T5859] hub_event+0x49d8/0x4f60 [ 525.800906][ T5859] ? __pfx___schedule+0x10/0x10 [ 525.800982][ T5859] ? irqentry_exit+0x59e/0x620 [ 525.801039][ T5859] ? rcu_is_watching+0x15/0xb0 [ 525.801075][ T5859] ? __pfx_hub_event+0x10/0x10 [ 525.801099][ T5859] ? preempt_schedule_thunk+0x16/0x30 [ 525.801116][ T5859] ? process_scheduled_works+0xa8d/0x18c0 [ 525.801166][ T5859] ? process_scheduled_works+0xa8d/0x18c0 [ 525.801194][ T5859] process_scheduled_works+0xb6e/0x18c0 [ 525.801239][ T5859] ? __pfx_process_scheduled_works+0x10/0x10 [ 525.801268][ T5859] ? assign_work+0x3d5/0x5e0 [ 525.801288][ T5859] worker_thread+0xa53/0xfc0 [ 525.801341][ T5859] kthread+0x388/0x470 [ 525.801364][ T5859] ? __pfx_worker_thread+0x10/0x10 [ 525.801390][ T5859] ? __pfx_kthread+0x10/0x10 [ 525.801423][ T5859] ret_from_fork+0x51e/0xb90 [ 525.801453][ T5859] ? __pfx_ret_from_fork+0x10/0x10 [ 525.801489][ T5859] ? __switch_to+0xc7d/0x1450 [ 525.801532][ T5859] ? __pfx_kthread+0x10/0x10 [ 525.801552][ T5859] ret_from_fork_asm+0x1a/0x30 [ 525.801577][ T5859] [ 525.801607][ T5859] [ 525.801611][ T5859] The buggy address belongs to a vmalloc virtual mapping [ 525.801671][ T5859] Memory state around the buggy address: [ 525.801690][ T5859] ffffc9000e540f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 525.801705][ T5859] ffffc9000e540f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 525.801720][ T5859] >ffffc9000e541000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 525.801731][ T5859] ^ [ 525.801742][ T5859] ffffc9000e541080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 525.801755][ T5859] ffffc9000e541100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 525.801766][ T5859] ================================================================== [ 525.801851][ T5859] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 525.801867][ T5859] CPU: 1 UID: 0 PID: 5859 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 525.801890][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 525.801903][ T5859] Workqueue: usb_hub_wq hub_event [ 525.801924][ T5859] Call Trace: [ 525.801932][ T5859] [ 525.801939][ T5859] vpanic+0x56c/0xa60 [ 525.801973][ T5859] ? __pfx_vpanic+0x10/0x10 [ 525.801994][ T5859] ? __pfx___schedule+0x10/0x10 [ 525.802036][ T5859] panic+0xc5/0xd0 [ 525.802065][ T5859] ? __pfx_panic+0x10/0x10 [ 525.802093][ T5859] ? preempt_schedule_thunk+0x16/0x30 [ 525.802119][ T5859] ? __list_add_valid_or_report+0x4e/0x130 [ 525.802143][ T5859] check_panic_on_warn+0x89/0xb0 [ 525.802166][ T5859] ? __list_add_valid_or_report+0x4e/0x130 [ 525.802204][ T5859] end_report+0x73/0x180 [ 525.802224][ T5859] ? __list_add_valid_or_report+0x4e/0x130 [ 525.802246][ T5859] kasan_report+0x128/0x150 [ 525.802265][ T5859] ? __list_add_valid_or_report+0x4e/0x130 [ 525.802311][ T5859] __list_add_valid_or_report+0x4e/0x130 [ 525.802346][ T5859] kcov_remote_stop+0x457/0x680 [ 525.802394][ T5859] hub_event+0x49d8/0x4f60 [ 525.802454][ T5859] ? __pfx___schedule+0x10/0x10 [ 525.802481][ T5859] ? irqentry_exit+0x59e/0x620 [ 525.802511][ T5859] ? rcu_is_watching+0x15/0xb0 [ 525.802529][ T5859] ? __pfx_hub_event+0x10/0x10 [ 525.802564][ T5859] ? preempt_schedule_thunk+0x16/0x30 [ 525.802589][ T5859] ? process_scheduled_works+0xa8d/0x18c0 [ 525.802616][ T5859] ? process_scheduled_works+0xa8d/0x18c0 [ 525.802643][ T5859] process_scheduled_works+0xb6e/0x18c0 [ 525.802682][ T5859] ? __pfx_process_scheduled_works+0x10/0x10 [ 525.802718][ T5859] ? assign_work+0x3d5/0x5e0 [ 525.802748][ T5859] worker_thread+0xa53/0xfc0 [ 525.802790][ T5859] kthread+0x388/0x470 [ 525.802808][ T5859] ? __pfx_worker_thread+0x10/0x10 [ 525.802838][ T5859] ? __pfx_kthread+0x10/0x10 [ 525.802853][ T5859] ret_from_fork+0x51e/0xb90 [ 525.802874][ T5859] ? __pfx_ret_from_fork+0x10/0x10 [ 525.802913][ T5859] ? __switch_to+0xc7d/0x1450 [ 525.802940][ T5859] ? __pfx_kthread+0x10/0x10 [ 525.802961][ T5859] ret_from_fork_asm+0x1a/0x30 [ 525.802986][ T5859] [ 525.803597][ T5859] Kernel Offset: disabled