last executing test programs: 3m25.821939906s ago: executing program 0 (id=851): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) connect$unix(r3, &(0x7f0000000280)=@abs, 0x6e) 3m25.518656249s ago: executing program 0 (id=852): r0 = epoll_create1(0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000002100df4c2abd70c6270000220000e900104e88cb7634ce58ea220000"], 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @random="a15cc14e96b3", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}}}}}}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0xa7e, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x2000, 0x3, 0x4, 0x0, 0xd, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "a730ba01"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000080)={0x8000000c}) socket$nl_generic(0x10, 0x3, 0x10) 3m23.168669106s ago: executing program 0 (id=857): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 3m23.106811515s ago: executing program 0 (id=858): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x8b20, 0x0) r0 = io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) close_range(r0, 0xffffffffffffffff, 0x0) 3m22.691071305s ago: executing program 0 (id=860): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$sock_proto_private(0xffffffffffffffff, 0x8b20, 0x0) r1 = io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) close_range(r1, 0xffffffffffffffff, 0x0) 3m21.056232274s ago: executing program 0 (id=863): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0xfffffff3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m18.322174756s ago: executing program 2 (id=864): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r0, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r0, &(0x7f0000000080)="cd", 0x1) close_range(r0, r0, 0x0) 3m14.216601663s ago: executing program 2 (id=869): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xff000000, 0x0, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x8}, 0x287, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2e7794dbf95fa4bbcb6a91c1f280c1999b9e9c91aec32acf40242838b14641ee58ffb2807b1455049d59591426d860cbcf1d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab7930c4e57def2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea5584", 0x7e, 0x1, {0xf}}}, @common=@unspec=@limit={{0x48}, {0x7004, 0x81000, 0x0, 0xb}}]}, @REJECT={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1a}, @broadcast, 0xffffffff, 0xff000000, 'macsec0\x00', 'netdevsim0\x00', {}, {}, 0x73, 0x3, 0x25}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x6, 0xb6, &(0x7f0000000200)=""/182, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000)=r5, 0x40) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162bd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x240408a0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x82, &(0x7f0000000340)={'filter\x00', 0x0, 0x0, 0x0, [0xe4, 0x3, 0xf77, 0x6, 0x7f, 0x7]}, &(0x7f00000003c0)=0x50) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0xffffffff, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r8, r8, 0x0, 0x200000) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$dsp(r9, &(0x7f00000000c0)=""/152, 0x98) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) 3m3.242748526s ago: executing program 32 (id=863): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0xfffffff3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m3.241810667s ago: executing program 2 (id=878): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000a0003, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect(0xffffffffffffffff, &(0x7f0000000000)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x3}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x20001) unshare(0x4000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000340)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {r3, 0x7}}, 0x10) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80c02, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x10000009, 0xffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r5, 0x0, 0x0}, 0x10) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000300)=[{&(0x7f00000005c0)}], 0x1) fcntl$lock(0xffffffffffffffff, 0x403, &(0x7f0000000700)) 2m57.0250716s ago: executing program 3 (id=886): ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) r3 = fanotify_init(0x6, 0x80000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000980)=ANY=[]) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000001c0)={0x50, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x8}, @ramp={0x1, 0x5, {0x969, 0x3, 0x101, 0x9}}}) fanotify_mark(r3, 0x101, 0x48001051, r4, 0x0) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f0000000000)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0), 0x2) preadv(r5, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000100)=""/24, 0x18}], 0x2, 0x5, 0x3) creat(&(0x7f0000000100)='./file0\x00', 0x7a) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) writev(r2, &(0x7f0000000380)=[{0x0}, {&(0x7f00000004c0)}], 0x2) r6 = syz_open_procfs(0x0, 0x0) read$FUSE(r6, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r6, 0x0, 0x0, 0xadc) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x1) 2m49.640850073s ago: executing program 2 (id=889): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x200}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x400) 2m45.879823425s ago: executing program 3 (id=890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) 2m44.827131137s ago: executing program 2 (id=891): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000a0003, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect(0xffffffffffffffff, &(0x7f0000000000)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x3}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x20001) unshare(0x4000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000340)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {r3, 0x7}}, 0x10) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80c02, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x10000009, 0xffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r5, 0x0, 0x0}, 0x10) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000300)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a03", 0x2c}], 0x1) fcntl$lock(0xffffffffffffffff, 0x403, &(0x7f0000000700)) 2m44.494819389s ago: executing program 3 (id=892): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x541b, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x50, 0x7fff7ffc}]}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1e) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m42.255958278s ago: executing program 3 (id=893): socket$netlink(0x10, 0x3, 0x8000000004) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000780)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x4c, 0xfffffffffffffffc, &(0x7f0000001180)="14d11edd8503935b5737dc3e7b1be6dd6647926cc69165be53cc0d0f130e0177ccfb6c2f81be802eb36cc9b5d0c8e89cf0a0906d127d1475324e5cb7929a5cd23d44e61aa4d223a0a091342c"}) 2m40.588959907s ago: executing program 3 (id=895): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040400010300000009210000000122f80409058103"], 0x0) syz_usb_connect$hid(0x4, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x5b, &(0x7f00000003c0)=@string={0x5b, 0x3, "9f4e5133f38f7fc9936f698ccbb5eae247e28c08903d0e4bcadf2077592f819a735f5d2fa32c2bd931cdefbf66e403ccfbb012c104b806240c44ffc7eee185d44e0988ca94a6f66505e6e3b3dd8ae330d6d3f0de59251e8a47"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2m34.715598912s ago: executing program 3 (id=900): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x200}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x400) 2m32.713973857s ago: executing program 2 (id=903): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x402, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) lstat(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, r2, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) 2m18.652176569s ago: executing program 33 (id=900): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x200}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x400) 2m16.763574407s ago: executing program 34 (id=903): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x402, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) lstat(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, r2, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) 43.35146001s ago: executing program 1 (id=974): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xff000000, 0x0, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x8}, 0x287, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2e7794dbf95fa4bbcb6a91c1f280c1999b9e9c91aec32acf40242838b14641ee58ffb2807b1455049d59591426d860cbcf1d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab7930c4e57def2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea5584", 0x7e, 0x1, {0xf}}}, @common=@unspec=@limit={{0x48}, {0x7004, 0x81000, 0x0, 0xb}}]}, @REJECT={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1a}, @broadcast, 0xffffffff, 0xff000000, 'macsec0\x00', 'netdevsim0\x00', {}, {}, 0x73, 0x3, 0x25}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x40) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162bd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x240408a0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x82, &(0x7f0000000340)={'filter\x00', 0x0, 0x0, 0x0, [0xe4, 0x3, 0xf77, 0x6, 0x7f, 0x7]}, &(0x7f00000003c0)=0x50) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0xffffffff, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r8, r8, 0x0, 0x200000) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$dsp(r9, &(0x7f00000000c0)=""/152, 0x98) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) 35.164550655s ago: executing program 1 (id=981): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB='4\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8010) 33.532304084s ago: executing program 1 (id=984): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x5b8, 0xd0, 0x2b8, 0xd0, 0x1a0, 0xd0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, [0xff, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg\x00', {}, {}, 0x21, 0x3, 0x3, 0x6}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010101, @ipv6=@private1, 0x0, 0x8, 0x8e}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@multicast1, 0x0, 0x34, 0x2}}}, {{@ipv6={@mcast1, @mcast2, [], [0xff000000], 'wg1\x00', 'ip6gre0\x00', {0xff}, {}, 0x2c}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@local, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) 32.994432526s ago: executing program 1 (id=986): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0xf00, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x4e14, 0x913a, 0x0, 0x0, 0x700) 30.656976279s ago: executing program 1 (id=989): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xfffffffffffffffd, 0x70bd27, 0x25df9bfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x223}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x4008000) 27.965246713s ago: executing program 1 (id=991): socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x10, 0x80002, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 12.6716233s ago: executing program 35 (id=991): socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x10, 0x80002, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3.13172082s ago: executing program 4 (id=1025): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0xffffffffffffffd0}], 0x1, 0x55, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x1}) 2.15010248s ago: executing program 4 (id=1026): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0xffffffff7ffffffd, 0x1ea1e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) writev(r0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000600)="161c79", 0x3}], 0x2) 1.488637827s ago: executing program 4 (id=1027): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.12336044s ago: executing program 4 (id=1028): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f00000002c0)='\\ ', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r1 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 490.566062ms ago: executing program 4 (id=1029): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)={0x3c, r1, 0x3, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "cc7c3e94797a9bc4e00e34712d4fd4f6"}]}, 0x3c}}, 0x44800) 0s ago: executing program 4 (id=1030): prlimit64(0x0, 0xe, &(0x7f0000000740)={0x7, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x18) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) kernel console output (not intermixed with test programs): 424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 138.868699][ T5847] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 139.020427][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.020447][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.020468][ T5847] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 139.020478][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.023610][ T5847] usb 2-1: config 0 descriptor?? [ 139.450493][ T5847] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 139.484259][ T5847] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 139.646726][ T5847] cp2112 0003:10C4:EA90.0002: error requesting version [ 139.655764][ T5847] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -32 [ 140.474155][ T6527] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.125'. [ 141.632560][ T9] usb 2-1: USB disconnect, device number 4 [ 143.559734][ T6563] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 143.559747][ T6563] IPv6: NLM_F_CREATE should be set when creating new route [ 143.560166][ T6563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.134'. [ 144.405228][ T5847] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 144.589762][ T5847] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.589813][ T5847] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 144.589832][ T5847] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 144.593311][ T5847] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 144.593393][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 144.593440][ T5847] usb 2-1: Product: syz [ 144.593453][ T5847] usb 2-1: Manufacturer: syz [ 144.593466][ T5847] usb 2-1: SerialNumber: syz [ 144.601735][ T5847] usb 2-1: config 0 descriptor?? [ 144.612569][ T5847] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 144.612716][ T5847] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 144.613232][ T5847] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 145.480241][ T6573] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 146.278604][ T5799] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 146.338637][ T5847] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 146.416954][ T6595] hfs: unable to load iocharset "io#harset" [ 146.468630][ T5799] usb 5-1: Using ep0 maxpacket: 32 [ 146.497097][ T5847] usb 3-1: Using ep0 maxpacket: 32 [ 146.500347][ T5799] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 146.500369][ T5799] usb 5-1: config 0 has no interface number 0 [ 146.500412][ T5799] usb 5-1: config 0 interface 184 has no altsetting 0 [ 146.543906][ T5799] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 146.543932][ T5799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.543950][ T5799] usb 5-1: Product: syz [ 146.543962][ T5799] usb 5-1: Manufacturer: syz [ 146.543975][ T5799] usb 5-1: SerialNumber: syz [ 146.562898][ T5799] usb 5-1: config 0 descriptor?? [ 146.608558][ T5847] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 146.608584][ T5847] usb 3-1: config 0 has no interface number 0 [ 146.608627][ T5847] usb 3-1: config 0 interface 184 has no altsetting 0 [ 146.621844][ T5847] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 146.621867][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.621885][ T5847] usb 3-1: Product: syz [ 146.621897][ T5847] usb 3-1: Manufacturer: syz [ 146.621909][ T5847] usb 3-1: SerialNumber: syz [ 146.708437][ T5847] usb 3-1: config 0 descriptor?? [ 146.952842][ T5946] usb 2-1: USB disconnect, device number 5 [ 147.445986][ T6608] netlink: 44 bytes leftover after parsing attributes in process `syz.1.145'. [ 147.610925][ T5799] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 147.610953][ T5799] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 147.932392][ T5847] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 147.932411][ T5847] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 147.978812][ T5799] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 147.978841][ T5799] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 147.978857][ T5799] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 147.978872][ T5799] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 147.979659][ T5799] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 148.036660][ T5799] usb 5-1: USB disconnect, device number 4 [ 148.135638][ T5847] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 148.135665][ T5847] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 148.135681][ T5847] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 148.135696][ T5847] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 148.135966][ T5847] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 148.195905][ T5847] usb 3-1: USB disconnect, device number 4 [ 148.618739][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 148.768607][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 148.770773][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.770818][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 148.770840][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 148.772240][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 148.772264][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 148.772282][ T9] usb 2-1: Manufacturer: syz [ 148.782279][ T9] usb 2-1: config 0 descriptor?? [ 149.484220][ T6626] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.484233][ T6626] IPv6: NLM_F_CREATE should be set when creating new route [ 149.484524][ T6626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.150'. [ 150.188724][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 150.343939][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 150.343967][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.343985][ T9] usb 4-1: Product: syz [ 150.343996][ T9] usb 4-1: Manufacturer: syz [ 150.344009][ T9] usb 4-1: SerialNumber: syz [ 150.411650][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 150.438547][ T5847] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 150.502803][ T5796] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 150.608585][ T5847] usb 3-1: Using ep0 maxpacket: 16 [ 150.610760][ T5847] usb 3-1: config 0 has no interfaces? [ 150.612808][ T5847] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 150.612829][ T5847] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 150.612848][ T5847] usb 3-1: Manufacturer: syz [ 150.656169][ T5847] usb 3-1: config 0 descriptor?? [ 151.724326][ T5796] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 151.724818][ T5796] ath9k_htc: Failed to initialize the device [ 151.818425][ T5847] usb 4-1: USB disconnect, device number 6 [ 151.884999][ T5847] usb 4-1: ath9k_htc: USB layer deinitialized [ 151.940234][ T5862] usb 2-1: USB disconnect, device number 6 [ 152.360136][ T5862] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 152.521965][ T5862] usb 2-1: Using ep0 maxpacket: 32 [ 152.527216][ T5862] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 152.527238][ T5862] usb 2-1: config 0 has no interface number 0 [ 152.560624][ T5862] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 152.560652][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.560669][ T5862] usb 2-1: Product: syz [ 152.560682][ T5862] usb 2-1: Manufacturer: syz [ 152.560694][ T5862] usb 2-1: SerialNumber: syz [ 152.618287][ T5862] usb 2-1: config 0 descriptor?? [ 153.033439][ T6662] hfs: unable to load iocharset "io#harset" [ 153.072333][ T6670] syzkaller0: entered promiscuous mode [ 153.072350][ T6670] syzkaller0: entered allmulticast mode [ 153.226947][ T5862] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 153.226966][ T5862] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 153.410067][ T5847] usb 3-1: USB disconnect, device number 5 [ 153.410364][ T6672] netlink: 44 bytes leftover after parsing attributes in process `syz.3.163'. [ 153.757142][ T6675] netlink: 20 bytes leftover after parsing attributes in process `syz.2.164'. [ 154.835532][ T5862] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -61 [ 154.835816][ T5862] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 154.858755][ T5796] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 155.108542][ T5796] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 155.108560][ T5796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.108569][ T5796] usb 3-1: Product: syz [ 155.108576][ T5796] usb 3-1: Manufacturer: syz [ 155.108583][ T5796] usb 3-1: SerialNumber: syz [ 155.123605][ T5796] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 155.172611][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 155.475769][ T5862] usb 3-1: USB disconnect, device number 6 [ 156.214566][ T5946] usb 2-1: USB disconnect, device number 7 [ 156.308387][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 156.309256][ T9] ath9k_htc: Failed to initialize the device [ 156.324743][ T5862] usb 3-1: ath9k_htc: USB layer deinitialized [ 156.507304][ T5796] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 156.575072][ T6701] bridge_slave_0: left allmulticast mode [ 156.575097][ T6701] bridge_slave_0: left promiscuous mode [ 156.575393][ T6701] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.660679][ T6701] bridge_slave_1: left allmulticast mode [ 156.660698][ T6701] bridge_slave_1: left promiscuous mode [ 156.660848][ T6701] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.670031][ T5796] usb 5-1: Using ep0 maxpacket: 16 [ 156.673340][ T5796] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.673386][ T5796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.673410][ T5796] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 156.674641][ T5796] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 156.674664][ T5796] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 156.674681][ T5796] usb 5-1: Manufacturer: syz [ 156.694641][ T5796] usb 5-1: config 0 descriptor?? [ 156.958393][ T6701] bond0: (slave bond_slave_0): Releasing backup interface [ 157.030035][ T6706] netlink: 'syz.2.172': attribute type 27 has an invalid length. [ 157.209198][ T6701] bond0: (slave bond_slave_1): Releasing backup interface [ 157.371579][ T6701] team0: Port device team_slave_0 removed [ 157.411040][ T6701] team0: Port device team_slave_1 removed [ 157.411534][ T6701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.411549][ T6701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.456745][ T6701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.456762][ T6701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.634724][ T6701] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 157.645535][ T6702] bridge0: port 1(team0) entered blocking state [ 157.645592][ T6702] bridge0: port 1(team0) entered disabled state [ 157.645701][ T6702] team0: entered allmulticast mode [ 157.647687][ T6702] team0: entered promiscuous mode [ 157.648099][ T6702] bridge0: port 1(team0) entered blocking state [ 157.648305][ T6702] bridge0: port 1(team0) entered forwarding state [ 157.690533][ T1558] bridge0: port 1(team0) entered disabled state [ 159.134689][ T5796] usb 5-1: USB disconnect, device number 5 [ 159.214579][ T6723] netlink: 20 bytes leftover after parsing attributes in process `syz.0.176'. [ 159.546882][ T6738] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.546901][ T6738] IPv6: NLM_F_CREATE should be set when creating new route [ 159.635741][ T6734] netlink: 'syz.3.179': attribute type 27 has an invalid length. [ 160.147329][ T6741] syz.4.181 (6741) used greatest stack depth: 17472 bytes left [ 160.570162][ T6752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 161.801489][ T808] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 161.963012][ T808] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 161.963040][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.995767][ T808] usb 4-1: config 0 descriptor?? [ 162.011344][ T808] cp210x 4-1:0.0: cp210x converter detected [ 162.207126][ T808] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 162.207155][ T808] cp210x 4-1:0.0: querying part number failed [ 162.235764][ T808] usb 4-1: cp210x converter now attached to ttyUSB0 [ 162.246088][ T808] usb 4-1: USB disconnect, device number 7 [ 162.264234][ T808] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 162.279110][ T808] cp210x 4-1:0.0: device disconnected [ 162.424463][ T6767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.449261][ T6767] team0: Port device bond0 added [ 162.449755][ T6768] bridge0: port 3(team0) entered blocking state [ 162.449854][ T6768] bridge0: port 3(team0) entered disabled state [ 162.450885][ T6768] team0: entered allmulticast mode [ 162.450901][ T6768] team_slave_0: entered allmulticast mode [ 162.450966][ T6768] team_slave_1: entered allmulticast mode [ 162.450980][ T6768] bond0: entered allmulticast mode [ 162.450991][ T6768] bond_slave_0: entered allmulticast mode [ 162.451005][ T6768] bond_slave_1: entered allmulticast mode [ 162.482281][ T6768] team0: entered promiscuous mode [ 162.482300][ T6768] team_slave_0: entered promiscuous mode [ 162.482464][ T6768] team_slave_1: entered promiscuous mode [ 162.482615][ T6768] bond0: entered promiscuous mode [ 162.482626][ T6768] bond_slave_0: entered promiscuous mode [ 162.482806][ T6768] bond_slave_1: entered promiscuous mode [ 162.504240][ T6768] bridge0: port 3(team0) entered blocking state [ 162.504357][ T6768] bridge0: port 3(team0) entered forwarding state [ 162.551116][ T5946] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 162.722595][ T5946] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.722620][ T5946] usb 3-1: config 0 has no interfaces? [ 162.730144][ T5946] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 162.730169][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.730187][ T5946] usb 3-1: Product: syz [ 162.730224][ T5946] usb 3-1: Manufacturer: syz [ 162.730237][ T5946] usb 3-1: SerialNumber: syz [ 162.757140][ T5946] usb 3-1: config 0 descriptor?? [ 163.339924][ T5847] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 163.618623][ T5847] usb 4-1: Using ep0 maxpacket: 16 [ 163.639462][ T5847] usb 4-1: config 0 has no interfaces? [ 163.646011][ T5847] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 163.646027][ T5847] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 163.646036][ T5847] usb 4-1: Manufacturer: syz [ 163.654207][ T5847] usb 4-1: config 0 descriptor?? [ 164.881602][ T5847] usb 4-1: USB disconnect, device number 8 [ 165.282871][ T5847] usb 3-1: USB disconnect, device number 7 [ 165.380779][ T6805] bridge0: port 2(syz_tun) entered blocking state [ 165.380849][ T6805] bridge0: port 2(syz_tun) entered disabled state [ 165.380981][ T6805] syz_tun: entered allmulticast mode [ 165.382494][ T6805] syz_tun: entered promiscuous mode [ 165.382942][ T6805] bridge0: port 2(syz_tun) entered blocking state [ 165.383001][ T6805] bridge0: port 2(syz_tun) entered forwarding state [ 166.878640][ T5946] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 167.034010][ T5946] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 167.034038][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.040335][ T5946] usb 2-1: config 0 descriptor?? [ 167.094167][ T5946] cp210x 2-1:0.0: cp210x converter detected [ 167.285922][ T5946] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 167.285948][ T5946] cp210x 2-1:0.0: querying part number failed [ 167.289913][ T5946] usb 2-1: cp210x converter now attached to ttyUSB0 [ 167.339437][ T5946] usb 2-1: USB disconnect, device number 8 [ 167.370163][ T5946] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 167.379738][ T5946] cp210x 2-1:0.0: device disconnected [ 168.314991][ T6843] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 168.434688][ T6845] netlink: 'syz.1.209': attribute type 27 has an invalid length. [ 170.424496][ T6860] netlink: 44 bytes leftover after parsing attributes in process `syz.2.215'. [ 171.257813][ T6879] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 171.604823][ T6883] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 171.708915][ T5946] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 171.942781][ T5946] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 171.942810][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.967785][ T5946] usb 3-1: config 0 descriptor?? [ 171.971408][ T5946] cp210x 3-1:0.0: cp210x converter detected [ 172.192342][ T5946] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 172.192369][ T5946] cp210x 3-1:0.0: querying part number failed [ 172.249367][ T5946] usb 3-1: cp210x converter now attached to ttyUSB0 [ 172.285876][ T5946] usb 3-1: USB disconnect, device number 8 [ 172.309768][ T5946] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 172.310418][ T5946] cp210x 3-1:0.0: device disconnected [ 173.329787][ T6893] hfs: unable to load iocharset "io#harset" [ 175.644929][ T808] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 175.828406][ T808] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 175.828433][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.881908][ T808] usb 3-1: config 0 descriptor?? [ 175.888022][ T808] cp210x 3-1:0.0: cp210x converter detected [ 176.093945][ T808] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 176.093970][ T808] cp210x 3-1:0.0: querying part number failed [ 176.124862][ T808] usb 3-1: cp210x converter now attached to ttyUSB0 [ 176.127955][ T808] usb 3-1: USB disconnect, device number 9 [ 176.182711][ T808] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 176.214921][ T808] cp210x 3-1:0.0: device disconnected [ 177.013292][ T6948] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 177.013422][ T6948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.238'. [ 178.648340][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.243'. [ 179.268660][ T808] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 179.425084][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.425105][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.425126][ T808] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 179.425137][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.436570][ T808] usb 5-1: config 0 descriptor?? [ 179.866177][ T808] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 179.866212][ T808] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 179.866232][ T808] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 179.866246][ T808] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 179.866260][ T808] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 179.866273][ T808] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 179.866287][ T808] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 179.870260][ T808] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 180.064864][ T808] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x00 [ 180.674016][ T808] cp2112 0003:10C4:EA90.0003: error reading lock byte: -71 [ 180.676885][ T808] usb 5-1: USB disconnect, device number 6 [ 181.291022][ T6998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.252'. [ 182.342906][ T7011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.256'. [ 182.343077][ T5862] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 182.491739][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.491769][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.491803][ T5862] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 182.491823][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.521639][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 182.570454][ T5862] usb 4-1: config 0 descriptor?? [ 182.681406][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.681438][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.681776][ T31] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 182.681843][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.729328][ T31] usb 3-1: config 0 descriptor?? [ 183.162605][ T31] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 183.225138][ T31] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 183.249930][ T5862] usbhid 4-1:0.0: can't add hid device: -71 [ 183.250001][ T5862] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 183.262500][ T5862] usb 4-1: USB disconnect, device number 9 [ 183.358747][ T31] cp2112 0003:10C4:EA90.0004: error requesting version [ 183.361154][ T31] cp2112 0003:10C4:EA90.0004: probe with driver cp2112 failed with error -32 [ 185.293805][ T5799] usb 3-1: USB disconnect, device number 10 [ 185.799133][ T7049] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.799370][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.265'. [ 187.198723][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 187.349051][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 187.350850][ T31] usb 5-1: config 0 has no interfaces? [ 187.351944][ T31] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 187.351968][ T31] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 187.351984][ T31] usb 5-1: Manufacturer: syz [ 187.393249][ T31] usb 5-1: config 0 descriptor?? [ 188.010744][ T7082] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.010763][ T7082] IPv6: NLM_F_CREATE should be set when creating new route [ 188.011070][ T7082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.273'. [ 188.113075][ T7083] bond0: left promiscuous mode [ 188.113171][ T7083] bond0: left allmulticast mode [ 188.243314][ T7083] team0: Port device bond0 removed [ 188.243630][ T7083] team0: left allmulticast mode [ 188.243644][ T7083] team0: left promiscuous mode [ 188.243769][ T7083] bridge0: port 1(team0) entered disabled state [ 188.464931][ T7083] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 188.620385][ T5847] usb 5-1: USB disconnect, device number 7 [ 189.748585][ T5847] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 189.918554][ T5847] usb 5-1: Using ep0 maxpacket: 32 [ 189.941210][ T5847] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.941229][ T5847] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.952493][ T5847] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 189.952519][ T5847] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 189.952537][ T5847] usb 5-1: Product: syz [ 189.952549][ T5847] usb 5-1: Manufacturer: syz [ 190.069465][ T5847] hub 5-1:4.0: USB hub found [ 190.272751][ T5847] hub 5-1:4.0: 2 ports detected [ 190.556727][ T7101] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 191.363471][ T7114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.282'. [ 191.496728][ T5946] usb 5-1: USB disconnect, device number 8 [ 191.496837][ T5847] hub 5-1:4.0: hub_ext_port_status failed (err = -71) [ 191.971237][ T7121] loop5: detected capacity change from 0 to 7 [ 191.997703][ T7121] Dev loop5: unable to read RDB block 7 [ 191.997735][ T7121] loop5: unable to read partition table [ 191.997898][ T7121] loop5: partition table beyond EOD, truncated [ 191.997927][ T7121] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 192.186004][ T7129] netlink: 'syz.3.288': attribute type 27 has an invalid length. [ 192.428664][ T5946] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 192.582012][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.582032][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.582051][ T5946] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 192.582062][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.585658][ T5946] usb 2-1: config 0 descriptor?? [ 193.115737][ T5946] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 193.117821][ T5946] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 193.483736][ T5946] cp2112 0003:10C4:EA90.0005: error requesting version [ 193.490246][ T5946] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -32 [ 194.193814][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.193905][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.478581][ T5946] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 194.589066][ T808] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 194.632345][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.632364][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.632384][ T5946] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 194.632395][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.661006][ T5946] usb 3-1: config 0 descriptor?? [ 194.748555][ T808] usb 5-1: Using ep0 maxpacket: 8 [ 194.764640][ T808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.764655][ T808] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 194.844562][ T808] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 194.844698][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.844716][ T808] usb 5-1: Product: syz [ 194.844729][ T808] usb 5-1: Manufacturer: syz [ 194.844741][ T808] usb 5-1: SerialNumber: syz [ 194.899429][ T808] usb 5-1: config 0 descriptor?? [ 194.950353][ T808] powermate 5-1:0.0: probe with driver powermate failed with error -22 [ 195.169850][ T7151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.170881][ T7151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.245124][ T5946] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 195.309238][ T5946] cp2112 0003:10C4:EA90.0006: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 195.436520][ T5946] cp2112 0003:10C4:EA90.0006: error requesting version [ 195.440531][ T5946] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -32 [ 195.920824][ T5847] usb 2-1: USB disconnect, device number 9 [ 196.187490][ T7158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.295'. [ 197.961904][ T808] usb 3-1: USB disconnect, device number 11 [ 198.487749][ T7180] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 199.184104][ T7192] netlink: 'syz.2.302': attribute type 27 has an invalid length. [ 199.599468][ T5847] usb 5-1: USB disconnect, device number 9 [ 200.108965][ T5847] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 200.270405][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 200.270425][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.270446][ T5847] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 200.270457][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.273315][ T5847] usb 5-1: config 0 descriptor?? [ 200.898582][ T5847] usbhid 5-1:0.0: can't add hid device: -71 [ 200.898667][ T5847] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 200.907033][ T5847] usb 5-1: USB disconnect, device number 10 [ 201.480635][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 201.480690][ T5797] Bluetooth: hci2: command 0x0406 tx timeout [ 201.480712][ T5797] Bluetooth: hci4: command 0x0406 tx timeout [ 201.480733][ T5797] Bluetooth: hci1: command 0x0406 tx timeout [ 201.480753][ T5797] Bluetooth: hci0: command 0x0406 tx timeout [ 202.102028][ T7216] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 203.896192][ T7232] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.896204][ T7232] IPv6: NLM_F_CREATE should be set when creating new route [ 204.476926][ T5946] IPVS: starting estimator thread 0... [ 204.558694][ T7245] IPVS: using max 9 ests per chain, 21600 per kthread [ 205.541854][ T31] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 205.692520][ T31] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 205.692549][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.697542][ T31] usb 3-1: config 0 descriptor?? [ 205.701594][ T31] cp210x 3-1:0.0: cp210x converter detected [ 205.902618][ T31] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 205.902636][ T31] cp210x 3-1:0.0: querying part number failed [ 205.931509][ T31] usb 3-1: cp210x converter now attached to ttyUSB0 [ 205.965687][ T31] usb 3-1: USB disconnect, device number 12 [ 206.015668][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 206.016386][ T31] cp210x 3-1:0.0: device disconnected [ 208.346603][ T7284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.104262][ T5796] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 209.298770][ T5796] usb 3-1: Using ep0 maxpacket: 16 [ 209.302070][ T5796] usb 3-1: config 0 has no interfaces? [ 209.307707][ T5796] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 209.307732][ T5796] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 209.307748][ T5796] usb 3-1: Manufacturer: syz [ 209.353972][ T5796] usb 3-1: config 0 descriptor?? [ 210.095583][ T5946] usb 3-1: USB disconnect, device number 13 [ 210.794974][ T7314] binder: BINDER_SET_CONTEXT_MGR already set [ 210.794985][ T7314] binder: 7313:7314 ioctl 4018620d 200000000180 returned -16 [ 211.514692][ T7327] netlink: 'syz.2.337': attribute type 27 has an invalid length. [ 215.184032][ T7367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.349'. [ 215.430088][ T7365] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.988716][ T5946] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 217.173037][ T5946] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 217.173064][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.177993][ T5946] usb 5-1: config 0 descriptor?? [ 217.186284][ T5946] cp210x 5-1:0.0: cp210x converter detected [ 217.454343][ T5946] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 217.454370][ T5946] cp210x 5-1:0.0: querying part number failed [ 217.461294][ T5946] usb 5-1: cp210x converter now attached to ttyUSB0 [ 217.553638][ T5946] usb 5-1: USB disconnect, device number 11 [ 217.608705][ T5946] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 217.609242][ T5946] cp210x 5-1:0.0: device disconnected [ 218.291143][ T7403] bond0: left promiscuous mode [ 218.291158][ T7403] bond_slave_0: left promiscuous mode [ 218.291266][ T7403] bond_slave_1: left promiscuous mode [ 218.291440][ T7403] bond0: left allmulticast mode [ 218.291447][ T7403] bond_slave_0: left allmulticast mode [ 218.291455][ T7403] bond_slave_1: left allmulticast mode [ 218.398581][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 218.406022][ T7403] team0: Port device bond0 removed [ 218.406330][ T7403] team0: left allmulticast mode [ 218.406340][ T7403] team_slave_0: left allmulticast mode [ 218.406349][ T7403] team_slave_1: left allmulticast mode [ 218.406553][ T7403] team0: left promiscuous mode [ 218.406558][ T7403] team_slave_0: left promiscuous mode [ 218.406678][ T7403] team_slave_1: left promiscuous mode [ 218.406891][ T7403] bridge0: port 3(team0) entered disabled state [ 218.483448][ T7403] bridge_slave_0: left allmulticast mode [ 218.483465][ T7403] bridge_slave_0: left promiscuous mode [ 218.483605][ T7403] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.570409][ T7403] bridge_slave_1: left allmulticast mode [ 218.570427][ T7403] bridge_slave_1: left promiscuous mode [ 218.570625][ T7403] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.600949][ T31] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 218.600975][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.600992][ T31] usb 2-1: Product: syz [ 218.601005][ T31] usb 2-1: Manufacturer: syz [ 218.601016][ T31] usb 2-1: SerialNumber: syz [ 218.612232][ T31] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 218.697740][ T5862] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 218.740316][ T7403] bond0: (slave bond_slave_0): Releasing backup interface [ 218.828472][ T7403] bond0: (slave bond_slave_1): Releasing backup interface [ 218.911579][ T7403] team0: Port device team_slave_0 removed [ 218.964583][ T7403] team0: Port device team_slave_1 removed [ 218.975040][ T7403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.975061][ T7403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.023050][ T7403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.023074][ T7403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.075663][ T7403] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 220.538545][ T5862] usb 2-1: Service connection timeout for: 256 [ 220.538567][ T5862] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 221.525791][ T5847] usb 2-1: USB disconnect, device number 11 [ 221.585285][ T5862] ath9k_htc: Failed to initialize the device [ 221.587238][ T5847] usb 2-1: ath9k_htc: USB layer deinitialized [ 221.778582][ T5796] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 221.831437][ T7413] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.364'. [ 221.928559][ T5796] usb 4-1: Using ep0 maxpacket: 32 [ 221.930484][ T5796] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 221.930498][ T5796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.930507][ T5796] usb 4-1: config 0 has no interface number 0 [ 221.930530][ T5796] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 221.930541][ T5796] usb 4-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.933602][ T5796] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 221.933617][ T5796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.933626][ T5796] usb 4-1: Product: syz [ 221.933632][ T5796] usb 4-1: Manufacturer: syz [ 221.933639][ T5796] usb 4-1: SerialNumber: syz [ 221.936659][ T5796] usb 4-1: config 0 descriptor?? [ 222.052598][ T5796] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 222.052852][ T5796] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 222.505855][ T7424] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 222.811221][ T7427] syz_tun: left allmulticast mode [ 222.811240][ T7427] syz_tun: left promiscuous mode [ 222.811376][ T7427] bridge0: port 2(syz_tun) entered disabled state [ 222.906922][ T7427] bond0: left promiscuous mode [ 222.907024][ T7427] bond0: left allmulticast mode [ 223.022051][ T7427] team0: Port device bond0 removed [ 223.022375][ T7427] team0: left allmulticast mode [ 223.022388][ T7427] team0: left promiscuous mode [ 223.022507][ T7427] bridge0: port 1(team0) entered disabled state [ 223.165993][ T7427] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 223.660618][ T5862] usb 4-1: USB disconnect, device number 10 [ 223.878568][ T5796] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 223.910109][ T7439] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.370'. [ 224.030590][ T5796] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 224.030619][ T5796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.071155][ T5796] usb 3-1: config 0 descriptor?? [ 224.090623][ T5796] cp210x 3-1:0.0: cp210x converter detected [ 224.163355][ T7442] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 224.277945][ T5796] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 224.277963][ T5796] cp210x 3-1:0.0: querying part number failed [ 224.336064][ T5796] usb 3-1: cp210x converter now attached to ttyUSB0 [ 224.430177][ T5796] usb 3-1: USB disconnect, device number 14 [ 224.508790][ T5796] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 224.509197][ T5796] cp210x 3-1:0.0: device disconnected [ 225.078573][ T808] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 225.228540][ T808] usb 4-1: Using ep0 maxpacket: 16 [ 225.239606][ T808] usb 4-1: config 0 has no interfaces? [ 225.242292][ T808] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 225.242316][ T808] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 225.242333][ T808] usb 4-1: Manufacturer: syz [ 225.247254][ T808] usb 4-1: config 0 descriptor?? [ 226.038135][ T7468] loop5: detected capacity change from 0 to 7 [ 226.077201][ T7468] Dev loop5: unable to read RDB block 7 [ 226.077231][ T7468] loop5: unable to read partition table [ 226.077428][ T7468] loop5: partition table beyond EOD, truncated [ 226.077451][ T7468] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 226.698610][ T5862] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 226.839254][ T808] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 226.935494][ T5862] usb 2-1: Using ep0 maxpacket: 16 [ 226.948211][ T5862] usb 2-1: config 0 has no interfaces? [ 226.951538][ T5862] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 226.951564][ T5862] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 226.951581][ T5862] usb 2-1: Manufacturer: syz [ 226.988539][ T808] usb 3-1: Using ep0 maxpacket: 32 [ 227.002589][ T5862] usb 2-1: config 0 descriptor?? [ 227.010273][ T808] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 227.010296][ T808] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.010312][ T808] usb 3-1: config 0 has no interface number 0 [ 227.010353][ T808] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 227.010373][ T808] usb 3-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 227.015952][ T808] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 227.015976][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.015993][ T808] usb 3-1: Product: syz [ 227.016005][ T808] usb 3-1: Manufacturer: syz [ 227.016016][ T808] usb 3-1: SerialNumber: syz [ 227.100934][ T808] usb 3-1: config 0 descriptor?? [ 227.108305][ T808] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 227.123646][ T808] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 227.388636][ T5862] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 227.545823][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 227.548908][ T5862] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 227.548930][ T5862] usb 5-1: config 0 has no interface number 0 [ 227.552860][ T5862] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 227.552883][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.552900][ T5862] usb 5-1: Product: syz [ 227.552912][ T5862] usb 5-1: Manufacturer: syz [ 227.552923][ T5862] usb 5-1: SerialNumber: syz [ 227.650972][ T5862] usb 5-1: config 0 descriptor?? [ 228.113759][ T5862] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 228.113777][ T5862] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 228.142372][ T31] usb 2-1: USB disconnect, device number 12 [ 228.207383][ T5847] usb 4-1: USB disconnect, device number 11 [ 228.918617][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 229.073423][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 229.073454][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.121515][ T10] usb 4-1: config 0 descriptor?? [ 229.125235][ T10] cp210x 4-1:0.0: cp210x converter detected [ 229.238801][ T7507] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 229.332978][ T10] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 229.333004][ T10] cp210x 4-1:0.0: querying part number failed [ 229.357302][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 229.370796][ T10] usb 4-1: USB disconnect, device number 12 [ 229.412165][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 229.416606][ T10] cp210x 4-1:0.0: device disconnected [ 229.642243][ T5847] usb 3-1: USB disconnect, device number 15 [ 229.731505][ T5862] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -61 [ 229.731677][ T5862] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 230.754164][ T7520] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 231.673938][ T5799] usb 5-1: USB disconnect, device number 12 [ 232.591169][ T7532] syz.2.399 (7532) used greatest stack depth: 16352 bytes left [ 233.020767][ T7555] netlink: 'syz.4.405': attribute type 27 has an invalid length. [ 233.248592][ T5799] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 233.499229][ T5799] usb 4-1: Using ep0 maxpacket: 16 [ 233.500721][ T5799] usb 4-1: config 0 has no interfaces? [ 233.502233][ T5799] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 233.502256][ T5799] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 233.502273][ T5799] usb 4-1: Manufacturer: syz [ 233.505378][ T5799] usb 4-1: config 0 descriptor?? [ 233.577038][ T7553] hfs: unable to load iocharset "io#harset" [ 234.256246][ T7566] batman_adv: batadv0: Adding interface: dummy0 [ 234.256257][ T7566] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.354475][ T7566] batman_adv: batadv0: Interface activated: dummy0 [ 234.458420][ T7569] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.473055][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.408'. [ 235.200647][ T7575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.127405][ T5862] usb 4-1: USB disconnect, device number 13 [ 236.758712][ T5847] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 236.924434][ T5847] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 236.924461][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.924487][ T5847] usb 5-1: Product: syz [ 236.924500][ T5847] usb 5-1: Manufacturer: syz [ 236.924513][ T5847] usb 5-1: SerialNumber: syz [ 237.002068][ T5847] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 237.034455][ T31] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 238.218529][ T31] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 238.218641][ T808] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 238.218703][ T31] ath9k_htc: Failed to initialize the device [ 240.266900][ T5847] usb 5-1: USB disconnect, device number 13 [ 240.297009][ T5847] usb 5-1: ath9k_htc: USB layer deinitialized [ 240.313466][ C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 240.468580][ T808] usb 4-1: Using ep0 maxpacket: 16 [ 240.908600][ T5799] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 241.058657][ T5799] usb 3-1: Using ep0 maxpacket: 16 [ 241.062382][ T5799] usb 3-1: config 0 has no interfaces? [ 241.065049][ T5799] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 241.065119][ T5799] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 241.065153][ T5799] usb 3-1: Manufacturer: syz [ 241.246275][ T5799] usb 3-1: config 0 descriptor?? [ 241.580589][ T7628] hfs: unable to load iocharset "io#harset" [ 242.127776][ T31] usb 3-1: USB disconnect, device number 16 [ 242.256514][ T808] usb 4-1: device descriptor read/all, error -71 [ 242.693952][ T7651] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 242.768519][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 243.008555][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 243.034972][ T10] usb 2-1: config 0 has no interfaces? [ 243.037723][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 243.037737][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 243.037747][ T10] usb 2-1: Manufacturer: syz [ 243.048599][ T10] usb 2-1: config 0 descriptor?? [ 243.428828][ T7655] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.428966][ T7655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.429'. [ 244.906027][ T7664] netlink: 20 bytes leftover after parsing attributes in process `syz.3.433'. [ 245.938902][ T31] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 246.188538][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 246.190304][ T31] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 246.190326][ T31] usb 4-1: config 0 has no interface number 0 [ 246.193007][ T31] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 246.193030][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.193047][ T31] usb 4-1: Product: syz [ 246.193059][ T31] usb 4-1: Manufacturer: syz [ 246.193071][ T31] usb 4-1: SerialNumber: syz [ 246.196916][ T31] usb 4-1: config 0 descriptor?? [ 246.614669][ T31] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 246.614688][ T31] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 247.056600][ T10] usb 2-1: USB disconnect, device number 13 [ 247.718593][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 247.871013][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 247.871040][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.875530][ T10] usb 2-1: config 0 descriptor?? [ 247.880112][ T10] cp210x 2-1:0.0: cp210x converter detected [ 248.233981][ T10] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 248.233998][ T10] cp210x 2-1:0.0: querying part number failed [ 248.234742][ T31] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 248.235030][ T31] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 248.242383][ T31] usb 4-1: USB disconnect, device number 16 [ 248.253060][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 248.260451][ T10] usb 2-1: USB disconnect, device number 14 [ 248.273069][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 248.275842][ T10] cp210x 2-1:0.0: device disconnected [ 248.974185][ T7697] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 248.974314][ T7697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.441'. [ 250.220420][ T7721] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 250.328573][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 250.415311][ T7708] hfs: unable to load iocharset "io#harset" [ 250.482628][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 250.482655][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.482672][ T10] usb 3-1: Product: syz [ 250.482685][ T10] usb 3-1: Manufacturer: syz [ 250.482697][ T10] usb 3-1: SerialNumber: syz [ 250.490811][ T10] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 250.513346][ T5799] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 251.698520][ T5799] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 251.698668][ T5799] ath9k_htc: Failed to initialize the device [ 253.701077][ T10] usb 3-1: USB disconnect, device number 17 [ 253.786932][ T10] usb 3-1: ath9k_htc: USB layer deinitialized [ 253.869849][ T7729] netlink: 20 bytes leftover after parsing attributes in process `syz.3.448'. [ 254.668607][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 254.848576][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 254.852856][ T10] usb 3-1: config 0 has no interfaces? [ 254.853937][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 254.853961][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 254.853977][ T10] usb 3-1: Manufacturer: syz [ 254.921871][ T10] usb 3-1: config 0 descriptor?? [ 255.689750][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.690625][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.125863][ T7750] netlink: 20 bytes leftover after parsing attributes in process `syz.1.454'. [ 256.474116][ T5799] usb 3-1: USB disconnect, device number 18 [ 257.028035][ T7756] netlink: 28 bytes leftover after parsing attributes in process `syz.3.456'. [ 258.248716][ T5847] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 258.330538][ T7777] team0: left allmulticast mode [ 258.330614][ T7777] team0: left promiscuous mode [ 258.330751][ T7777] bridge0: port 1(team0) entered disabled state [ 258.396590][ T7777] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 258.413193][ T5847] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 258.413220][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.413237][ T5847] usb 5-1: Product: syz [ 258.413249][ T5847] usb 5-1: Manufacturer: syz [ 258.413261][ T5847] usb 5-1: SerialNumber: syz [ 258.460120][ T5847] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 258.555278][ T31] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 258.573104][ T7778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.598959][ T7778] team0: Port device bond0 added [ 259.748533][ T31] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 259.748702][ T31] ath9k_htc: Failed to initialize the device [ 259.771486][ T5847] usb 5-1: USB disconnect, device number 14 [ 259.819889][ T5847] usb 5-1: ath9k_htc: USB layer deinitialized [ 260.076400][ T7782] netlink: 16 bytes leftover after parsing attributes in process `syz.1.463'. [ 260.116851][ T7782] netlink: 16 bytes leftover after parsing attributes in process `syz.1.463'. [ 260.435203][ T7794] netlink: 28 bytes leftover after parsing attributes in process `syz.1.468'. [ 260.888805][ T5847] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 261.618563][ T5847] usb 4-1: Using ep0 maxpacket: 32 [ 261.620775][ T5847] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 261.620798][ T5847] usb 4-1: config 0 has no interface number 0 [ 261.637723][ T5847] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 261.637748][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.637766][ T5847] usb 4-1: Product: syz [ 261.637778][ T5847] usb 4-1: Manufacturer: syz [ 261.637790][ T5847] usb 4-1: SerialNumber: syz [ 261.673472][ T5847] usb 4-1: config 0 descriptor?? [ 262.252136][ T5847] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 262.252154][ T5847] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 262.472061][ T31] IPVS: starting estimator thread 0... [ 262.559210][ T7822] IPVS: using max 15 ests per chain, 36000 per kthread [ 263.263883][ T7824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.263901][ T7824] IPv6: NLM_F_CREATE should be set when creating new route [ 263.264533][ T7824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.477'. [ 263.644986][ T7829] netlink: 28 bytes leftover after parsing attributes in process `syz.1.479'. [ 263.661976][ T5847] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 263.662255][ T5847] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 263.667620][ T5847] usb 4-1: USB disconnect, device number 17 [ 266.238027][ T7860] kAFS: unable to lookup cell 'ÿ' [ 266.262395][ T7866] kAFS: unable to lookup cell '(,c¾Ì' [ 266.338618][ T31] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 266.618594][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 266.620738][ T31] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 266.620762][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.702631][ T31] usb 3-1: config 0 descriptor?? [ 266.819152][ T5799] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 266.917641][ T31] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 266.925090][ T7872] netlink: 16 bytes leftover after parsing attributes in process `syz.3.492'. [ 266.968583][ T5799] usb 5-1: Using ep0 maxpacket: 16 [ 266.971083][ T5799] usb 5-1: config 0 has no interfaces? [ 266.974469][ T5799] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 266.974492][ T5799] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 266.974508][ T5799] usb 5-1: Manufacturer: syz [ 266.991361][ T5799] usb 5-1: config 0 descriptor?? [ 266.999536][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 267.003079][ T31] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 267.003165][ T31] usb 3-1: media controller created [ 267.065211][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.331678][ T31] DVB: Unable to find symbol dib7000p_attach() [ 267.331703][ T31] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 267.588568][ T31] rc_core: IR keymap rc-dib0700-rc5 not found [ 267.588587][ T31] Registered IR keymap rc-empty [ 267.588994][ T31] dvb-usb: could not initialize remote control. [ 267.589001][ T31] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 267.598167][ T31] usb 3-1: USB disconnect, device number 19 [ 267.724872][ T31] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 267.876715][ T7886] netlink: 20 bytes leftover after parsing attributes in process `syz.3.496'. [ 268.120681][ T5799] usb 5-1: USB disconnect, device number 15 [ 268.600225][ T7897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.805461][ T7910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.503'. [ 270.022374][ T7914] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.022505][ T7914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.502'. [ 270.700216][ T7925] loop5: detected capacity change from 0 to 7 [ 270.702057][ T7925] Dev loop5: unable to read RDB block 7 [ 270.702084][ T7925] loop5: unable to read partition table [ 270.702221][ T7925] loop5: partition table beyond EOD, truncated [ 270.702239][ T7925] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 271.038596][ T5946] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 271.252701][ T5946] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 271.252728][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.257178][ T5946] usb 4-1: config 0 descriptor?? [ 271.261691][ T5946] cp210x 4-1:0.0: cp210x converter detected [ 271.477716][ T5946] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 271.477740][ T5946] cp210x 4-1:0.0: querying part number failed [ 271.495669][ T5946] usb 4-1: cp210x converter now attached to ttyUSB0 [ 271.532504][ T5946] usb 4-1: USB disconnect, device number 18 [ 271.540403][ T5946] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 271.568718][ T5946] cp210x 4-1:0.0: device disconnected [ 272.198603][ T5799] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 272.348601][ T5799] usb 3-1: Using ep0 maxpacket: 16 [ 272.350791][ T5799] usb 3-1: config 0 has no interfaces? [ 272.353093][ T5799] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 272.353107][ T5799] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 272.353117][ T5799] usb 3-1: Manufacturer: syz [ 272.356868][ T5799] usb 3-1: config 0 descriptor?? [ 272.458816][ T7944] kAFS: unable to lookup cell 'ÿ' [ 272.461561][ T7944] kAFS: unable to lookup cell '(,c¾Ì' [ 273.049226][ T7945] hfs: unable to load iocharset "io#harset" [ 273.217141][ T7950] tipc: Started in network mode [ 273.217158][ T7950] tipc: Node identity ac1414aa, cluster identity 4711 [ 273.218270][ T7950] tipc: Enabled bearer , priority 10 [ 273.335995][ T5847] usb 3-1: USB disconnect, device number 20 [ 273.784521][ T7953] netlink: 16 bytes leftover after parsing attributes in process `syz.0.514'. [ 274.240301][ T7966] loop5: detected capacity change from 0 to 7 [ 274.241299][ T10] tipc: Node number set to 2886997162 [ 274.242237][ T7966] Dev loop5: unable to read RDB block 7 [ 274.242262][ T7966] loop5: unable to read partition table [ 274.242383][ T7966] loop5: partition table beyond EOD, truncated [ 274.242392][ T7966] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 274.256480][ T7969] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 277.187425][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.527'. [ 277.207956][ T7993] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.528'. [ 277.268581][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 277.439890][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 277.441848][ T10] usb 3-1: config 0 has no interfaces? [ 277.444868][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 277.444891][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 277.444907][ T10] usb 3-1: Manufacturer: syz [ 277.492734][ T10] usb 3-1: config 0 descriptor?? [ 277.883448][ T5799] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 277.947431][ T5796] usb 3-1: USB disconnect, device number 21 [ 278.043560][ T5799] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 278.043588][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.043606][ T5799] usb 4-1: Product: syz [ 278.043617][ T5799] usb 4-1: Manufacturer: syz [ 278.043630][ T5799] usb 4-1: SerialNumber: syz [ 278.101518][ T5799] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 278.114401][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 279.256251][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 279.256374][ T10] ath9k_htc: Failed to initialize the device [ 279.273708][ T5946] usb 4-1: USB disconnect, device number 19 [ 279.328605][ T5946] usb 4-1: ath9k_htc: USB layer deinitialized [ 279.378567][ T5799] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 279.468857][ T31] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 279.594062][ T5799] usb 2-1: Using ep0 maxpacket: 16 [ 279.611499][ T5799] usb 2-1: config 0 has no interfaces? [ 279.612645][ T5799] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 279.612669][ T5799] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 279.612686][ T5799] usb 2-1: Manufacturer: syz [ 279.618642][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 279.639279][ T31] usb 5-1: config 0 has no interfaces? [ 279.640367][ T31] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 279.640390][ T31] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 279.640406][ T31] usb 5-1: Manufacturer: syz [ 279.678842][ T5799] usb 2-1: config 0 descriptor?? [ 279.717786][ T31] usb 5-1: config 0 descriptor?? [ 279.746116][ T8019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.536'. [ 280.706954][ T8026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.056273][ T5799] usb 2-1: USB disconnect, device number 15 [ 281.057501][ T5796] usb 5-1: USB disconnect, device number 16 [ 281.089877][ T8032] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.539'. [ 281.166541][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'. [ 281.589915][ T8045] netlink: 'syz.0.544': attribute type 27 has an invalid length. [ 281.625126][ T5799] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 281.697426][ T8047] loop5: detected capacity change from 0 to 7 [ 281.705639][ T8047] Dev loop5: unable to read RDB block 7 [ 281.705680][ T8047] loop5: unable to read partition table [ 281.705882][ T8047] loop5: partition table beyond EOD, truncated [ 281.705898][ T8047] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 281.778622][ T5799] usb 3-1: Using ep0 maxpacket: 32 [ 281.782272][ T5799] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 281.782297][ T5799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.812873][ T5799] usb 3-1: config 0 descriptor?? [ 281.990987][ T8056] netlink: 20 bytes leftover after parsing attributes in process `syz.1.548'. [ 282.056098][ T5799] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 282.069924][ T5799] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 282.070723][ T5799] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 282.070773][ T5799] usb 3-1: media controller created [ 282.117639][ T5799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 282.435685][ T5799] DVB: Unable to find symbol dib7000p_attach() [ 282.435696][ T5799] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 282.580075][ T5799] rc_core: IR keymap rc-dib0700-rc5 not found [ 282.580100][ T5799] Registered IR keymap rc-empty [ 282.580345][ T5799] dvb-usb: could not initialize remote control. [ 282.580353][ T5799] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 282.633489][ T5799] usb 3-1: USB disconnect, device number 22 [ 283.753954][ T8070] netlink: 'syz.1.551': attribute type 72 has an invalid length. [ 283.761899][ T5799] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 283.891243][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.552'. [ 284.062090][ T8074] binder: 8073:8074 ioctl 4018620d 0 returned -22 [ 284.235450][ T8080] hfs: unable to load iocharset "io#harset" [ 284.688774][ T36] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 284.840288][ T36] usb 5-1: Using ep0 maxpacket: 8 [ 284.977847][ T5847] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 285.000006][ T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.000022][ T36] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 285.064485][ T36] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 285.064502][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.064512][ T36] usb 5-1: Product: syz [ 285.064519][ T36] usb 5-1: Manufacturer: syz [ 285.064526][ T36] usb 5-1: SerialNumber: syz [ 285.067377][ T36] usb 5-1: config 0 descriptor?? [ 285.107282][ T36] powermate 5-1:0.0: probe with driver powermate failed with error -22 [ 285.128584][ T5847] usb 3-1: Using ep0 maxpacket: 16 [ 285.167105][ T5847] usb 3-1: config 0 has no interfaces? [ 285.180501][ T5847] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 285.180528][ T5847] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 285.180545][ T5847] usb 3-1: Manufacturer: syz [ 285.186428][ T5847] usb 3-1: config 0 descriptor?? [ 285.367406][ T8088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.367700][ T8088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.205417][ T8103] hfs: unable to load iocharset "io#harset" [ 288.466433][ T5946] usb 5-1: USB disconnect, device number 17 [ 288.490988][ T8114] netlink: 'syz.1.563': attribute type 72 has an invalid length. [ 288.697888][ T5799] usb 3-1: USB disconnect, device number 23 [ 288.838617][ T5946] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 289.032969][ T5946] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 289.032995][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.036534][ T5946] usb 2-1: config 0 descriptor?? [ 289.067485][ T5946] cp210x 2-1:0.0: cp210x converter detected [ 289.136166][ T8130] hfs: unable to load iocharset "io#harset" [ 289.258959][ T5946] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 289.258985][ T5946] cp210x 2-1:0.0: querying part number failed [ 289.285041][ T5946] usb 2-1: cp210x converter now attached to ttyUSB0 [ 289.297632][ T5946] usb 2-1: USB disconnect, device number 16 [ 289.314192][ T5946] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 289.314858][ T5946] cp210x 2-1:0.0: device disconnected [ 290.227480][ T8150] netlink: 'syz.4.575': attribute type 72 has an invalid length. [ 290.997766][ T8162] hfs: unable to load iocharset "io#harset" [ 291.478661][ T5799] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 291.485690][ T8187] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.588'. [ 291.518868][ T8183] hfs: unable to load iocharset "io#harset" [ 291.634295][ T5799] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 291.634313][ T5799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.638066][ T5799] usb 3-1: config 0 descriptor?? [ 291.662624][ T5799] cp210x 3-1:0.0: cp210x converter detected [ 291.855739][ T5799] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 291.855765][ T5799] cp210x 3-1:0.0: querying part number failed [ 291.909544][ T5799] usb 3-1: cp210x converter now attached to ttyUSB0 [ 291.932358][ T5799] usb 3-1: USB disconnect, device number 24 [ 291.951482][ T5799] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 291.951889][ T5799] cp210x 3-1:0.0: device disconnected [ 292.207398][ T8200] tipc: Enabling of bearer rejected, failed to enable media [ 292.855143][ T8209] netlink: 44 bytes leftover after parsing attributes in process `syz.1.593'. [ 293.698601][ T5946] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 293.828600][ T5946] usb 3-1: device descriptor read/64, error -71 [ 294.078688][ T5946] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 294.102549][ T8234] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.600'. [ 294.229442][ T5946] usb 3-1: device descriptor read/64, error -71 [ 294.341126][ T5946] usb usb3-port1: attempt power cycle [ 294.411663][ T8245] hfs: unable to load iocharset "io#harset" [ 294.722448][ T8248] hfs: unable to load iocharset "io#harset" [ 294.770563][ T5946] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 294.790058][ T5946] usb 3-1: device descriptor read/8, error -71 [ 295.048887][ T5946] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 295.069698][ T5946] usb 3-1: device descriptor read/8, error -71 [ 295.287963][ T5946] usb usb3-port1: unable to enumerate USB device [ 295.668627][ T5946] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 295.774703][ T8265] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 295.774718][ T8265] IPv6: NLM_F_CREATE should be set when creating new route [ 295.774904][ T8265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.608'. [ 295.834975][ T5946] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 295.835002][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.835017][ T5946] usb 5-1: Product: syz [ 295.835024][ T5946] usb 5-1: Manufacturer: syz [ 295.835030][ T5946] usb 5-1: SerialNumber: syz [ 295.877871][ T5946] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 295.901586][ T5862] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 297.061225][ T5862] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 297.061397][ T5862] ath9k_htc: Failed to initialize the device [ 298.108854][ T5796] usb 5-1: USB disconnect, device number 18 [ 298.118527][ C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 298.148065][ T5796] usb 5-1: ath9k_htc: USB layer deinitialized [ 298.263541][ T8276] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.612'. [ 299.066030][ T8305] netlink: 'syz.0.620': attribute type 27 has an invalid length. [ 299.108673][ T5847] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 299.397944][ T5847] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 299.397972][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.397989][ T5847] usb 4-1: Product: syz [ 299.398002][ T5847] usb 4-1: Manufacturer: syz [ 299.398014][ T5847] usb 4-1: SerialNumber: syz [ 299.457155][ T5847] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 299.468289][ T5946] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 299.707869][ T8306] hfs: unable to load iocharset "io#harset" [ 299.881985][ T5796] usb 4-1: USB disconnect, device number 20 [ 299.988436][ T8311] loop5: detected capacity change from 0 to 7 [ 299.993862][ T6322] Dev loop5: unable to read RDB block 7 [ 299.993887][ T6322] loop5: unable to read partition table [ 299.994019][ T6322] loop5: partition table beyond EOD, truncated [ 300.029795][ T8311] Dev loop5: unable to read RDB block 7 [ 300.029838][ T8311] loop5: unable to read partition table [ 300.030036][ T8311] loop5: partition table beyond EOD, truncated [ 300.030062][ T8311] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 300.753046][ T5946] usb 4-1: Service connection timeout for: 256 [ 300.753130][ T5946] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 300.797382][ T5946] ath9k_htc: Failed to initialize the device [ 300.812361][ T5796] usb 4-1: ath9k_htc: USB layer deinitialized [ 301.348652][ T5796] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 301.478579][ T5796] usb 4-1: device descriptor read/64, error -71 [ 301.704601][ T8328] hfs: unable to load iocharset "io#harset" [ 301.748580][ T5796] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 301.899268][ T5796] usb 4-1: device descriptor read/64, error -71 [ 302.011302][ T5796] usb usb4-port1: attempt power cycle [ 302.398579][ T5796] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 302.419404][ T5796] usb 4-1: device descriptor read/8, error -71 [ 302.658592][ T5796] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 302.679060][ T5796] usb 4-1: device descriptor read/8, error -71 [ 302.788909][ T5796] usb usb4-port1: unable to enumerate USB device [ 302.984185][ T8352] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 303.535415][ T8363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.536685][ T8363] team0: Port device bond0 added [ 303.540326][ T8363] bridge0: port 1(team0) entered blocking state [ 303.540429][ T8363] bridge0: port 1(team0) entered disabled state [ 303.542349][ T8363] team0: entered allmulticast mode [ 303.542373][ T8363] bond0: entered allmulticast mode [ 303.546394][ T8363] team0: entered promiscuous mode [ 303.546410][ T8363] bond0: entered promiscuous mode [ 305.914044][ T8397] hfs: unable to load iocharset "io#harset" [ 306.139825][ T8408] bridge0: port 1(team0) entered blocking state [ 306.139887][ T8408] bridge0: port 1(team0) entered disabled state [ 306.140033][ T8408] team0: entered allmulticast mode [ 306.141301][ T8408] team0: entered promiscuous mode [ 307.343435][ T8425] netlink: 'syz.1.654': attribute type 27 has an invalid length. [ 307.597435][ T8431] loop5: detected capacity change from 0 to 7 [ 307.630990][ T8431] Dev loop5: unable to read RDB block 7 [ 307.631018][ T8431] loop5: unable to read partition table [ 307.631134][ T8431] loop5: partition table beyond EOD, truncated [ 307.631157][ T8431] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 308.076945][ T8443] bridge0: port 1(team0) entered blocking state [ 308.077065][ T8443] bridge0: port 1(team0) entered disabled state [ 308.077197][ T8443] team0: entered allmulticast mode [ 308.077206][ T8443] bond0: entered allmulticast mode [ 308.114230][ T8443] team0: entered promiscuous mode [ 308.114244][ T8443] bond0: entered promiscuous mode [ 308.668569][ T5862] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 308.828581][ T5862] usb 2-1: Using ep0 maxpacket: 32 [ 308.890739][ T5862] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 308.890766][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.914949][ T5862] usb 2-1: config 0 descriptor?? [ 309.189830][ T5862] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 309.295107][ T5862] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 309.297021][ T5862] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 309.297054][ T5862] usb 2-1: media controller created [ 309.332009][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 309.654846][ T5862] DVB: Unable to find symbol dib7000p_attach() [ 309.654857][ T5862] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 309.879254][ T5862] rc_core: IR keymap rc-dib0700-rc5 not found [ 309.879275][ T5862] Registered IR keymap rc-empty [ 309.880076][ T5862] dvb-usb: could not initialize remote control. [ 309.880082][ T5862] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 309.958079][ T5862] usb 2-1: USB disconnect, device number 17 [ 310.122193][ T5862] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 310.889344][ T8470] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 311.158689][ T5862] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 311.288582][ T8481] netlink: 'syz.3.673': attribute type 27 has an invalid length. [ 311.318575][ T5862] usb 2-1: Using ep0 maxpacket: 32 [ 311.320798][ T5862] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 311.320821][ T5862] usb 2-1: config 0 has no interface number 0 [ 311.325010][ T5862] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 311.325034][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.325050][ T5862] usb 2-1: Product: syz [ 311.325063][ T5862] usb 2-1: Manufacturer: syz [ 311.325075][ T5862] usb 2-1: SerialNumber: syz [ 311.360069][ T5862] usb 2-1: config 0 descriptor?? [ 311.870720][ T5862] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 311.870747][ T5862] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 311.878653][ T36] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 312.033672][ T36] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 312.033698][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.033708][ T36] usb 3-1: Product: syz [ 312.033714][ T36] usb 3-1: Manufacturer: syz [ 312.033721][ T36] usb 3-1: SerialNumber: syz [ 312.040831][ T36] usb 3-1: config 0 descriptor?? [ 312.330065][ T36] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 314.538617][ T5862] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -32 [ 314.540478][ T5862] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 314.600301][ T36] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 315.126499][ T8496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.677'. [ 315.448565][ T36] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 315.601693][ T5946] usb 2-1: USB disconnect, device number 18 [ 315.624426][ T36] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 315.624453][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.624471][ T36] usb 4-1: Product: syz [ 315.624483][ T36] usb 4-1: Manufacturer: syz [ 315.624495][ T36] usb 4-1: SerialNumber: syz [ 315.684173][ T36] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 315.696764][ T5862] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 315.994200][ T5799] usb 3-1: USB disconnect, device number 30 [ 316.340164][ T5799] usb 4-1: USB disconnect, device number 25 [ 316.983596][ T8529] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 316.999415][ T5862] usb 4-1: Service connection timeout for: 256 [ 316.999436][ T5862] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 317.000053][ T5862] ath9k_htc: Failed to initialize the device [ 317.005940][ T5799] usb 4-1: ath9k_htc: USB layer deinitialized [ 317.075486][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.075565][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.442640][ T5799] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 317.920077][ T5799] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.920102][ T5799] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 317.924575][ T5799] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 317.924590][ T5799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 317.924600][ T5799] usb 4-1: SerialNumber: syz [ 318.766095][ T5799] usb 4-1: 0:2 : does not exist [ 318.982353][ T5799] usb 4-1: USB disconnect, device number 26 [ 319.922755][ T5862] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 320.122470][ T5862] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 320.122498][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.122515][ T5862] usb 4-1: Product: syz [ 320.122527][ T5862] usb 4-1: Manufacturer: syz [ 320.122539][ T5862] usb 4-1: SerialNumber: syz [ 320.127499][ T5862] usb 4-1: config 0 descriptor?? [ 320.345154][ T5862] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 321.577042][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 321.577443][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 321.577647][ T5862] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 321.627018][ T5862] usb 4-1: USB disconnect, device number 27 [ 322.478630][ T37] audit: type=1804 audit(1773582721.670:2): pid=8591 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.709" name="/newroot/142/file1" dev="fuse" ino=1 res=1 errno=0 [ 322.506704][ T8588] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 323.073613][ T8603] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.000678][ T8613] binder: 8612:8613 ioctl c0306201 0 returned -14 [ 324.688606][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 324.898623][ T9] usb 5-1: device descriptor read/64, error -71 [ 325.138682][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 325.308572][ T9] usb 5-1: device descriptor read/64, error -71 [ 325.394167][ T8631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 325.434886][ T9] usb usb5-port1: attempt power cycle [ 325.818674][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 325.841648][ T9] usb 5-1: device descriptor read/8, error -71 [ 326.088626][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 326.129266][ T9] usb 5-1: device descriptor read/8, error -71 [ 326.238871][ T9] usb usb5-port1: unable to enumerate USB device [ 326.385728][ T8648] binder: 8647:8648 ioctl c0306201 0 returned -14 [ 326.737865][ T8659] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 326.995071][ T8663] hfs: unable to load iocharset "io#harset" [ 328.346652][ T8683] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 329.030220][ T8687] binder: 8686:8687 ioctl c0306201 0 returned -14 [ 329.596906][ T8694] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 331.314398][ T5799] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 331.468647][ T5799] usb 4-1: Using ep0 maxpacket: 16 [ 331.469722][ T5799] usb 4-1: no configurations [ 331.469735][ T5799] usb 4-1: can't read configurations, error -22 [ 331.598591][ T5799] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 331.798641][ T5799] usb 4-1: Using ep0 maxpacket: 16 [ 331.799421][ T5799] usb 4-1: no configurations [ 331.799435][ T5799] usb 4-1: can't read configurations, error -22 [ 331.799788][ T5799] usb usb4-port1: attempt power cycle [ 332.059451][ T8717] hfs: unable to load iocharset "io#harset" [ 332.103615][ T8724] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 332.264577][ T5799] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 332.299117][ T5799] usb 4-1: Using ep0 maxpacket: 16 [ 332.299834][ T5799] usb 4-1: no configurations [ 332.299849][ T5799] usb 4-1: can't read configurations, error -22 [ 332.507723][ T5799] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 332.529463][ T5799] usb 4-1: Using ep0 maxpacket: 16 [ 332.533263][ T5799] usb 4-1: no configurations [ 332.533278][ T5799] usb 4-1: can't read configurations, error -22 [ 332.533702][ T5799] usb usb4-port1: unable to enumerate USB device [ 333.050775][ T8736] tipc: Enabling of bearer rejected, failed to enable media [ 333.228879][ T8742] netlink: 44 bytes leftover after parsing attributes in process `syz.2.755'. [ 333.918573][ T5799] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 334.068579][ T5799] usb 3-1: Using ep0 maxpacket: 32 [ 334.071815][ T5799] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 334.071831][ T5799] usb 3-1: config 0 has no interface number 0 [ 334.074458][ T5799] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 334.074473][ T5799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.074483][ T5799] usb 3-1: Product: syz [ 334.074490][ T5799] usb 3-1: Manufacturer: syz [ 334.074496][ T5799] usb 3-1: SerialNumber: syz [ 334.077546][ T5799] usb 3-1: config 0 descriptor?? [ 334.494994][ T5799] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 334.495013][ T5799] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 334.700052][ T5799] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 334.701139][ T5799] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 336.704212][ T5862] usb 3-1: USB disconnect, device number 31 [ 337.533865][ T8788] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 337.948555][ T31] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 338.118974][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 338.137834][ T31] usb 4-1: no configurations [ 338.137850][ T31] usb 4-1: can't read configurations, error -22 [ 338.200054][ T8803] netlink: 'syz.0.771': attribute type 27 has an invalid length. [ 338.308673][ T31] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 338.363741][ T8801] hfs: unable to load iocharset "io#harset" [ 338.520448][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 338.546149][ T31] usb 4-1: no configurations [ 338.546162][ T31] usb 4-1: can't read configurations, error -22 [ 338.547282][ T31] usb usb4-port1: attempt power cycle [ 338.938710][ T31] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 338.959401][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 338.959972][ T31] usb 4-1: no configurations [ 338.959981][ T31] usb 4-1: can't read configurations, error -22 [ 339.128595][ T31] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 339.160345][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 339.176935][ T31] usb 4-1: no configurations [ 339.176997][ T31] usb 4-1: can't read configurations, error -22 [ 339.177310][ T31] usb usb4-port1: unable to enumerate USB device [ 339.586435][ T8810] loop5: detected capacity change from 0 to 7 [ 339.587865][ T8810] Dev loop5: unable to read RDB block 7 [ 339.587905][ T8810] loop5: unable to read partition table [ 339.588100][ T8810] loop5: partition table beyond EOD, truncated [ 339.588134][ T8810] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 339.788953][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 339.938600][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 339.940457][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 339.940479][ T9] usb 2-1: config 0 has no interface number 0 [ 339.942671][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 339.942695][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.942706][ T9] usb 2-1: Product: syz [ 339.942712][ T9] usb 2-1: Manufacturer: syz [ 339.942720][ T9] usb 2-1: SerialNumber: syz [ 339.946214][ T9] usb 2-1: config 0 descriptor?? [ 340.059754][ T36] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 340.288542][ T36] usb 3-1: Using ep0 maxpacket: 32 [ 340.293310][ T36] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 340.293335][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.297878][ T36] usb 3-1: config 0 descriptor?? [ 340.406902][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 340.406932][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 340.541634][ T36] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 340.606723][ T36] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 340.607380][ T36] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 340.607607][ T36] usb 3-1: media controller created [ 340.661359][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 340.825448][ T36] DVB: Unable to find symbol dib7000p_attach() [ 340.825464][ T36] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 340.971338][ T36] rc_core: IR keymap rc-dib0700-rc5 not found [ 340.971359][ T36] Registered IR keymap rc-empty [ 341.400152][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 341.400619][ T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 342.593015][ T9] usb 2-1: USB disconnect, device number 19 [ 343.808831][ T8853] hfs: unable to load iocharset "io#harset" [ 345.795501][ T36] dvb-usb: could not initialize remote control. [ 345.795523][ T36] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 345.841441][ T5799] usb 3-1: USB disconnect, device number 32 [ 345.959102][ T5799] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 345.961074][ T8872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.963449][ T8872] team0: Port device bond0 added [ 345.968327][ T8872] bridge0: port 1(team0) entered blocking state [ 345.988729][ T8872] bridge0: port 1(team0) entered disabled state [ 345.988927][ T8872] team0: entered allmulticast mode [ 345.988942][ T8872] bond0: entered allmulticast mode [ 346.000051][ T8872] team0: entered promiscuous mode [ 346.000069][ T8872] bond0: entered promiscuous mode [ 346.379019][ T8884] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 346.379255][ T8884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.794'. [ 346.438827][ T5799] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 346.575847][ T8890] netlink: 36 bytes leftover after parsing attributes in process `syz.1.796'. [ 346.601714][ T5799] usb 3-1: Using ep0 maxpacket: 32 [ 346.605480][ T5799] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 346.605503][ T5799] usb 3-1: config 0 has no interface number 0 [ 346.607806][ T5799] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 346.607831][ T5799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.607847][ T5799] usb 3-1: Product: syz [ 346.607856][ T5799] usb 3-1: Manufacturer: syz [ 346.607863][ T5799] usb 3-1: SerialNumber: syz [ 346.620881][ T5799] usb 3-1: config 0 descriptor?? [ 346.742853][ T8892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 346.742866][ T8892] IPv6: NLM_F_CREATE should be set when creating new route [ 347.060825][ T5799] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 347.060853][ T5799] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 347.431010][ T8906] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 347.548165][ T8905] hfs: unable to load iocharset "io#harset" [ 348.142839][ T5799] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 348.143018][ T5799] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 349.180949][ T5799] usb 3-1: USB disconnect, device number 33 [ 349.264403][ T8935] netlink: 20 bytes leftover after parsing attributes in process `syz.2.808'. [ 349.378865][ T36] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 349.538600][ T36] usb 5-1: Using ep0 maxpacket: 8 [ 349.559263][ T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.559280][ T36] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 349.565136][ T8943] fuse: Bad value for 'fd' [ 349.608595][ T36] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 349.608622][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.608639][ T36] usb 5-1: Product: syz [ 349.608651][ T36] usb 5-1: Manufacturer: syz [ 349.608663][ T36] usb 5-1: SerialNumber: syz [ 349.611608][ T36] usb 5-1: config 0 descriptor?? [ 349.617251][ T36] powermate 5-1:0.0: probe with driver powermate failed with error -22 [ 349.971583][ T8930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.981664][ T8955] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 350.002430][ T8954] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 350.023622][ T8930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.088654][ T808] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 350.252937][ T808] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 350.252954][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.258996][ T808] usb 3-1: config 0 descriptor?? [ 350.319056][ T808] cp210x 3-1:0.0: cp210x converter detected [ 350.468008][ T808] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 350.468035][ T808] cp210x 3-1:0.0: querying part number failed [ 350.483259][ T808] usb 3-1: cp210x converter now attached to ttyUSB0 [ 350.554104][ T808] usb 3-1: USB disconnect, device number 34 [ 350.707510][ T808] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 350.708190][ T808] cp210x 3-1:0.0: device disconnected [ 351.488390][ T8967] netlink: 44 bytes leftover after parsing attributes in process `syz.2.819'. [ 352.738120][ T8982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.756536][ T8982] bond0: entered promiscuous mode [ 352.756691][ T8982] bond0: entered allmulticast mode [ 352.773915][ T8982] team0: Port device bond0 added [ 352.860204][ T8977] hfs: unable to load iocharset "io#harset" [ 352.904334][ T8985] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 353.541180][ T808] usb 5-1: USB disconnect, device number 23 [ 354.242726][ T9012] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 354.830928][ T9014] netlink: 20 bytes leftover after parsing attributes in process `syz.2.834'. [ 356.281204][ T9032] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 356.808928][ T9044] netlink: 20 bytes leftover after parsing attributes in process `syz.3.846'. [ 358.088107][ T9074] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 358.658712][ T5946] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 358.868719][ T5946] usb 5-1: Using ep0 maxpacket: 16 [ 358.876468][ T5946] usb 5-1: config 0 has no interfaces? [ 358.903342][ T5946] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 358.904464][ T5946] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 358.908716][ T5946] usb 5-1: Manufacturer: syz [ 358.963012][ T5946] usb 5-1: config 0 descriptor?? [ 361.728681][ T36] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 362.282417][ T36] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 362.282475][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 362.282499][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 362.282519][ T36] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 362.282557][ T36] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 362.282578][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.615713][ T36] usb 4-1: config 0 descriptor?? [ 363.159941][ T36] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 363.159965][ T36] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 363.159981][ T36] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 363.159995][ T36] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 363.160009][ T36] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 363.160023][ T36] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 363.160037][ T36] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 363.160051][ T36] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 363.160065][ T36] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 363.160079][ T36] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 363.817346][ T36] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 363.900656][ T36] usb 4-1: USB disconnect, device number 36 [ 364.369107][ T9115] tipc: Enabled bearer , priority 0 [ 364.526355][ T9113] tipc: Resetting bearer [ 365.020392][ T808] usb 5-1: USB disconnect, device number 24 [ 365.044487][ T9123] fido_id[9123]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 365.878724][ T808] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 366.011133][ T9112] tipc: Disabling bearer [ 366.051925][ T808] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.052002][ T808] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 366.057381][ T808] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 366.057406][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 366.057425][ T808] usb 4-1: SerialNumber: syz [ 367.342611][ T808] usb 4-1: 0:2 : does not exist [ 368.896630][ T808] usb 4-1: USB disconnect, device number 37 [ 369.560655][ T6322] udevd[6322]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 369.709340][ T36] tipc: Node number set to 3880004693 [ 373.751326][ T9165] Can't find ip_set type h [ 374.468594][ T31] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 374.701820][ T31] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 374.701849][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.701867][ T31] usb 4-1: Product: syz [ 374.701879][ T31] usb 4-1: Manufacturer: syz [ 374.701892][ T31] usb 4-1: SerialNumber: syz [ 375.009789][ T31] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 375.097394][ T36] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 375.158759][ T5796] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 376.329013][ T5796] usb 5-1: Using ep0 maxpacket: 32 [ 376.422180][ T5796] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 376.422198][ T5796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.441944][ T5796] usb 5-1: config 0 descriptor?? [ 377.443211][ T36] usb 4-1: Service connection timeout for: 256 [ 377.443235][ T36] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 377.453647][ T31] usb 4-1: USB disconnect, device number 38 [ 377.597971][ T36] ath9k_htc: Failed to initialize the device [ 378.519475][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.519542][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.618346][ T31] usb 4-1: ath9k_htc: USB layer deinitialized [ 378.884641][ T5796] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 378.887660][ T5796] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 378.887770][ T5796] dib0700: firmware download failed at 7 with -22 [ 379.908599][ T5796] usb 5-1: USB disconnect, device number 25 [ 380.900917][ T37] audit: type=1804 audit(1773582780.090:3): pid=9177 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.880" name="/newroot/165/file1" dev="fuse" ino=1 res=1 errno=0 [ 381.489094][ T9187] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 381.582626][ T5796] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 382.178682][ T5796] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 382.178711][ T5796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.178729][ T5796] usb 4-1: Product: syz [ 382.178742][ T5796] usb 4-1: Manufacturer: syz [ 382.178755][ T5796] usb 4-1: SerialNumber: syz [ 382.204588][ T5796] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 382.235608][ T5799] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 382.583328][ T5113] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 382.600148][ T5113] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 382.601434][ T5113] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 383.400301][ T5113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 383.734329][ T5113] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 384.695858][ T5799] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 384.695979][ T5799] ath9k_htc: Failed to initialize the device [ 384.701650][ T31] usb 4-1: USB disconnect, device number 39 [ 384.845156][ T31] usb 4-1: ath9k_htc: USB layer deinitialized [ 386.809890][ T5847] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 387.279999][ T5847] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 387.280030][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.280048][ T5847] usb 5-1: Product: syz [ 387.280060][ T5847] usb 5-1: Manufacturer: syz [ 387.280073][ T5847] usb 5-1: SerialNumber: syz [ 387.572714][ T5847] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 387.688755][ T5113] Bluetooth: hci5: command tx timeout [ 389.390127][ T31] usb 5-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 389.778522][ T5113] Bluetooth: hci5: command tx timeout [ 391.789468][ T5113] Bluetooth: hci5: command tx timeout [ 391.980574][ T31] usb 5-1: ath9k_htc: USB layer deinitialized [ 393.448734][ T5847] usb 5-1: USB disconnect, device number 26 [ 393.868594][ T5113] Bluetooth: hci5: command tx timeout [ 398.846841][ T9189] chnl_net:caif_netlink_parms(): no params data found [ 399.169332][ T9237] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 402.527193][ T9189] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.593836][ T9189] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.594060][ T9189] bridge_slave_0: entered allmulticast mode [ 402.644321][ T9189] bridge_slave_0: entered promiscuous mode [ 403.748844][ T9189] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.748966][ T9189] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.749193][ T9189] bridge_slave_1: entered allmulticast mode [ 403.751658][ T9189] bridge_slave_1: entered promiscuous mode [ 403.818867][ T31] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 404.008634][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 404.010719][ T31] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 404.010742][ T31] usb 4-1: config 0 has no interface number 0 [ 404.010784][ T31] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.010806][ T31] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.010841][ T31] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 404.010861][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.283586][ T31] usb 4-1: config 0 descriptor?? [ 405.825254][ T31] hid (null): global environment stack underflow [ 406.230724][ T31] usb 4-1: USB disconnect, device number 40 [ 409.973929][ T9189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.977788][ T9189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.738226][ T9279] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 413.993678][ T9189] team0: Port device team_slave_0 added [ 414.016049][ T9189] team0: Port device team_slave_1 added [ 414.056266][ T808] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 415.528570][ T808] usb 3-1: Using ep0 maxpacket: 16 [ 415.708659][ T5946] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 420.752587][ T808] usb 3-1: device descriptor read/all, error -110 [ 422.552874][ T808] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 422.758641][ T808] usb 3-1: device descriptor read/64, error -32 [ 422.878711][ T808] usb usb3-port1: attempt power cycle [ 423.499384][ T9189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.499400][ T9189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.499425][ T9189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.060280][ T9189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.060298][ T9189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.060324][ T9189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.364815][ T808] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 424.420258][ T808] usb 3-1: device descriptor read/8, error -32 [ 424.775949][ T808] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 424.931090][ T808] usb 3-1: device descriptor read/8, error -32 [ 425.057715][ T808] usb usb3-port1: unable to enumerate USB device [ 425.541022][ T9189] hsr_slave_0: entered promiscuous mode [ 425.544769][ T9189] hsr_slave_1: entered promiscuous mode [ 425.545693][ T9189] debugfs: 'hsr0' already exists in 'hsr' [ 425.545717][ T9189] Cannot create hsr debugfs directory [ 426.778563][ T5884] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 428.002456][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 428.004289][ T5884] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 428.004312][ T5884] usb 5-1: config 0 has no interface number 0 [ 428.008260][ T5884] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 428.008284][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.008302][ T5884] usb 5-1: Product: syz [ 428.008314][ T5884] usb 5-1: Manufacturer: syz [ 428.008331][ T5884] usb 5-1: SerialNumber: syz [ 429.369716][ T5884] usb 5-1: config 0 descriptor?? [ 429.370102][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 429.370375][ T5884] usb 5-1: can't set config #0, error -32 [ 429.397366][ T5810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 429.410842][ T5810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 429.412664][ T5810] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 429.434509][ T5810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 429.435324][ T5810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 430.578624][ T5884] usb 5-1: USB disconnect, device number 28 [ 434.339206][ T5810] Bluetooth: hci1: command tx timeout [ 435.167618][ T5810] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 435.185542][ T5810] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 435.195941][ T5810] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 435.197787][ T5810] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 435.198429][ T5810] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 436.438596][ T5810] Bluetooth: hci1: command tx timeout [ 437.308555][ T5810] Bluetooth: hci6: command tx timeout [ 438.508759][ T5810] Bluetooth: hci1: command tx timeout [ 439.574038][ T5810] Bluetooth: hci6: command tx timeout [ 439.952625][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.952707][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.589072][ T5810] Bluetooth: hci1: command tx timeout [ 441.628793][ T5810] Bluetooth: hci6: command tx timeout [ 442.365647][ T5796] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 443.908599][ T5810] Bluetooth: hci6: command tx timeout [ 447.998573][ T5796] usb 5-1: device descriptor read/64, error -110 [ 450.251212][ T5113] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 450.253742][ T5113] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 450.254802][ T5113] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 450.256197][ T5113] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 450.256883][ T5113] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 450.798571][ T9296] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 451.078518][ T9296] usb 2-1: Using ep0 maxpacket: 32 [ 451.094413][ T9296] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 451.094440][ T9296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.348574][ T5810] Bluetooth: hci7: command tx timeout [ 453.638161][ T9296] usb 2-1: config 0 descriptor?? [ 453.668930][ T9296] usb 2-1: can't set config #0, error -71 [ 454.329874][ T9296] usb 2-1: USB disconnect, device number 20 [ 454.448713][ T5810] Bluetooth: hci7: command tx timeout [ 456.662307][ T5810] Bluetooth: hci7: command tx timeout [ 458.668868][ T5810] Bluetooth: hci7: command tx timeout [ 458.817408][ T9324] chnl_net:caif_netlink_parms(): no params data found [ 469.108586][ T808] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 469.261910][ T808] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 469.261958][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.266877][ T808] usb 2-1: config 0 descriptor?? [ 469.273077][ T808] cp210x 2-1:0.0: cp210x converter detected [ 470.993700][ T9313] chnl_net:caif_netlink_parms(): no params data found [ 472.278621][ T808] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 472.278745][ T808] cp210x 2-1:0.0: querying part number failed [ 472.339096][ T808] usb 2-1: cp210x converter now attached to ttyUSB0 [ 472.448691][ T808] usb 2-1: USB disconnect, device number 21 [ 472.599136][ T808] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 472.602955][ T808] cp210x 2-1:0.0: device disconnected [ 477.220390][ T9324] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.220580][ T9324] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.220817][ T9324] bridge_slave_0: entered allmulticast mode [ 477.230335][ T9324] bridge_slave_0: entered promiscuous mode [ 477.292509][ T9324] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.292630][ T9324] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.292861][ T9324] bridge_slave_1: entered allmulticast mode [ 477.316733][ T9324] bridge_slave_1: entered promiscuous mode [ 477.558580][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 478.959215][ T9313] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.959311][ T9313] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.959526][ T9313] bridge_slave_0: entered allmulticast mode [ 478.961967][ T9313] bridge_slave_0: entered promiscuous mode [ 478.964238][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.964266][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.964303][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 478.964322][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.191126][ T9] usb 2-1: config 0 descriptor?? [ 482.018981][ T9] usb 2-1: can't set config #0, error -71 [ 482.558659][ T9] usb 2-1: USB disconnect, device number 22 [ 482.575956][ T9313] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.576077][ T9313] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.576313][ T9313] bridge_slave_1: entered allmulticast mode [ 482.648897][ T9313] bridge_slave_1: entered promiscuous mode [ 483.515964][ T9324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.218127][ T9324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.218594][ T9297] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 486.761175][ T9324] team0: Port device team_slave_0 added [ 487.029864][ T9297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.029897][ T9297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.029934][ T9297] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 487.029954][ T9297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.120552][ T9297] usb 2-1: config 0 descriptor?? [ 487.263322][ T9324] team0: Port device team_slave_1 added [ 488.095596][ T9345] chnl_net:caif_netlink_parms(): no params data found [ 488.278043][ T5113] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 488.293305][ T5113] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 488.297263][ T5113] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 488.300441][ T5113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 488.302029][ T5113] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 489.567388][ T9297] usbhid 2-1:0.0: can't add hid device: -71 [ 489.567517][ T9297] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 490.458710][ T5810] Bluetooth: hci5: command tx timeout [ 491.342421][ T9297] usb 2-1: USB disconnect, device number 23 [ 492.512437][ T5810] Bluetooth: hci5: command tx timeout [ 492.536174][ T5113] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 492.604246][ T5113] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 492.606524][ T5113] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 492.607941][ T5113] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 492.631568][ T5113] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 492.852176][ T5870] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 493.746238][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 493.790284][ T5870] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 493.790311][ T5870] usb 2-1: config 0 has no interface number 0 [ 493.793338][ T5870] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 493.793363][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.793381][ T5870] usb 2-1: Product: syz [ 493.793394][ T5870] usb 2-1: Manufacturer: syz [ 493.793406][ T5870] usb 2-1: SerialNumber: syz [ 493.851952][ T5870] usb 2-1: config 0 descriptor?? [ 494.459980][ T5870] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 494.460009][ T5870] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 494.588794][ T5810] Bluetooth: hci5: command tx timeout [ 494.778642][ T5810] Bluetooth: hci8: command tx timeout [ 496.628693][ T9345] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.628812][ T9345] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.629050][ T9345] bridge_slave_0: entered allmulticast mode [ 496.642798][ T9345] bridge_slave_0: entered promiscuous mode [ 496.669523][ T5810] Bluetooth: hci5: command tx timeout [ 496.855892][ T5810] Bluetooth: hci8: command tx timeout [ 497.647016][ T5870] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 497.647354][ T5870] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 497.657275][ T9345] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.657397][ T9345] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.657584][ T9345] bridge_slave_1: entered allmulticast mode [ 497.660204][ T9345] bridge_slave_1: entered promiscuous mode [ 497.828636][ T5870] usb 2-1: USB disconnect, device number 24 [ 499.148565][ T5810] Bluetooth: hci8: command tx timeout [ 501.228679][ T5810] Bluetooth: hci8: command tx timeout [ 501.399121][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.399189][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.062745][ T5113] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 504.065317][ T5113] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 504.066456][ T5113] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 504.067913][ T5113] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 504.068831][ T5113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 506.272369][ T5113] Bluetooth: hci1: command tx timeout [ 508.348622][ T5113] Bluetooth: hci1: command tx timeout [ 510.428656][ T5113] Bluetooth: hci1: command tx timeout [ 512.522377][ T5113] Bluetooth: hci1: command tx timeout [ 524.835132][ T9446] chnl_net:caif_netlink_parms(): no params data found [ 524.958887][ T9454] chnl_net:caif_netlink_parms(): no params data found [ 529.658945][ T9493] chnl_net:caif_netlink_parms(): no params data found [ 532.525352][ T9446] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.525480][ T9446] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.526152][ T9446] bridge_slave_0: entered allmulticast mode [ 532.560321][ T9446] bridge_slave_0: entered promiscuous mode [ 532.852739][ T9454] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.883484][ T9454] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.896516][ T9454] bridge_slave_0: entered allmulticast mode [ 533.017554][ T9454] bridge_slave_0: entered promiscuous mode [ 534.629407][ T9577] bridge1: entered allmulticast mode [ 534.636445][ T9446] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.636558][ T9446] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.636793][ T9446] bridge_slave_1: entered allmulticast mode [ 534.639652][ T9446] bridge_slave_1: entered promiscuous mode [ 534.675121][ T9454] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.675232][ T9454] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.675442][ T9454] bridge_slave_1: entered allmulticast mode [ 534.718720][ T9454] bridge_slave_1: entered promiscuous mode [ 537.520922][ T9583] vlan2: entered promiscuous mode [ 540.723996][ T9446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.732832][ T9454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.733068][ T9493] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.733162][ T9493] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.733328][ T9493] bridge_slave_0: entered allmulticast mode [ 540.735551][ T9493] bridge_slave_0: entered promiscuous mode [ 540.785076][ T9446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.788371][ T9454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.788772][ T9493] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.788886][ T9493] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.789081][ T9493] bridge_slave_1: entered allmulticast mode [ 540.791338][ T9493] bridge_slave_1: entered promiscuous mode [ 542.915545][ T9493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.920054][ T9454] team0: Port device team_slave_0 added [ 542.923321][ T9454] team0: Port device team_slave_1 added [ 543.329736][ T9493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.332362][ T9446] team0: Port device team_slave_0 added [ 544.379490][ T9446] team0: Port device team_slave_1 added [ 544.432714][ T9454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.432729][ T9454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.432753][ T9454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.651756][ T9454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.651773][ T9454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.651799][ T9454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.662910][ T9493] team0: Port device team_slave_0 added [ 546.722585][ T9493] team0: Port device team_slave_1 added [ 547.512671][ T5810] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 547.522099][ T5810] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 547.530673][ T5810] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 547.532126][ T5810] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 547.532973][ T5810] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 549.703849][ T5810] Bluetooth: hci6: command tx timeout [ 549.788079][ T9493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.788095][ T9493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.788120][ T9493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.839550][ T9493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.839567][ T9493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.839591][ T9493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.162534][ T9493] hsr_slave_0: entered promiscuous mode [ 551.699367][ T9493] hsr_slave_1: entered promiscuous mode [ 551.700306][ T9493] debugfs: 'hsr0' already exists in 'hsr' [ 551.700329][ T9493] Cannot create hsr debugfs directory [ 551.798549][ T5810] Bluetooth: hci6: command tx timeout [ 552.425541][ T5113] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 552.439460][ T5113] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 552.446954][ T5113] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 552.448302][ T5113] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 552.521531][ T5113] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 553.898635][ T5113] Bluetooth: hci6: command tx timeout [ 554.608579][ T5113] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 554.613366][ T5113] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 554.616568][ T5113] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 554.617656][ T5113] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 554.618616][ T5113] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 555.068662][ T5810] Bluetooth: hci7: command tx timeout [ 555.948580][ T5810] Bluetooth: hci6: command tx timeout [ 556.748789][ T5810] Bluetooth: hci9: command tx timeout [ 557.153293][ T5810] Bluetooth: hci7: command tx timeout [ 558.831469][ T5810] Bluetooth: hci9: command tx timeout [ 559.228561][ T5810] Bluetooth: hci7: command tx timeout [ 560.908824][ T5810] Bluetooth: hci9: command tx timeout [ 561.308655][ T5810] Bluetooth: hci7: command tx timeout [ 562.832808][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.832899][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.988876][ T5810] Bluetooth: hci9: command tx timeout [ 563.488818][ T38] INFO: task syz.3.900:9265 blocked for more than 143 seconds. [ 563.488849][ T38] Tainted: G L syzkaller #0 [ 563.488860][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 563.488869][ T38] task:syz.3.900 state:D stack:22928 pid:9265 tgid:9265 ppid:5792 task_flags:0x400040 flags:0x00080002 [ 563.488931][ T38] Call Trace: [ 563.488939][ T38] [ 563.488951][ T38] __schedule+0x1553/0x5240 [ 563.489179][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 563.489253][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 563.489273][ T38] ? __pfx___schedule+0x10/0x10 [ 563.489310][ T38] rt_mutex_schedule+0x76/0xf0 [ 563.489341][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 563.489379][ T38] rt_mutex_slowlock+0x2dc/0x7b0 [ 563.489409][ T38] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 563.489431][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 563.489469][ T38] ? rcu_barrier+0x4c/0x580 [ 563.489501][ T38] ? rcu_barrier+0x4c/0x580 [ 563.489519][ T38] mutex_lock_nested+0x168/0x1d0 [ 563.489539][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 563.489563][ T38] rcu_barrier+0x4c/0x580 [ 563.489593][ T38] netdev_run_todo+0x2e0/0xde0 [ 563.489677][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 563.489695][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 563.489794][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 563.489859][ T38] ? netdev_state_change+0x1ca/0x220 [ 563.489883][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 563.489987][ T38] tun_chr_close+0x13f/0x1c0 [ 563.490012][ T38] __fput+0x461/0xa90 [ 563.490094][ T38] task_work_run+0x1d9/0x270 [ 563.490119][ T38] ? __pfx_task_work_run+0x10/0x10 [ 563.490149][ T38] exit_to_user_mode_loop+0xed/0x480 [ 563.490187][ T38] ? rcu_is_watching+0x15/0xb0 [ 563.490210][ T38] do_syscall_64+0x32d/0xf80 [ 563.490258][ T38] ? trace_irq_disable+0x3b/0x150 [ 563.490283][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.490320][ T38] ? clear_bhb_loop+0x40/0x90 [ 563.490341][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.490359][ T38] RIP: 0033:0x7fca4f22c799 [ 563.490413][ T38] RSP: 002b:00007ffcc4020a38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 563.490439][ T38] RAX: 0000000000000000 RBX: 00007fca4f4a7da0 RCX: 00007fca4f22c799 [ 563.490452][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 563.490464][ T38] RBP: 00007fca4f4a7da0 R08: 0000000000000006 R09: 0000000000000000 [ 563.490475][ T38] R10: 00007fca4f4a7cb0 R11: 0000000000000246 R12: 0000000000064377 [ 563.490487][ T38] R13: 00007fca4f4a627c R14: 0000000000064311 R15: 00007ffcc4020b40 [ 563.490517][ T38] [ 563.490554][ T38] [ 563.490554][ T38] Showing all locks held in the system: [ 563.490562][ T38] 3 locks held by kworker/0:1/10: [ 563.490600][ T38] #0: ffff888019c03938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 563.490660][ T38] #1: ffffc900000f7c40 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 563.490706][ T38] #2: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 563.490750][ T38] 3 locks held by kworker/u8:0/12: [ 563.490760][ T38] #0: ffff88801aee1138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 563.490806][ T38] #1: ffffc90000117c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 563.490851][ T38] #2: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 563.490894][ T38] 2 locks held by kworker/u8:1/13: [ 563.490904][ T38] #0: ffff88801b703138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 563.490950][ T38] #1: ffffc90000127c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 563.490996][ T38] 4 locks held by ksoftirqd/0/15: [ 563.491007][ T38] 3 locks held by rcuc/0/20: [ 563.491017][ T38] 5 locks held by ktimers/1/29: [ 563.491027][ T38] 1 lock held by khungtaskd/38: [ 563.491037][ T38] #0: ffffffff8ddcb8c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 563.491095][ T38] 3 locks held by kworker/u8:2/43: [ 563.491105][ T38] #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 563.491150][ T38] #1: ffffc90000b57c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 563.491196][ T38] #2: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 563.491247][ T38] 3 locks held by kworker/u8:11/1558: [ 563.491257][ T38] #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 563.491301][ T38] #1: ffffc900060c7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 563.491346][ T38] #2: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 563.491445][ T38] 2 locks held by getty/5558: [ 563.491456][ T38] #0: ffff8880385b50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 563.491577][ T38] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 563.491618][ T38] 1 lock held by syz-executor/5780: [ 563.491635][ T38] 1 lock held by syz.0.863/9112: [ 563.491645][ T38] #0: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 563.491689][ T38] 1 lock held by syz-executor/9189: [ 563.491699][ T38] #0: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 563.491742][ T38] 1 lock held by syz.3.900/9265: [ 563.491752][ T38] #0: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 563.491794][ T38] 2 locks held by syz.2.903/9286: [ 563.491804][ T38] #0: ffffffff8f14c0c0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 563.491875][ T38] #1: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 563.491919][ T38] 1 lock held by syz-executor/9313: [ 563.491929][ T38] #0: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 563.491972][ T38] 1 lock held by syz-executor/9324: [ 563.491982][ T38] #0: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 563.492024][ T38] 1 lock held by syz-executor/9345: [ 563.492034][ T38] #0: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 563.492077][ T38] 1 lock held by syz-executor/9446: [ 563.492087][ T38] #0: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 563.492130][ T38] 1 lock held by syz-executor/9454: [ 563.492140][ T38] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 563.492185][ T38] 2 locks held by syz-executor/9493: [ 563.492195][ T38] #0: ffffffff8e88efc8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 563.492271][ T38] #1: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 563.492318][ T38] 2 locks held by syz.1.991/9583: [ 563.492328][ T38] #0: ffffffff8f6c14e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 563.492416][ T38] #1: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 563.492459][ T38] 2 locks held by syz-executor/9622: [ 563.492469][ T38] #0: ffffffff8f14c0c0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 563.492513][ T38] #1: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 563.492554][ T38] 1 lock held by udevd/9626: [ 563.492564][ T38] 2 locks held by udevd/9628: [ 563.492574][ T38] 1 lock held by udevd/9630: [ 563.492585][ T38] 2 locks held by syz-executor/9640: [ 563.492594][ T38] #0: ffffffff8f14c0c0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 563.492639][ T38] #1: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d7/0x840 [ 563.492756][ T38] 2 locks held by syz-executor/9645: [ 563.492766][ T38] #0: ffffffff8f14c0c0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 563.492810][ T38] #1: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 563.492882][ T38] 9 locks held by syz-executor/9668: [ 563.492892][ T38] 1 lock held by dhcpcd/9669: [ 563.492901][ T38] #0: ffff888041203cf8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 563.492974][ T38] [ 563.492978][ T38] ============================================= [ 563.492978][ T38] [ 563.492991][ T38] NMI backtrace for cpu 0 [ 563.493014][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 563.493038][ T38] Tainted: [L]=SOFTLOCKUP [ 563.493044][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 563.493054][ T38] Call Trace: [ 563.493061][ T38] [ 563.493068][ T38] dump_stack_lvl+0xe8/0x150 [ 563.493104][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 563.493151][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 563.493190][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 563.493213][ T38] sys_info+0x135/0x170 [ 563.493230][ T38] watchdog+0xfd9/0x1030 [ 563.493255][ T38] ? watchdog+0x21a/0x1030 [ 563.493281][ T38] kthread+0x388/0x470 [ 563.493300][ T38] ? __pfx_watchdog+0x10/0x10 [ 563.493318][ T38] ? __pfx_kthread+0x10/0x10 [ 563.493337][ T38] ret_from_fork+0x51e/0xb90 [ 563.493361][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 563.493382][ T38] ? __switch_to+0xc7d/0x1450 [ 563.493420][ T38] ? __pfx_kthread+0x10/0x10 [ 563.493439][ T38] ret_from_fork_asm+0x1a/0x30 [ 563.493470][ T38] [ 563.493477][ T38] Sending NMI from CPU 0 to CPUs 1: [ 563.493505][ C1] NMI backtrace for cpu 1 [ 563.493520][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 563.493542][ C1] Tainted: [L]=SOFTLOCKUP [ 563.493547][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 563.493556][ C1] RIP: 0010:check_preemption_disabled+0x2a/0xe0 [ 563.493575][ C1] Code: 55 41 57 41 56 53 65 8b 05 47 63 2b 07 65 8b 0d 3c 63 2b 07 f7 c1 ff ff ff 7f 74 0c 5b 41 5e 41 5f 5d e9 99 a5 03 00 cc 9c 59 c1 00 02 00 00 74 ea 65 4c 8b 3d ee 62 2b 07 41 f6 47 2f 04 74 [ 563.493588][ C1] RSP: 0018:ffffc90000a3ea78 EFLAGS: 00000046 [ 563.493602][ C1] RAX: 0000000000000001 RBX: ffffffff8b26448a RCX: 0000000000000046 [ 563.493612][ C1] RDX: 0000000000000005 RSI: ffffffff8d560632 RDI: ffffffff8ba66600 [ 563.493623][ C1] RBP: ffffc90000a3ebc8 R08: ffffffff8b25281c R09: ffffffff8ddcb8c0 [ 563.493634][ C1] R10: 0000000000000000 R11: fffffbfff1ed4757 R12: dffffc0000000000 [ 563.493644][ C1] R13: 1ffff92000147d64 R14: ffff88801d2abd00 R15: ffffe8ffffd01de8 [ 563.493656][ C1] FS: 0000000000000000(0000) GS:ffff88812643c000(0000) knlGS:0000000000000000 [ 563.493668][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 563.493679][ C1] CR2: 00007f971a2356b8 CR3: 0000000024a3a000 CR4: 00000000003526f0 [ 563.493693][ C1] Call Trace: [ 563.493699][ C1] [ 563.493704][ C1] ? _raw_spin_lock_irqsave+0x1a/0x60 [ 563.493725][ C1] lockdep_hardirqs_off+0x56/0xd0 [ 563.493743][ C1] ? _raw_spin_lock_irqsave+0x1a/0x60 [ 563.493762][ C1] trace_hardirqs_off+0x12/0x40 [ 563.493778][ C1] _raw_spin_lock_irqsave+0x1a/0x60 [ 563.493797][ C1] rt_mutex_slowunlock+0xbf/0x8b0 [ 563.493814][ C1] ? rt_spin_trylock+0x10c/0x2b0 [ 563.493832][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 563.493852][ C1] ? rt_spin_unlock+0x160/0x200 [ 563.493869][ C1] kmem_cache_alloc_noprof+0x217/0x680 [ 563.493942][ C1] ? dst_alloc+0x105/0x170 [ 563.493958][ C1] dst_alloc+0x105/0x170 [ 563.493974][ C1] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 563.494045][ C1] ? ip_route_output_key_hash+0xd8/0x2a0 [ 563.494063][ C1] ip_route_output_key_hash+0x18d/0x2a0 [ 563.494082][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 563.494107][ C1] ip_route_output_flow+0x2a/0x150 [ 563.494123][ C1] ? ip_route_me_harder+0x730/0xf90 [ 563.494170][ C1] ip_route_me_harder+0x742/0xf90 [ 563.494193][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 563.494218][ C1] ? __cookie_v4_init_sequence+0x25d/0x500 [ 563.494237][ C1] synproxy_send_tcp+0x34c/0x670 [ 563.494295][ C1] synproxy_send_client_synack+0x8c1/0xe30 [ 563.494320][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 563.494339][ C1] ? nft_jhash_eval+0x288/0xa80 [ 563.494401][ C1] ? synproxy_pernet+0x45/0x270 [ 563.494417][ C1] nft_synproxy_eval_v4+0x34a/0x4e0 [ 563.494434][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 563.494450][ C1] ? nf_ip_checksum+0x13c/0x510 [ 563.494494][ C1] nft_synproxy_do_eval+0x305/0x580 [ 563.494511][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 563.494532][ C1] nft_do_chain+0x45e/0x1990 [ 563.494570][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 563.494588][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 563.494604][ C1] ? try_to_take_rt_mutex+0x840/0xb00 [ 563.494629][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 563.494646][ C1] nft_do_chain_inet+0x29d/0x380 [ 563.494689][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 563.494712][ C1] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 563.494732][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 563.494752][ C1] nf_hook_slow+0xc5/0x220 [ 563.494795][ C1] NF_HOOK+0x21f/0x3c0 [ 563.494809][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 563.494824][ C1] ? NF_HOOK+0x9e/0x3c0 [ 563.494837][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 563.494849][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 563.494865][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 563.494882][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 563.494903][ C1] NF_HOOK+0x336/0x3c0 [ 563.494916][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 563.494959][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 563.494973][ C1] ? NF_HOOK+0x9e/0x3c0 [ 563.494985][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 563.495000][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 563.495016][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 563.495029][ C1] ? process_backlog+0x271/0xc60 [ 563.495046][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 563.495060][ C1] process_backlog+0x569/0xc60 [ 563.495085][ C1] __napi_poll+0xaf/0x580 [ 563.495100][ C1] ? skb_defer_free_flush+0x233/0x260 [ 563.495119][ C1] net_rx_action+0x696/0xe00 [ 563.495136][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 563.495160][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 563.495189][ C1] handle_softirqs+0x1de/0x6f0 [ 563.495221][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 563.495242][ C1] run_ktimerd+0x69/0x100 [ 563.495255][ C1] smpboot_thread_fn+0x541/0xa50 [ 563.495274][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 563.495297][ C1] kthread+0x388/0x470 [ 563.495311][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 563.495330][ C1] ? __pfx_kthread+0x10/0x10 [ 563.495345][ C1] ret_from_fork+0x51e/0xb90 [ 563.495364][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 563.495382][ C1] ? __switch_to+0xc7d/0x1450 [ 563.495400][ C1] ? __pfx_kthread+0x10/0x10 [ 563.495415][ C1] ret_from_fork_asm+0x1a/0x30 [ 563.495436][ C1] [ 563.495510][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 563.495526][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 563.495550][ T38] Tainted: [L]=SOFTLOCKUP [ 563.495556][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 563.495566][ T38] Call Trace: [ 563.495574][ T38] [ 563.495581][ T38] vpanic+0x56c/0xa60 [ 563.495608][ T38] ? __pfx_vpanic+0x10/0x10 [ 563.495639][ T38] panic+0xc5/0xd0 [ 563.495662][ T38] ? __pfx_panic+0x10/0x10 [ 563.495682][ T38] ? printk_trigger_flush+0x117/0x180 [ 563.495706][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 563.495736][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 563.495760][ T38] watchdog+0x1023/0x1030 [ 563.495785][ T38] ? watchdog+0x21a/0x1030 [ 563.495811][ T38] kthread+0x388/0x470 [ 563.495829][ T38] ? __pfx_watchdog+0x10/0x10 [ 563.495848][ T38] ? __pfx_kthread+0x10/0x10 [ 563.495867][ T38] ret_from_fork+0x51e/0xb90 [ 563.495892][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 563.495913][ T38] ? __switch_to+0xc7d/0x1450 [ 563.495936][ T38] ? __pfx_kthread+0x10/0x10 [ 563.495956][ T38] ret_from_fork_asm+0x1a/0x30 [ 563.495987][ T38] [ 563.496254][ T38] Kernel Offset: disabled