last executing test programs: 24m6.161736521s ago: executing program 4 (id=16): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 24m5.077227557s ago: executing program 4 (id=18): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2a0, 0xffffffff, 0x130, 0x130, 0x98, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private, @multicast1, 0x0, 0x0, 'ip6gre0\x00', 'tunl0\x00', {}, {}, 0x6, 0x0, 0x60}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@rand_addr, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'wlan1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x2, 0x4, 0x4, 0x5, 0x6, 0x4], 0x6}}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) socket$inet_udp(0x2, 0x2, 0x0) tgkill(r0, r0, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2004000) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @loopback}}}, 0x108) socket(0x1f, 0x6, 0x4) close_range(r4, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 23m54.879048149s ago: executing program 4 (id=23): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x4b6a, &(0x7f00000006c0)={0x2208, 0x5, 0x1, 0x0, 0x15, "0400"}) memfd_create(&(0x7f0000000040)='\x00', 0x8340b1aabcc04bec) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) move_pages(r0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0}) 23m53.616928904s ago: executing program 4 (id=26): syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 23m48.397152316s ago: executing program 4 (id=30): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x4b6a, 0x0) 23m47.851428042s ago: executing program 4 (id=34): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x4) mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x1000000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x4b00, &(0x7f0000000580)="b3"}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r8, &(0x7f0000000100)='e:__group/myevent sched.sched_switch', 0x24) 23m32.61523218s ago: executing program 32 (id=34): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x4) mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x1000000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x4b00, &(0x7f0000000580)="b3"}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r8, &(0x7f0000000100)='e:__group/myevent sched.sched_switch', 0x24) 21m32.677445794s ago: executing program 1 (id=298): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) sendmmsg(r0, 0x0, 0x0, 0xc840) 21m31.524483344s ago: executing program 1 (id=299): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) socket$inet_udp(0x2, 0x2, 0x0) r1 = add_key(0x0, 0x0, &(0x7f0000000100)="307106092a864886f70d010702a0643062020101310f300d06096086480165030402010500300b06092a864886f70d010701313f303d0201013014300f310d300b0603550403130454657374020101300d060960864801650304020105", 0x5d, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000002100), 0x0, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) keyctl$reject(0x13, r2, 0x5, 0xffff, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x4a, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x8}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) 21m28.634891726s ago: executing program 1 (id=304): semtimedop(0x0, &(0x7f0000000180)=[{0x0, 0x7, 0x1000}], 0x1, 0x0) 21m27.044627461s ago: executing program 1 (id=308): syz_open_dev$sg(0x0, 0x508d48d4, 0x40902) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x404c010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) getsockopt$sock_timeval(r5, 0x1, 0x43, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) 21m22.524875463s ago: executing program 1 (id=312): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x0) 21m18.878259582s ago: executing program 1 (id=319): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x10, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3e, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0xbc}}}]}, 0x3c}}, 0x4040010) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 21m2.667275351s ago: executing program 33 (id=319): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x10, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3e, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0xbc}}}]}, 0x3c}}, 0x4040010) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 19m44.310209732s ago: executing program 3 (id=502): syz_open_dev$sg(0x0, 0x508d48d4, 0x40902) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x404c010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) 19m41.965728918s ago: executing program 3 (id=506): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xf, 0x119000) r1 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) personality(0x619641b6fb4b8591) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0), 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r5, 0xc008ae09, &(0x7f0000000300)={0x666666666666799}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x6, 0x0, 0xffffffff}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0x0, 0x7, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x9, 0xffffffff}) r8 = getpid() syz_clone3(&(0x7f0000000540)={0x81000000, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r8], 0x1}, 0x58) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0], 0x0, 0x0, &(0x7f0000000180)=[0x0], 0x2, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000200)) 19m40.425123859s ago: executing program 3 (id=507): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf253b00000008000300", @ANYRES32=r2], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) 19m40.100804073s ago: executing program 3 (id=508): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 19m39.991431587s ago: executing program 3 (id=509): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) 19m38.997263955s ago: executing program 3 (id=510): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 19m38.395506875s ago: executing program 34 (id=510): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 2m17.492759471s ago: executing program 6 (id=2967): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ustat(0x11, &(0x7f0000000600)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r3 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) 2m17.271920198s ago: executing program 6 (id=2968): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0xb1}, 0x39) 2m16.966764568s ago: executing program 6 (id=2969): socket$inet(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000f00000004"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000040)={'bridge0\x00', @random='\x00\x00\x00\x00\x00 '}) 2m16.718324332s ago: executing program 6 (id=2972): syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1401100100000040f80600b04000010203010902600003010900080904000000010100000a240106000a0002010209"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x800, 0x0) ioctl(r0, 0xc138fd0c, &(0x7f0000000000)="0400000000000000000000003801") 2m10.564130246s ago: executing program 6 (id=2985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x242d3c50, 0x2, 0x0, 0x8}}) prlimit64(0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001040), 0x109540, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0x7fffffff, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0xd00, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) 2m9.084982467s ago: executing program 6 (id=2987): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x40814) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_io_uring_setup(0x4329, &(0x7f0000000180)={0x0, 0x776c, 0x110c9, 0x6, 0x160}, 0x0, &(0x7f0000000200), &(0x7f0000000000)) 1m54.870766987s ago: executing program 7 (id=3042): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f750800390005", 0x26) 1m54.770355395s ago: executing program 7 (id=3043): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x21, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m53.245346639s ago: executing program 7 (id=3046): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="06000000040000"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r3, 0x0, 0x7}, 0x38) 1m51.940556232s ago: executing program 7 (id=3050): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) 1m49.425924411s ago: executing program 7 (id=3056): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20) shutdown(r0, 0x1) 1m49.316802077s ago: executing program 7 (id=3058): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40000000000035d, 0x20000084) recvmmsg(r2, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x11, 0x4, 0x4, 0x1000ff, 0x4}, 0x48) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write(r4, &(0x7f0000000200)="89", 0xffe3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x22, @dev={0xac, 0x14, 0x14, 0xc}}, {0x2, 0x4e24, @local}, 0x7d, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0xfdff, 0x0, 0x1009}) 1m34.184342923s ago: executing program 35 (id=3058): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40000000000035d, 0x20000084) recvmmsg(r2, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x11, 0x4, 0x4, 0x1000ff, 0x4}, 0x48) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write(r4, &(0x7f0000000200)="89", 0xffe3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x22, @dev={0xac, 0x14, 0x14, 0xc}}, {0x2, 0x4e24, @local}, 0x7d, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0xfdff, 0x0, 0x1009}) 7.479833603s ago: executing program 0 (id=3252): socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f750800390005", 0x26) 7.279234247s ago: executing program 0 (id=3253): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES32, @ANYBLOB="05002f0000002c"], 0x2c}, 0x1, 0x1000000, 0x0, 0x80025}, 0x18) 7.179266378s ago: executing program 0 (id=3254): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x40000013) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000240)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8046}}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x20000800) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r4}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.756894452s ago: executing program 5 (id=3256): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x40000013) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000240)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8046}}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x20000800) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r4}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.823931937s ago: executing program 0 (id=3257): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000085}, 0x80) 4.655091973s ago: executing program 0 (id=3259): syz_usb_connect(0x6, 0x371, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0xfffffff8, 0x48102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x6) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) mq_open(0x0, 0x800, 0x40, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf0500050012", 0x2d}], 0x1}, 0x0) 4.424486652s ago: executing program 2 (id=3262): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000200), 0x8) listen(r2, 0x801) accept(r3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000004680), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffd, 0x25dfdbff, {{@in=@multicast2, @in=@broadcast, 0x3, 0x794, 0x4e23, 0x20, 0x2, 0x0, 0x0, 0x3c}, {@in=@loopback, 0x4d6, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, {0x57, 0x9, 0x6, 0xffff, 0x8251c, 0x1, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2c, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x4000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000400), 0x12) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setopts(0x4200, r7, 0xf32, 0x7c8099cd3b23fb8) 4.350747738s ago: executing program 5 (id=3263): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYBLOB="05002f0000002c"], 0x2c}, 0x1, 0x1000000, 0x0, 0x80025}, 0x18) 2.962733554s ago: executing program 2 (id=3264): openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x9) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x40004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xfffffffffffffe2b, &(0x7f0000000440)=@any_dev={0x3, 0x333, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x20}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x10, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x8, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0x128}}], 0x1, 0x0, 0x0) 2.956849486s ago: executing program 5 (id=3265): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x42}, 0x28) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2.098734762s ago: executing program 0 (id=3266): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB='^:N'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff0000000705"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0xfffffffffffffda3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0xa, 0x7, 0xf7, 0x7, 0x1, 0x3, 0x7, 0x47, 0x14, 0x9, 0x4, 0x2}}, 0x0, 0x0, 0x0, 0x0}) 1.861994531s ago: executing program 2 (id=3267): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000085}, 0x80) 1.860461118s ago: executing program 5 (id=3268): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000004000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bc02000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000300)="d2ff0307600300", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.705639428s ago: executing program 2 (id=3269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) sendfile(r4, r3, 0x0, 0x803) 1.657112304s ago: executing program 5 (id=3270): socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f750800390005", 0x26) 1.514061161s ago: executing program 5 (id=3271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400000011"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000460900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000000000080003400000000114"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.209091082s ago: executing program 2 (id=3272): bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008885, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x1) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000004a673878015dc9a3ea00000000010000000000000000000000000000000000000015f93270a75c05a7fa676a882711a424cdb8cf0599c53bfeebdcdf03f90005b7ea235a9121764f6a8de295fbcb4ac0ffffff6a7b4cc4855a893b3e26d5ebd1e5bf23cae6043e2092a1636bd88bab1d0b23a9704908c1c813d127d3f680f40c356d320848c3457396770eeaff397492507ba8f7dec605398bfb014057c7231f64f5ac0ee1311a66c245c3ed9ff44a98adec42f6a3f16520d1d94c81af5a3750dcb73bd1a00043e2df550c808ae12aa50c82b7534c87c532927c4849"], 0x48) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0xf0, 0x13ab, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TIOCL_BLANKSCREEN(r4, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) 0s ago: executing program 2 (id=3273): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYBLOB="05002f0000002c"], 0x2c}, 0x1, 0x1000000, 0x0, 0x80025}, 0x18) kernel console output (not intermixed with test programs): B device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.028400][T14796] usb 1-1: Product: syz [ 1119.028415][T14796] usb 1-1: Manufacturer: syz [ 1119.028429][T14796] usb 1-1: SerialNumber: syz [ 1119.144309][T14796] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 1119.144427][T14796] imon 1-1:155.0: unable to initialize intf0, err -90 [ 1119.144445][T14796] imon:imon_probe: failed to initialize context! [ 1119.144457][T14796] imon 1-1:155.0: unable to register, err -19 [ 1120.611260][T13912] Bluetooth: hci4: command 0x0419 tx timeout [ 1120.621696][ T5586] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1120.801274][ T5586] usb 7-1: Using ep0 maxpacket: 32 [ 1120.803476][ T5586] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1120.803528][ T5586] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1120.804616][ T5586] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 1120.804638][ T5586] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 1120.804664][ T5586] usb 7-1: config 14 has no interface number 0 [ 1120.804680][ T5586] usb 7-1: config 14 has no interface number 1 [ 1120.804726][ T5586] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1120.804739][ T5586] usb 7-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 6, skipping [ 1120.804751][ T5586] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1120.804765][ T5586] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1120.804778][ T5586] usb 7-1: config 14 interface 57 has no altsetting 0 [ 1120.804787][ T5586] usb 7-1: config 14 interface 228 has no altsetting 0 [ 1120.807004][ T5586] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.807028][ T5586] usb 7-1: Product: syz [ 1120.807040][ T5586] usb 7-1: Manufacturer: syz [ 1120.807052][ T5586] usb 7-1: SerialNumber: syz [ 1121.229209][ T5242] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1121.229656][T15056] dummy0: entered allmulticast mode [ 1121.271567][ T5586] legousbtower 7-1:14.57: interrupt endpoints not found [ 1121.292127][T14869] hsr_slave_0: entered promiscuous mode [ 1121.293612][T14869] hsr_slave_1: entered promiscuous mode [ 1121.294735][T14869] debugfs: 'hsr0' already exists in 'hsr' [ 1121.294758][T14869] Cannot create hsr debugfs directory [ 1121.300950][T15055] dummy0: left allmulticast mode [ 1121.470364][ T5586] legousbtower 7-1:14.228: interrupt endpoints not found [ 1123.127575][ T5720] usb 1-1: USB disconnect, device number 37 [ 1123.620972][T10631] usb 7-1: USB disconnect, device number 9 [ 1123.992266][T15108] netlink: 'syz.0.1851': attribute type 10 has an invalid length. [ 1124.156579][T15111] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1849'. [ 1125.997761][T15108] team0: Device wg2 is of different type [ 1126.124416][T10631] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1126.161073][ T5242] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1126.331365][T10631] usb 6-1: Using ep0 maxpacket: 32 [ 1126.338723][T10631] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1126.338787][T10631] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1126.340262][T10631] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1126.340289][T10631] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1126.340309][T10631] usb 6-1: config 14 has no interface number 0 [ 1126.340325][T10631] usb 6-1: config 14 has no interface number 1 [ 1126.340397][T10631] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1126.340421][T10631] usb 6-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 6, skipping [ 1126.340447][T10631] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1126.340473][T10631] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1126.340499][T10631] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1126.340518][T10631] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1126.459464][T10631] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.459493][T10631] usb 6-1: Product: syz [ 1126.459506][T10631] usb 6-1: Manufacturer: syz [ 1126.459520][T10631] usb 6-1: SerialNumber: syz [ 1126.522061][T15142] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1126.522324][T15142] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1126.522672][T15142] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1126.522925][T15142] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1126.523308][T15142] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1127.713864][T15151] 9p: Could not find request transport: –?‡tfdno0x0000000000000008 [ 1127.862277][T10631] legousbtower 6-1:14.57: interrupt endpoints not found [ 1127.901056][T10631] legousbtower 6-1:14.228: interrupt endpoints not found [ 1128.129816][T15150] 9p: Could not find request transport: –?‡tfdno0x0000000000000008 [ 1128.479853][ T154] hsr_slave_0: left promiscuous mode [ 1128.524614][ T154] hsr_slave_1: left promiscuous mode [ 1128.525867][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1128.531427][ T9538] Bluetooth: hci3: command 0x0419 tx timeout [ 1128.531474][ T9538] Bluetooth: hci1: command 0x0c1a tx timeout [ 1128.531503][ T9538] Bluetooth: hci5: command 0x0c1a tx timeout [ 1128.531532][ T9538] Bluetooth: hci0: command 0x0406 tx timeout [ 1128.531615][T13912] Bluetooth: hci4: command 0x0419 tx timeout [ 1128.578108][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1128.701507][T14796] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1129.560723][T15169] 9p: Could not find request transport: –?‡tfdno0x0000000000000007 [ 1129.930181][T14796] usb 8-1: Using ep0 maxpacket: 32 [ 1129.935329][T14796] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1129.937639][T14796] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.937697][T14796] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1129.937726][T14796] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1129.937755][T14796] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1129.941095][T14796] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.945596][T14796] usb 8-1: Product: syz [ 1129.945613][T14796] usb 8-1: Manufacturer: syz [ 1129.945628][T14796] usb 8-1: SerialNumber: syz [ 1129.952012][T10631] usb 6-1: USB disconnect, device number 3 [ 1130.048866][ C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1130.206894][T14796] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/input/input33 [ 1130.293226][T14796] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1130.293252][T14796] (id 0x00) [ 1130.367534][T15180] netlink: 'syz.6.1871': attribute type 10 has an invalid length. [ 1130.379365][T14796] rc_core: IR keymap rc-imon-pad not found [ 1130.379386][T14796] Registered IR keymap rc-empty [ 1130.379483][T14796] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1130.379504][T14796] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1131.413913][T14796] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0 [ 1131.503830][T14796] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0/input34 [ 1131.549588][T14796] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:2> initialized [ 1133.062091][ T154] team0 (unregistering): Port device team_slave_1 removed [ 1133.122271][ T154] team0 (unregistering): Port device team_slave_0 removed [ 1133.344107][T15180] team0: Device wg2 is of different type [ 1135.194589][ T5720] usb 8-1: USB disconnect, device number 2 [ 1135.217085][T10631] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1135.363390][T10631] usb 1-1: Using ep0 maxpacket: 32 [ 1135.370056][T10631] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1135.370115][T10631] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1135.371668][T10631] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 1135.371693][T10631] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 1135.371714][T10631] usb 1-1: config 14 has no interface number 0 [ 1135.371730][T10631] usb 1-1: config 14 has no interface number 1 [ 1135.371824][T10631] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1135.371848][T10631] usb 1-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 6, skipping [ 1135.371872][T10631] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1135.371895][T10631] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1135.371919][T10631] usb 1-1: config 14 interface 57 has no altsetting 0 [ 1135.371933][T10631] usb 1-1: config 14 interface 228 has no altsetting 0 [ 1135.381966][T15217] 9p: Could not find request transport: –?‡tfdno0x0000000000000007 [ 1135.405252][T10631] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.405283][T10631] usb 1-1: Product: syz [ 1135.405297][T10631] usb 1-1: Manufacturer: syz [ 1135.405310][T10631] usb 1-1: SerialNumber: syz [ 1136.005598][T10631] legousbtower 1-1:14.57: interrupt endpoints not found [ 1136.213991][T10631] legousbtower 1-1:14.228: interrupt endpoints not found [ 1138.023485][ T5591] usb 1-1: USB disconnect, device number 38 [ 1138.060671][ T154] IPVS: stop unused estimator thread 0... [ 1138.091027][T15253] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1889'. [ 1138.234046][T15261] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1891'. [ 1138.349940][T15262] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1890'. [ 1139.449443][T14869] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1139.564281][T14869] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1139.571391][T14869] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1139.730067][T14869] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1139.731860][T14869] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1139.755358][T15292] netlink: 'syz.7.1898': attribute type 1 has an invalid length. [ 1139.817665][T14869] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1139.910733][T15292] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1140.313028][T14869] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1141.004367][T15312] 9p: Could not find request transport: –?‡tfdno0xffffffffffffffff [ 1141.034473][T14869] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1141.301278][ T5720] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1141.461344][ T5720] usb 7-1: Using ep0 maxpacket: 32 [ 1141.464496][ T5720] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1141.464569][ T5720] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1141.467439][ T5720] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 1141.467466][ T5720] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 1141.467486][ T5720] usb 7-1: config 14 has no interface number 0 [ 1141.467509][ T5720] usb 7-1: config 14 has no interface number 1 [ 1141.467599][ T5720] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1141.467627][ T5720] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1141.467654][ T5720] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1141.467680][ T5720] usb 7-1: config 14 interface 228 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1141.467708][ T5720] usb 7-1: config 14 interface 57 has no altsetting 0 [ 1141.467726][ T5720] usb 7-1: config 14 interface 228 has no altsetting 0 [ 1141.484753][ T5720] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.484783][ T5720] usb 7-1: Product: syz [ 1141.484796][ T5720] usb 7-1: Manufacturer: syz [ 1141.484810][ T5720] usb 7-1: SerialNumber: syz [ 1142.861739][ T5720] legousbtower 7-1:14.57: interrupt endpoints not found [ 1143.164631][ T5720] legousbtower 7-1:14.228: interrupt endpoints not found [ 1143.380496][T14869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1143.389950][T15348] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1143.390173][T15348] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1143.390334][T15348] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1143.390514][T15348] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1143.395565][T15348] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1143.545493][T14869] 8021q: adding VLAN 0 to HW filter on device team0 [ 1143.586200][T10149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.586337][T10149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1143.588022][T10149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1143.588113][T10149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1145.211684][ T5586] usb 7-1: USB disconnect, device number 10 [ 1145.348320][T15377] netlink: 'syz.0.1911': attribute type 1 has an invalid length. [ 1145.412618][ T9538] Bluetooth: hci3: command 0x0419 tx timeout [ 1145.412660][ T9538] Bluetooth: hci1: command 0x0c1a tx timeout [ 1145.412690][ T9538] Bluetooth: hci5: command 0x0c1a tx timeout [ 1145.412718][ T9538] Bluetooth: hci0: command 0x0406 tx timeout [ 1145.412775][T13912] Bluetooth: hci4: command 0x0419 tx timeout [ 1145.431003][T15377] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1146.518069][T15391] 9p: Could not find request transport: –?‡tfdno0xffffffffffffffff [ 1146.949880][T15404] netlink: 'syz.5.1918': attribute type 10 has an invalid length. [ 1147.037002][T15404] team0: Device wg2 is of different type [ 1148.560684][T14869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1148.906510][T14869] veth0_vlan: entered promiscuous mode [ 1148.936007][T14869] veth1_vlan: entered promiscuous mode [ 1149.224195][T14869] veth0_macvtap: entered promiscuous mode [ 1150.197249][T14869] veth1_macvtap: entered promiscuous mode [ 1150.215950][T14869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1150.220988][T14869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1151.118729][T15437] 9p: Could not find request transport: –?‡tfdno0x0000000000000007 [ 1152.712658][T15455] 9p: Could not find request transport: –?‡tfdno0xffffffffffffffff [ 1154.605454][T15472] 9p: Bad value for 'rfdno' [ 1154.686467][T10149] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.687696][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.689860][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.690189][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.144316][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.144339][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.766547][T15495] netlink: 'syz.7.1944': attribute type 10 has an invalid length. [ 1157.569476][T15497] 9p: Could not find request transport: –?‡tfdno0xffffffffffffffff [ 1157.740794][T15495] team0: Device wg2 is of different type [ 1157.847028][T15503] 9p: Bad value for 'rfdno' [ 1158.051345][ T5800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1158.051368][ T5800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1158.501313][T14796] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1158.684540][T14796] usb 8-1: Using ep0 maxpacket: 32 [ 1158.685399][T14796] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1158.687572][T14796] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.687627][T14796] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1158.687668][T14796] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1158.687699][T14796] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1158.697719][T14796] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.697745][T14796] usb 8-1: Product: syz [ 1158.697759][T14796] usb 8-1: Manufacturer: syz [ 1158.697774][T14796] usb 8-1: SerialNumber: syz [ 1158.804947][ C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1158.838573][T14796] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/input/input35 [ 1159.053610][T14796] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1159.053634][T14796] (id 0x00) [ 1159.264374][ T5589] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1159.309412][ T5589] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1159.324589][ T5589] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1159.340500][ T5589] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1159.341451][ T5589] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1159.401938][T14796] rc_core: IR keymap rc-imon-pad not found [ 1159.401961][T14796] Registered IR keymap rc-empty [ 1159.402044][T14796] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1159.402063][T14796] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1159.569834][T15536] 9p: Bad value for 'rfdno' [ 1159.606846][T14796] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0 [ 1159.653998][T14796] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0/input36 [ 1159.694255][T14796] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:3> initialized [ 1160.044850][T15546] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1959'. [ 1161.571344][ T5589] Bluetooth: hci2: command tx timeout [ 1162.478116][T15546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1162.602153][T15546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1162.783187][T15546] bond0 (unregistering): Released all slaves [ 1163.669526][T15561] 9p: Could not find request transport: –?‡tfdno0x0000000000000008 [ 1163.763082][ T5589] Bluetooth: hci2: command tx timeout [ 1163.879847][ T5804] usb 8-1: USB disconnect, device number 3 [ 1164.266922][T15577] netlink: 'syz.7.1967': attribute type 10 has an invalid length. [ 1164.509318][T15577] team0: Device wg2 is of different type [ 1165.812043][ T5589] Bluetooth: hci2: command tx timeout [ 1166.020395][T15592] netlink: 'syz.6.1970': attribute type 10 has an invalid length. [ 1166.067517][T15592] team0: Device wg2 is of different type [ 1167.911956][ T5589] Bluetooth: hci2: command tx timeout [ 1175.375274][T15529] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.375742][T15529] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.377544][T15529] bridge_slave_0: entered allmulticast mode [ 1175.425835][T15529] bridge_slave_0: entered promiscuous mode [ 1175.486056][T15529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.486578][T15529] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.487155][T15529] bridge_slave_1: entered allmulticast mode [ 1175.519017][T15529] bridge_slave_1: entered promiscuous mode [ 1176.124322][T15529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1176.130185][T15529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1176.287618][T15663] netlink: 'syz.5.1989': attribute type 10 has an invalid length. [ 1176.709050][T15663] team0: Device wg2 is of different type [ 1176.882426][T15529] team0: Port device team_slave_0 added [ 1177.020011][T15529] team0: Port device team_slave_1 added [ 1177.340298][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.340347][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.079321][T15529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1178.079340][T15529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1178.079364][T15529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1178.104566][T15529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1178.104583][T15529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1178.104608][T15529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1178.527003][T15529] hsr_slave_0: entered promiscuous mode [ 1178.531077][T15529] hsr_slave_1: entered promiscuous mode [ 1178.552009][T15529] debugfs: 'hsr0' already exists in 'hsr' [ 1178.552029][T15529] Cannot create hsr debugfs directory [ 1180.110992][T15701] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2002'. [ 1180.988402][ T1653] bridge_slave_1: left allmulticast mode [ 1180.988444][ T1653] bridge_slave_1: left promiscuous mode [ 1180.988696][ T1653] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.147931][ T1653] bridge_slave_0: left allmulticast mode [ 1181.148009][ T1653] bridge_slave_0: left promiscuous mode [ 1181.148275][ T1653] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.248293][T15770] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2020'. [ 1182.411259][ T8574] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1182.582011][ T8574] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1182.583908][ T8574] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.634190][ T8574] usb 3-1: USB2VGA dongle found at address 26 [ 1182.647763][ T8574] usb 3-1: Allocated 8 output buffers [ 1182.994142][ T1653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1183.027568][T15778] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2021'. [ 1183.072695][ T1653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1183.104382][T15776] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2021'. [ 1183.123525][ T1653] bond0 (unregistering): Released all slaves [ 1183.144012][ T1653] bond1 (unregistering): Released all slaves [ 1183.203470][T15719] syzkaller1: entered promiscuous mode [ 1183.203498][T15719] syzkaller1: entered allmulticast mode [ 1183.627161][ T5242] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1183.654696][T15788] netlink: 'syz.5.2028': attribute type 10 has an invalid length. [ 1184.104448][T15794] netlink: 'syz.6.2031': attribute type 10 has an invalid length. [ 1184.174542][ T8574] usb 3-1: Failed to early initialize device [ 1184.201528][ T8574] usb 3-1: USB disconnect, device number 26 [ 1184.295572][T15788] team0: Device wg2 is of different type [ 1184.749837][T15794] team0: Device wg2 is of different type [ 1184.770315][T15807] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.56.0), cmd(7) [ 1185.777500][T15828] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.56.0), cmd(7) [ 1185.810679][T15831] netlink: 'syz.6.2046': attribute type 10 has an invalid length. [ 1185.840131][T15831] team0: Device wg2 is of different type [ 1185.975895][T14796] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1186.122160][T14796] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1186.123854][T14796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.987431][T14796] usb 3-1: USB2VGA dongle found at address 27 [ 1186.999200][T14796] usb 3-1: Allocated 8 output buffers [ 1187.391342][T15840] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2047'. [ 1187.524728][T15839] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2047'. [ 1189.767982][T14796] usb 3-1: Failed to early initialize device [ 1189.832497][T14796] usb 3-1: USB disconnect, device number 27 [ 1190.213005][ T1653] hsr_slave_0: left promiscuous mode [ 1190.770229][T15856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1191.102223][ T1653] hsr_slave_1: left promiscuous mode [ 1191.103475][ T1653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1191.140021][T15862] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.56.0), cmd(7) [ 1191.162339][ T1653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1191.528235][T15879] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1192.901996][ T1653] team0 (unregistering): Port device team_slave_1 removed [ 1192.962446][ T1653] team0 (unregistering): Port device team_slave_0 removed [ 1193.001793][ T5720] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1193.335217][T15908] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1193.402267][ T5720] usb 8-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1193.408518][ T5720] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.434880][ T5720] usb 8-1: USB2VGA dongle found at address 4 [ 1193.449671][ T5720] usb 8-1: Allocated 8 output buffers [ 1193.730106][T15916] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1193.885955][T15920] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2065'. [ 1193.952584][ T8574] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1194.085742][T15915] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2065'. [ 1194.102892][ T8574] usb 7-1: Using ep0 maxpacket: 32 [ 1194.104908][ T8574] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1194.106540][ T8574] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.106595][ T8574] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1194.106623][ T8574] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1194.106650][ T8574] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1194.122157][ T8574] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.122194][ T8574] usb 7-1: Product: syz [ 1194.122211][ T8574] usb 7-1: Manufacturer: syz [ 1194.122226][ T8574] usb 7-1: SerialNumber: syz [ 1194.213890][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1194.253360][ T8574] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input37 [ 1194.473668][ T8574] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1194.473694][ T8574] (id 0x00) [ 1194.562792][ T8574] rc_core: IR keymap rc-imon-pad not found [ 1194.562816][ T8574] Registered IR keymap rc-empty [ 1194.563006][ T8574] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1194.563026][ T8574] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1194.683420][ T8574] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 1194.722563][ T8574] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input38 [ 1194.727183][ T8574] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:11> initialized [ 1195.499584][ T5720] usb 8-1: Failed to early initialize device [ 1195.551475][ T5720] usb 8-1: USB disconnect, device number 4 [ 1195.623538][T15942] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1196.508843][T15943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1196.744259][ T8574] usb 7-1: USB disconnect, device number 11 [ 1196.970662][T15955] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.6225946.0), cmd(2) [ 1198.198802][T15987] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1198.784947][T15529] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1198.954225][ T1653] IPVS: stop unused estimator thread 0... [ 1199.015102][T15529] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1199.020129][T15529] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1199.619740][T16002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1200.636066][T16013] 9p: Could not find request transport: –?‡tfdno0x0000000000000008 [ 1200.838547][T15529] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1200.839681][T15529] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1200.866870][T15529] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1200.921683][T15529] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1201.155658][T15529] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1204.531478][ T5591] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1204.570450][T15529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1204.632718][T15529] 8021q: adding VLAN 0 to HW filter on device team0 [ 1204.706289][T15529] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1204.706317][T15529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1204.846481][ T2724] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.912873][ T2724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1205.194039][ T2724] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.231411][ T5591] usb 8-1: Using ep0 maxpacket: 32 [ 1205.248181][ T2724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1205.761963][ T5591] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1205.784171][T16070] 9p: Bad value for 'rfdno' [ 1205.905278][ T5591] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.905337][ T5591] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1205.905363][ T5591] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1205.905390][ T5591] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1206.263124][ T5591] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.263151][ T5591] usb 8-1: Product: syz [ 1206.263163][ T5591] usb 8-1: Manufacturer: syz [ 1206.263174][ T5591] usb 8-1: SerialNumber: syz [ 1206.559730][ C1] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1206.681457][ T5591] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/input/input40 [ 1206.791248][ T5591] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1206.791268][ T5591] (id 0x00) [ 1207.141264][ T5591] rc_core: IR keymap rc-imon-pad not found [ 1207.141286][ T5591] Registered IR keymap rc-empty [ 1207.149631][ T5591] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1207.149655][ T5591] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1208.011506][ T5591] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0 [ 1208.023171][ T5591] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0/input41 [ 1208.092649][ T5591] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:5> initialized [ 1209.247723][ T5804] usb 8-1: USB disconnect, device number 5 [ 1210.638431][T15529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1210.738523][T15529] veth0_vlan: entered promiscuous mode [ 1210.757160][T15529] veth1_vlan: entered promiscuous mode [ 1212.126651][T15529] veth0_macvtap: entered promiscuous mode [ 1212.198496][T15529] veth1_macvtap: entered promiscuous mode [ 1212.337774][T15529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1212.462223][T15529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1212.513776][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.514226][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.514281][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.514307][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.624054][T16132] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(36.6225946.0), cmd(2) [ 1213.472578][T12432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1213.472603][T12432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1214.603373][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1214.603421][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1214.876779][T16156] 9p: Bad value for 'rfdno' [ 1216.994196][T16161] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(36.6225946.0), cmd(2) [ 1217.516992][T16176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1954'. [ 1218.479566][T16197] 9p: Bad value for 'rfdno' [ 1218.550735][T16196] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(36.6225946.0), cmd(2) [ 1218.759175][T16193] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2145'. [ 1220.423991][T16215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2152'. [ 1223.646075][T16245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2159'. [ 1224.887688][T16254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1226.973786][T16286] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2174'. [ 1228.792650][T16300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2181'. [ 1229.593915][T16297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1230.337764][ T37] audit: type=1804 audit(1787593198.018:51): pid=16324 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.5.2185" name="bus" dev="ramfs" ino=73152 res=1 errno=0 [ 1231.425145][T16329] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2186'. [ 1233.013419][T16339] 9p: Could not find request transport: –?‡tfdno0x0000000000000008 [ 1234.692197][T16357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1235.176000][T16371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2200'. [ 1236.434126][ T5591] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1236.484561][T16406] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2213'. [ 1236.646466][ T5591] usb 7-1: Using ep0 maxpacket: 32 [ 1236.646685][ T5804] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1236.677494][ T5591] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1236.678867][ T5591] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.678915][ T5591] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1236.678933][ T5591] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1236.678949][ T5591] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1237.353058][T16407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1237.556145][ T5591] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.556176][ T5591] usb 7-1: Product: syz [ 1237.556191][ T5591] usb 7-1: Manufacturer: syz [ 1237.556219][ T5591] usb 7-1: SerialNumber: syz [ 1237.611860][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1237.629336][ T5591] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input44 [ 1237.681265][ T5804] usb 6-1: Using ep0 maxpacket: 32 [ 1237.682419][ T5804] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1237.687445][ T5804] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.687513][ T5804] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1237.687597][ T5804] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1237.687634][ T5804] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1237.724971][ T5804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.741290][ T5804] usb 6-1: Product: syz [ 1237.741314][ T5804] usb 6-1: Manufacturer: syz [ 1237.741328][ T5804] usb 6-1: SerialNumber: syz [ 1237.838352][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1237.851314][ T5591] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1237.851338][ T5591] (id 0x00) [ 1237.854510][ T5804] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input46 [ 1238.020427][ T5591] rc_core: IR keymap rc-imon-pad not found [ 1238.020451][ T5591] Registered IR keymap rc-empty [ 1238.020588][ T5591] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1238.020607][ T5591] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1238.071235][ T5804] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1238.071259][ T5804] (id 0x00) [ 1238.073525][ T5591] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 1238.356469][ T5591] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input45 [ 1239.095857][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.095940][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.362203][ T5591] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:12> initialized [ 1239.381243][ T5804] rc_core: IR keymap rc-imon-pad not found [ 1239.381266][ T5804] Registered IR keymap rc-empty [ 1239.381348][ T5804] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1239.381375][ T5804] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1239.550793][ T5804] imon:send_packet: packet tx failed (-71) [ 1239.561306][ T5804] imon 6-1:155.0: remote input dev register failed [ 1239.561482][ T5804] imon 6-1:155.0: imon_init_intf0: rc device setup failed [ 1239.840581][ T5804] imon 6-1:155.0: unable to initialize intf0, err 0 [ 1239.840605][ T5804] imon:imon_probe: failed to initialize context! [ 1239.840620][ T5804] imon 6-1:155.0: unable to register, err -19 [ 1239.892300][ T5591] usb 7-1: USB disconnect, device number 12 [ 1239.935355][ T5804] usb 6-1: USB disconnect, device number 4 [ 1240.118446][T16450] 9p: Bad value for 'wfdno' [ 1241.337074][T16459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1241.999033][T16482] 9p: Bad value for 'wfdno' [ 1245.314186][T16510] 9p: Bad value for 'wfdno' [ 1246.433120][T16512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1249.184746][T16581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1249.703250][T16595] 9p: Bad value for 'rfdno' [ 1253.079609][T16621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1253.549900][T16638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2301'. [ 1256.270330][T16677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1257.592175][ T5591] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1257.741199][ T5591] usb 6-1: Using ep0 maxpacket: 32 [ 1257.839617][T16742] batman_adv: batadv0: Adding interface: dummy0 [ 1257.839634][T16742] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1257.839667][T16742] batman_adv: batadv0: Interface activated: dummy0 [ 1257.843544][ T5591] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1257.876182][ T5591] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.876236][ T5591] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1257.876262][ T5591] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1257.876288][ T5591] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1257.905341][ T5591] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.905367][ T5591] usb 6-1: Product: syz [ 1257.905380][ T5591] usb 6-1: Manufacturer: syz [ 1257.905393][ T5591] usb 6-1: SerialNumber: syz [ 1257.997143][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1258.004436][ T5591] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input48 [ 1258.809524][T16744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1259.039048][ T5591] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1259.039069][ T5591] (id 0x00) [ 1259.079960][T16742] batadv0: mtu less than device minimum [ 1259.097620][T16742] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1259.115233][T16742] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1259.122657][T16742] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1259.130106][T16742] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1259.180405][T16742] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1259.237637][T16742] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1259.276077][T16742] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1259.294872][T16742] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1259.299425][T16742] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1259.301211][ T5591] rc_core: IR keymap rc-imon-pad not found [ 1259.301227][ T5591] Registered IR keymap rc-empty [ 1259.302134][ T5591] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1259.302152][ T5591] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1259.326208][ T5591] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 1259.334139][ T5591] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input49 [ 1259.397296][ T5591] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:5> initialized [ 1259.783452][ T9] usb 6-1: USB disconnect, device number 5 [ 1261.449541][T16780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1263.937724][T16840] 9p: Bad value for 'rfdno' [ 1266.149550][T16849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1268.760270][T16888] 9p: Could not find request transport: –?‡tfdno0xffffffffffffffff [ 1268.876647][ T5589] Bluetooth: hci2: command 0x0406 tx timeout [ 1269.208859][T16898] 9p: Bad value for 'rfdno' [ 1271.944147][T16907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1272.553011][T16924] 9p: Bad value for 'rfdno' [ 1275.394967][T16940] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2411'. [ 1275.731544][ T5720] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1275.881729][ T5720] usb 7-1: Using ep0 maxpacket: 32 [ 1275.884260][ T5720] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1275.886240][ T5720] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.886293][ T5720] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1275.886320][ T5720] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1275.886346][ T5720] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1275.953631][ T5720] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.953657][ T5720] usb 7-1: Product: syz [ 1275.953671][ T5720] usb 7-1: Manufacturer: syz [ 1275.953685][ T5720] usb 7-1: SerialNumber: syz [ 1275.992568][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1275.999316][ T5720] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input50 [ 1276.682097][T16957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1277.021252][ T5720] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1277.021274][ T5720] (id 0x00) [ 1277.091329][ T5720] rc_core: IR keymap rc-imon-pad not found [ 1277.091350][ T5720] Registered IR keymap rc-empty [ 1277.091457][ T5720] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1277.091475][ T5720] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1277.222912][ T5720] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 1277.225433][ T5720] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input51 [ 1277.268227][ T5720] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:13> initialized [ 1277.468958][T16944] imon:vfd_write: invalid payload size [ 1277.473705][T16944] imon:vfd_write: invalid payload size [ 1277.791313][ T8574] usb 7-1: USB disconnect, device number 13 [ 1277.855986][T16980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2425'. [ 1278.232849][T16992] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2431'. [ 1279.075767][T16995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1280.070073][T17020] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2442'. [ 1281.684303][T17052] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2455'. [ 1281.685707][T17048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2452'. [ 1281.803614][T17053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2452'. [ 1283.021744][ T5720] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1283.172896][ T5720] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1283.175188][ T5720] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.219304][ T5720] usb 7-1: USB2VGA dongle found at address 14 [ 1283.237114][ T5720] usb 7-1: Allocated 8 output buffers [ 1283.597779][T17082] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2458'. [ 1283.766791][T17079] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2458'. [ 1286.445064][T17105] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2470'. [ 1286.742730][ T5720] usb 7-1: Failed to early initialize device [ 1286.850701][ T5720] usb 7-1: USB disconnect, device number 14 [ 1286.925443][ T37] audit: type=1804 audit(1787593254.628:52): pid=17116 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.5.2476" name="bus" dev="ramfs" ino=75989 res=1 errno=0 [ 1290.281322][T14720] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1290.281497][ T8574] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1290.431368][ T8574] usb 6-1: Using ep0 maxpacket: 32 [ 1290.454014][T14720] usb 8-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1290.485506][T14720] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.487715][ T8574] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1290.489673][ T8574] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.489720][ T8574] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1290.489745][ T8574] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1290.489770][ T8574] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1290.505910][ T8574] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.505937][ T8574] usb 6-1: Product: syz [ 1290.505950][ T8574] usb 6-1: Manufacturer: syz [ 1290.505963][ T8574] usb 6-1: SerialNumber: syz [ 1290.607510][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1290.652316][T14720] usb 8-1: USB2VGA dongle found at address 6 [ 1290.657969][ T8574] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input52 [ 1290.660387][T14720] usb 8-1: Allocated 8 output buffers [ 1290.871412][ T8574] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1290.871438][ T8574] (id 0x00) [ 1291.016926][T17151] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2484'. [ 1291.195135][T17151] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2484'. [ 1291.251411][ T8574] rc_core: IR keymap rc-imon-pad not found [ 1291.251436][ T8574] Registered IR keymap rc-empty [ 1291.251617][ T8574] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1291.251708][ T8574] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1292.077780][T17160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1292.606507][ T8574] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 1292.693763][ T8574] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input53 [ 1292.727214][ T8574] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:6> initialized [ 1292.877800][ T8574] usb 6-1: USB disconnect, device number 6 [ 1293.566855][T17182] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2496'. [ 1293.640356][T17183] syzkaller1: entered promiscuous mode [ 1293.640475][T17183] syzkaller1: entered allmulticast mode [ 1293.787578][T14720] usb 8-1: Failed to early initialize device [ 1293.923119][T14720] usb 8-1: USB disconnect, device number 6 [ 1294.371310][ T5589] Bluetooth: hci4: command 0x0419 tx timeout [ 1295.608816][T17206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1296.148894][ T37] audit: type=1804 audit(1787593263.858:53): pid=17214 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.2508" name="bus" dev="ramfs" ino=76169 res=1 errno=0 [ 1296.331799][T17212] batman_adv: batadv0: Adding interface: dummy0 [ 1296.331817][T17212] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.331851][T17212] batman_adv: batadv0: Interface activated: dummy0 [ 1296.451839][T13912] Bluetooth: hci4: command 0x0419 tx timeout [ 1296.465777][T17212] net_ratelimit: 10 callbacks suppressed [ 1296.465796][T17212] batadv0: mtu less than device minimum [ 1296.510818][T17212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1296.527812][T17212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1296.687817][T17212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1296.719436][T17212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1296.727817][T17212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1296.736112][T17212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1296.749718][T17212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1296.766583][T17212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1296.795159][T17212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1296.831254][T11085] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1297.882111][T11085] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1297.883912][T11085] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.955538][T11085] usb 6-1: USB2VGA dongle found at address 7 [ 1297.977365][T11085] usb 6-1: Allocated 8 output buffers [ 1297.981504][ T9538] Bluetooth: hci5: command 0x0c1a tx timeout [ 1298.341751][T17234] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2509'. [ 1298.396879][T17237] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2509'. [ 1300.170113][ T5589] Bluetooth: hci5: command 0x0c1a tx timeout [ 1301.228089][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.228237][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.297505][T11085] usb 6-1: Failed to early initialize device [ 1301.366663][T11085] usb 6-1: USB disconnect, device number 7 [ 1301.615245][ T37] audit: type=1804 audit(1787593269.328:54): pid=17265 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.5.2525" name="bus" dev="ramfs" ino=76283 res=1 errno=0 [ 1303.751012][T17300] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2538'. [ 1303.811411][ T5711] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1303.867599][T17302] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2539'. [ 1304.094408][ T5711] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1304.097831][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.150937][ T5711] usb 3-1: USB2VGA dongle found at address 28 [ 1304.164599][ T5711] usb 3-1: Allocated 8 output buffers [ 1304.209424][ T37] audit: type=1804 audit(1787593271.918:55): pid=17308 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.6.2543" name="bus" dev="ramfs" ino=76934 res=1 errno=0 [ 1304.353515][T17311] syzkaller0: entered promiscuous mode [ 1304.353540][T17311] syzkaller0: entered allmulticast mode [ 1304.358785][T17311] tipc: Started in network mode [ 1304.358813][T17311] tipc: Node identity dad14c057fdc, cluster identity 4711 [ 1304.461084][T17311] tipc: Enabled bearer , priority 0 [ 1304.466232][T17311] tipc: Resetting bearer [ 1304.554666][T17309] tipc: Resetting bearer [ 1304.931777][T17314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2535'. [ 1305.074995][T17314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2535'. [ 1305.471284][ T37] audit: type=1804 audit(1787593273.118:56): pid=17324 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.2546" name="bus" dev="ramfs" ino=77039 res=1 errno=0 [ 1306.107346][T17309] tipc: Disabling bearer [ 1306.163326][T17326] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2549'. [ 1307.058179][T11085] tipc: Node number set to 2769112069 [ 1307.233655][T17338] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2551'. [ 1308.573734][ T5711] usb 3-1: Failed to early initialize device [ 1308.836617][ T5711] usb 3-1: USB disconnect, device number 28 [ 1311.041281][ T6087] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1311.192148][ T6087] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1311.193759][ T6087] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.268561][ T6087] usb 1-1: USB2VGA dongle found at address 39 [ 1311.303100][ T6087] usb 1-1: Allocated 8 output buffers [ 1312.571010][T17375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2566'. [ 1312.655253][T17385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2566'. [ 1312.731259][T10631] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1312.881587][T10631] usb 7-1: Using ep0 maxpacket: 32 [ 1312.882944][T10631] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1312.884976][T10631] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.885032][T10631] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1312.885291][T10631] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1312.885321][T10631] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1312.889735][T10631] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.889759][T10631] usb 7-1: Product: syz [ 1312.890011][T10631] usb 7-1: Manufacturer: syz [ 1312.890029][T10631] usb 7-1: SerialNumber: syz [ 1313.032078][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1313.066033][T10631] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input54 [ 1313.166455][ T6087] usb 1-1: Failed to early initialize device [ 1313.221882][ T6087] usb 1-1: USB disconnect, device number 39 [ 1313.271351][T10631] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1313.271375][T10631] (id 0x00) [ 1313.371302][T10631] rc_core: IR keymap rc-imon-pad not found [ 1313.371328][T10631] Registered IR keymap rc-empty [ 1313.371423][T10631] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1313.371441][T10631] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1313.478152][T10631] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 1313.493435][T10631] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input55 [ 1313.500665][T10631] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:15> initialized [ 1313.702857][T17392] imon:vfd_write: invalid payload size [ 1313.703639][T17392] imon:vfd_write: invalid payload size [ 1313.840440][T17405] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2573'. [ 1314.098167][T10631] usb 7-1: USB disconnect, device number 15 [ 1317.796255][T17441] syzkaller0: entered promiscuous mode [ 1317.796285][T17441] syzkaller0: entered allmulticast mode [ 1317.887108][T17441] tipc: Started in network mode [ 1317.887146][T17441] tipc: Node identity 3a8f2ab2436, cluster identity 4711 [ 1317.902654][T17441] tipc: Enabled bearer , priority 0 [ 1317.910343][T17441] tipc: Resetting bearer [ 1317.961485][T17440] tipc: Resetting bearer [ 1318.382533][T17440] tipc: Disabling bearer [ 1321.164740][ T5804] tipc: Node number set to 2045717170 [ 1328.754542][T17561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1331.561267][T14720] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1331.927596][ T5589] Bluetooth: hci3: command 0x0419 tx timeout [ 1331.929728][T14720] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 1331.948172][T14720] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.948196][T14720] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1331.950760][T14720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.950784][T14720] usb 3-1: Product: syz [ 1331.950798][T14720] usb 3-1: Manufacturer: syz [ 1331.950811][T14720] usb 3-1: SerialNumber: syz [ 1333.933262][T14720] usb 3-1: 0:2 : does not exist [ 1333.972117][ T9538] Bluetooth: hci3: command 0x0419 tx timeout [ 1334.671944][T11085] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1335.680003][T11085] usb 7-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 1335.909040][T11085] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.909227][T11085] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1336.422966][T11085] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.422996][T11085] usb 7-1: Product: syz [ 1336.423011][T11085] usb 7-1: Manufacturer: syz [ 1336.423026][T11085] usb 7-1: SerialNumber: syz [ 1336.469608][T17613] 9p: Could not find request transport: –?‡tfdno0x0000000000000008 [ 1336.758132][T14720] usb 3-1: USB disconnect, device number 29 [ 1337.298689][T17629] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2648'. [ 1339.674642][T17644] 9p: Could not find request transport: –?‡tfdno0x0000000000000008 [ 1339.832437][T11085] usb 7-1: 0:2 : does not exist [ 1340.206640][T17654] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2654'. [ 1341.092825][T11085] usb 7-1: USB disconnect, device number 16 [ 1341.537129][T17652] 9p: Could not find request transport: –?‡tfdno0xffffffffffffffff [ 1341.568624][T17607] udevd[17607]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1343.022827][T17684] 9p: Could not find request transport: –?‡tfdno0x0000000000000008 [ 1343.131373][T17675] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1346.532857][T17713] 9p: Could not find request transport: –?‡tfdno0x0000000000000008 [ 1346.675740][T17721] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2676'. [ 1346.753617][T17711] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2673'. [ 1347.054414][ T37] audit: type=1804 audit(1787593314.768:57): pid=17727 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.2677" name="bus" dev="ramfs" ino=77668 res=1 errno=0 [ 1347.837057][T17738] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.886150][T17738] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.629475][T17761] 9p: Could not find request transport: –?‡tfdno0x0000000000000008 [ 1352.412191][T17790] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1353.721328][T10631] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1353.799588][T17803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2701'. [ 1353.892234][T10631] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1353.894883][T10631] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1353.894917][T10631] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1353.894942][T10631] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1353.894983][T10631] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.922209][T10631] usb 8-1: config 0 descriptor?? [ 1354.685248][T10631] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1354.881796][T14720] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1355.096539][T14720] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1355.100416][T14720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.164989][T14720] usb 6-1: USB2VGA dongle found at address 8 [ 1355.178409][T14720] usb 6-1: Allocated 8 output buffers [ 1355.884228][T17820] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2703'. [ 1355.901335][T10631] usb 8-1: reset high-speed USB device number 7 using dummy_hcd [ 1356.041450][T10631] usb 8-1: device descriptor read/64, error -32 [ 1356.051069][T17824] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2703'. [ 1357.740161][T16162] usb 8-1: USB disconnect, device number 7 [ 1357.749157][T17837] 9p: Could not find request transport: –?‡tfdno0x0000000000000008 [ 1358.214591][T14720] usb 6-1: Failed to early initialize device [ 1358.282955][T14720] usb 6-1: USB disconnect, device number 8 [ 1359.914197][T17867] 9p: Could not find request transport: –?‡tfdno0x0000000000000008 [ 1360.741293][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1360.896356][ T9] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1360.906538][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.952600][ T9] usb 6-1: USB2VGA dongle found at address 9 [ 1360.967499][ T9] usb 6-1: Allocated 8 output buffers [ 1361.428053][T17908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2739'. [ 1361.722270][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.723033][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.548288][T17877] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2725'. [ 1362.615362][T17903] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2725'. [ 1363.016732][ T9] usb 6-1: Failed to early initialize device [ 1363.070989][ T9] usb 6-1: USB disconnect, device number 9 [ 1365.441332][T14720] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1365.494531][T18008] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2780'. [ 1365.594217][T14720] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1365.597523][T14720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.694483][T14720] usb 6-1: USB2VGA dongle found at address 10 [ 1366.774890][T14720] usb 6-1: Allocated 8 output buffers [ 1366.779320][T18022] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2783'. [ 1366.912422][T18020] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2772'. [ 1367.036243][T18017] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2772'. [ 1367.070794][T18035] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2790'. [ 1367.469187][T18043] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2793'. [ 1368.098289][T14720] usb 6-1: Failed to early initialize device [ 1369.141375][T14720] usb 6-1: USB disconnect, device number 10 [ 1369.954092][T18087] batman_adv: batadv0: Interface deactivated: dummy0 [ 1369.954125][T18087] batman_adv: batadv0: Removing interface: dummy0 [ 1370.542400][T14720] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1370.912064][T14720] usb 8-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1370.913678][T14720] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.978854][T14720] usb 8-1: USB2VGA dongle found at address 8 [ 1372.007366][T14720] usb 8-1: Allocated 8 output buffers [ 1372.355808][T18115] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2817'. [ 1372.467309][T18115] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2817'. [ 1373.412716][T14720] usb 8-1: Failed to early initialize device [ 1373.471562][T14720] usb 8-1: USB disconnect, device number 8 [ 1377.031705][T18194] 9p: Could not find request transport: –?‡tfdno0xffffffffffffffff [ 1383.701298][T11085] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1384.031965][T11085] usb 3-1: Using ep0 maxpacket: 16 [ 1384.091428][T11085] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1384.197971][T11085] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1384.198029][T11085] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1384.198056][T11085] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1384.198082][T11085] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1384.251385][T11085] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.251412][T11085] usb 3-1: Product: syz [ 1384.251427][T11085] usb 3-1: Manufacturer: syz [ 1384.251440][T11085] usb 3-1: SerialNumber: syz [ 1384.308797][T11085] usb 3-1: config 0 descriptor?? [ 1387.208768][T11085] appledisplay 3-1:0.0: Error while getting initial brightness: -71 [ 1387.240070][T11085] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -71 [ 1387.263207][T11085] usb 3-1: USB disconnect, device number 30 [ 1390.745595][T18327] 9p: Could not find request transport: –?‡tfdno0xffffffffffffffff [ 1392.081449][ T6087] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1392.231661][ T6087] usb 3-1: Using ep0 maxpacket: 16 [ 1392.232563][ T6087] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1392.236962][ T6087] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1392.237016][ T6087] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1392.237044][ T6087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1392.237070][ T6087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1392.240148][ T6087] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.240172][ T6087] usb 3-1: Product: syz [ 1392.240185][ T6087] usb 3-1: Manufacturer: syz [ 1392.240199][ T6087] usb 3-1: SerialNumber: syz [ 1392.260406][ T6087] usb 3-1: config 0 descriptor?? [ 1392.576950][ T6087] appledisplay 3-1:0.0: Error while getting initial brightness: -71 [ 1392.579982][ T6087] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -71 [ 1392.589604][ T6087] usb 3-1: USB disconnect, device number 31 [ 1396.538319][T18389] 9p: Could not find request transport: –?‡tfdno0xffffffffffffffff [ 1404.457067][T18469] 9p: Could not find request transport: –?‡tfdno0xffffffffffffffff [ 1411.879907][T18532] hub 8-0:1.0: USB hub found [ 1411.897943][T18532] hub 8-0:1.0: 1 port detected [ 1414.082123][T18556] 9p: Could not find request transport: –?‡tfdno0xffffffffffffffff [ 1415.984875][T18607] hub 8-0:1.0: USB hub found [ 1415.989489][T18607] hub 8-0:1.0: 1 port detected [ 1416.103489][ T5591] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1416.752635][ T5591] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 1416.755231][ T5591] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1416.755254][ T5591] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1416.761015][ T5591] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.761038][ T5591] usb 3-1: Product: syz [ 1416.761052][ T5591] usb 3-1: Manufacturer: syz [ 1416.761064][ T5591] usb 3-1: SerialNumber: syz [ 1416.811248][ T6087] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1416.962555][ T6087] usb 7-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 1416.963915][ T6087] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1416.963938][ T6087] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1416.968115][ T6087] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.968147][ T6087] usb 7-1: Product: syz [ 1416.968162][ T6087] usb 7-1: Manufacturer: syz [ 1416.968174][ T6087] usb 7-1: SerialNumber: syz [ 1417.205637][ T5591] usb 3-1: 0:2 : does not exist [ 1418.671989][ T6087] usb 7-1: 0:1 : does not exist [ 1418.672014][ T6087] usb 7-1: 0:2 : does not exist [ 1420.703647][ T5591] usb 3-1: USB disconnect, device number 32 [ 1422.151654][ T6087] usb 7-1: USB disconnect, device number 17 [ 1423.161950][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.162044][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1426.220399][T18609] udevd[18609]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1428.452428][ T9538] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1428.513961][ T9538] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1428.522267][ T9538] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1428.529178][ T9538] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1428.529931][ T9538] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1430.845436][ T9538] Bluetooth: hci0: command tx timeout [ 1432.851397][ T9538] Bluetooth: hci0: command tx timeout [ 1434.941553][ T9538] Bluetooth: hci0: command tx timeout [ 1437.011766][ T9538] Bluetooth: hci0: command tx timeout [ 1437.097814][T18691] bridge0: port 1(bridge_slave_0) entered blocking state [ 1437.098002][T18691] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.098206][T18691] bridge_slave_0: entered allmulticast mode [ 1437.100601][T18691] bridge_slave_0: entered promiscuous mode [ 1437.131974][T18691] bridge0: port 2(bridge_slave_1) entered blocking state [ 1437.132160][T18691] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.132327][T18691] bridge_slave_1: entered allmulticast mode [ 1437.135010][T18691] bridge_slave_1: entered promiscuous mode [ 1437.214453][T18691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1437.236068][T18691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1437.385140][T18691] team0: Port device team_slave_0 added [ 1437.412972][T18691] team0: Port device team_slave_1 added [ 1437.659452][T18817] Driver unsupported XDP return value 0 on prog (id 179) dev N/A, expect packet loss! [ 1437.694844][T18691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1437.694856][T18691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1437.694870][T18691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1437.700069][T18691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1437.700084][T18691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1437.700108][T18691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1438.037134][T18691] hsr_slave_0: entered promiscuous mode [ 1438.987583][T18691] hsr_slave_1: entered promiscuous mode [ 1438.988086][T18691] debugfs: 'hsr0' already exists in 'hsr' [ 1438.988100][T18691] Cannot create hsr debugfs directory [ 1440.032265][T18833] hub 8-0:1.0: USB hub found [ 1440.068927][T18833] hub 8-0:1.0: 1 port detected [ 1441.193618][T18842] 9p: Could not find request transport: –?‡tfdno0xffffffffffffffff [ 1441.618230][T18849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3052'. [ 1445.581660][T18884] hub 8-0:1.0: USB hub found [ 1445.583670][T18884] hub 8-0:1.0: 1 port detected [ 1447.614455][T18888] 9p: Could not find request transport: –?‡tfdno0xffffffffffffffff [ 1452.058772][T18930] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3071'. [ 1452.220569][T18936] hub 8-0:1.0: USB hub found [ 1452.222784][T18936] hub 8-0:1.0: 1 port detected [ 1453.413047][T18941] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3074'. [ 1457.676498][T18691] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1458.048956][T18691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1458.062890][T18691] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1458.132445][T18691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1458.134674][T18691] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1458.338823][T18691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1458.363610][T18691] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1458.466064][T18691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1458.787515][ T5589] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1458.845410][ T5589] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1458.865842][ T5589] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1458.896319][ T5589] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1458.932278][ T5589] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1459.495829][T18691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1459.553249][T18691] 8021q: adding VLAN 0 to HW filter on device team0 [ 1461.091449][ T9538] Bluetooth: hci5: command tx timeout [ 1461.127778][T19008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3085'. [ 1461.149837][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.149982][ T5800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1461.204786][T10151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1461.204862][T10151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1462.355112][T19034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3096'. [ 1462.355142][T19034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3096'. [ 1462.384389][T19034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3096'. [ 1462.384421][T19034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3096'. [ 1462.588985][T16118] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.573984][T19040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1463.678307][ T9538] Bluetooth: hci5: command tx timeout [ 1465.265859][T16118] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.500200][T19063] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3101'. [ 1465.753957][ T9538] Bluetooth: hci5: command tx timeout [ 1468.425577][ T9538] Bluetooth: hci5: command tx timeout [ 1468.664463][T16118] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.219074][T16118] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.454129][T19094] hub 8-0:1.0: USB hub found [ 1469.459722][T19094] hub 8-0:1.0: 1 port detected [ 1470.560243][T19098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3112'. [ 1472.710113][T18691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1473.059879][T18993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.060122][T18993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.060624][T18993] bridge_slave_0: entered allmulticast mode [ 1473.084098][T18993] bridge_slave_0: entered promiscuous mode [ 1473.087652][T18993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.087875][T18993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.088064][T18993] bridge_slave_1: entered allmulticast mode [ 1473.090744][T18993] bridge_slave_1: entered promiscuous mode [ 1473.224940][T18993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1473.229287][T18993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1473.561815][T16118] bridge_slave_1: left allmulticast mode [ 1473.561849][T16118] bridge_slave_1: left promiscuous mode [ 1473.562129][T16118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.567283][T19136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3121'. [ 1474.696436][T16118] bridge_slave_0: left allmulticast mode [ 1474.696473][T16118] bridge_slave_0: left promiscuous mode [ 1474.696799][T16118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.182719][T16118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1478.269360][T16118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1478.304335][T16118] bond0 (unregistering): Released all slaves [ 1478.324049][T16118] bond1 (unregistering): Released all slaves [ 1478.446212][T18993] team0: Port device team_slave_0 added [ 1478.683474][T19182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3130'. [ 1478.689700][T18993] team0: Port device team_slave_1 added [ 1479.170817][T18993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1479.170834][T18993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1479.170859][T18993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1480.016816][T18993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1480.016832][T18993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1480.016858][T18993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1483.121071][ T5242] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1484.309752][T19233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3140'. [ 1484.381839][T18993] hsr_slave_0: entered promiscuous mode [ 1484.386921][T18993] hsr_slave_1: entered promiscuous mode [ 1484.390888][T18993] debugfs: 'hsr0' already exists in 'hsr' [ 1484.390913][T18993] Cannot create hsr debugfs directory [ 1484.611527][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.611598][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.893492][T18691] veth0_vlan: entered promiscuous mode [ 1486.024489][T18691] veth1_vlan: entered promiscuous mode [ 1487.579067][T19276] hub 8-0:1.0: USB hub found [ 1487.584544][T19276] hub 8-0:1.0: 1 port detected [ 1488.432100][T16118] hsr_slave_0: left promiscuous mode [ 1488.475753][T16118] hsr_slave_1: left promiscuous mode [ 1488.477041][T16118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1488.477062][T16118] net_ratelimit: 10 callbacks suppressed [ 1488.477074][T16118] batadv0: mtu less than device minimum [ 1489.753035][T16118] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1489.800979][T16118] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1489.844132][T16118] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1489.903839][T16118] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1489.932190][T16118] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1489.940518][T16118] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1490.021867][T16118] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1490.029554][ T5589] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1490.072463][T16118] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1490.111984][ T5589] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1490.116854][T16118] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1490.119134][ T5589] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1490.130694][ T5589] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1490.141683][ T5589] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1490.377399][T16118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1490.415175][T16118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1490.749060][T16118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1490.762308][T16118] batman_adv: batadv0: Interface deactivated: dummy0 [ 1490.762334][T16118] batman_adv: batadv0: Removing interface: dummy0 [ 1490.895466][T16118] veth1_macvtap: left promiscuous mode [ 1490.895535][T16118] veth0_macvtap: left promiscuous mode [ 1490.895677][T16118] veth1_vlan: left promiscuous mode [ 1490.909705][T16118] veth0_vlan: left promiscuous mode [ 1490.973791][T19310] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3150'. [ 1491.373611][T19319] hub 8-0:1.0: USB hub found [ 1491.376046][T19319] hub 8-0:1.0: 1 port detected [ 1492.211738][ T9538] Bluetooth: hci1: command tx timeout [ 1494.011808][T16118] team0 (unregistering): Port device team_slave_1 removed [ 1494.293017][T16118] team0 (unregistering): Port device team_slave_0 removed [ 1494.449193][ T9538] Bluetooth: hci1: command tx timeout [ 1494.586602][ T5242] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1495.252562][T19344] hub 8-0:1.0: USB hub found [ 1495.254468][T19344] hub 8-0:1.0: 1 port detected [ 1497.258921][ T9538] Bluetooth: hci1: command tx timeout [ 1499.472936][ T9538] Bluetooth: hci1: command tx timeout [ 1500.278844][T19380] hub 8-0:1.0: USB hub found [ 1500.280918][T19380] hub 8-0:1.0: 1 port detected [ 1503.056643][T19393] hub 8-0:1.0: USB hub found [ 1503.058445][T19393] hub 8-0:1.0: 1 port detected [ 1505.536484][ T5242] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1505.541721][T18993] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1505.613820][T18993] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1505.682454][T18993] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1505.797856][T18993] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1506.971481][T16162] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1507.220531][T16162] usb 3-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=db.82 [ 1507.229217][T16162] usb 3-1: config 43 interface 0 has no altsetting 0 [ 1507.233017][T16162] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.233045][T16162] usb 3-1: Product: syz [ 1507.233059][T16162] usb 3-1: Manufacturer: syz [ 1507.233072][T16162] usb 3-1: SerialNumber: syz [ 1507.469698][T16162] usb 3-1: dvb_usb_v2: found a 'Anysee' in warm state [ 1507.470201][T16162] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1507.470333][T16162] dvb_usb_anysee 3-1:43.0: probe with driver dvb_usb_anysee failed with error -22 [ 1507.477148][T16162] usb 3-1: USB disconnect, device number 33 [ 1507.598822][T18993] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1507.634004][T18993] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1507.667116][T18993] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1507.696162][T18993] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1514.245383][ T5242] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1515.665802][T19512] hub 8-0:1.0: USB hub found [ 1515.666165][T19512] hub 8-0:1.0: 1 port detected [ 1516.586104][T19294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.586196][T19294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.586325][T19294] bridge_slave_0: entered allmulticast mode [ 1516.594056][T19294] bridge_slave_0: entered promiscuous mode [ 1516.742266][T19527] hub 8-0:1.0: USB hub found [ 1516.781707][T19527] hub 8-0:1.0: 1 port detected [ 1518.093140][T19294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.093262][T19294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.093463][T19294] bridge_slave_1: entered allmulticast mode [ 1518.638053][T19294] bridge_slave_1: entered promiscuous mode [ 1519.100624][T19294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1519.135650][T19294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1519.233531][T19294] team0: Port device team_slave_0 added [ 1519.239961][T19294] team0: Port device team_slave_1 added [ 1519.419740][ T5589] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1519.477246][ T5589] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1519.491543][ T5589] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1519.525856][ T5589] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1519.536266][ T5589] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1520.397805][T19294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1520.397825][T19294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1520.397848][T19294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1520.825675][T19294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1520.825692][T19294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1520.825707][T19294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1521.316618][ T5804] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1521.991753][ T9538] Bluetooth: hci0: command tx timeout [ 1522.182234][ T5804] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1522.183158][ T5804] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1522.183192][ T5804] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1522.183205][ T5804] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1522.183219][ T5804] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1522.183249][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.803255][T19582] hub 8-0:1.0: USB hub found [ 1522.805438][T19582] hub 8-0:1.0: 1 port detected [ 1523.523297][ T5804] gud 3-1:1.0: probe with driver gud failed with error -71 [ 1523.560410][ T5804] usb 3-1: USB disconnect, device number 34 [ 1523.902362][T19294] hsr_slave_0: entered promiscuous mode [ 1523.905544][T19294] hsr_slave_1: entered promiscuous mode [ 1523.908502][T19294] debugfs: 'hsr0' already exists in 'hsr' [ 1523.908527][T19294] Cannot create hsr debugfs directory [ 1524.061348][ T9538] Bluetooth: hci0: command tx timeout [ 1524.331433][T16162] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1524.349569][ T5779] bridge_slave_1: left allmulticast mode [ 1524.349597][ T5779] bridge_slave_1: left promiscuous mode [ 1524.366834][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.485910][T16162] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1524.485974][T16162] usb 6-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 1524.489499][T16162] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.489527][T16162] usb 6-1: Product: syz [ 1524.489583][T16162] usb 6-1: Manufacturer: syz [ 1524.489591][T16162] usb 6-1: SerialNumber: syz [ 1524.553699][ T5779] bridge_slave_0: left allmulticast mode [ 1524.553739][ T5779] bridge_slave_0: left promiscuous mode [ 1524.554008][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.711279][T17165] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1524.898914][T17165] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 1524.900802][T17165] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1524.900831][T17165] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1524.946287][T17165] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.946319][T17165] usb 3-1: Product: syz [ 1524.946335][T17165] usb 3-1: Manufacturer: syz [ 1524.946352][T17165] usb 3-1: SerialNumber: syz [ 1525.134008][T16162] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1525.134155][T16162] usb 6-1: MIDIStreaming interface descriptor not found [ 1525.265290][T19605] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1525.542038][T17165] usb 3-1: 0:2 : does not exist [ 1525.567840][T16162] usb 6-1: USB disconnect, device number 11 [ 1525.671246][T11085] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1525.730986][T17165] usb 3-1: USB disconnect, device number 35 [ 1525.892278][T11085] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 1525.893510][T11085] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1525.893533][T11085] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1525.895653][T11085] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.895677][T11085] usb 1-1: Product: syz [ 1525.895690][T11085] usb 1-1: Manufacturer: syz [ 1525.895704][T11085] usb 1-1: SerialNumber: syz [ 1526.123369][T19611] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1526.136188][ T9538] Bluetooth: hci0: command tx timeout [ 1526.202003][T19620] udevd[19620]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1526.375472][T19624] hub 8-0:1.0: USB hub found [ 1526.375968][T19624] hub 8-0:1.0: 1 port detected [ 1526.540237][T11085] usb 1-1: 0:2 : does not exist [ 1526.626972][T11085] usb 1-1: USB disconnect, device number 40 [ 1526.690900][T19612] udevd[19612]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1526.830140][T19617] udevd[19617]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1527.021856][ T5779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1527.132156][ T5779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1527.190075][ T5779] bond0 (unregistering): Released all slaves [ 1528.235835][ T9538] Bluetooth: hci0: command tx timeout [ 1529.261981][ T5779] hsr_slave_0: left promiscuous mode [ 1529.310153][ T5779] hsr_slave_1: left promiscuous mode [ 1529.317103][ T5779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1529.345045][ T5779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1529.476916][ T5779] veth1_vlan: left promiscuous mode [ 1529.477080][ T5779] veth0_vlan: left promiscuous mode [ 1532.034308][ T5779] team0 (unregistering): Port device team_slave_1 removed [ 1532.071843][ T5779] team0 (unregistering): Port device team_slave_0 removed [ 1532.771375][ T6087] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1533.027036][ T6087] usb 1-1: Using ep0 maxpacket: 32 [ 1533.029778][ T6087] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1533.030887][ T6087] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1533.033054][ T6087] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1533.033080][ T6087] usb 1-1: Product: syz [ 1533.033095][ T6087] usb 1-1: Manufacturer: syz [ 1533.033109][ T6087] usb 1-1: SerialNumber: syz [ 1533.087999][ T6087] usb 1-1: config 0 descriptor?? [ 1533.089190][T19657] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1533.091622][ T6087] hub 1-1:0.0: bad descriptor, ignoring hub [ 1533.091657][ T6087] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1533.819524][T19657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1533.820161][T19657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1534.443516][T16162] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1534.614858][T16162] usb 3-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1534.615847][T16162] usb 3-1: config 118 interface 0 has no altsetting 0 [ 1534.617680][T16162] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.617694][T16162] usb 3-1: Product: syz [ 1534.617702][T16162] usb 3-1: Manufacturer: syz [ 1534.617710][T16162] usb 3-1: SerialNumber: syz [ 1534.874859][T16162] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state. [ 1535.059846][T16162] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1535.061740][T16162] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e) [ 1535.061869][T16162] usb 3-1: media controller created [ 1535.224369][T16162] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1535.618271][T16162] DVB: Unable to find symbol mt352_attach() [ 1535.618416][T16162] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e' [ 1535.655699][ T5242] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1535.694247][T16162] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input58 [ 1535.778362][T16162] dvb-usb: schedule remote query interval to 100 msecs. [ 1535.778388][T16162] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected. [ 1535.924565][ T6087] m920x_read = error: -71 [ 1535.924668][ T6087] dvb-usb: error while querying for an remote control event. [ 1535.927394][T16162] dvb_usb_m920x 3-1:118.0: probe with driver dvb_usb_m920x failed with error -71 [ 1535.940244][T16162] usb 3-1: USB disconnect, device number 36 [ 1536.041568][ T6087] m920x_read = error: -19 [ 1536.041593][ T6087] dvb-usb: error while querying for an remote control event. [ 1536.162774][ T6087] m920x_read = error: -19 [ 1536.162800][ T6087] dvb-usb: error while querying for an remote control event. [ 1536.215405][T19541] bridge0: port 1(bridge_slave_0) entered blocking state [ 1536.216525][T19541] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.217079][T19541] bridge_slave_0: entered allmulticast mode [ 1536.259272][T19541] bridge_slave_0: entered promiscuous mode [ 1536.291350][ T5720] m920x_read = error: -19 [ 1536.291378][ T5720] dvb-usb: error while querying for an remote control event. [ 1536.299461][T19541] bridge0: port 2(bridge_slave_1) entered blocking state [ 1536.299586][T19541] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.300014][T19541] bridge_slave_1: entered allmulticast mode [ 1536.302510][T16162] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1536.388081][T19541] bridge_slave_1: entered promiscuous mode [ 1536.403014][ T6087] m920x_read = error: -19 [ 1536.403039][ T6087] dvb-usb: error while querying for an remote control event. [ 1536.462221][T16162] usb 3-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1536.463937][T16162] usb 3-1: config 118 interface 0 has no altsetting 0 [ 1536.467050][T16162] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.467075][T16162] usb 3-1: Product: syz [ 1536.467090][T16162] usb 3-1: Manufacturer: syz [ 1536.467105][T16162] usb 3-1: SerialNumber: syz [ 1536.758797][ T6087] m920x_read = error: -19 [ 1536.758824][ T6087] dvb-usb: error while querying for an remote control event. [ 1537.585457][T16162] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state. [ 1537.585795][ T5586] m920x_read = error: -19 [ 1537.585811][ T5586] dvb-usb: error while querying for an remote control event. [ 1537.701925][ T6087] m920x_read = error: -19 [ 1537.701951][ T6087] dvb-usb: error while querying for an remote control event. [ 1537.727054][T19541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1537.792412][T16162] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1537.793317][T16162] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e) [ 1537.793383][T16162] usb 3-1: media controller created [ 1537.801862][T19541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1537.838566][ T6087] m920x_read = error: -19 [ 1537.838589][ T6087] dvb-usb: error while querying for an remote control event. [ 1537.859782][T16162] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1537.941286][ T5586] m920x_read = error: -19 [ 1537.941311][ T5586] dvb-usb: error while querying for an remote control event. [ 1538.053064][ T5586] m920x_read = error: -19 [ 1538.053088][ T5586] dvb-usb: error while querying for an remote control event. [ 1538.087468][T16162] DVB: Unable to find symbol mt352_attach() [ 1538.087484][T16162] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e' [ 1538.126632][T16162] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input59 [ 1538.149352][T16162] dvb-usb: schedule remote query interval to 100 msecs. [ 1538.149376][T16162] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected. [ 1538.168849][ T5586] m920x_read = error: -19 [ 1538.168889][ T5586] dvb-usb: error while querying for an remote control event. [ 1538.271366][ T6087] m920x_read = error: -19 [ 1538.271450][ T6087] dvb-usb: error while querying for an remote control event. [ 1538.383357][ T6087] m920x_read = error: -19 [ 1538.383386][ T6087] dvb-usb: error while querying for an remote control event. [ 1538.501284][ T6087] m920x_read = error: -19 [ 1538.501504][ T6087] dvb-usb: error while querying for an remote control event. [ 1538.603374][T19677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.604207][T19677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1538.607620][ T5586] m920x_read = error: -32 [ 1538.607635][ T5586] dvb-usb: error while querying for an remote control event. [ 1538.641009][ T5720] m920x_read = error: -19 [ 1538.641033][ T5720] dvb-usb: error while querying for an remote control event. [ 1538.729922][T19541] team0: Port device team_slave_0 added [ 1538.754030][T19541] team0: Port device team_slave_1 added [ 1538.787533][ T5586] m920x_read = error: -19 [ 1538.787558][ T5586] dvb-usb: error while querying for an remote control event. [ 1538.893158][ T5586] m920x_read = error: -19 [ 1538.893173][ T5586] dvb-usb: error while querying for an remote control event. [ 1539.001357][ T5720] m920x_read = error: -19 [ 1539.001383][ T5720] dvb-usb: error while querying for an remote control event. [ 1539.024438][ T6087] m920x_read = error: -71 [ 1539.024462][ T6087] dvb-usb: error while querying for an remote control event. [ 1539.024584][T16162] dvb_usb_m920x 3-1:118.0: probe with driver dvb_usb_m920x failed with error -71 [ 1539.074961][T16162] usb 3-1: USB disconnect, device number 37 [ 1539.122891][ T6087] m920x_read = error: -19 [ 1539.122914][ T6087] dvb-usb: error while querying for an remote control event. [ 1539.141292][ T6087] m920x_read = error: -19 [ 1539.141315][ T6087] dvb-usb: error while querying for an remote control event. [ 1539.234476][ T6087] m920x_read = error: -19 [ 1539.234501][ T6087] dvb-usb: error while querying for an remote control event. [ 1539.254379][ T6087] m920x_read = error: -19 [ 1539.254402][ T6087] dvb-usb: error while querying for an remote control event. [ 1539.352945][ T6087] m920x_read = error: -19 [ 1539.352971][ T6087] dvb-usb: error while querying for an remote control event. [ 1539.363285][ T6087] m920x_read = error: -19 [ 1539.363310][ T6087] dvb-usb: error while querying for an remote control event. [ 1541.776626][T19749] Bluetooth: MGMT ver 1.23 [ 1542.392005][T16162] m920x_read = error: -19 [ 1542.392030][T16162] dvb-usb: error while querying for an remote control event. [ 1542.392103][T16162] m920x_read = error: -19 [ 1542.392121][T16162] dvb-usb: error while querying for an remote control event. [ 1542.570415][T16162] m920x_read = error: -19 [ 1542.570447][T16162] dvb-usb: error while querying for an remote control event. [ 1542.570525][T16162] m920x_read = error: -19 [ 1542.570544][T16162] dvb-usb: error while querying for an remote control event. [ 1542.712066][T16162] m920x_read = error: -19 [ 1542.712104][T16162] dvb-usb: error while querying for an remote control event. [ 1542.712178][T16162] m920x_read = error: -19 [ 1542.712197][T16162] dvb-usb: error while querying for an remote control event. [ 1542.791669][T19541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1542.791689][T19541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1542.791717][T19541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1542.798961][T19541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1542.798979][T19541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1542.799006][T19541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1542.842807][T16162] m920x_read = error: -19 [ 1542.842834][T16162] dvb-usb: error while querying for an remote control event. [ 1542.842906][T16162] m920x_read = error: -19 [ 1542.842921][T16162] dvb-usb: error while querying for an remote control event. [ 1542.914831][ T5711] usb 1-1: USB disconnect, device number 41 [ 1542.961323][T16162] m920x_read = error: -19 [ 1542.961354][T16162] dvb-usb: error while querying for an remote control event. [ 1542.961428][T16162] m920x_read = error: -19 [ 1542.961446][T16162] dvb-usb: error while querying for an remote control event. [ 1543.071353][T16162] m920x_read = error: -19 [ 1543.071380][T16162] dvb-usb: error while querying for an remote control event. [ 1543.071455][T16162] m920x_read = error: -19 [ 1543.071473][T16162] dvb-usb: error while querying for an remote control event. [ 1543.191303][T16162] m920x_read = error: -19 [ 1543.191330][T16162] dvb-usb: error while querying for an remote control event. [ 1543.191397][T16162] m920x_read = error: -19 [ 1543.191415][T16162] dvb-usb: error while querying for an remote control event. [ 1543.311322][T16162] m920x_read = error: -19 [ 1543.311350][T16162] dvb-usb: error while querying for an remote control event. [ 1543.311409][T16162] m920x_read = error: -19 [ 1543.311422][T16162] dvb-usb: error while querying for an remote control event. [ 1543.421404][T16162] m920x_read = error: -19 [ 1543.421430][T16162] dvb-usb: error while querying for an remote control event. [ 1543.421498][T16162] m920x_read = error: -19 [ 1543.421514][T16162] dvb-usb: error while querying for an remote control event. [ 1543.444154][T19541] hsr_slave_0: entered promiscuous mode [ 1543.450314][T19541] hsr_slave_1: entered promiscuous mode [ 1543.480801][T19541] debugfs: 'hsr0' already exists in 'hsr' [ 1543.480827][T19541] Cannot create hsr debugfs directory [ 1543.538325][ T6087] m920x_read = error: -19 [ 1543.538355][ T6087] dvb-usb: error while querying for an remote control event. [ 1543.538430][ T6087] m920x_read = error: -19 [ 1543.538449][ T6087] dvb-usb: error while querying for an remote control event. [ 1543.602313][ T37] audit: type=1804 audit(1787593511.318:58): pid=19761 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.3246" name="bus" dev="ramfs" ino=84753 res=1 errno=0 [ 1543.641316][ T6087] m920x_read = error: -19 [ 1543.641343][ T6087] dvb-usb: error while querying for an remote control event. [ 1543.641430][ T6087] m920x_read = error: -19 [ 1543.641447][ T6087] dvb-usb: error while querying for an remote control event. [ 1543.762871][ T6087] m920x_read = error: -19 [ 1543.762895][ T6087] dvb-usb: error while querying for an remote control event. [ 1543.762962][ T6087] m920x_read = error: -19 [ 1543.762979][ T6087] dvb-usb: error while querying for an remote control event. [ 1543.871397][ T6087] m920x_read = error: -19 [ 1543.871426][ T6087] dvb-usb: error while querying for an remote control event. [ 1543.871579][ T6087] m920x_read = error: -19 [ 1543.871598][ T6087] dvb-usb: error while querying for an remote control event. [ 1543.981423][ T6087] m920x_read = error: -19 [ 1543.981453][ T6087] dvb-usb: error while querying for an remote control event. [ 1543.981521][ T6087] m920x_read = error: -19 [ 1543.981536][ T6087] dvb-usb: error while querying for an remote control event. [ 1544.137572][ T6087] m920x_read = error: -19 [ 1544.137593][ T6087] dvb-usb: error while querying for an remote control event. [ 1544.137644][ T6087] m920x_read = error: -19 [ 1544.137654][ T6087] dvb-usb: error while querying for an remote control event. [ 1544.251361][ T6087] m920x_read = error: -19 [ 1544.251390][ T6087] dvb-usb: error while querying for an remote control event. [ 1544.251462][ T6087] m920x_read = error: -19 [ 1544.251481][ T6087] dvb-usb: error while querying for an remote control event. [ 1544.361308][ T6087] m920x_read = error: -19 [ 1544.361334][ T6087] dvb-usb: error while querying for an remote control event. [ 1544.361395][ T6087] m920x_read = error: -19 [ 1544.361408][ T6087] dvb-usb: error while querying for an remote control event. [ 1544.441594][T14720] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1544.471365][ T6087] m920x_read = error: -19 [ 1544.471394][ T6087] dvb-usb: error while querying for an remote control event. [ 1544.471460][ T6087] m920x_read = error: -19 [ 1544.471475][ T6087] dvb-usb: error while querying for an remote control event. [ 1544.594373][ T6087] m920x_read = error: -19 [ 1544.594401][ T6087] dvb-usb: error while querying for an remote control event. [ 1544.594462][ T6087] m920x_read = error: -19 [ 1544.594476][ T6087] dvb-usb: error while querying for an remote control event. [ 1544.651410][T14720] usb 3-1: Using ep0 maxpacket: 16 [ 1544.652335][T14720] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1544.653824][T14720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1544.653855][T14720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1544.653892][T14720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.672437][T14720] usb 3-1: config 0 descriptor?? [ 1544.701383][T16162] m920x_read = error: -19 [ 1544.701407][T16162] dvb-usb: error while querying for an remote control event. [ 1544.701472][T16162] m920x_read = error: -19 [ 1544.701488][T16162] dvb-usb: error while querying for an remote control event. [ 1544.811344][T16162] m920x_read = error: -19 [ 1544.811368][T16162] dvb-usb: error while querying for an remote control event. [ 1544.811440][T16162] m920x_read = error: -19 [ 1544.811458][T16162] dvb-usb: error while querying for an remote control event. [ 1544.921422][T16162] m920x_read = error: -19 [ 1544.921448][T16162] dvb-usb: error while querying for an remote control event. [ 1544.921523][T16162] m920x_read = error: -19 [ 1544.921539][T16162] dvb-usb: error while querying for an remote control event. [ 1545.031321][T16162] m920x_read = error: -19 [ 1545.031347][T16162] dvb-usb: error while querying for an remote control event. [ 1545.031416][T16162] m920x_read = error: -19 [ 1545.031434][T16162] dvb-usb: error while querying for an remote control event. [ 1545.099513][T14720] corsair 0003:1B1C:1B02.0005: unknown main item tag 0x0 [ 1545.099551][T14720] corsair 0003:1B1C:1B02.0005: unknown main item tag 0x0 [ 1545.099579][T14720] corsair 0003:1B1C:1B02.0005: unknown main item tag 0x0 [ 1545.099604][T14720] corsair 0003:1B1C:1B02.0005: unknown main item tag 0x0 [ 1545.099646][T14720] corsair 0003:1B1C:1B02.0005: unknown main item tag 0x0 [ 1545.141288][T16162] m920x_read = error: -19 [ 1545.141311][T16162] dvb-usb: error while querying for an remote control event. [ 1545.141378][T16162] m920x_read = error: -19 [ 1545.141395][T16162] dvb-usb: error while querying for an remote control event. [ 1545.144565][T14720] corsair 0003:1B1C:1B02.0005: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 1545.257609][T16162] m920x_read = error: -19 [ 1545.257634][T16162] dvb-usb: error while querying for an remote control event. [ 1545.257708][T16162] m920x_read = error: -19 [ 1545.257731][T16162] dvb-usb: error while querying for an remote control event. [ 1545.371377][T16162] m920x_read = error: -19 [ 1545.371401][T16162] dvb-usb: error while querying for an remote control event. [ 1545.371466][T16162] m920x_read = error: -19 [ 1545.371482][T16162] dvb-usb: error while querying for an remote control event. [ 1546.057289][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.058141][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.387346][T16162] m920x_read = error: -19 [ 1546.387372][T16162] dvb-usb: error while querying for an remote control event. [ 1546.387432][T16162] m920x_read = error: -19 [ 1546.387446][T16162] dvb-usb: error while querying for an remote control event. [ 1546.455429][T19792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1546.456045][T19792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1546.492025][T16162] m920x_read = error: -19 [ 1546.492055][T16162] dvb-usb: error while querying for an remote control event. [ 1546.492155][T16162] m920x_read = error: -19 [ 1546.492173][T16162] dvb-usb: error while querying for an remote control event. [ 1546.611308][T16162] m920x_read = error: -19 [ 1546.611335][T16162] dvb-usb: error while querying for an remote control event. [ 1546.611399][T16162] m920x_read = error: -19 [ 1546.611414][T16162] dvb-usb: error while querying for an remote control event. [ 1546.711336][T16162] m920x_read = error: -19 [ 1546.711362][T16162] dvb-usb: error while querying for an remote control event. [ 1546.711436][T16162] m920x_read = error: -19 [ 1546.711454][T16162] dvb-usb: error while querying for an remote control event. [ 1546.823774][ T6087] m920x_read = error: -19 [ 1546.823800][ T6087] dvb-usb: error while querying for an remote control event. [ 1546.823884][ T6087] m920x_read = error: -19 [ 1546.823901][ T6087] dvb-usb: error while querying for an remote control event. [ 1546.857096][T14720] usb 3-1: USB disconnect, device number 38 [ 1546.941366][ T6087] m920x_read = error: -19 [ 1546.941390][ T6087] dvb-usb: error while querying for an remote control event. [ 1546.941476][ T6087] m920x_read = error: -19 [ 1546.941493][ T6087] dvb-usb: error while querying for an remote control event. [ 1547.056272][ T6087] m920x_read = error: -19 [ 1547.056298][ T6087] dvb-usb: error while querying for an remote control event. [ 1547.056370][ T6087] m920x_read = error: -19 [ 1547.056388][ T6087] dvb-usb: error while querying for an remote control event. [ 1547.161342][ T6087] m920x_read = error: -19 [ 1547.161369][ T6087] dvb-usb: error while querying for an remote control event. [ 1547.161438][ T6087] m920x_read = error: -19 [ 1547.161453][ T6087] dvb-usb: error while querying for an remote control event. [ 1547.281378][ T6087] m920x_read = error: -19 [ 1547.281405][ T6087] dvb-usb: error while querying for an remote control event. [ 1547.281476][ T6087] m920x_read = error: -19 [ 1547.281494][ T6087] dvb-usb: error while querying for an remote control event. [ 1547.401806][ T6087] m920x_read = error: -19 [ 1547.401829][ T6087] dvb-usb: error while querying for an remote control event. [ 1547.401896][ T6087] m920x_read = error: -19 [ 1547.401911][ T6087] dvb-usb: error while querying for an remote control event. [ 1547.597052][ T37] audit: type=1804 audit(1787593515.308:59): pid=19813 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.3258" name="bus" dev="ramfs" ino=86080 res=1 errno=0 [ 1547.612782][ T5720] m920x_read = error: -19 [ 1547.612807][ T5720] dvb-usb: error while querying for an remote control event. [ 1547.612874][ T5720] m920x_read = error: -19 [ 1547.612891][ T5720] dvb-usb: error while querying for an remote control event. [ 1547.721813][ T6087] m920x_read = error: -19 [ 1547.721839][ T6087] dvb-usb: error while querying for an remote control event. [ 1547.721910][ T6087] m920x_read = error: -19 [ 1547.721928][ T6087] dvb-usb: error while querying for an remote control event. [ 1547.831278][ T5720] m920x_read = error: -19 [ 1547.831302][ T5720] dvb-usb: error while querying for an remote control event. [ 1547.831373][ T5720] m920x_read = error: -19 [ 1547.831390][ T5720] dvb-usb: error while querying for an remote control event. [ 1547.941403][ T5720] m920x_read = error: -19 [ 1547.941429][ T5720] dvb-usb: error while querying for an remote control event. [ 1547.941501][ T5720] m920x_read = error: -19 [ 1547.941515][ T5720] dvb-usb: error while querying for an remote control event. [ 1548.121308][ T5720] m920x_read = error: -19 [ 1548.121334][ T5720] dvb-usb: error while querying for an remote control event. [ 1548.121405][ T5720] m920x_read = error: -19 [ 1548.121422][ T5720] dvb-usb: error while querying for an remote control event. [ 1549.047354][ T5720] m920x_read = error: -19 [ 1549.047390][ T5720] dvb-usb: error while querying for an remote control event. [ 1549.047481][ T5720] m920x_read = error: -19 [ 1549.047500][ T5720] dvb-usb: error while querying for an remote control event. [ 1549.156651][ T6087] m920x_read = error: -19 [ 1549.156671][ T6087] dvb-usb: error while querying for an remote control event. [ 1549.156713][ T6087] m920x_read = error: -19 [ 1549.156723][ T6087] dvb-usb: error while querying for an remote control event. [ 1549.196003][T19294] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1549.261390][ T6087] m920x_read = error: -19 [ 1549.261419][ T6087] dvb-usb: error while querying for an remote control event. [ 1549.261491][ T6087] m920x_read = error: -19 [ 1549.261509][ T6087] dvb-usb: error while querying for an remote control event. [ 1549.316426][T19294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1549.371787][ T5586] m920x_read = error: -19 [ 1549.371829][ T5586] dvb-usb: error while querying for an remote control event. [ 1549.371898][ T5586] m920x_read = error: -19 [ 1549.371915][ T5586] dvb-usb: error while querying for an remote control event. [ 1549.498364][T19834] m920x_read = error: -19 [ 1549.498383][T19834] dvb-usb: error while querying for an remote control event. [ 1549.498425][T19834] m920x_read = error: -19 [ 1549.498434][T19834] dvb-usb: error while querying for an remote control event. [ 1549.601375][ T9] m920x_read = error: -19 [ 1549.601402][ T9] dvb-usb: error while querying for an remote control event. [ 1549.601457][ T9] m920x_read = error: -19 [ 1549.601471][ T9] dvb-usb: error while querying for an remote control event. [ 1549.656607][T19841] hub 8-0:1.0: USB hub found [ 1549.657029][T19841] hub 8-0:1.0: 1 port detected [ 1549.711388][ T9] m920x_read = error: -19 [ 1549.711415][ T9] dvb-usb: error while querying for an remote control event. [ 1549.711502][ T9] m920x_read = error: -19 [ 1549.711521][ T9] dvb-usb: error while querying for an remote control event. [ 1549.825484][ T9] m920x_read = error: -19 [ 1549.825506][ T9] dvb-usb: error while querying for an remote control event. [ 1549.825561][ T9] m920x_read = error: -19 [ 1549.825571][ T9] dvb-usb: error while querying for an remote control event. [ 1549.934613][ T9] m920x_read = error: -19 [ 1549.934636][ T9] dvb-usb: error while querying for an remote control event. [ 1549.934697][ T9] m920x_read = error: -19 [ 1549.934725][ T9] dvb-usb: error while querying for an remote control event. [ 1550.041342][ T9] m920x_read = error: -19 [ 1550.041380][ T9] dvb-usb: error while querying for an remote control event. [ 1550.042223][ T9] m920x_read = error: -19 [ 1550.042236][ T9] dvb-usb: error while querying for an remote control event. [ 1550.209292][ T9] m920x_read = error: -19 [ 1550.209319][ T9] dvb-usb: error while querying for an remote control event. [ 1550.209389][ T9] m920x_read = error: -19 [ 1550.209407][ T9] dvb-usb: error while querying for an remote control event. [ 1550.552672][ T9] m920x_read = error: -19 [ 1550.552697][ T9] dvb-usb: error while querying for an remote control event. [ 1550.552766][ T9] m920x_read = error: -19 [ 1550.552783][ T9] dvb-usb: error while querying for an remote control event. [ 1550.668126][ T5589] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1550.721393][ T5804] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1550.740437][ T5720] m920x_read = error: -19 [ 1550.740461][ T5720] dvb-usb: error while querying for an remote control event. [ 1550.740525][ T5720] m920x_read = error: -19 [ 1550.740541][ T5720] dvb-usb: error while querying for an remote control event. [ 1550.740711][ T5589] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1550.776551][ T5589] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1550.808216][ T37] audit: type=1804 audit(1787593518.518:60): pid=19866 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.3269" name="bus" dev="ramfs" ino=87246 res=1 errno=0 [ 1550.809186][ T5589] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1550.825495][ T5589] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1550.841500][ T5720] m920x_read = error: -19 [ 1550.841524][ T5720] dvb-usb: error while querying for an remote control event. [ 1550.841594][ T5720] m920x_read = error: -19 [ 1550.841611][ T5720] dvb-usb: error while querying for an remote control event. [ 1550.881247][ T5804] usb 1-1: Using ep0 maxpacket: 16 [ 1550.883630][ T5804] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1550.884759][ T5804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1550.884790][ T5804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1550.884824][ T5804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.952594][ T5720] m920x_read = error: -19 [ 1550.952617][ T5720] dvb-usb: error while querying for an remote control event. [ 1550.952686][ T5720] m920x_read = error: -19 [ 1550.952704][ T5720] dvb-usb: error while querying for an remote control event. [ 1550.952756][ T5804] usb 1-1: config 0 descriptor?? [ 1551.071515][ T5720] m920x_read = error: -19 [ 1551.071542][ T5720] dvb-usb: error while querying for an remote control event. [ 1551.071616][ T5720] m920x_read = error: -19 [ 1551.071634][ T5720] dvb-usb: error while querying for an remote control event. [ 1551.181350][ T5720] m920x_read = error: -19 [ 1551.181376][ T5720] dvb-usb: error while querying for an remote control event. [ 1551.181447][ T5720] m920x_read = error: -19 [ 1551.181464][ T5720] dvb-usb: error while querying for an remote control event. [ 1551.841063][ T5804] corsair 0003:1B1C:1B02.0006: unknown main item tag 0x0 [ 1551.841266][ T5804] corsair 0003:1B1C:1B02.0006: unknown main item tag 0x0 [ 1551.841305][ T5804] corsair 0003:1B1C:1B02.0006: unknown main item tag 0x0 [ 1551.841332][ T5804] corsair 0003:1B1C:1B02.0006: unknown main item tag 0x0 [ 1551.841359][ T5804] corsair 0003:1B1C:1B02.0006: unknown main item tag 0x0 [ 1551.847335][ T5720] m920x_read = error: -19 [ 1551.847356][ T5720] dvb-usb: error while querying for an remote control event. [ 1551.847413][ T5720] m920x_read = error: -19 [ 1551.847427][ T5720] dvb-usb: error while querying for an remote control event. [ 1552.054823][ T5804] corsair 0003:1B1C:1B02.0006: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 1552.271406][T10631] m920x_read = error: -19 [ 1552.271433][T10631] dvb-usb: error while querying for an remote control event. [ 1552.271506][T10631] m920x_read = error: -19 [ 1552.271522][T10631] dvb-usb: error while querying for an remote control event. [ 1552.391372][ T5720] m920x_read = error: -19 [ 1552.391398][ T5720] dvb-usb: error while querying for an remote control event. [ 1552.391471][ T5720] m920x_read = error: -19 [ 1552.391490][ T5720] dvb-usb: error while querying for an remote control event. [ 1552.501324][T10631] m920x_read = error: -19 [ 1552.501354][T10631] dvb-usb: error while querying for an remote control event. [ 1552.501439][T10631] m920x_read = error: -19 [ 1552.501457][T10631] dvb-usb: error while querying for an remote control event. [ 1552.611312][T10631] m920x_read = error: -19 [ 1552.611335][T10631] dvb-usb: error while querying for an remote control event. [ 1552.611404][T10631] m920x_read = error: -19 [ 1552.611421][T10631] dvb-usb: error while querying for an remote control event. [ 1552.721384][T10631] m920x_read = error: -19 [ 1552.721414][T10631] dvb-usb: error while querying for an remote control event. [ 1552.721622][T10631] m920x_read = error: -19 [ 1552.721694][T10631] dvb-usb: error while querying for an remote control event. [ 1552.724606][T19857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1552.725236][T19857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1552.770741][T10631] usb 1-1: USB disconnect, device number 42 [ 1552.832085][T16162] m920x_read = error: -19 [ 1552.832112][T16162] dvb-usb: error while querying for an remote control event. [ 1552.832188][T16162] m920x_read = error: -19 [ 1552.832215][T16162] dvb-usb: error while querying for an remote control event. [ 1552.893414][ T5779] bridge_slave_1: left allmulticast mode [ 1552.893450][ T5779] bridge_slave_1: left promiscuous mode [ 1552.893726][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.005324][ T5720] m920x_read = error: -19 [ 1553.005353][ T5720] dvb-usb: error while querying for an remote control event. [ 1553.005424][ T5720] m920x_read = error: -19 [ 1553.005442][ T5720] dvb-usb: error while querying for an remote control event. [ 1553.060415][ T9538] Bluetooth: hci5: command tx timeout [ 1553.098553][T10631] ------------[ cut here ]------------ [ 1553.098568][T10631] ODEBUG: free active (active state 0) object: ffff8880763ab2b8 object type: work_struct hint: k90_backlight_work+0x0/0x1c0 [ 1553.098757][T10631] WARNING: lib/debugobjects.c:632 at debug_print_object+0xec/0x230, CPU#0: kworker/0:4/10631 [ 1553.098821][T10631] Modules linked in: [ 1553.098851][T10631] CPU: 0 UID: 0 PID: 10631 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1553.098911][T10631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1553.098944][T10631] Workqueue: usb_hub_wq hub_event [ 1553.099027][T10631] RIP: 0010:debug_print_object+0x18a/0x230 [ 1553.099057][T10631] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 cd 0c 5b fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 e3 3e db 0a 48 83 c4 10 5b 41 5c [ 1553.099076][T10631] RSP: 0018:ffffc90004e2f008 EFLAGS: 00010246 [ 1553.099092][T10631] RAX: 1ffffffff16d7068 RBX: dffffc0000000000 RCX: 0000000000000000 [ 1553.099106][T10631] RDX: ffffffff8bcbfb40 RSI: ffffffff8bcbf5c0 RDI: ffffffff8fbc3890 [ 1553.099120][T10631] RBP: ffffffff8bcbfb40 R08: ffff8880763ab2b8 R09: ffffffff8b6b9560 [ 1553.099134][T10631] R10: dffffc0000000000 R11: ffffffff818ed800 R12: 0000000000000000 [ 1553.099147][T10631] R13: ffffffff8fbc3890 R14: ffff8880763ab2b8 R15: ffffffff8b6b8340 [ 1553.099174][T10631] FS: 0000000000000000(0000) GS:ffff888125bea000(0000) knlGS:0000000000000000 [ 1553.099190][T10631] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1553.099204][T10631] CR2: 00005613f23f9950 CR3: 000000006182a000 CR4: 00000000003526f0 [ 1553.099246][T10631] Call Trace: [ 1553.099256][T10631] [ 1553.099265][T10631] ? __pfx_k90_backlight_work+0x10/0x10 [ 1553.099294][T10631] ? __pfx_k90_backlight_work+0x10/0x10 [ 1553.099327][T10631] debug_check_no_obj_freed+0x2e3/0x450 [ 1553.099375][T10631] kfree+0x13e/0x6d0 [ 1553.099410][T10631] ? hid_device_remove+0xc8/0x1d0 [ 1553.099478][T10631] ? __pfx_corsair_remove+0x10/0x10 [ 1553.099502][T10631] hid_device_remove+0xc8/0x1d0 [ 1553.099538][T10631] ? __pfx_hid_device_remove+0x10/0x10 [ 1553.099567][T10631] device_release_driver_internal+0x48b/0x880 [ 1553.099639][T10631] bus_remove_device+0x449/0x560 [ 1553.099668][T10631] ? __pfx_bus_remove_device+0x10/0x10 [ 1553.099691][T10631] ? up_read+0x34/0x180 [ 1553.099744][T10631] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1553.099772][T10631] device_del+0x528/0x8f0 [ 1553.099807][T10631] ? __pfx_device_del+0x10/0x10 [ 1553.099831][T10631] ? rt_spin_unlock+0x159/0x200 [ 1553.099863][T10631] hid_destroy_device+0x6b/0x1b0 [ 1553.099894][T10631] usbhid_disconnect+0x9f/0xc0 [ 1553.099990][T10631] usb_unbind_interface+0x295/0x9f0 [ 1553.100056][T10631] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1553.100079][T10631] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1553.100106][T10631] device_release_driver_internal+0x4f5/0x880 [ 1553.100141][T10631] bus_remove_device+0x449/0x560 [ 1553.100177][T10631] ? __pfx_bus_remove_device+0x10/0x10 [ 1553.100199][T10631] ? up_read+0x34/0x180 [ 1553.100228][T10631] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1553.100253][T10631] device_del+0x528/0x8f0 [ 1553.100285][T10631] ? __pfx_device_del+0x10/0x10 [ 1553.100311][T10631] ? kobject_put+0x516/0x550 [ 1553.100347][T10631] usb_disable_device+0x3d4/0x8d0 [ 1553.100386][T10631] usb_disconnect+0x32d/0x990 [ 1553.100420][T10631] hub_event+0x1bb7/0x4cf0 [ 1553.100454][T10631] ? __lock_acquire+0x683/0x2ce0 [ 1553.100482][T10631] ? register_lock_class+0x31/0x2e0 [ 1553.100518][T10631] ? timerqueue_linked_add+0x2b6/0x2e0 [ 1553.100607][T10631] ? __pfx_hub_event+0x10/0x10 [ 1553.100636][T10631] ? process_scheduled_works+0x97a/0x1630 [ 1553.100684][T10631] ? rcu_is_watching+0x16/0xb0 [ 1553.100724][T10631] ? process_scheduled_works+0x97a/0x1630 [ 1553.100746][T10631] process_scheduled_works+0xc3d/0x1630 [ 1553.100799][T10631] ? __pfx_process_scheduled_works+0x10/0x10 [ 1553.100827][T10631] ? assign_work+0x3cf/0x5d0 [ 1553.100855][T10631] worker_thread+0xa47/0xfb0 [ 1553.100914][T10631] kthread+0x38b/0x470 [ 1553.100945][T10631] ? __pfx_worker_thread+0x10/0x10 [ 1553.100968][T10631] ? __pfx_kthread+0x10/0x10 [ 1553.101000][T10631] ret_from_fork+0x514/0xb70 [ 1553.101052][T10631] ? __pfx_ret_from_fork+0x10/0x10 [ 1553.101139][T10631] ? __switch_to+0xc89/0x1420 [ 1553.101178][T10631] ? __pfx_kthread+0x10/0x10 [ 1553.101208][T10631] ret_from_fork_asm+0x1a/0x30 [ 1553.101246][T10631] [ 1553.101261][T10631] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1553.101277][T10631] CPU: 0 UID: 0 PID: 10631 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1553.101300][T10631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1553.101312][T10631] Workqueue: usb_hub_wq hub_event [ 1553.101339][T10631] Call Trace: [ 1553.101347][T10631] [ 1553.101356][T10631] vpanic+0x56d/0xa60 [ 1553.101390][T10631] ? __pfx__printk+0x10/0x10 [ 1553.101414][T10631] ? __pfx_vpanic+0x10/0x10 [ 1553.101442][T10631] ? is_bpf_text_address+0x292/0x2b0 [ 1553.101469][T10631] ? is_bpf_text_address+0x26/0x2b0 [ 1553.101505][T10631] panic+0xc5/0xd0 [ 1553.101534][T10631] ? __pfx_panic+0x10/0x10 [ 1553.101576][T10631] ? ret_from_fork_asm+0x1a/0x30 [ 1553.101601][T10631] __warn+0x315/0x4c0 [ 1553.101618][T10631] ? debug_print_object+0xec/0x230 [ 1553.101649][T10631] ? debug_print_object+0xec/0x230 [ 1553.101675][T10631] __report_bug+0x276/0x570 [ 1553.101751][T10631] ? debug_print_object+0xec/0x230 [ 1553.101782][T10631] ? __pfx___report_bug+0x10/0x10 [ 1553.101812][T10631] ? __lock_acquire+0x683/0x2ce0 [ 1553.101838][T10631] ? hid_device_remove+0xc8/0x1d0 [ 1553.101867][T10631] ? device_release_driver_internal+0x48b/0x880 [ 1553.101895][T10631] ? bus_remove_device+0x449/0x560 [ 1553.101913][T10631] ? device_del+0x528/0x8f0 [ 1553.101936][T10631] ? hid_destroy_device+0x6b/0x1b0 [ 1553.101970][T10631] report_bug_entry+0x19b/0x290 [ 1553.101992][T10631] ? debug_print_object+0x18a/0x230 [ 1553.102015][T10631] ? debug_print_object+0x18f/0x230 [ 1553.102040][T10631] handle_bug+0xce/0x200 [ 1553.102065][T10631] exc_invalid_op+0x1a/0x50 [ 1553.102089][T10631] asm_exc_invalid_op+0x1a/0x20 [ 1553.102109][T10631] RIP: 0010:debug_print_object+0x18a/0x230 [ 1553.102155][T10631] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 cd 0c 5b fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 e3 3e db 0a 48 83 c4 10 5b 41 5c [ 1553.102182][T10631] RSP: 0018:ffffc90004e2f008 EFLAGS: 00010246 [ 1553.102199][T10631] RAX: 1ffffffff16d7068 RBX: dffffc0000000000 RCX: 0000000000000000 [ 1553.102215][T10631] RDX: ffffffff8bcbfb40 RSI: ffffffff8bcbf5c0 RDI: ffffffff8fbc3890 [ 1553.102231][T10631] RBP: ffffffff8bcbfb40 R08: ffff8880763ab2b8 R09: ffffffff8b6b9560 [ 1553.102247][T10631] R10: dffffc0000000000 R11: ffffffff818ed800 R12: 0000000000000000 [ 1553.102262][T10631] R13: ffffffff8fbc3890 R14: ffff8880763ab2b8 R15: ffffffff8b6b8340 [ 1553.102284][T10631] ? __pfx_work_debug_hint+0x10/0x10 [ 1553.102317][T10631] ? __pfx_k90_backlight_work+0x10/0x10 [ 1553.102344][T10631] ? __pfx_k90_backlight_work+0x10/0x10 [ 1553.102376][T10631] debug_check_no_obj_freed+0x2e3/0x450 [ 1553.102422][T10631] kfree+0x13e/0x6d0 [ 1553.102441][T10631] ? hid_device_remove+0xc8/0x1d0 [ 1553.102476][T10631] ? __pfx_corsair_remove+0x10/0x10 [ 1553.102501][T10631] hid_device_remove+0xc8/0x1d0 [ 1553.102536][T10631] ? __pfx_hid_device_remove+0x10/0x10 [ 1553.102565][T10631] device_release_driver_internal+0x48b/0x880 [ 1553.102602][T10631] bus_remove_device+0x449/0x560 [ 1553.102630][T10631] ? __pfx_bus_remove_device+0x10/0x10 [ 1553.102654][T10631] ? up_read+0x34/0x180 [ 1553.102682][T10631] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1553.102709][T10631] device_del+0x528/0x8f0 [ 1553.102746][T10631] ? __pfx_device_del+0x10/0x10 [ 1553.102773][T10631] ? rt_spin_unlock+0x159/0x200 [ 1553.102803][T10631] hid_destroy_device+0x6b/0x1b0 [ 1553.102836][T10631] usbhid_disconnect+0x9f/0xc0 [ 1553.102867][T10631] usb_unbind_interface+0x295/0x9f0 [ 1553.102902][T10631] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1553.102924][T10631] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1553.102945][T10631] device_release_driver_internal+0x4f5/0x880 [ 1553.102977][T10631] bus_remove_device+0x449/0x560 [ 1553.103001][T10631] ? __pfx_bus_remove_device+0x10/0x10 [ 1553.103021][T10631] ? up_read+0x34/0x180 [ 1553.103048][T10631] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1553.103072][T10631] device_del+0x528/0x8f0 [ 1553.103103][T10631] ? __pfx_device_del+0x10/0x10 [ 1553.103125][T10631] ? kobject_put+0x516/0x550 [ 1553.103169][T10631] usb_disable_device+0x3d4/0x8d0 [ 1553.103206][T10631] usb_disconnect+0x32d/0x990 [ 1553.103238][T10631] hub_event+0x1bb7/0x4cf0 [ 1553.103271][T10631] ? __lock_acquire+0x683/0x2ce0 [ 1553.103296][T10631] ? register_lock_class+0x31/0x2e0 [ 1553.103329][T10631] ? timerqueue_linked_add+0x2b6/0x2e0 [ 1553.103377][T10631] ? __pfx_hub_event+0x10/0x10 [ 1553.103404][T10631] ? process_scheduled_works+0x97a/0x1630 [ 1553.103436][T10631] ? rcu_is_watching+0x16/0xb0 [ 1553.103464][T10631] ? process_scheduled_works+0x97a/0x1630 [ 1553.103488][T10631] process_scheduled_works+0xc3d/0x1630 [ 1553.103548][T10631] ? __pfx_process_scheduled_works+0x10/0x10 [ 1553.103581][T10631] ? assign_work+0x3cf/0x5d0 [ 1553.103611][T10631] worker_thread+0xa47/0xfb0 [ 1553.103666][T10631] kthread+0x38b/0x470 [ 1553.103695][T10631] ? __pfx_worker_thread+0x10/0x10 [ 1553.103718][T10631] ? __pfx_kthread+0x10/0x10 [ 1553.103747][T10631] ret_from_fork+0x514/0xb70 [ 1553.103777][T10631] ? __pfx_ret_from_fork+0x10/0x10 [ 1553.103806][T10631] ? __switch_to+0xc89/0x1420 [ 1553.103835][T10631] ? __pfx_kthread+0x10/0x10 [ 1553.103862][T10631] ret_from_fork_asm+0x1a/0x30 [ 1553.103898][T10631] [ 1553.104174][T10631] Kernel Offset: disabled