last executing test programs: 16m16.911690472s ago: executing program 32 (id=269): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x6f6, 0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x26020480) socket(0x10, 0x80002, 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) 14m30.995241916s ago: executing program 33 (id=396): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8], 0x48) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r1) socket$can_raw(0x1d, 0x3, 0x1) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x120}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 14m22.407209877s ago: executing program 34 (id=411): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb4b, 0xa, 0x8, 0x180000, 0x400003}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000d40), 0x0, 0x1, &(0x7f0000000100)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c) sendto$inet6(r3, &(0x7f00000000c0)='5', 0x1, 0x20000000, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) preadv(r2, 0x0, 0x0, 0x1, 0x5) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x4000000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x4040014) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYRES32=0x0], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004e904}, 0x800) 10m52.548554906s ago: executing program 35 (id=2302): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x10, 0x30, 0x0, 0x0, 0xee01}, {0x4000000, 0x7f, 0x10000000007, 0x3, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xa, 0x0, 0x1}}}}}}}, 0x0) 9m43.552623575s ago: executing program 36 (id=2825): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200000234000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c00028008000180ffe0ffff0900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) 7m47.992274352s ago: executing program 9 (id=4243): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000100)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x1004) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, 0x0) 7m46.260286373s ago: executing program 9 (id=4262): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x80001}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m45.88529753s ago: executing program 9 (id=4270): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) rseq(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r0 = gettid() rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, &(0x7f0000005c80), 0x0, 0x8) tkill(r0, 0x7) 7m45.710195162s ago: executing program 9 (id=4272): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 7m45.51899066s ago: executing program 9 (id=4274): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000025c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4880}, 0x4088844) close_range(r1, 0xffffffffffffffff, 0x0) 7m44.704972682s ago: executing program 9 (id=4279): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f00000002c0)=0x6, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000280)) 7m44.475445295s ago: executing program 37 (id=4279): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f00000002c0)=0x6, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000280)) 5m37.465118641s ago: executing program 4 (id=5432): unshare(0xc020680) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) 5m37.173790375s ago: executing program 4 (id=5438): openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0xfa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 5m35.909377811s ago: executing program 4 (id=5454): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x80000001, 0x1, 0xfffffffffffffffc, 0x800000df}) write$P9_RLINK(r0, &(0x7f00000002c0)={0x7, 0x47, 0x1}, 0x7) 5m35.767963372s ago: executing program 4 (id=5455): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='tracefs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x152) 5m35.39350147s ago: executing program 4 (id=5458): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x2, 0x2, 0x1) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) 5m33.959911937s ago: executing program 4 (id=5467): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x165, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @multicast1}, {{0x11, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x2}}}}}}, 0x0) 5m33.612538055s ago: executing program 38 (id=5467): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x165, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @multicast1}, {{0x11, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x2}}}}}}, 0x0) 4m30.105135257s ago: executing program 7 (id=5848): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000280)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0x5, {0x7, 0xc9a}}}, {0x1, 0x0, 0x0, 0x0, @time={0x0, 0x200}, {}, {0x80, 0x1}, @queue={0xf, {0x3, 0x4}}}], 0x38) read$snapshot(r2, 0x0, 0xffffffbf) read$snapshot(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4m29.135030278s ago: executing program 7 (id=5855): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @loopback}, 0x2, 0x1, 0x3, 0x1}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047452, 0x0) 4m29.02203995s ago: executing program 7 (id=5856): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xa) fchdir(r1) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0xa}, 0x18) 4m28.643294858s ago: executing program 7 (id=5857): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 4m28.414191164s ago: executing program 7 (id=5860): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000180), &(0x7f0000000200)) 4m26.603892105s ago: executing program 7 (id=5878): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000400)={0x2, 0x0, {&(0x7f0000000080)=""/169, 0xa9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xfffffefd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000f00)=""/179, 0xb3, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000840)={0x2, 0x0, {&(0x7f00000008c0)=""/225, 0xe1, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000e40)=""/187, 0xbb, 0x0, 0x2, 0x3}}, 0x48) 4m26.289305126s ago: executing program 39 (id=5878): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000400)={0x2, 0x0, {&(0x7f0000000080)=""/169, 0xa9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xfffffefd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000f00)=""/179, 0xb3, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000840)={0x2, 0x0, {&(0x7f00000008c0)=""/225, 0xe1, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000e40)=""/187, 0xbb, 0x0, 0x2, 0x3}}, 0x48) 3m55.617722367s ago: executing program 5 (id=6019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) 3m54.620317553s ago: executing program 5 (id=6025): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 3m54.296367683s ago: executing program 5 (id=6026): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2}, 0x14) 3m53.781726622s ago: executing program 5 (id=6028): socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000007, 0x204031, 0xffffffffffffffff, 0x94c1c000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m53.614759665s ago: executing program 5 (id=6030): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000300)='.\x00', 0x8000, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 3m53.383410756s ago: executing program 5 (id=6033): r0 = socket$alg(0x26, 0x5, 0x0) io_uring_setup(0x7464, &(0x7f0000000200)={0x0, 0x7ab6, 0x800, 0x0, 0x2f2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m36.755496808s ago: executing program 40 (id=6033): r0 = socket$alg(0x26, 0x5, 0x0) io_uring_setup(0x7464, &(0x7f0000000200)={0x0, 0x7ab6, 0x800, 0x0, 0x2f2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m54.056838842s ago: executing program 0 (id=6348): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 2m53.407649141s ago: executing program 0 (id=6352): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/129, 0x81}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x21) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00042dbd"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x403, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x113, 0x4}}, 0x20) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x4, 0x0, 0xf1, 0x100000000003, 0x7fffffffffffd, 0x5, 0x4005, 0x8, 0x8000000000, 0x45, 0x200040001, 0xbdb], 0x40000, 0x1c4213}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m53.141944075s ago: executing program 0 (id=6354): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x20000000) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000002e00090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 2m41.911873858s ago: executing program 0 (id=6377): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000200)=""/148, 0x0}) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000001c0)={0x0, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 2m41.622995313s ago: executing program 0 (id=6378): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000001a80)={0x1, [{0x2, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x80006, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x2, 0x68, 0xa9, &(0x7f0000000040)="58603d1e182c5690bf20f55112"}, {0x0, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0xe, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x3, 0x0, 0xf, 0x0}, {0x0, 0x0, 0x8efd, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x2a7b9a10909129d1, 0x0, 0x8, 0x0}, {0x0, 0x0, 0x42, 0x0}, {0x0, 0x0, 0x7, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0xa, 0x0, 0x10000000000000], 0x10000, 0x286}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m41.413939256s ago: executing program 0 (id=6380): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x1, 'pimreg1\x00', {}, 0x9}) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000200)="fbe04481999f6961ce53b1aaded717025b", 0x11}], 0x1) bind$can_j1939(r1, &(0x7f0000000280)={0x1d, r2, 0x1, {0x2ad9e849e82996fb, 0xf0, 0x3}, 0x1}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newtfilter={0x2c, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x48044}, 0x40000) 2m25.289796156s ago: executing program 41 (id=6380): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x1, 'pimreg1\x00', {}, 0x9}) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000200)="fbe04481999f6961ce53b1aaded717025b", 0x11}], 0x1) bind$can_j1939(r1, &(0x7f0000000280)={0x1d, r2, 0x1, {0x2ad9e849e82996fb, 0xf0, 0x3}, 0x1}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newtfilter={0x2c, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x48044}, 0x40000) 1m24.792139733s ago: executing program 2 (id=6596): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000002, 0x20010, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xe0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xb) 1m16.03535515s ago: executing program 2 (id=6613): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) madvise(&(0x7f000035f000/0x4000)=nil, 0x4000, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) fchmod(r1, 0x50) 1m14.345171531s ago: executing program 2 (id=6617): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1m14.279057682s ago: executing program 2 (id=6618): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000200)={'syz0\x00', {0x0, 0x0, 0x0, 0x18c}, 0x4, [0xffffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff0, 0x0, 0xffff56ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x546e2d7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7b46], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6d861f90, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000004, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x137332b9, 0x0, 0x80000, 0x6, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000680)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="dc297bf1ce66483446d8201c47351c48446d35092c264952b8f5dc29101250a70dd587d7ce50b9d0498d730e2ebab5f00af36c7140005940a14d8ab9b12d393c3d0c4ee11a4d7387a436eae3fdf34c3066886a8e313cc51eb9b9202e0dfa69ff22f804a605555a9229ba5cf9a481032d85f29f418f14be1c5a5068f0e59e7dca13596a93002b768a2a9162dc177d1b696f0a20d8249cb3241b2cf5952a014e7ec0efbedcb8a132773999003dd76838cb", 0xb0}, {&(0x7f0000000800)="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", 0xe00}], 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff00000000140000000000000000000000020000000800000000800000110000000000000000000000010000000000000000000000140000000000000000000000070000009404010000000000140000000000000000000000020000000500000000000000110000000000000000000000010000000900000000000000"], 0x98}, 0x200000e0) 1m13.212001468s ago: executing program 2 (id=6622): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) 1m12.762822703s ago: executing program 2 (id=6624): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private0, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffefffffffffe}, {0x0, 0xc, 0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 55.593805373s ago: executing program 42 (id=6624): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private0, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffefffffffffe}, {0x0, 0xc, 0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 44.631245288s ago: executing program 1 (id=6684): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone3(&(0x7f0000000380)={0x200, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) ioctl$KVM_NMI(r2, 0xae9a) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x7, 0x100000000, 0x0, 0x7dd, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x4, 0x5, 0x2, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000000, 0x0, 0x3346c4e8, 0x0, 0xffffffffffffffff, 0x6, 0x967], 0x0, 0x41901}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x150000, 0x0, {[0xfff, 0x3, 0x6, 0x7, 0x5a8e, 0x4, 0x7f7b0d8d, 0x9]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 42.532523451s ago: executing program 1 (id=6690): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 41.446192902s ago: executing program 1 (id=6692): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc31fe084736598c) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xe, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0486dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e2219b6d2e9e64d6141", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50020100907800"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x5f, 0xb8, 0xe5, 0x20, 0xccd, 0x80, 0x4a83, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6f, 0x0, 0x0, 0xaa, 0xd8, 0x23}}]}}]}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14", @ANYRES16, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000044) 37.859212805s ago: executing program 1 (id=6700): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_pidfd_open(r0, 0x0) setns(r4, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 34.357633897s ago: executing program 1 (id=6704): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsmount(0xffffffffffffffff, 0x0, 0x6) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d270015000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160016000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) 25.472434711s ago: executing program 1 (id=6718): getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x13160000000) 19.079451347s ago: executing program 3 (id=6726): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000040)=0xc54, 0x4) 17.900366045s ago: executing program 3 (id=6728): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) openat$ptp0(0xffffffffffffff9c, 0x0, 0x60442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xa) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0x4, 0x0, &(0x7f0000000080)) 17.350397154s ago: executing program 6 (id=6729): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22903) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 16.527618404s ago: executing program 3 (id=6730): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getxattr(0x0, &(0x7f0000000340)=@known='security.apparmor\x00', 0x0, 0x0) open(&(0x7f0000000300)='.\x00', 0x40000, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.282994397s ago: executing program 6 (id=6731): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) fcntl$notify(0xffffffffffffffff, 0x402, 0x91ea6c1af182532) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) 14.0030104s ago: executing program 6 (id=6733): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setrlimit(0xd, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix_mp={0x300, 0x0, 0x34343459}}) 13.462439041s ago: executing program 3 (id=6735): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x2000000, r3}, 0x60) 12.563519733s ago: executing program 6 (id=6736): socket$netlink(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, 0x0, 0x0) socket(0x28, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) memfd_create(0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) socket$nl_route(0x10, 0x3, 0x0) listen(r1, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 10.945394334s ago: executing program 6 (id=6740): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') r1 = syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20048000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) r3 = openat$smackfs_cipso(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(r1, r3, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c010203010902"], 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x10) 8.253752066s ago: executing program 8 (id=6743): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r2, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r4, 0x1) 7.152281476s ago: executing program 8 (id=6744): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$system_posix_acl(0x0, &(0x7f0000000500)='system.posix_acl_default\x00', &(0x7f00000007c0)={{}, {0x1, 0x2}, [], {}, [], {0x10, 0x7}, {0x20, 0x7}}, 0x24, 0x1) 6.018610401s ago: executing program 8 (id=6745): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 4.792818516s ago: executing program 8 (id=6746): r0 = socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf39, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4, 0x4) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(0xffffffffffffffff) socket$unix(0x1, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 3.826726437s ago: executing program 8 (id=6747): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x400001, 0x6361, 0x5, 0xd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x5, 0xb}, {0xb, 0x10}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4010006) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 597.120707ms ago: executing program 6 (id=6748): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x80) open(&(0x7f0000000000)='./file0\x00', 0x80, 0x92) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000016c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0xfc, 0x4000, 0x0}) 535.243793ms ago: executing program 3 (id=6749): r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x40000002, 0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000280)={0x1, 0xe}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 215.233922ms ago: executing program 3 (id=6750): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000380)={0x20, 0x5, 0x2, "5c80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000300)={0x0, 0xd, 0x2, 'W@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x0, 0xa, 0x2, "9c7e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000bc0)={0x2c, &(0x7f00000009c0)={0x40, 0x6, 0x2, "510f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000030c0)={0x34, &(0x7f0000002ec0)={0x40, 0xe, 0xe, "729df5bf79f0f851a762c4483e0a"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) setreuid(0x0, 0x0) 0s ago: executing program 8 (id=6751): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x378, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ff010000060000800000000000000001fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002000000000044000500fe800000000000000000000000000044000004d42b0000000a000000e00000010000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) io_uring_enter(0xffffffffffffffff, 0x2003, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): r: syz [ 949.152822][T21150] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 949.153190][T21150] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 949.494092][T13692] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 949.708046][T13692] usb 7-1: Using ep0 maxpacket: 16 [ 949.710395][T13692] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 949.710438][T13692] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.710455][T13692] usb 7-1: config 0 has no interface number 0 [ 949.713492][T13692] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 949.713519][T13692] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.713539][T13692] usb 7-1: Product: syz [ 949.713553][T13692] usb 7-1: Manufacturer: syz [ 949.713575][T13692] usb 7-1: SerialNumber: syz [ 949.790453][T13692] usb 7-1: config 0 descriptor?? [ 949.900054][T13692] uvcvideo 7-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 949.900102][T13692] uvcvideo 7-1:0.105: No valid video chain found. [ 950.020852][ T5885] cdc_ncm 6-1:1.0: bind() failure [ 950.079608][ T5885] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 950.079653][ T5885] cdc_ncm 6-1:1.1: bind() failure [ 950.098838][T13692] usb 7-1: USB disconnect, device number 47 [ 950.180322][ T5885] usb 6-1: USB disconnect, device number 48 [ 950.234126][T21180] netlink: 'syz.0.5811': attribute type 3 has an invalid length. [ 953.919975][ T809] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 954.095996][ T809] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 954.096044][ T809] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 954.096066][ T809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.104510][ T809] usb 7-1: config 0 descriptor?? [ 954.148017][ T809] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 956.016925][T21353] syz.5.5867: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 956.017177][T21353] CPU: 0 UID: 0 PID: 21353 Comm: syz.5.5867 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 956.017206][T21353] Tainted: [L]=SOFTLOCKUP [ 956.017213][T21353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 956.017226][T21353] Call Trace: [ 956.017234][T21353] [ 956.017243][T21353] dump_stack_lvl+0xe8/0x150 [ 956.017287][T21353] warn_alloc+0x263/0x3e0 [ 956.017320][T21353] ? stack_trace_save+0xa9/0x100 [ 956.017343][T21353] ? __pfx_warn_alloc+0x10/0x10 [ 956.017379][T21353] ? kasan_save_track+0x4f/0x80 [ 956.017402][T21353] ? kasan_save_track+0x3e/0x80 [ 956.017424][T21353] ? __kasan_kmalloc+0x93/0xb0 [ 956.017451][T21353] ? __kmalloc_cache_noprof+0x1f2/0x6b0 [ 956.017478][T21353] ? xskq_create+0x56/0x170 [ 956.017500][T21353] ? xsk_setsockopt+0x603/0x990 [ 956.017521][T21353] ? do_sock_setsockopt+0x17c/0x1b0 [ 956.017539][T21353] ? __x64_sys_setsockopt+0x143/0x1b0 [ 956.017557][T21353] ? do_syscall_64+0xe2/0xf80 [ 956.017587][T21353] __vmalloc_node_range_noprof+0x132/0x1730 [ 956.017646][T21353] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 956.017683][T21353] ? __kasan_kmalloc+0x93/0xb0 [ 956.017713][T21353] vmalloc_user_noprof+0xad/0xe0 [ 956.017741][T21353] ? xskq_create+0xbf/0x170 [ 956.017784][T21353] xskq_create+0xbf/0x170 [ 956.017811][T21353] xsk_init_queue+0xad/0x110 [ 956.017837][T21353] xsk_setsockopt+0x603/0x990 [ 956.017863][T21353] ? __pfx_xsk_setsockopt+0x10/0x10 [ 956.017889][T21353] ? __fget_files+0x2a/0x420 [ 956.017909][T21353] ? __fget_files+0x2a/0x420 [ 956.017925][T21353] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 956.017951][T21353] ? __pfx_xsk_setsockopt+0x10/0x10 [ 956.017975][T21353] do_sock_setsockopt+0x17c/0x1b0 [ 956.017999][T21353] __x64_sys_setsockopt+0x143/0x1b0 [ 956.018019][T21353] do_syscall_64+0xe2/0xf80 [ 956.018044][T21353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.018064][T21353] ? trace_irq_disable+0x37/0x100 [ 956.018090][T21353] ? clear_bhb_loop+0x60/0xb0 [ 956.018114][T21353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.018134][T21353] RIP: 0033:0x7f57f968aeb9 [ 956.018153][T21353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.018171][T21353] RSP: 002b:00007f57f78e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 956.018191][T21353] RAX: ffffffffffffffda RBX: 00007f57f9905fa0 RCX: 00007f57f968aeb9 [ 956.018206][T21353] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 956.018219][T21353] RBP: 00007f57f96f8c1f R08: 0000000000000004 R09: 0000000000000000 [ 956.018231][T21353] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 956.018244][T21353] R13: 00007f57f9906038 R14: 00007f57f9905fa0 R15: 00007fff89de3918 [ 956.018286][T21353] [ 956.018436][T21353] Mem-Info: [ 956.018446][T21353] active_anon:284 inactive_anon:26233 isolated_anon:0 [ 956.018446][T21353] active_file:26850 inactive_file:35242 isolated_file:0 [ 956.018446][T21353] unevictable:20588 dirty:304 writeback:0 [ 956.018446][T21353] slab_reclaimable:12864 slab_unreclaimable:109249 [ 956.018446][T21353] mapped:30933 shmem:19054 pagetables:2052 [ 956.018446][T21353] sec_pagetables:0 bounce:0 [ 956.018446][T21353] kernel_misc_reclaimable:0 [ 956.018446][T21353] free:1252482 free_pcp:10165 free_cma:0 [ 956.018506][T21353] Node 0 active_anon:1136kB inactive_anon:104932kB active_file:107008kB inactive_file:140968kB unevictable:80816kB isolated(anon):0kB isolated(file):0kB mapped:123596kB dirty:1216kB writeback:0kB shmem:74680kB kernel_stack:14612kB pagetables:8044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 956.018553][T21353] Node 1 active_anon:0kB inactive_anon:0kB active_file:392kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 956.018597][T21353] Node 0 DMA free:15356kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 956.018656][T21353] lowmem_reserve[]: 0 2507 2507 2507 2507 [ 956.018691][T21353] Node 0 DMA32 free:1093272kB boost:0kB min:3932kB low:6472kB high:9012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1136kB inactive_anon:104932kB active_file:107008kB inactive_file:140968kB unevictable:80816kB writepending:1216kB zspages:4kB present:3129332kB managed:2567400kB mlocked:0kB bounce:0kB free_pcp:40660kB local_pcp:28736kB free_cma:0kB [ 956.018752][T21353] lowmem_reserve[]: 0 0 0 0 0 [ 956.018784][T21353] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 956.018840][T21353] lowmem_reserve[]: 0 0 0 0 0 [ 956.018872][T21353] Node 1 Normal free:3901300kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:392kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 956.018930][T21353] lowmem_reserve[]: 0 0 0 0 0 [ 956.018962][T21353] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 956.019114][T21353] Node 0 DMA32: 2440*4kB (UME) 2370*8kB (UME) 1501*16kB (UME) 222*32kB (UME) 145*64kB (UME) 179*128kB (UME) 117*256kB (UME) 155*512kB (UME) 117*1024kB (UME) 63*2048kB (UME) 157*4096kB (M) = 1093248kB [ 956.019278][T21353] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 956.019378][T21353] Node 1 Normal: 195*4kB (UE) 43*8kB (UE) 45*16kB (UE) 198*32kB (UE) 96*64kB (UME) 35*128kB (UE) 8*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 4*2048kB (UME) 944*4096kB (M) = 3901300kB [ 956.019644][T21353] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 956.019661][T21353] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 956.019677][T21353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 956.019694][T21353] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 956.019710][T21353] 100942 total pagecache pages [ 956.019722][T21353] 0 pages in swap cache [ 956.019729][T21353] Free swap = 124992kB [ 956.019737][T21353] Total swap = 124996kB [ 956.019745][T21353] 2097051 pages RAM [ 956.019752][T21353] 0 pages HighMem/MovableOnly [ 956.019759][T21353] 423431 pages reserved [ 956.019766][T21353] 0 pages cma reserved [ 956.857652][ T8549] usb 7-1: USB disconnect, device number 48 [ 957.332719][T21377] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5876'. [ 957.371405][T21377] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.383177][T21377] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.399982][T21379] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5876'. [ 957.840804][T21388] fuse: Bad value for 'fd' [ 957.973046][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 957.996853][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 958.000532][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 958.044932][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 958.049829][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 958.206597][T21391] lo speed is unknown, defaulting to 1000 [ 959.034189][T21421] fuse: Bad value for 'fd' [ 959.163939][T21391] chnl_net:caif_netlink_parms(): no params data found [ 959.397984][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 959.454156][T21391] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.454998][T21391] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.455122][T21391] bridge_slave_0: entered allmulticast mode [ 959.456473][T21391] bridge_slave_0: entered promiscuous mode [ 959.459844][T21391] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.460040][T21391] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.460223][T21391] bridge_slave_1: entered allmulticast mode [ 959.462637][T21391] bridge_slave_1: entered promiscuous mode [ 959.558566][T21391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.563235][T21391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.574869][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 959.594516][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 959.594565][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 959.594588][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.641153][ T9] usb 2-1: config 0 descriptor?? [ 959.870494][T21391] team0: Port device team_slave_0 added [ 959.912330][T21391] team0: Port device team_slave_1 added [ 960.015194][ T9] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 960.059776][T21391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 960.059788][T21391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.059803][T21391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 960.068669][T21391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 960.068687][T21391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.068714][T21391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 960.249851][ T5116] Bluetooth: hci4: command tx timeout [ 960.289151][ T31] usb 2-1: USB disconnect, device number 5 [ 960.289247][ C0] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 960.387783][T21391] hsr_slave_0: entered promiscuous mode [ 960.389292][T21391] hsr_slave_1: entered promiscuous mode [ 960.390218][T21391] debugfs: 'hsr0' already exists in 'hsr' [ 960.390242][T21391] Cannot create hsr debugfs directory [ 960.815470][ T9] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 960.910718][T21454] Bluetooth: MGMT ver 1.23 [ 960.975792][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 960.984363][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 960.984390][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 961.011524][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 961.011555][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.011575][ T9] usb 6-1: Product: syz [ 961.011589][ T9] usb 6-1: Manufacturer: syz [ 961.011602][ T9] usb 6-1: SerialNumber: syz [ 961.072058][ T31] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 961.241902][ T31] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 961.241934][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.241953][ T31] usb 7-1: Product: syz [ 961.241967][ T31] usb 7-1: Manufacturer: syz [ 961.241980][ T31] usb 7-1: SerialNumber: syz [ 961.248364][ T31] usb 7-1: config 0 descriptor?? [ 961.338147][ T9] usb 6-1: 0:2 : does not exist [ 961.353142][ T9] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 961.461025][ T9] usb 6-1: USB disconnect, device number 49 [ 961.512265][ T31] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 962.038572][T20628] udevd[20628]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 962.488812][ T5116] Bluetooth: hci4: command tx timeout [ 962.605483][ T31] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 962.617277][ T31] usb 7-1: USB disconnect, device number 49 [ 963.720266][T21490] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5915'. [ 964.706222][ T5116] Bluetooth: hci4: command tx timeout [ 964.875614][ T3503] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 965.582070][T21523] smc: net device bond0 applied user defined pnetid SYZ2 [ 965.594583][T21524] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5924'. [ 965.982462][T21524] smc: removing net device bond0 with user defined pnetid SYZ2 [ 966.127307][T21524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 966.353875][T21524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 966.492494][T21524] bond0 (unregistering): Released all slaves [ 966.929184][ T5116] Bluetooth: hci4: command tx timeout [ 967.379603][ T8549] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 967.551627][ T8549] usb 7-1: Using ep0 maxpacket: 16 [ 967.558854][ T8549] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 967.558886][ T8549] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.558920][ T8549] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 967.558941][ T8549] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.619401][ T8549] usb 7-1: config 0 descriptor?? [ 967.953470][T21580] netlink: 'syz.0.5938': attribute type 4 has an invalid length. [ 967.999949][T21578] netlink: 'syz.0.5938': attribute type 4 has an invalid length. [ 968.161094][T21584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5939'. [ 968.326747][ T8549] usb 7-1: language id specifier not provided by device, defaulting to English [ 968.541277][ T8549] letsketch 0003:6161:4D15.003C: Device info: 騭힫튌츜霑퉨á¼Ó¶ã­©ì‰»é“‡ã»»Ô‚â¡æ‹·çµ–ïœ‘î¹ [ 968.724351][T20628] block nbd64: NBD_DISCONNECT [ 968.756700][ T8549] letsketch 0003:6161:4D15.003C: Device info: è‚¿ [ 968.971338][ T8549] letsketch 0003:6161:4D15.003C: Device info: à° [ 969.279238][ T8549] usb 7-1: Max retries (5) exceeded reading string descriptor 1 [ 969.279321][ T8549] letsketch 0003:6161:4D15.003C: probe with driver letsketch failed with error -71 [ 969.295787][ T8549] usb 7-1: USB disconnect, device number 50 [ 969.410406][T21391] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 969.545494][T20628] udevd[20628]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 969.587072][T21391] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 969.918114][T21391] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 970.043205][T21391] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 971.856655][T21391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 971.995654][T21391] 8021q: adding VLAN 0 to HW filter on device team0 [ 971.996657][T21669] fuse: Bad value for 'fd' [ 972.008531][ T10] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 972.036416][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.037221][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.052737][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.052949][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.180993][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 972.191860][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 972.191910][ T10] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 972.191931][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.234911][ T10] usb 6-1: config 0 descriptor?? [ 972.498337][ T10] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 973.013020][ T8549] usb 6-1: USB disconnect, device number 50 [ 973.254163][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 973.254232][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 973.431295][T21704] netlink: 7 bytes leftover after parsing attributes in process `syz.6.5968'. [ 973.675581][T21391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 973.894595][T21391] veth0_vlan: entered promiscuous mode [ 973.927432][T21391] veth1_vlan: entered promiscuous mode [ 974.045570][T21391] veth0_macvtap: entered promiscuous mode [ 974.074114][T21391] veth1_macvtap: entered promiscuous mode [ 974.118182][T21391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 974.191685][T21391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 974.240711][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.242356][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.242541][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.279748][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.982750][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.982885][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.427824][ T5054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.427849][ T5054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.135544][T21747] netlink: 'syz.0.5979': attribute type 10 has an invalid length. [ 976.389139][T21747] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 977.531021][T21755] syz.1.5980 (21755): drop_caches: 2 [ 977.646247][T21762] fuse: Bad value for 'fd' [ 980.107671][ T5887] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 980.477747][ T5887] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 980.477807][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 980.477824][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 980.477837][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 980.477853][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 980.477876][ T5887] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 980.477887][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.480777][ T5887] usb 3-1: config 0 descriptor?? [ 980.482512][T21792] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 980.855706][ T809] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 981.020623][ T809] usb 6-1: Using ep0 maxpacket: 32 [ 981.023252][ T809] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 981.023279][ T809] usb 6-1: config 0 has no interface number 0 [ 981.026244][ T809] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 981.026273][ T809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.026292][ T809] usb 6-1: Product: syz [ 981.026305][ T809] usb 6-1: Manufacturer: syz [ 981.026318][ T809] usb 6-1: SerialNumber: syz [ 981.062755][ T5887] plantronics 0003:047F:FFFF.003D: reserved main item tag 0xd [ 981.071742][ T809] usb 6-1: config 0 descriptor?? [ 981.094848][ T809] smsc95xx v2.0.0 [ 981.158921][ T5887] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 981.352748][T21792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.353403][T21792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.543406][ T809] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 981.543436][ T809] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 982.704677][ T809] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 982.706768][ T809] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 982.907264][ T809] usb 6-1: USB disconnect, device number 51 [ 983.425664][ T8549] usb 3-1: USB disconnect, device number 4 [ 985.405503][T21847] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 985.405503][T21847] The task syz.1.6004 (21847) triggered the difference, watch for misbehavior. [ 989.359357][ T8549] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 989.443640][T21934] loop2: detected capacity change from 0 to 7 [ 989.458013][T20628] Dev loop2: unable to read RDB block 7 [ 989.458062][T20628] loop2: unable to read partition table [ 989.458297][T20628] loop2: partition table beyond EOD, truncated [ 989.492390][T21934] Dev loop2: unable to read RDB block 7 [ 989.492421][T21934] loop2: unable to read partition table [ 989.492548][T21934] loop2: partition table beyond EOD, truncated [ 989.492578][T21934] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 989.519727][ T8549] usb 3-1: Using ep0 maxpacket: 32 [ 989.523582][ T8549] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 989.523615][ T8549] usb 3-1: config 0 interface 0 has no altsetting 0 [ 989.523647][ T8549] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 989.523668][ T8549] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.528627][ T8549] usb 3-1: config 0 descriptor?? [ 989.778264][ T8549] usbhid 3-1:0.0: can't add hid device: -71 [ 989.778386][ T8549] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 989.806318][ T8549] usb 3-1: USB disconnect, device number 5 [ 989.901282][T21941] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6026'. [ 990.332236][ T8549] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 990.496406][ T8549] usb 3-1: Using ep0 maxpacket: 32 [ 990.499443][ T8549] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 990.499476][ T8549] usb 3-1: config 0 interface 0 has no altsetting 0 [ 990.499509][ T8549] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 990.499546][ T8549] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.515340][ T8549] usb 3-1: config 0 descriptor?? [ 991.065225][ T8549] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.003E/input/input51 [ 991.150848][ T8549] sony 0003:054C:03D5.003E: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 991.227114][ T8549] usb 3-1: USB disconnect, device number 6 [ 991.388308][T21979] fido_id[21979]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 992.150244][ T8549] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 992.320747][ T8549] usb 3-1: Using ep0 maxpacket: 16 [ 992.340766][ T8549] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 992.340795][ T8549] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.363816][ T8549] usb 3-1: config 0 descriptor?? [ 992.828658][ T8549] uclogic 0003:5543:0004.003F: unknown main item tag 0x0 [ 992.828702][ T8549] uclogic 0003:5543:0004.003F: unknown main item tag 0x0 [ 992.828724][ T8549] uclogic 0003:5543:0004.003F: unknown main item tag 0x0 [ 992.828747][ T8549] uclogic 0003:5543:0004.003F: unknown main item tag 0x0 [ 992.828769][ T8549] uclogic 0003:5543:0004.003F: unknown main item tag 0x0 [ 992.854416][ T8549] uclogic 0003:5543:0004.003F: hidraw0: USB HID v1.01 Device [HID 5543:0004] on usb-dummy_hcd.2-1/input0 [ 992.887368][ T5887] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 993.030357][ T10] usb 3-1: USB disconnect, device number 7 [ 993.047605][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 993.051085][ T5887] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 993.051115][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.109541][ T5887] usb 2-1: config 0 descriptor?? [ 993.152462][T22031] 9p: Bad value for 'wfdno' [ 993.331125][ T5887] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 993.338303][ T5887] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 993.339399][ T5887] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 993.346872][ T5887] usb 2-1: media controller created [ 993.387762][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 993.516548][ T5887] DVB: Unable to find symbol dib7000p_attach() [ 993.516566][ T5887] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 993.603655][ T5887] rc_core: IR keymap rc-dib0700-rc5 not found [ 993.603676][ T5887] Registered IR keymap rc-empty [ 993.603986][ T5887] dvb-usb: could not initialize remote control. [ 993.603995][ T5887] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 993.638119][ T5887] usb 2-1: USB disconnect, device number 6 [ 993.787922][ T5887] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 994.902532][T22090] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6059'. [ 995.021599][T22096] fuse: Bad value for 'fd' [ 997.046037][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 997.309612][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 997.309639][ T10] usb 3-1: config 0 has no interfaces? [ 997.309669][ T10] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 997.309692][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.321648][ T10] usb 3-1: config 0 descriptor?? [ 997.498152][T22127] loop2: detected capacity change from 0 to 7 [ 997.500333][T20628] Dev loop2: unable to read RDB block 7 [ 997.500361][T20628] loop2: unable to read partition table [ 997.500492][T20628] loop2: partition table beyond EOD, truncated [ 997.511442][T22127] Dev loop2: unable to read RDB block 7 [ 997.511488][T22127] loop2: unable to read partition table [ 997.511699][T22127] loop2: partition table beyond EOD, truncated [ 997.511726][T22127] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 997.603627][ T10] usb 3-1: USB disconnect, device number 8 [ 998.154555][ T5054] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 998.189886][ T5887] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 998.319982][T22137] 8021q: adding VLAN 0 to HW filter on device bond1 [ 998.322718][T22137] team0: Failed to send port change of device bond1 via netlink (err -105) [ 998.322880][T22137] team0: Failed to send options change via netlink (err -105) [ 998.322891][T22137] team0: Port device bond1 added [ 998.376995][ T5887] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 998.377023][ T5887] usb 7-1: config 0 has no interface number 0 [ 998.381016][ T5887] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 998.381062][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.381081][ T5887] usb 7-1: Product: syz [ 998.381094][ T5887] usb 7-1: Manufacturer: syz [ 998.381108][ T5887] usb 7-1: SerialNumber: syz [ 998.392243][ T5887] usb 7-1: config 0 descriptor?? [ 998.631968][ T5887] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 998.636109][ T5887] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 998.639585][ T5887] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 998.639639][ T5887] usb 7-1: media controller created [ 998.659601][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 998.960440][ T5887] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 999.100656][ T5887] usb 7-1: USB disconnect, device number 51 [ 1000.392080][ T5885] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1000.565734][ T5885] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.565789][ T5885] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1000.565811][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.606362][ T5885] usb 7-1: config 0 descriptor?? [ 1000.627435][ T5885] pwc: Askey VC010 type 2 USB webcam detected. [ 1001.078906][ T5885] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1001.109843][ T5885] pwc: recv_control_msg error -32 req 02 val 2700 [ 1001.132307][ T5885] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1001.133065][ T5885] pwc: recv_control_msg error -32 req 04 val 1000 [ 1001.141027][ T5885] pwc: recv_control_msg error -32 req 04 val 1300 [ 1001.356183][ T5885] pwc: recv_control_msg error -71 req 02 val 2000 [ 1001.359012][ T5885] pwc: recv_control_msg error -71 req 02 val 2100 [ 1001.359410][ T5885] pwc: recv_control_msg error -71 req 04 val 1500 [ 1001.359814][ T5885] pwc: recv_control_msg error -71 req 02 val 2500 [ 1001.360357][ T5885] pwc: recv_control_msg error -71 req 02 val 2400 [ 1001.360847][ T5885] pwc: recv_control_msg error -71 req 02 val 2600 [ 1001.361327][ T5885] pwc: recv_control_msg error -71 req 02 val 2900 [ 1001.361805][ T5885] pwc: recv_control_msg error -71 req 02 val 2800 [ 1001.367897][ T5885] pwc: recv_control_msg error -71 req 04 val 1100 [ 1001.386470][ T5885] pwc: recv_control_msg error -71 req 04 val 1200 [ 1001.467189][ T5885] pwc: Registered as video103. [ 1001.477278][ T5885] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input53 [ 1001.519799][ T5885] usb 7-1: USB disconnect, device number 52 [ 1001.911717][T22189] Process accounting resumed [ 1003.008562][T22223] geneve2: entered promiscuous mode [ 1003.013213][T22225] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1003.048579][T22225] /dev/nullb0: Can't open blockdev [ 1005.160196][ T5885] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1005.277709][ T5887] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 1005.322710][ T5885] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1005.322730][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.326266][ T5885] usb 3-1: config 0 descriptor?? [ 1005.457623][ T5887] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1005.457652][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.457670][ T5887] usb 2-1: Product: syz [ 1005.457684][ T5887] usb 2-1: Manufacturer: syz [ 1005.457698][ T5887] usb 2-1: SerialNumber: syz [ 1005.469618][ T5887] usb 2-1: config 0 descriptor?? [ 1005.746155][ T5887] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1005.775579][T22270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6126'. [ 1005.875787][ T58] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1005.876040][T22270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6126'. [ 1005.900974][ T58] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1005.901027][ T58] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1005.901064][ T58] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1006.331824][T22276] netlink: 'syz.0.6129': attribute type 1 has an invalid length. [ 1006.331852][T22276] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6129'. [ 1006.331910][T22276] netlink: 658 bytes leftover after parsing attributes in process `syz.0.6129'. [ 1006.331920][T22276] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6129'. [ 1006.448398][T22278] fuse: Bad value for 'fd' [ 1006.475566][ T10] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 1006.673386][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1006.673423][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.673460][ T10] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1006.673866][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.796339][ T10] usb 7-1: config 0 descriptor?? [ 1007.130118][ T5885] usb 3-1: Cannot set autoneg [ 1007.130380][ T5885] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1007.168626][ T5885] usb 3-1: USB disconnect, device number 9 [ 1007.280690][ T5887] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1007.305332][ T5887] usb 2-1: USB disconnect, device number 7 [ 1007.385880][ T10] elan 0003:04F3:0755.0040: failed to start in urb: -90 [ 1007.416302][ T10] elan 0003:04F3:0755.0040: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 1007.570665][ T5885] usb 7-1: USB disconnect, device number 53 [ 1008.185257][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1008.209747][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1008.214533][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1008.216869][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1008.250196][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1008.320493][T22296] fuse: Bad value for 'fd' [ 1008.529257][T22289] lo speed is unknown, defaulting to 1000 [ 1009.543242][ T5887] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1009.689417][T22289] chnl_net:caif_netlink_parms(): no params data found [ 1009.717157][ T5887] usb 7-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1009.717187][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.753145][ T5887] usb 7-1: config 0 descriptor?? [ 1009.775197][ T5887] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1010.361695][T22289] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.362183][T22289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.362911][T22289] bridge_slave_0: entered allmulticast mode [ 1010.428237][T22289] bridge_slave_0: entered promiscuous mode [ 1010.452205][ T5116] Bluetooth: hci5: command tx timeout [ 1010.466783][T22289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.474056][T22289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.474339][T22289] bridge_slave_1: entered allmulticast mode [ 1010.478608][T22289] bridge_slave_1: entered promiscuous mode [ 1010.631764][T22289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1010.637588][ T5887] gspca_sunplus: reg_w_riv err -71 [ 1010.637680][ T5887] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 1010.665855][ T5887] usb 7-1: USB disconnect, device number 54 [ 1010.720352][T22289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.801495][T22289] team0: Port device team_slave_0 added [ 1010.812731][T22289] team0: Port device team_slave_1 added [ 1010.862602][T22289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1010.862619][T22289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.862645][T22289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1010.865522][T22289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1010.865536][T22289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.865562][T22289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1011.035321][T22289] hsr_slave_0: entered promiscuous mode [ 1011.036683][T22289] hsr_slave_1: entered promiscuous mode [ 1011.037693][T22289] debugfs: 'hsr0' already exists in 'hsr' [ 1011.037717][T22289] Cannot create hsr debugfs directory [ 1012.675729][ T61] Bluetooth: hci5: command tx timeout [ 1013.124648][ T809] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1013.302179][ T809] usb 2-1: Using ep0 maxpacket: 32 [ 1013.305695][ T809] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1013.305780][ T809] usb 2-1: config 0 has no interface number 0 [ 1013.322558][ T809] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1013.322588][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.322606][ T809] usb 2-1: Product: syz [ 1013.322619][ T809] usb 2-1: Manufacturer: syz [ 1013.322633][ T809] usb 2-1: SerialNumber: syz [ 1013.348478][ T809] usb 2-1: config 0 descriptor?? [ 1013.417856][ T809] smsc95xx v2.0.0 [ 1013.790190][ T61] Bluetooth: hci1: command 0x0406 tx timeout [ 1013.889512][ T809] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1013.889540][ T809] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1014.901944][ T5116] Bluetooth: hci5: command tx timeout [ 1015.198584][ T809] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1015.198832][ T809] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1015.258754][ T809] usb 2-1: USB disconnect, device number 8 [ 1017.002636][T22467] fuse: Bad value for 'fd' [ 1017.128011][ T5116] Bluetooth: hci5: command tx timeout [ 1017.233485][T22477] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1017.731210][T22289] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1017.859819][T22289] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1017.934895][T22289] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1018.003674][T22289] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1018.927745][T22289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1019.117125][T22289] 8021q: adding VLAN 0 to HW filter on device team0 [ 1019.183935][T14027] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.184157][T14027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.259675][T11128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.259751][T11128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1019.778861][T22545] loop2: detected capacity change from 0 to 7 [ 1019.802672][T22545] loop2: [ 1019.802712][T22545] loop2: partition table partially beyond EOD, truncated [ 1020.081965][T22289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1020.396467][T22289] veth0_vlan: entered promiscuous mode [ 1020.422665][T22289] veth1_vlan: entered promiscuous mode [ 1020.511128][T22289] veth0_macvtap: entered promiscuous mode [ 1020.531040][T22289] veth1_macvtap: entered promiscuous mode [ 1020.685052][T22289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1020.716548][T22289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1020.752418][T14027] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.752623][T14027] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.752810][T14027] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.778136][T22572] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1020.796141][T14027] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.978735][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.978756][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.085940][ T5887] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1024.231000][T22624] netlink: 'syz.6.6223': attribute type 10 has an invalid length. [ 1024.231025][T22624] netlink: 55 bytes leftover after parsing attributes in process `syz.6.6223'. [ 1024.286987][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 1024.295921][ T5887] usb 3-1: config 3 has an invalid interface number: 152 but max is 1 [ 1024.295941][ T5887] usb 3-1: config 3 has an invalid interface number: 72 but max is 1 [ 1024.295951][ T5887] usb 3-1: config 3 has no interface number 0 [ 1024.295959][ T5887] usb 3-1: config 3 has no interface number 1 [ 1024.295993][ T5887] usb 3-1: config 3 interface 72 altsetting 255 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1024.296007][ T5887] usb 3-1: config 3 interface 152 has no altsetting 0 [ 1024.296016][ T5887] usb 3-1: config 3 interface 72 has no altsetting 0 [ 1024.360558][ T5887] usb 3-1: New USB device found, idVendor=0d8e, idProduct=7802, bcdDevice=6c.fc [ 1024.360587][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.360603][ T5887] usb 3-1: Product: syz [ 1024.360614][ T5887] usb 3-1: Manufacturer: syz [ 1024.360626][ T5887] usb 3-1: SerialNumber: syz [ 1024.639424][ T5887] usb 3-1: Could not find all expected endpoints [ 1024.668126][ T5887] usb 3-1: Could not find all expected endpoints [ 1024.668933][ T5887] usb-storage 3-1:3.72: USB Mass Storage device detected [ 1024.750170][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.911451][ T5887] usb 3-1: USB disconnect, device number 10 [ 1025.225299][T22644] netlink: 884 bytes leftover after parsing attributes in process `syz.1.6226'. [ 1025.438754][T22648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6227'. [ 1026.598070][T22646] batadv_slave_0: entered promiscuous mode [ 1026.891509][ T3112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.891530][ T3112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.896932][T22647] batadv_slave_0: left promiscuous mode [ 1027.350565][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.078820][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.286178][T22710] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1028.286197][T22710] IPv6: NLM_F_CREATE should be set when creating new route [ 1028.323951][T22710] lo: entered allmulticast mode [ 1028.378716][T22710] tunl0: entered allmulticast mode [ 1028.457592][T22710] gre0: entered allmulticast mode [ 1028.723091][T22710] gretap0: entered allmulticast mode [ 1028.834977][T22710] erspan0: entered allmulticast mode [ 1028.873791][T22710] ip_vti0: entered allmulticast mode [ 1028.877576][T22710] ip6_vti0: entered allmulticast mode [ 1028.882137][T22710] sit0: entered allmulticast mode [ 1028.926577][T22710] ip6tnl0: entered allmulticast mode [ 1028.970680][T22710] ip6gre0: entered allmulticast mode [ 1029.073096][ T37] kauditd_printk_skb: 28 callbacks suppressed [ 1029.073118][ T37] audit: type=1800 audit(1769793997.116:850): pid=22726 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.6253" name="bus" dev="ramfs" ino=81071 res=0 errno=0 [ 1029.263933][T22710] ip6gretap0: entered allmulticast mode [ 1029.309177][T22710] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.338156][T22710] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.364192][T22710] bridge0: entered allmulticast mode [ 1029.484166][T22710] vcan0: entered allmulticast mode [ 1029.487604][T22710] bond0: entered allmulticast mode [ 1029.487628][T22710] bond_slave_0: entered allmulticast mode [ 1029.487646][T22710] bond_slave_1: entered allmulticast mode [ 1029.559634][T22710] team0: entered allmulticast mode [ 1029.559659][T22710] team_slave_0: entered allmulticast mode [ 1029.559678][T22710] team_slave_1: entered allmulticast mode [ 1029.559694][T22710] bond1: entered allmulticast mode [ 1029.565351][T22710] dummy0: entered allmulticast mode [ 1029.627796][T22742] kvm: pic: level sensitive irq not supported [ 1029.628095][T22742] kvm: pic: non byte read [ 1029.628430][T22742] kvm: pic: non byte read [ 1029.628721][T22742] kvm: pic: non byte read [ 1029.629144][T22742] kvm: pic: single mode not supported [ 1029.629210][T22742] kvm: pic: non byte read [ 1029.629475][T22742] kvm: pic: level sensitive irq not supported [ 1029.629528][T22742] kvm: pic: non byte read [ 1029.629820][T22742] kvm: pic: non byte read [ 1029.630101][T22742] kvm: pic: non byte read [ 1029.630390][T22742] kvm: pic: non byte read [ 1029.637897][T22742] kvm: pic: non byte read [ 1029.718553][T22710] nlmon0: entered allmulticast mode [ 1029.721544][T22710] caif0: entered allmulticast mode [ 1029.722832][T22710] batadv0: entered allmulticast mode [ 1029.748008][T22710] vxcan0: entered allmulticast mode [ 1029.758598][T22710] vxcan1: entered allmulticast mode [ 1029.801664][T22710] veth0: entered allmulticast mode [ 1029.838047][T22710] veth1: entered allmulticast mode [ 1029.973486][T22710] wg0: entered allmulticast mode [ 1030.196758][T22710] wg1: entered allmulticast mode [ 1030.277013][T22763] kvm: faulting far call emulation tainted memory [ 1030.401156][T22710] wg2: entered allmulticast mode [ 1030.404418][T22710] veth0_to_bridge: entered allmulticast mode [ 1030.436478][T22710] veth1_to_bridge: entered allmulticast mode [ 1030.461437][T22710] veth0_to_bond: entered allmulticast mode [ 1030.514362][T22710] veth1_to_bond: entered allmulticast mode [ 1030.660513][T22710] veth0_to_team: entered allmulticast mode [ 1030.706957][T22710] veth1_to_team: entered allmulticast mode [ 1030.731357][T22779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6265'. [ 1030.731375][T22779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6265'. [ 1030.778506][T22710] veth0_to_batadv: entered allmulticast mode [ 1030.781390][T22710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1030.782014][T22710] batadv_slave_0: entered allmulticast mode [ 1030.819057][T22710] veth1_to_batadv: entered allmulticast mode [ 1030.823882][T22710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1030.824823][T22710] batadv_slave_1: entered allmulticast mode [ 1030.872315][ T5885] usb 7-1: new full-speed USB device number 55 using dummy_hcd [ 1030.875535][T22710] xfrm0: entered allmulticast mode [ 1030.939688][T22710] veth0_to_hsr: entered allmulticast mode [ 1030.970567][T22710] hsr_slave_0: entered allmulticast mode [ 1031.022017][T22710] veth1_to_hsr: entered allmulticast mode [ 1031.025438][T22710] hsr_slave_1: entered allmulticast mode [ 1031.029235][T22710] hsr0: entered allmulticast mode [ 1031.162967][T22784] loop2: detected capacity change from 0 to 7 [ 1031.209275][T22784] Dev loop2: unable to read RDB block 7 [ 1031.209325][T22784] loop2: unable to read partition table [ 1031.209510][T22784] loop2: partition table beyond EOD, truncated [ 1031.211588][T22784] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1031.254302][ T5885] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1031.254342][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.254362][ T5885] usb 7-1: Product: syz [ 1031.254376][ T5885] usb 7-1: Manufacturer: syz [ 1031.254390][ T5885] usb 7-1: SerialNumber: syz [ 1031.303882][T22710] veth1_virt_wifi: entered allmulticast mode [ 1031.315554][ T5885] usb 7-1: config 0 descriptor?? [ 1031.324588][ T58] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1031.477138][T22710] veth0_virt_wifi: entered allmulticast mode [ 1031.590324][T22710] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1031.624891][T22710] veth1_vlan: entered allmulticast mode [ 1031.652237][ T5885] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1031.876799][T22710] veth0_vlan: entered allmulticast mode [ 1032.079043][ T5887] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1032.100395][ T6026] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1032.158049][T22710] vlan0: entered allmulticast mode [ 1032.158383][T22710] vlan1: entered allmulticast mode [ 1032.207509][T22710] macvlan0: entered allmulticast mode [ 1032.239593][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 1032.242396][ T5887] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.242437][ T5887] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.242458][ T5887] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1032.242491][ T5887] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1032.242513][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.248781][ T5887] usb 2-1: config 0 descriptor?? [ 1032.283675][ T6026] usb 4-1: Using ep0 maxpacket: 32 [ 1032.317897][ T6026] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1032.317924][ T6026] usb 4-1: config 0 has no interface number 0 [ 1032.323854][ T6026] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1032.324271][ T6026] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.324294][ T6026] usb 4-1: Product: syz [ 1032.324309][ T6026] usb 4-1: Manufacturer: syz [ 1032.324321][ T6026] usb 4-1: SerialNumber: syz [ 1032.374364][T22710] macvlan1: entered allmulticast mode [ 1032.398907][ T6026] usb 4-1: config 0 descriptor?? [ 1032.426642][T22710] ipvlan0: entered allmulticast mode [ 1032.438989][ T6026] smsc95xx v2.0.0 [ 1032.457382][T22710] ipvlan1: entered allmulticast mode [ 1032.514030][T22710] veth1_macvtap: entered allmulticast mode [ 1032.556187][T22710] veth0_macvtap: entered allmulticast mode [ 1032.753484][T22710] macvtap0: entered allmulticast mode [ 1032.796657][ T5887] hid (null): report_id 415590728 is invalid [ 1032.856162][ T5887] nzxt-smart2 0003:1E71:2009.0041: report_id 415590728 is invalid [ 1032.856188][ T5887] nzxt-smart2 0003:1E71:2009.0041: item 0 4 1 8 parsing failed [ 1032.858286][ T5887] nzxt-smart2 0003:1E71:2009.0041: probe with driver nzxt-smart2 failed with error -22 [ 1032.976011][ T5885] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1032.988995][T22710] macsec0: entered allmulticast mode [ 1033.031362][ T5887] usb 2-1: USB disconnect, device number 9 [ 1033.048198][ T5885] usb 7-1: USB disconnect, device number 55 [ 1033.171833][T22710] geneve0: entered allmulticast mode [ 1033.304686][T22710] geneve1: entered allmulticast mode [ 1033.384907][T22710] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1033.495581][T22710] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 1033.545801][ T6026] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 1033.545831][ T6026] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1033.549476][ T6026] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1033.549772][ T6026] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 1033.615455][ T6026] usb 4-1: USB disconnect, device number 2 [ 1033.616747][T22710] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 1033.798252][T22710] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 1033.971359][ T10] usb 7-1: new full-speed USB device number 56 using dummy_hcd [ 1033.977150][T22710] mac80211_hwsim hwsim29 wlan0: entered allmulticast mode [ 1034.169806][ T10] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1034.169836][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.169855][ T10] usb 7-1: Product: syz [ 1034.169868][ T10] usb 7-1: Manufacturer: syz [ 1034.169881][ T10] usb 7-1: SerialNumber: syz [ 1034.193175][T22710] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode [ 1034.224546][ T10] usb 7-1: config 0 descriptor?? [ 1034.425509][ T2138] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.425650][ T2138] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.425710][ T2138] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.425736][ T2138] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.526393][ T10] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1035.130768][T22843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6287'. [ 1035.237920][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.538723][T22843] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1035.616082][T22845] bond1: (slave ip6erspan0): making interface the new active one [ 1035.670069][T22845] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1035.711530][ T5116] Bluetooth: hci3: command 0x040f tx timeout [ 1036.111580][ T10] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1036.161237][ T10] usb 7-1: USB disconnect, device number 56 [ 1036.264756][T22868] pim6reg1: entered promiscuous mode [ 1036.264783][T22868] pim6reg1: entered allmulticast mode [ 1038.969147][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1038.969234][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1041.517008][ T37] audit: type=1800 audit(1769794008.753:851): pid=22962 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.6312" name="file1" dev="overlay" ino=818 res=0 errno=0 [ 1041.846352][T22966] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6314'. [ 1041.876188][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1041.904058][T22968] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6314'. [ 1041.960026][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1042.010272][ T12] bond0 (unregistering): Released all slaves [ 1042.075247][ T12] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1042.106655][ T12] bond1 (unregistering): Released all slaves [ 1043.915810][ T12] bond2 (unregistering): Released all slaves [ 1044.581006][ T12] tipc: Disabling bearer [ 1044.581201][ T12] tipc: Disabling bearer [ 1044.738925][ T12] tipc: Left network mode [ 1050.063083][ T5887] usb 7-1: new full-speed USB device number 57 using dummy_hcd [ 1050.307733][ T5887] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1050.307762][ T5887] usb 7-1: config 0 has no interface number 0 [ 1050.307829][ T5887] usb 7-1: config 0 interface 41 has no altsetting 0 [ 1050.310822][ T5887] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1050.310850][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.310869][ T5887] usb 7-1: Product: syz [ 1050.310882][ T5887] usb 7-1: Manufacturer: syz [ 1050.310895][ T5887] usb 7-1: SerialNumber: syz [ 1050.391353][ T5887] usb 7-1: config 0 descriptor?? [ 1051.023013][T23100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6354'. [ 1051.234484][T23107] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.6355'. [ 1051.234508][T23107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6355'. [ 1051.265864][ T12] hsr_slave_0: left promiscuous mode [ 1051.292536][ T5887] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1051.333423][ T12] hsr_slave_1: left promiscuous mode [ 1051.334518][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1051.334544][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1051.482125][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1051.482157][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1051.782249][ T12] veth1_macvtap: left promiscuous mode [ 1051.782353][ T12] veth0_macvtap: left promiscuous mode [ 1051.782807][ T12] veth1_vlan: left promiscuous mode [ 1051.783085][ T12] veth0_vlan: left promiscuous mode [ 1052.682213][ T5887] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1052.682243][ T5887] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1052.682528][ T5887] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 1052.700556][ T5887] usb 7-1: USB disconnect, device number 57 [ 1053.239748][T14452] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1053.492328][T14452] usb 2-1: Using ep0 maxpacket: 32 [ 1053.495079][T14452] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1053.495105][T14452] usb 2-1: config 0 has no interface number 0 [ 1053.532759][T14452] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1053.544004][T14452] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1053.544085][T14452] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.544104][T14452] usb 2-1: Product: syz [ 1053.544118][T14452] usb 2-1: Manufacturer: syz [ 1053.544132][T14452] usb 2-1: SerialNumber: syz [ 1053.594063][T14452] usb 2-1: config 0 descriptor?? [ 1055.619879][T14452] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1055.619933][T14452] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1055.619950][T14452] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1055.620043][T14452] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1055.666927][T14452] usb 2-1: USB disconnect, device number 10 [ 1057.119836][T23153] netlink: 'syz.2.6371': attribute type 1 has an invalid length. [ 1057.673517][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1058.017862][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1061.453501][T23103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6351'. [ 1061.471220][ T31] lo speed is unknown, defaulting to 1000 [ 1061.471248][ T31] infiniband syz0: ib_query_port failed (-19) [ 1061.578870][T23153] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1061.579317][T23154] veth0_to_bond: left allmulticast mode [ 1061.583699][T23154] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1061.617222][T23103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6351'. [ 1062.140989][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1062.325196][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.325432][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1062.326961][ T31] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1062.326988][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1062.327006][ T31] usb 2-1: SerialNumber: syz [ 1062.663068][ T31] usb 2-1: 0:2 : does not exist [ 1062.739793][ T31] usb 2-1: USB disconnect, device number 11 [ 1062.782470][T23195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6380'. [ 1062.875729][T23156] udevd[23156]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1063.085603][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d7de400: rx timeout, send abort [ 1064.448461][ T12] IPVS: stop unused estimator thread 0... [ 1064.526525][ T5054] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1067.369519][ T5885] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1067.531507][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 1067.539509][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.539565][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1067.539591][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1067.539611][ T5885] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1067.539791][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1067.542024][ T5885] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1067.542050][ T5885] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1067.542068][ T5885] usb 2-1: Manufacturer: syz [ 1067.552260][ T5885] usb 2-1: config 0 descriptor?? [ 1067.924823][ T5885] rc_core: IR keymap rc-hauppauge not found [ 1067.924843][ T5885] Registered IR keymap rc-empty [ 1067.925018][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1067.946292][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1067.969263][ T5885] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1067.975351][ T5885] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input54 [ 1068.006336][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1068.021843][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1068.042368][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1068.071343][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1068.085081][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1068.106479][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1068.127850][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1068.149333][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1068.172073][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1068.202772][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1068.266076][ T5885] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1068.266103][ T5885] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1068.344461][ T808] usb 2-1: USB disconnect, device number 12 [ 1069.252603][ T808] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 1069.540084][ T808] usb 4-1: device descriptor read/64, error -71 [ 1069.816919][ T61] Bluetooth: hci5: command tx timeout [ 1069.823754][ T808] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 1069.955884][ T808] usb 4-1: device descriptor read/64, error -71 [ 1070.073709][ T808] usb usb4-port1: attempt power cycle [ 1070.458502][ T808] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 1070.481228][ T808] usb 4-1: device descriptor read/8, error -71 [ 1070.747783][ T808] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 1070.769608][ T808] usb 4-1: device descriptor read/8, error -71 [ 1070.886356][ T808] usb usb4-port1: unable to enumerate USB device [ 1071.463306][ T808] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1071.623740][ T808] usb 2-1: Using ep0 maxpacket: 32 [ 1071.627932][ T808] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1071.653085][ T808] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1071.653109][ T808] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1071.653119][ T808] usb 2-1: Product: syz [ 1071.653126][ T808] usb 2-1: Manufacturer: syz [ 1071.653133][ T808] usb 2-1: SerialNumber: syz [ 1071.695032][ T808] usb 2-1: config 0 descriptor?? [ 1071.704443][T23346] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1072.542993][ T61] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1073.312775][ T808] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 1073.512475][ T808] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1073.512511][ T808] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1073.512525][ T808] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1073.512538][ T808] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1073.512551][ T808] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1073.515028][ T808] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1073.515061][ T808] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1073.515075][ T808] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1073.515093][ T808] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1073.515114][ T808] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1073.645831][ T808] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1073.645884][ T808] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1073.645909][ T808] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1073.645932][ T808] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1073.645954][ T808] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1073.653596][ T808] usb 4-1: string descriptor 0 read error: -22 [ 1073.653739][ T808] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1073.653762][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.772422][ T808] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 1074.279256][T14452] usb 4-1: USB disconnect, device number 7 [ 1074.544853][ T808] usb 2-1: USB disconnect, device number 13 [ 1074.880228][T23382] binder: BINDER_SET_CONTEXT_MGR already set [ 1074.880239][T23382] binder: 23381:23382 ioctl 4018620d 2000000002c0 returned -16 [ 1076.892295][T23425] veth1_macvtap: left promiscuous mode [ 1076.892326][T23425] macsec0: entered promiscuous mode [ 1076.893097][T23423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6446'. [ 1076.893120][T23423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6446'. [ 1076.911092][T23425] veth1_macvtap: entered promiscuous mode [ 1076.911400][T23425] macsec0: left promiscuous mode [ 1077.214832][T14780] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 1077.511445][T14780] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1077.522898][T14780] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1077.522936][T14780] usb 4-1: can't read configurations, error -71 [ 1078.042811][T14452] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1078.703200][T14452] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1078.703229][T14452] usb 3-1: config 1 has no interface number 0 [ 1078.703275][T14452] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1078.703300][T14452] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1078.703333][T14452] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 173, changing to 11 [ 1078.703357][T14452] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 34113, setting to 1024 [ 1078.707008][T14452] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1078.707031][T14452] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.707041][T14452] usb 3-1: Product: syz [ 1078.707049][T14452] usb 3-1: Manufacturer: syz [ 1078.707055][T14452] usb 3-1: SerialNumber: syz [ 1078.972534][T23429] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1079.701319][T23429] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1079.766284][T14452] cdc_ncm 3-1:1.1: bind() failure [ 1079.833206][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1079.856326][ T5116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1079.896411][ T5116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1079.906685][ T5116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1079.924144][ T8549] usb 3-1: USB disconnect, device number 11 [ 1079.927091][ T5116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1082.313804][ T61] Bluetooth: hci2: command tx timeout [ 1083.985335][T23449] chnl_net:caif_netlink_parms(): no params data found [ 1084.520971][ T61] Bluetooth: hci2: command tx timeout [ 1084.650182][T23449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.673897][T23449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.674164][T23449] bridge_slave_0: entered allmulticast mode [ 1084.681533][T23449] bridge_slave_0: entered promiscuous mode [ 1084.723862][T23449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.723998][T23449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.724256][T23449] bridge_slave_1: entered allmulticast mode [ 1084.756363][T23449] bridge_slave_1: entered promiscuous mode [ 1085.047639][T23449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.068978][T23449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.168682][ T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1085.217451][T23449] team0: Port device team_slave_0 added [ 1085.228009][T23449] team0: Port device team_slave_1 added [ 1085.299315][T23449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1085.299333][T23449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.299356][T23449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1085.301608][T23449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1085.301624][T23449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.301651][T23449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1085.382348][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 1085.389361][ T31] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1085.389417][ T31] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1085.389513][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1085.389536][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1085.389558][ T31] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1085.389602][ T31] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1085.389623][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.644408][ T31] usb 2-1: GET_CAPABILITIES returned 0 [ 1085.644457][ T31] usbtmc 2-1:16.0: can't read capabilities [ 1085.965737][ T31] usb 2-1: USB disconnect, device number 14 [ 1086.373227][T23449] hsr_slave_0: entered promiscuous mode [ 1086.374574][T23449] hsr_slave_1: entered promiscuous mode [ 1086.375594][T23449] debugfs: 'hsr0' already exists in 'hsr' [ 1086.375618][T23449] Cannot create hsr debugfs directory [ 1086.740327][ T61] Bluetooth: hci2: command tx timeout [ 1088.611075][ T5885] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1088.782134][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 1088.784269][ T5885] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1088.784299][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.788665][ T5885] usb 3-1: config 0 descriptor?? [ 1088.840411][ T5885] as10x_usb: device has been detected [ 1088.840987][ T5885] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1088.963794][ T61] Bluetooth: hci2: command tx timeout [ 1089.093061][ T5885] usb 3-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 1090.033893][ T5885] as10x_usb: error during firmware upload part1 [ 1090.034604][ T5885] Registered device nBox DVB-T Dongle [ 1090.044204][ T5885] usb 3-1: USB disconnect, device number 12 [ 1090.325394][T14452] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1090.418069][ T61] Bluetooth: hci4: command 0x0406 tx timeout [ 1090.481868][T14452] usb 2-1: Using ep0 maxpacket: 16 [ 1090.489389][T14452] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1090.489420][T14452] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.489440][T14452] usb 2-1: Product: syz [ 1090.489454][T14452] usb 2-1: Manufacturer: syz [ 1090.489469][T14452] usb 2-1: SerialNumber: syz [ 1090.490646][ T5885] Unregistered device nBox DVB-T Dongle [ 1090.551172][ T5885] as10x_usb: device has been disconnected [ 1090.571618][T14452] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1090.571646][T14452] r8152-cfgselector 2-1: config 0 descriptor?? [ 1091.347062][T23602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.354807][T23602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.357809][T23602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.358886][T23602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.417136][ T5885] r8152-cfgselector 2-1: USB disconnect, device number 15 [ 1091.777437][T14452] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1091.961940][T14452] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.961970][T14452] usb 7-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1091.961983][T14452] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.965666][T14452] usb 7-1: config 0 descriptor?? [ 1092.941375][T14452] logitech-djreceiver 0003:046D:C71F.0042: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.6-1/input0 [ 1093.189459][T14452] usb 7-1: USB disconnect, device number 58 [ 1093.424888][T23630] fido_id[23630]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1093.443210][ T8549] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1093.637882][ T8549] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1093.637917][ T8549] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1093.637957][ T8549] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1093.637981][ T8549] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.715817][ T8549] usb 4-1: config 0 descriptor?? [ 1093.749850][ T8549] hub 4-1:0.0: USB hub found [ 1093.950393][ T8549] hub 4-1:0.0: 1 port detected [ 1094.072716][T23449] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1094.192361][T23449] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1094.308599][T23449] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1094.453229][T23449] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1096.231404][ T5885] hub 4-1:0.0: activate --> -90 [ 1096.843573][T14780] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1096.846202][ T5885] usb 4-1: USB disconnect, device number 10 [ 1097.109502][T23663] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1097.358732][T23449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1097.439639][T23449] 8021q: adding VLAN 0 to HW filter on device team0 [ 1097.459280][T14452] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1097.478245][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.478362][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1097.515891][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.527524][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1097.623237][T14452] usb 7-1: Using ep0 maxpacket: 32 [ 1097.634333][T14452] usb 7-1: config 0 has an invalid interface number: 23 but max is 0 [ 1097.634360][T14452] usb 7-1: config 0 has no interface number 0 [ 1097.635651][T14452] usb 7-1: config 0 interface 23 has no altsetting 0 [ 1097.635687][T14452] usb 7-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=a9.9b [ 1097.635709][T14452] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.660746][T14452] usb 7-1: config 0 descriptor?? [ 1097.785642][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1098.615069][T14452] usb 7-1: string descriptor 0 read error: -71 [ 1098.673338][T14452] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 1098.673452][T14452] gspca_mr97310a: reg write [21] error -22 [ 1098.673536][T14452] mr97310a 7-1:0.23: probe with driver mr97310a failed with error -22 [ 1098.704690][T14452] usb 7-1: USB disconnect, device number 59 [ 1098.826776][T23698] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1099.458534][T23449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1099.593899][ T5887] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1099.782806][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 1099.784839][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.784871][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1099.784909][ T5887] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1099.784933][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.808765][ T5887] usb 3-1: config 0 descriptor?? [ 1100.393957][ T5887] usbhid 3-1:0.0: can't add hid device: -71 [ 1100.394080][ T5887] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1100.423033][ T5887] usb 3-1: USB disconnect, device number 13 [ 1100.906511][T23730] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6511'. [ 1102.408695][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1102.419913][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1102.421985][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1102.431198][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1102.437153][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1102.455947][ T5887] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 1102.614076][ T3503] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.748904][ T5887] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1102.748938][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.748958][ T5887] usb 3-1: Product: syz [ 1102.748972][ T5887] usb 3-1: Manufacturer: syz [ 1102.748987][ T5887] usb 3-1: SerialNumber: syz [ 1102.757390][ T5887] usb 3-1: config 0 descriptor?? [ 1102.768644][ T5887] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1103.721618][T23449] veth0_vlan: entered promiscuous mode [ 1103.804861][T23449] veth1_vlan: entered promiscuous mode [ 1104.310367][ T3503] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.635138][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1104.635208][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1104.714044][ T5116] Bluetooth: hci5: command tx timeout [ 1104.999716][ T5885] usb 7-1: new full-speed USB device number 60 using dummy_hcd [ 1105.199358][ T5885] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 1105.199388][ T5885] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.199407][ T5885] usb 7-1: config 0 has no interfaces? [ 1105.199434][ T5885] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1105.199447][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.260970][ T5885] usb 7-1: config 0 descriptor?? [ 1105.937126][ T3503] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.989551][ T5887] gspca_stk1135: reg_w 0x2ff err -71 [ 1105.990615][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 1105.990628][ T5887] gspca_stk1135: Sensor write failed [ 1105.990653][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 1105.990663][ T5887] gspca_stk1135: Sensor write failed [ 1105.990688][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 1105.990697][ T5887] gspca_stk1135: Sensor read failed [ 1105.990721][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 1105.990729][ T5887] gspca_stk1135: Sensor read failed [ 1105.990737][ T5887] gspca_stk1135: Detected sensor type unknown (0x0) [ 1105.990767][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 1105.990777][ T5887] gspca_stk1135: Sensor read failed [ 1105.990801][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 1105.990811][ T5887] gspca_stk1135: Sensor read failed [ 1105.990834][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 1105.990843][ T5887] gspca_stk1135: Sensor write failed [ 1105.990867][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 1105.990875][ T5887] gspca_stk1135: Sensor write failed [ 1105.990968][ T5887] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 1106.002943][ T5887] usb 3-1: USB disconnect, device number 14 [ 1106.377770][T23449] veth0_macvtap: entered promiscuous mode [ 1106.655297][ T3503] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.713564][T23449] veth1_macvtap: entered promiscuous mode [ 1106.924058][ T5116] Bluetooth: hci5: command tx timeout [ 1107.176098][T23449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1107.659021][T23449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1107.749508][ T6026] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1107.919519][ T6026] usb 3-1: Using ep0 maxpacket: 8 [ 1107.923586][ T6026] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1107.923648][ T6026] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1107.923671][ T6026] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1107.923694][ T6026] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1107.923717][ T6026] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1107.923758][ T6026] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1107.923780][ T6026] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.125698][ T2138] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.164286][ T2138] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.219319][ T2138] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.247581][T23760] chnl_net:caif_netlink_parms(): no params data found [ 1108.428241][ T2138] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.436148][T14452] usb 7-1: USB disconnect, device number 60 [ 1108.803297][ T3503] bridge_slave_1: left allmulticast mode [ 1108.803327][ T3503] bridge_slave_1: left promiscuous mode [ 1108.803565][ T3503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.903425][ T3503] bridge_slave_0: left allmulticast mode [ 1108.903458][ T3503] bridge_slave_0: left promiscuous mode [ 1108.903720][ T3503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.092469][ T5885] usb 3-1: USB disconnect, device number 15 [ 1109.106687][T23816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1109.113445][T14452] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1109.147648][ T5116] Bluetooth: hci5: command tx timeout [ 1109.287349][T14452] usb 7-1: Using ep0 maxpacket: 16 [ 1109.290267][T14452] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.290324][T14452] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1109.290350][T14452] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1109.290370][T14452] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1109.290392][T14452] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1109.291576][T14452] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1109.291603][T14452] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1109.291623][T14452] usb 7-1: Manufacturer: syz [ 1109.311054][T14452] usb 7-1: config 0 descriptor?? [ 1109.714235][T14452] rc_core: IR keymap rc-hauppauge not found [ 1109.714256][T14452] Registered IR keymap rc-empty [ 1109.714526][T14452] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1109.802537][T14452] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1109.822208][T14452] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1109.837302][T14452] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input55 [ 1109.859291][T14452] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1109.888489][T14452] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1109.976965][T14452] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1109.995604][T14452] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1110.016962][T14452] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1110.036826][T14452] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1110.056424][T14452] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1110.089631][T14452] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1110.114166][T14452] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1110.149633][T14452] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1110.176970][T14452] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1110.176998][T14452] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1110.263931][T14452] usb 7-1: USB disconnect, device number 61 [ 1111.226965][T23885] kvm: pic: single mode not supported [ 1111.227149][T23885] kvm: pic: level sensitive irq not supported [ 1111.227474][T23885] kvm: pic: single mode not supported [ 1111.227484][T23885] kvm: pic: level sensitive irq not supported [ 1111.227818][T23885] kvm: pic: level sensitive irq not supported [ 1111.228023][T23885] kvm: pic: level sensitive irq not supported [ 1111.408601][ T5116] Bluetooth: hci5: command tx timeout [ 1113.536699][ T3503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1113.552182][T14452] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1113.643807][ T3503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1113.723399][T14452] usb 2-1: Using ep0 maxpacket: 8 [ 1113.725832][T14452] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1113.725894][T14452] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1113.725923][T14452] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1113.725946][T14452] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1113.725968][T14452] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1113.726009][T14452] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1113.726036][T14452] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.740716][ T3503] bond0 (unregistering): Released all slaves [ 1114.100047][T14452] usb 2-1: GET_CAPABILITIES returned 0 [ 1114.100112][T14452] usbtmc 2-1:16.0: can't read capabilities [ 1114.256622][T23905] binder: 23904:23905 ioctl c0306201 200000000300 returned -14 [ 1114.763273][ T5887] usb 2-1: USB disconnect, device number 16 [ 1114.814753][T23894] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 1114.822943][T23913] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -19 [ 1116.909425][T23760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.909548][T23760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.909840][T23760] bridge_slave_0: entered allmulticast mode [ 1116.912529][T23760] bridge_slave_0: entered promiscuous mode [ 1117.312112][T23760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.312325][T23760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.312604][T23760] bridge_slave_1: entered allmulticast mode [ 1117.340568][T23760] bridge_slave_1: entered promiscuous mode [ 1117.793506][T14027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.793527][T14027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.840739][T23760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1117.856099][T23760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1117.903334][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1118.014162][ T3503] hsr_slave_0: left promiscuous mode [ 1118.063026][ T3503] hsr_slave_1: left promiscuous mode [ 1118.067285][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1118.067314][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1118.076962][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1118.076989][ T10] usb 3-1: config 0 has no interface number 0 [ 1118.077052][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1118.077078][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1118.077099][ T10] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1118.077138][ T10] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1118.077160][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.087125][ T10] usb 3-1: config 0 descriptor?? [ 1118.190623][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1118.190644][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1118.789181][ T10] input: HID 28bd:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.0043/input/input56 [ 1118.898408][ T10] uclogic 0003:28BD:0042.0043: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1 [ 1119.006958][ T3503] veth1_macvtap: left promiscuous mode [ 1119.007063][ T3503] veth0_macvtap: left promiscuous mode [ 1119.007346][ T3503] veth1_vlan: left promiscuous mode [ 1119.050310][ T10] usb 3-1: USB disconnect, device number 16 [ 1119.075696][ T3503] veth0_vlan: left promiscuous mode [ 1119.319250][T23981] fido_id[23981]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1120.756800][ T31] libceph: connect (1)[c::]:6789 error -101 [ 1120.756969][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 1120.867632][T23996] ceph: No mds server is up or the cluster is laggy [ 1121.077513][ T6026] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1121.088372][ T31] libceph: connect (1)[c::]:6789 error -101 [ 1121.088572][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 1121.245253][T24008] loop8: detected capacity change from 0 to 8 [ 1121.250336][T24008] Dev loop8: unable to read RDB block 8 [ 1121.250379][T24008] loop8: unable to read partition table [ 1121.250568][T24008] loop8: partition table beyond EOD, truncated [ 1121.250601][T24008] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1121.285419][ T6026] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1121.285447][ T6026] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1121.287925][ T6026] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1121.287951][ T6026] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.287961][ T6026] usb 2-1: Product: syz [ 1121.287969][ T6026] usb 2-1: Manufacturer: syz [ 1121.287976][ T6026] usb 2-1: SerialNumber: syz [ 1122.351121][T24020] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6564'. [ 1122.495427][ T6026] cdc_ncm 2-1:1.0: bind() failure [ 1122.565763][ T6026] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1122.567250][ T6026] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1122.568302][ T6026] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 1122.575279][ T6026] usb 2-1: USB disconnect, device number 17 [ 1124.061177][ T31] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1124.332758][ T31] usb 2-1: config 127 has an invalid interface number: 124 but max is 0 [ 1124.332787][ T31] usb 2-1: config 127 has no interface number 0 [ 1124.332826][ T31] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=1d.4f [ 1124.332839][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.595087][ T5116] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 1124.602221][ T5116] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 1126.114197][ T3503] team0 (unregistering): Port device team_slave_1 removed [ 1126.231250][ T6026] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1126.426600][ T6026] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.426623][ T6026] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1126.426766][ T6026] usb 3-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 1126.426789][ T6026] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.430376][ T6026] usb 3-1: config 0 descriptor?? [ 1126.535379][ T3503] team0 (unregistering): Port device team_slave_0 removed [ 1126.968663][ T6026] hid (null): bogus close delimiter [ 1126.978509][ T6026] wacom 0003:056A:030C.0044: bogus close delimiter [ 1126.978533][ T6026] wacom 0003:056A:030C.0044: item 0 2 2 10 parsing failed [ 1126.979317][ T6026] wacom 0003:056A:030C.0044: parse failed [ 1126.979438][ T6026] wacom 0003:056A:030C.0044: probe with driver wacom failed with error -22 [ 1127.400197][ T37] audit: type=1800 audit(1769794089.094:852): pid=24044 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.1.6570" name="/" dev="sockfs" ino=87149 res=0 errno=0 [ 1127.758410][T24055] kvm: MONITOR instruction emulated as NOP! [ 1128.914084][ T5116] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1128.922704][ T5116] Bluetooth: hci4: Injecting HCI hardware error event [ 1128.931923][ T5116] Bluetooth: hci4: hardware error 0x00 [ 1131.315083][ T5116] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1131.742790][ T40] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1132.044641][ T31] peak_usb 2-1:127.124 can0: unable to request usb[type=0 value=1] err=-71 [ 1132.044673][ T31] peak_usb 2-1:127.124: unable to read PCAN-Chip USB firmware info (err -71) [ 1132.065779][T24039] syzkaller1: entered promiscuous mode [ 1132.065798][T24039] syzkaller1: entered allmulticast mode [ 1132.157901][T14780] usb 3-1: USB disconnect, device number 17 [ 1132.418032][ T31] peak_usb 2-1:127.124: probe with driver peak_usb failed with error -71 [ 1132.433053][ T31] usb 2-1: USB disconnect, device number 18 [ 1132.791713][T23760] team0: Port device team_slave_0 added [ 1132.859090][T23760] team0: Port device team_slave_1 added [ 1133.023666][ T5054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.023689][ T5054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.331500][T23760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1133.331518][T23760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1133.331545][T23760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1133.343003][T23760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1133.343019][T23760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1133.343039][T23760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1133.456313][T23760] hsr_slave_0: entered promiscuous mode [ 1133.457683][T23760] hsr_slave_1: entered promiscuous mode [ 1133.458134][T14452] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1133.467808][T23760] debugfs: 'hsr0' already exists in 'hsr' [ 1133.467837][T23760] Cannot create hsr debugfs directory [ 1133.620892][T14452] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1133.620938][T14452] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1133.624298][T14452] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1133.624329][T14452] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.624345][T14452] usb 2-1: Product: syz [ 1133.624359][T14452] usb 2-1: Manufacturer: syz [ 1133.624373][T14452] usb 2-1: SerialNumber: syz [ 1133.881653][T14452] cdc_mbim 2-1:1.0: skipping garbage [ 1134.063543][T24087] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1134.825078][T24087] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1134.862919][T14452] cdc_mbim 2-1:1.0: setting rx_max = 16384 [ 1135.729004][T14452] cdc_mbim 2-1:1.0: setting tx_max = 16384 [ 1135.766453][T14452] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 1135.947110][T24087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.947630][T24087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.040801][T14452] wwan wwan0: port wwan0mbim0 attached [ 1136.973197][T14452] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, be:09:12:a7:12:f4 [ 1137.034683][T14452] usb 2-1: USB disconnect, device number 19 [ 1137.108386][T14452] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 1138.681754][T14452] wwan wwan0: port wwan0mbim0 disconnected [ 1144.326326][T14780] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1144.344959][T14780] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1144.422679][T23760] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1144.496716][T23760] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1144.599283][T23760] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1144.658989][T23760] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1146.888227][T23760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1147.889406][T23760] 8021q: adding VLAN 0 to HW filter on device team0 [ 1147.917710][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.939880][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1148.110430][ T3112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.110581][ T3112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1148.920971][T24247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6616'. [ 1149.046693][T24247] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1149.859093][T23760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1150.062042][T23760] veth0_vlan: entered promiscuous mode [ 1150.097058][T23760] veth1_vlan: entered promiscuous mode [ 1150.279192][T23760] veth0_macvtap: entered promiscuous mode [ 1150.322945][T23760] veth1_macvtap: entered promiscuous mode [ 1150.433865][T23760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1150.727053][T23760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1150.832430][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.838946][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.880830][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.058893][ T77] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.552996][T24282] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1151.974260][ T5885] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1152.099371][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.099393][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.145498][ T5885] usb 9-1: Using ep0 maxpacket: 32 [ 1152.165604][ T5885] usb 9-1: config 0 has an invalid interface number: 23 but max is 0 [ 1152.165631][ T5885] usb 9-1: config 0 has no interface number 0 [ 1152.165663][ T5885] usb 9-1: config 0 interface 23 has no altsetting 0 [ 1152.165695][ T5885] usb 9-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=a9.9b [ 1152.165708][ T5885] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.224767][ T5885] usb 9-1: config 0 descriptor?? [ 1152.987003][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.987019][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1153.178201][ T5885] usb 9-1: string descriptor 0 read error: -71 [ 1153.243788][ T5885] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 1153.243879][ T5885] gspca_mr97310a: reg write [21] error -22 [ 1153.243961][ T5885] mr97310a 9-1:0.23: probe with driver mr97310a failed with error -22 [ 1153.320485][ T5885] usb 9-1: USB disconnect, device number 7 [ 1154.037584][ T8549] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1154.209312][T24299] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1154.240825][ T8549] usb 4-1: Using ep0 maxpacket: 16 [ 1154.264206][ T8549] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.264273][ T8549] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1154.264300][ T8549] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1154.264320][ T8549] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1154.264342][ T8549] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1154.266889][ T8549] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1154.266918][ T8549] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1154.266936][ T8549] usb 4-1: Manufacturer: syz [ 1154.317320][ T8549] usb 4-1: config 0 descriptor?? [ 1154.518708][ T10] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1154.689650][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1154.692337][ T10] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 1154.692365][ T10] usb 7-1: config 1 has no interface number 0 [ 1154.692411][ T10] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1154.692435][ T10] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1154.692458][ T10] usb 7-1: config 1 interface 105 has no altsetting 0 [ 1154.695075][ T10] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1154.695093][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.695103][ T10] usb 7-1: Product: syz [ 1154.695110][ T10] usb 7-1: Manufacturer: syz [ 1154.695118][ T10] usb 7-1: SerialNumber: syz [ 1154.699213][T24301] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1154.699341][T24301] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1154.903522][ T8549] rc_core: IR keymap rc-hauppauge not found [ 1154.903543][ T8549] Registered IR keymap rc-empty [ 1154.903700][ T8549] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1154.925054][ T8549] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1154.948467][ T8549] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1154.994954][ T8549] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input57 [ 1155.012665][ T8549] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1155.032024][ T8549] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1155.061224][ T8549] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1155.079077][ T8549] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1155.096254][ T8549] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1155.117396][ T8549] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1155.141560][ T8549] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1155.174266][ T8549] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1155.192233][ T8549] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1155.197230][T24301] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1155.197425][T24301] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1155.213874][ T8549] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1155.441630][ T8549] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1155.441657][ T8549] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1155.508316][ T8549] usb 4-1: USB disconnect, device number 11 [ 1155.628689][ T10] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1156.022191][ T10] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1156.075640][ T10] aqc111 7-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.6-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 06:44:5c:da:f6:5c [ 1156.094801][ T10] usb 7-1: USB disconnect, device number 62 [ 1156.097345][ T10] aqc111 7-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.6-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1156.244542][ T10] aqc111 7-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1156.244684][ T10] aqc111 7-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1156.244830][ T10] aqc111 7-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1158.171400][T24328] usb usb8: usbfs: process 24328 (syz.1.6632) did not claim interface 0 before use [ 1159.560845][T24339] netlink: 'syz.8.6637': attribute type 3 has an invalid length. [ 1159.562618][T24339] netlink: 'syz.8.6637': attribute type 3 has an invalid length. [ 1161.793466][T24357] 9p: Bad value for 'rfdno' [ 1162.541996][T24370] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 1165.099049][T21786] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1165.615553][ T10] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1165.782792][ T10] usb 7-1: config 0 has an invalid interface number: 195 but max is 0 [ 1165.782821][ T10] usb 7-1: config 0 has no interface number 0 [ 1165.782867][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice=75.f1 [ 1165.782888][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.853369][ T10] usb 7-1: config 0 descriptor?? [ 1165.874471][ T10] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.195/input/input58 [ 1166.761038][T24392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.761478][T24392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1167.092880][ T5151] bcm5974 7-1:0.195: could not read from device [ 1167.138727][ T5887] usb 7-1: USB disconnect, device number 63 [ 1171.143745][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1171.143816][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1171.441478][T24416] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1171.460541][T24416] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1171.479438][T24416] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1171.502906][T24416] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1171.503670][T24416] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1173.890233][T24416] Bluetooth: hci6: command tx timeout [ 1175.253413][T24416] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1175.253444][T24416] CPU: 1 UID: 0 PID: 24416 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1175.253473][T24416] Tainted: [L]=SOFTLOCKUP [ 1175.253482][T24416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1175.253495][T24416] Workqueue: hci3 hci_rx_work [ 1175.253530][T24416] Call Trace: [ 1175.253537][T24416] [ 1175.253548][T24416] dump_stack_lvl+0xe8/0x150 [ 1175.253579][T24416] sysfs_create_dir_ns+0x271/0x2a0 [ 1175.253605][T24416] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1175.253627][T24416] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1175.253654][T24416] ? rt_spin_unlock+0x160/0x200 [ 1175.253686][T24416] kobject_add_internal+0x631/0xd10 [ 1175.253725][T24416] kobject_add+0x163/0x240 [ 1175.253759][T24416] ? __pfx_kobject_add+0x10/0x10 [ 1175.253794][T24416] ? get_device_parent+0x370/0x3a0 [ 1175.253824][T24416] device_add+0x408/0xb80 [ 1175.253855][T24416] hci_conn_add_sysfs+0xd5/0x210 [ 1175.253886][T24416] le_conn_complete_evt+0xf1d/0x1430 [ 1175.253918][T24416] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1175.253944][T24416] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1175.253970][T24416] ? lockdep_hardirqs_on+0x7a/0x110 [ 1175.253997][T24416] ? skb_pull_data+0xfb/0x200 [ 1175.254026][T24416] hci_le_conn_complete_evt+0x187/0x470 [ 1175.254057][T24416] hci_event_packet+0x7af/0x12c0 [ 1175.254091][T24416] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1175.254113][T24416] ? __pfx_hci_event_packet+0x10/0x10 [ 1175.254140][T24416] ? rt_spin_unlock+0x14f/0x200 [ 1175.254170][T24416] ? hci_send_to_monitor+0xe2/0x590 [ 1175.254197][T24416] hci_rx_work+0x3ee/0x1030 [ 1175.254234][T24416] ? process_scheduled_works+0xa0f/0x17a0 [ 1175.254266][T24416] process_scheduled_works+0xaec/0x17a0 [ 1175.254326][T24416] ? __pfx_process_scheduled_works+0x10/0x10 [ 1175.254355][T24416] ? do_raw_spin_lock+0x12b/0x2f0 [ 1175.254386][T24416] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1175.254412][T24416] ? schedule+0x90/0x360 [ 1175.254444][T24416] worker_thread+0xda6/0x1360 [ 1175.254481][T24416] ? __kthread_parkme+0x19c/0x1f0 [ 1175.254511][T24416] kthread+0x726/0x8b0 [ 1175.254539][T24416] ? __pfx_worker_thread+0x10/0x10 [ 1175.254558][T24416] ? __pfx_kthread+0x10/0x10 [ 1175.254579][T24416] ? rt_spin_unlock+0x14f/0x200 [ 1175.254602][T24416] ? rt_spin_unlock+0x160/0x200 [ 1175.254622][T24416] ? __pfx_kthread+0x10/0x10 [ 1175.254646][T24416] ret_from_fork+0x51b/0xa40 [ 1175.254679][T24416] ? __pfx_ret_from_fork+0x10/0x10 [ 1175.254699][T24416] ? __switch_to+0xc82/0x1410 [ 1175.254733][T24416] ? __pfx_kthread+0x10/0x10 [ 1175.254757][T24416] ret_from_fork_asm+0x1a/0x30 [ 1175.254802][T24416] [ 1175.254833][T24416] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1175.254873][T24416] Bluetooth: hci3: failed to register connection device [ 1176.003872][T24468] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1176.115710][ T5116] Bluetooth: hci6: command tx timeout [ 1176.164053][T24468] kvm: pic: non byte read [ 1176.164272][T24468] kvm: pic: level sensitive irq not supported [ 1176.164397][T24468] kvm: pic: non byte read [ 1176.164617][T24468] kvm: pic: level sensitive irq not supported [ 1176.164899][T24468] kvm: pic: non byte read [ 1176.165096][T24468] kvm: pic: level sensitive irq not supported [ 1176.165147][T24468] kvm: pic: non byte read [ 1176.165360][T24468] kvm: pic: level sensitive irq not supported [ 1176.220253][T24468] kvm: pic: non byte read [ 1176.220373][T24468] kvm: pic: level sensitive irq not supported [ 1176.232016][T24468] kvm: pic: non byte read [ 1178.423669][ T5116] Bluetooth: hci6: command tx timeout [ 1178.486079][T24495] netlink: 'syz.1.6681': attribute type 1 has an invalid length. [ 1178.486094][T24495] netlink: 'syz.1.6681': attribute type 4 has an invalid length. [ 1178.486102][T24495] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.6681'. [ 1179.288898][T24415] chnl_net:caif_netlink_parms(): no params data found [ 1180.652262][ T5116] Bluetooth: hci6: command tx timeout [ 1180.858220][T24501] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1181.396810][T24415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.396933][T24415] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.397186][T24415] bridge_slave_0: entered allmulticast mode [ 1181.418316][T24415] bridge_slave_0: entered promiscuous mode [ 1181.439571][T24415] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.446518][T24415] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.446788][T24415] bridge_slave_1: entered allmulticast mode [ 1181.457454][T24415] bridge_slave_1: entered promiscuous mode [ 1181.606356][ T13] bridge_slave_1: left promiscuous mode [ 1181.606606][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.485955][ T13] bridge_slave_0: left promiscuous mode [ 1182.486204][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.955948][T24416] Bluetooth: hci3: command 0x040f tx timeout [ 1183.116724][ T808] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1183.892434][ T808] usb 2-1: Using ep0 maxpacket: 32 [ 1183.930758][ T808] usb 2-1: config 0 has an invalid interface number: 111 but max is 0 [ 1183.930790][ T808] usb 2-1: config 0 has no interface number 0 [ 1183.949910][ T808] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1183.949938][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.949957][ T808] usb 2-1: Product: syz [ 1183.949971][ T808] usb 2-1: Manufacturer: syz [ 1183.949985][ T808] usb 2-1: SerialNumber: syz [ 1183.958490][ T808] usb 2-1: config 0 descriptor?? [ 1184.227379][ T808] snd-usb-6fire 2-1:0.111: unable to receive device firmware state. [ 1184.227440][ T808] snd-usb-6fire 2-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 1184.288761][ T808] usb 2-1: USB disconnect, device number 20 [ 1190.513982][ T5885] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1190.674346][ T5885] usb 9-1: Using ep0 maxpacket: 8 [ 1190.677238][ T5885] usb 9-1: config 252 has an invalid interface number: 32 but max is 0 [ 1190.677269][ T5885] usb 9-1: config 252 has no interface number 0 [ 1190.677317][ T5885] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1190.677416][ T5885] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.752089][ T5885] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1190.752109][ T5885] pvrusb2: ********** [ 1190.752116][ T5885] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1190.752129][ T5885] pvrusb2: Important functionality might not be entirely working. [ 1190.752138][ T5885] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1190.752150][ T5885] pvrusb2: ********** [ 1190.770778][T24584] netlink: 116 bytes leftover after parsing attributes in process `syz.3.6707'. [ 1192.527311][ T5885] usb 9-1: USB disconnect, device number 8 [ 1192.528591][ T5885] pvrusb2: Device being rendered inoperable [ 1193.037593][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1193.135323][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1193.176729][ T13] bond0 (unregistering): Released all slaves [ 1195.753076][ T13] team0: Port device bond1 removed [ 1195.754820][ T13] bond1 (unregistering): Released all slaves [ 1196.723272][ T8549] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1196.896347][ T8549] usb 9-1: Using ep0 maxpacket: 32 [ 1196.948384][ T8549] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 1196.948411][ T8549] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1196.948432][ T8549] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1196.948466][ T8549] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1196.948478][ T8549] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1196.948490][ T8549] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1196.948514][ T8549] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1196.948525][ T8549] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.952649][ T8549] usb 9-1: config 0 descriptor?? [ 1197.216310][ T8549] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1197.236890][ T8549] usb 9-1: USB disconnect, device number 9 [ 1197.290356][ T8549] usblp0: removed [ 1197.602466][ T13] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1197.671231][ T13] bond2 (unregistering): Released all slaves [ 1197.888979][ T8549] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1198.072182][ T8549] usb 9-1: Using ep0 maxpacket: 32 [ 1198.095734][ T8549] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 1198.095763][ T8549] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1198.095783][ T8549] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1198.095836][ T8549] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1198.095858][ T8549] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1198.095880][ T8549] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1198.095919][ T8549] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1198.095940][ T8549] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.124747][ T8549] usb 9-1: config 0 descriptor?? [ 1198.358421][ T8549] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1198.362545][T24600] syzkaller0: entered promiscuous mode [ 1198.362569][T24600] syzkaller0: entered allmulticast mode [ 1198.365297][T24614] syz_tun: entered allmulticast mode [ 1198.417206][T24415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1198.664369][T24614] syz_tun: left allmulticast mode [ 1198.856487][ T58] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1198.901383][T24416] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1198.911686][T24416] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1198.918085][T24416] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1198.935749][T24416] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1198.936486][T24416] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1199.138352][T24415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1200.629171][ T10] usb 9-1: USB disconnect, device number 10 [ 1200.638690][ T10] usblp0: removed [ 1200.765905][T24415] team0: Port device team_slave_0 added [ 1201.270448][ T5116] Bluetooth: hci3: command tx timeout [ 1202.011253][T24415] team0: Port device team_slave_1 added [ 1203.424124][T24415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1203.424136][T24415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1203.424150][T24415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1203.481683][ T5116] Bluetooth: hci3: command tx timeout [ 1204.028698][ T13] hsr_slave_0: left promiscuous mode [ 1204.323797][ T13] hsr_slave_1: left promiscuous mode [ 1204.325236][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1204.369033][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1204.961244][T24661] syz.6.6721 (24661): drop_caches: 2 [ 1206.542320][ T5116] Bluetooth: hci3: command tx timeout [ 1208.699487][ T5116] Bluetooth: hci3: command tx timeout [ 1211.338346][ T5116] Bluetooth: hci2: command 0x0406 tx timeout [ 1213.431661][ T10] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1213.787371][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1213.791133][ T10] usb 7-1: config 0 has no interfaces? [ 1213.795601][ T10] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1213.795633][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.795654][ T10] usb 7-1: Product: syz [ 1213.795668][ T10] usb 7-1: Manufacturer: syz [ 1213.795682][ T10] usb 7-1: SerialNumber: syz [ 1213.882023][ T10] usb 7-1: config 0 descriptor?? [ 1216.217154][ T8549] usb 7-1: USB disconnect, device number 64 [ 1219.233037][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1219.474867][ T5116] Bluetooth: hci0: command 0x0405 tx timeout [ 1219.617332][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1223.197002][T24415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1223.197022][T24415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1223.197049][T24415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1223.302331][T24769] tipc: Started in network mode [ 1223.302362][T24769] tipc: Node identity 62f2a44de3b4, cluster identity 4711 [ 1223.325477][T24769] tipc: Enabled bearer , priority 0 [ 1223.326602][T24770] syzkaller0: entered promiscuous mode [ 1223.326625][T24770] syzkaller0: entered allmulticast mode [ 1223.332171][T24777] tipc: Resetting bearer [ 1223.435499][T24767] tipc: Resetting bearer [ 1223.525470][T24788] binder: 24786:24788 ioctl c0306201 2000000016c0 returned -14 [ 1223.623762][T24767] tipc: Disabling bearer [ 1223.975569][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1223.988507][T24415] hsr_slave_0: entered promiscuous mode [ 1223.989885][T24415] hsr_slave_1: entered promiscuous mode [ 1223.990783][T24415] debugfs: 'hsr0' already exists in 'hsr' [ 1223.990807][T24415] Cannot create hsr debugfs directory [ 1224.153652][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1224.196086][ T10] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 1224.196115][ T10] usb 4-1: config 0 has no interface number 0 [ 1224.196170][ T10] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1224.204401][T23195] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 [ 1224.226180][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1224.226209][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.226228][ T10] usb 4-1: Product: syz [ 1224.226242][ T10] usb 4-1: Manufacturer: syz [ 1224.226256][ T10] usb 4-1: SerialNumber: syz [ 1224.236617][ T10] usb 4-1: config 0 descriptor?? SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1224.238007][T24792] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1224.521888][T24792] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1229.200099][ T10] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1229.200379][ T10] asix 4-1:0.188: probe with driver asix failed with error -71 [ 1229.388084][ T10] usb 4-1: USB disconnect, device number 12 [ 1231.713846][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.117207][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.455495][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.743883][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.495184][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.630306][T14027] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1233.883778][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.193980][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0