last executing test programs: 19m22.680778845s ago: executing program 1 (id=3948): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x11) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r4) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x60}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4048008) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) acct(0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x8000) write$dsp(r2, &(0x7f0000002200)="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", 0x1000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x5c, 0x0, 0x1, 0x0, 0x25dfdbfe, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x5c}, 0x2, 0x34005}, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003200)={0x2020}, 0x2020) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x20000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 19m19.656323352s ago: executing program 1 (id=3953): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x1, 0x80008000, 0x3ff}) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(0xffffffffffffffff) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r1, 0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x40}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000280)={0xdb2, 0x7, 0x7}) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4814}, 0x80) getrlimit(0xb, &(0x7f0000000180)) fstat(r1, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r1, 0xc0207511, &(0x7f00000004c0)) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, 0x0, 0x0, 0xee01, 0xb, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0x5}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 19m18.492997048s ago: executing program 1 (id=3957): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) alarm(0xfffffffffffff854) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_SUBDINFO(r0, 0x80486402, 0x0) 19m18.175229595s ago: executing program 1 (id=3958): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 19m18.047132368s ago: executing program 1 (id=3960): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) mknodat(0xffffffffffffff9c, 0x0, 0x8000, 0x10103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) open(&(0x7f00000001c0)='.\x00', 0x200140, 0x1a8) bind$unix(r3, &(0x7f0000000dc0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) syz_fuse_handle_req(r2, &(0x7f0000009b40)="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", 0x2000, &(0x7f00000003c0)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x9, 0x210208d5, 0xdcf, 0x4005, 0xb, 0x32a, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000300)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) 19m15.716887349s ago: executing program 1 (id=3965): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003580)=@newlink={0x34, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x4043}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}}, 0x0) 19m15.213700531s ago: executing program 32 (id=3965): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003580)=@newlink={0x34, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x4043}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}}, 0x0) 17m31.445955058s ago: executing program 3 (id=4188): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0xffb, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x600202, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000003c0)={0x77ef, {{0x2, 0x4e21, @broadcast}}, 0x1}, 0x90) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x8, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = geteuid() setreuid(0xffffffffffffffff, r7) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) writev(r6, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17m27.126788233s ago: executing program 3 (id=4199): dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000002880)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007926000000000000bf670800000000005607000000ff07ad6706000002000000070200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8d4fee81e3cdd5daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f153bf0f5bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae625a14bddcf5b3e72b420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d6287805319cd51bdd224878a0b25edf0e83c930633bd9a0c3e28f359608ea326c77a1aa17318f392a0ec6c188916f452533d4327feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8098f076c659f56d6c7f97a96d6cdf45cfe88b30c170000000001000000effbf33bd1becb0de0a080931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f2be09295e4a8da03d23b48bb38b39a14ffcddd92c38f6b6d86a0e5ed47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f130000000000000000000000000000000000000000002a37163e8d7ef2f3c58d045f0700000094029acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d57158dc308c08dc0a8dc99bdfeaff43eb24134e63a5efd08c6c2d51983265b60afcc5effad8f52ec152ab4ed39c2dbd04e3fefd9217a0246660301d5b7d7a9ea72c2cdec5a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0xfffffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x20, 0x0, 0x346, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x2, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000005580)=""/102392, 0x18ff8) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(r8, 0x25, &(0x7f0000000380)={0x1, 0x1, 0x5, 0x1ab9e6b8}) getpgrp(0x0) 17m25.45411198s ago: executing program 3 (id=4205): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000280)={0xe, "b27c15a55aedfb77b2a54525d566b3b7a48252980dc6c4e6bcabf9952c0fd139"}) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000190c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfd}, 0x18) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r4, 0x0, 0x4000808) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) close(r1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=@newlink={0x78, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x12a03}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x78}, 0x1, 0x0, 0x0, 0x4404d80c}, 0x20008000) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) 17m23.996325522s ago: executing program 3 (id=4209): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r0, 0xc) r1 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$inet(0x2, 0x5, 0xc) close(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, &(0x7f0000000240)) 17m22.423579907s ago: executing program 3 (id=4213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$revoke(0x3, 0x0) add_key$user(0x0, &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700), 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x13, 0x0, &(0x7f0000000100)) 17m21.971851627s ago: executing program 3 (id=4214): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, 0x0) 17m21.551518436s ago: executing program 33 (id=4214): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, 0x0) 37.325786669s ago: executing program 4 (id=6295): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x80000003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x17, 0x301, 0x270bd24, 0x25dfdbfa, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0xfc, 0x1, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 33.084084676s ago: executing program 4 (id=6305): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0xb, 0x32165b32, {}, 0x3, 0x107fffffff, 0x8}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r1) r2 = io_uring_setup(0x2a90, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x277}) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef0000000109021200010000000009"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 30.079619206s ago: executing program 4 (id=6314): ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(0x0, &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) close(0x3) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 28.993436141s ago: executing program 4 (id=6316): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000780)={r3, 0xfffffffd, 0x4, 0x0, 0x2, [0x0], [0x0, 0x6, 0x400, 0x9], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x10001, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 27.939152436s ago: executing program 4 (id=6318): mkdirat(0xffffffffffffff9c, 0x0, 0x2c) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x14b041, 0x2) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080100000c000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) msgsnd(0x0, &(0x7f0000000000)={0x2, "6792634418e822c3549146dfc425ebd0b1135bf5e4749f78d2ac056f405b87a42f7cca7c07c0d8e564bd2c93e7948fa71cf7b2a2a7a13c90cd1f4452b69acc6b9a8ee6b446e066cfc86b37d8c2479ad537040aab05673fd9c65f2f1606a21aeb819ca8e2ea09913aea4cc2235924679d5ab90c5336937de73cc393e18198723fa8beb327fbf5494db569b530335ca548296d54b2c212cef9c78d66881d85f509df6ca71393d9380982196aa991e82330d65bdad9b9adf37f3e51a71b2cf43643ecfbd580c155e257137664f240cffde9d02c9211353ae5fffea523b4ddb8c4a3c112d1840a643f4c903e6665b43794ba8373673abed760eb5c42fe8224e64890f140a7c9c2ac49644916cb7ddd25258aecf1393fbaf0738d1b293d51a5ec70f299d2e0a62e54adcc77963732f68466e535b06b88ffa2bb09025dc334d283e936d2bdc1b6cfee296d51d8de871951715a85e066684892e9858927554fd6375d560757a868ee597dded29fa1760ef21dbb5ffa3efe11a63a6abe913b9725344958bb753f7b89d7af4bec43f4370721ec0d953d87091a0238ff6611893acc27d5028d763e1d2daee9c33ea7e751e6bda989233b67e607b5fe56f4af7fd94cf8a22e9c17a659631a19f0934feda2a922fc1abacd23adcfae151efa89ff78ade75b52722f68ab922b5c84cbe6b0b1c567f499a4dfae332f59c8cd8c38cc2fccb80f75e7d9eb60864df4b7268539c7f2ad459d5759272b5cf29d536d901205cdbd223626a7b06910618e8b1dceae08c5f815357c1dd1bfa3afb8e44fe2203345307a5bbea84247ad3df6bda193eb289be5efb19805344b7e1fd322c062921b11ade3d8ece8257e506a563d17cf071975c1070e69624c8ddc8dd2508bd70fe1d195974d372a7646beea8b9e28eb24222cb4dc654f6d17e71cc5677c6a3095abd1d38d879c7bf1cde981d2006b9dea4c8166fc0d07982143846d88b0236dbdedf300a92b26cc1e51f098f0e8a3b7d2d8fdb395fce8a86adcede00256b326316e3b1b61a5d96ef51ea319fcca88b0ba32d5522f84c0c7e22bbd61252411326fcd37ba70d4054bf2420c68624be7f6e15e18efe9e5d0c2b3a40e7acc3209cda065bb29f032992ddae9803f49b0cad18352d5cba7f363b8b9e6a4f6618d3040838cc08a9cd7484da2db23e3fb4922b548d56bdaebfdcf26e3001f0d2952009f15100ee376e0f140cef6f7c7841d388ce070413738d0ca2628df6fc4f871675521ad06e6b3a1e14a097be18a5949e7c20a0566387bccfda3b276e87af48efcec1ff6a615ebae231024e7d64632b95548b8aefc422e126702e43a5fd3075b28c0edc083dfbd0464af000f9d024b5a50c5e3cce011bb082564ca30f82b03ae79de4ff70d460b51722823f3b39c2bee99a75d388f2729f7e260771021db1862dc12ea8759ab55bdfbfee40fdaa62463cbf983558ae04494106d32faf70bbe57fa66d02e56ba1e85fd771c16bf276b5f81f6704987b844ab00bcdbaa97955d443ac949303a301d1a22cc634c11017a2c73e1f249f3b52440b6f681d234ecb18781efe4148d7b4fd3d7ba86694e13c54fd7396608bd5481ce39186b2ae9951bf1ae4a91ad2e636e5e777b903840fd4f1540165de7a51b1c2fbfb209ad2a9a6ea82b08f65036e094397440ea5fb3df379521e814bbdb95c683b3575ba206aa68f31ce864ca5ce01b1bfb8c8035a5b5111e2b2fd963828bee2767b13cdd9d6f52d7325fa7b562785ef3339caa891a83ca2b999e017bace9ac5abe8a0f40b91b19961f2f522e0c1caec573d42e6191f3db8300c65e6bee55b85c551d42687d625748d189e77755330c6a602ebe2393e7f4620ecc3fcde2ecb7062d675309f7c17e1e86b264ab65e95d1d19f5db7ec39360e6f4f5fb1f8369b4dde105f820ad37258c5fe2af29046489298ca9388e3a9738987e634dfd04776120958a5e94e41a45ce1d789f2232ae861afb1402ec6a3346e6c3319d6678d557d2163162342ea28a7f56c4a21e7242f3647d618e2c9026e3915e73dd622a21de63605741096cdc32383437f8239f5275b8c3824e536a8bc7a17ffc58a50294b0e641236cf0f99d2778744ddcdf49362ccf71702d1e68f6b839993c650eeddd445c97e51393030e12c717b994a7909797cf6be371e686ebd56edfd7de4f713b2f16c7580e8d34984f0444ee86e24bab5a1d0c562ddf6ac8bda70eb555c888103c31cf2b5fb74e96966d415ec44c14ed3d292e515b07a623b017c6e3ebf4d38ee1407e9105fc59dcf53cf8df7c55cad927b0dcc515d2c7d29bf186e3373a0a48f89996bea32f99f9ee32ff4e92a4b723fc5e98b1a01dbc4f7ac7c48dc127da765986d7d6be9982c77880b00d62d89696ef7a9f7a7d7335a9cefe61490d96d39682a95aff33c21941ad648142886bdd7af5b51de6c18f1d312c09729b40b5772120afd02fad37e8857c76ec10a9860971f32861d15baded48b3688ed13582fb6665eb827a1e58b8d69fe4418f8d9bef8216b89c8145c6733ba333af2c74703d571b4b26c7857790efdff15643a13a2f8c562aa3488eb44345b77b341d51086d39d2c1ce4934ca4ebd9fef06b56ab740e7046fce7ab4793b19c22f0c42d97036c048fcb43e911523bfbacf471912f81182545414acf297f0355ff602564a6aaa82357dcd1f2e92351e1b6c7a6d5a8c6e16b259c855e137178d5bfdff3f1c74906f292ac5ebbb98df3a6e007a293927103894737cb254822ce2ae6d75ab2ce6414b74d17f979a2bab5b362ee1107311fa5dc00e53928d6e5951da2bc8ce408ce23e9a8a3f7c7ba5aa6200498211bd7263fe3b1bc3d31b176b2e6c40a78976225c60430959c306894f78c80a2c31efa7c4eecae34d10a7af7e9b68fe571ff1b7bdcde57710dd8bb2a3a573d86aa84f14c2b20fdfcd751aef0358905eedafe8a3cfdf73984d103887516bbe2cc910fd9b3e9a094432fb679cc107f7392c6bc3589484439b55e10eb8884de0d9e9a1ea6a08cd8fb4df25251800f82e99a62568833441991cad233a27304039a4e489399516059f42d3faff995af2c52921d035e39daa488284270d30ceadfb9d5cc48c3061ce99587c21f361bc8f5234e4651e0db6f178130582afae5e221fa64cf201f7bf69fb5096946a62fd464cbc11184a7e59f3f757cdf7c226674884da795a72f8afdf9c323ce09938f52429c5d7443897e9bd8412f2826c9ddfe3af1c4d09610db84cdae283d7373b321e7729533ac7c33e479824e281d3c0f02b00e941e08acf31b282035ed16da8e4cfafe573aa5ec635e362e00e7aad037580ce7c6f9636f214c207d469a9be26d005d44cfdfe93f801a4868cbe50541f7360eb39c9b907b2daab3de01c9ba881f32b8090065e1127c22319b67b659db608e0e985dc485f98108a6b3c653bd77e6ce8bc6dc13692a7cfe9c66e8b07c44d56fae1ccde8c8776caa11a17fc39a1484990dd07df3635c2f1aacb4d970e361621765e994df65e308f0a468cbff819a0e3be1922fd975cab79f5e6c870c526a08019b2c7296ca5b8940c4dbfadae2ed9b4c346841996ce0367d90a621ef77879736325a3ee106b49cf7d3101c5470499808d5125c87af0a3582c1d597a1e02e297684d583ac74bc221fe56ebb76fef2d11cb57c8b8816c6c0dcc3dc27fd977170be41931f7301dc2c471fe26b32a921832e2c07606e6b9935258cc619870320d9f990f017eeda658e7cc88d39c65ffd2badb5f4358bb70c580c0224dbea84d4c266604eb385572d4dad202e62c9654a00e983ed634c5ec2e778322b94c9dc329ea2b14857ebed2d142d82df86af2a485554d340e38a2e41cfa0e3c70f80af12995296ac6a8caa03d90815eaa72bc27370e4f0f05beb67a92712827f3b0fa1f49e01d62fdac362d73b01937bac26f5e81924642d4985f4f4363dd8fd2e7badffc87af60a248a5c630d20131868311583508c69709090d1d213b4890368374f562bca0349d17c971af0d537db4eee4800029e4245f718445a5b6185623e37996577696a5d1232a791c4ca9ff79a219126c3c34aaf0752fc8067f4984f0a920c871fce2fe0e8068f371df2d3a5038d0ab652c17c3633b46b1e49f80f06a547026f0fdbac5a023e28aa27803c3811e2b51311bd54c7795961ba7b73db21161d999ca20dd15ad6d6bb700f17f588c620ac4932ebf78118411b7d475c864eb48be1117e64186fec74055bfc837ee590ba18be45515b97024baf26361a937d91010722f17f7d5ec4d1e4e8a1ddd658c2f87798c329d8b24343edefc5c7788c2c287bdb47c7413206120d51ae57ef48b0b8802288d64b740d87d68b8db9d4ec994ba287aab675fe500683dad2c81d5502e9c14d921d5c331347475eba4f31bed7914840119dcac4ecb173ddab203d803d211534a1abc1abe67f22ee1f5560c1e701b9285cf62d89900e0799884b04a4938adb949ff4d07c688700c4b9efd86b56e3ab343cd796ffd2a8608d2e2f66ca8da449d38bb55837d21904f986fb5c5425a95435c16350743a8b358e019b663663cf3f1ccace0531b9326fe0a59bde0f0fc9518642c3dc0f6ff2a6a9fa0fe9c01514890ccf34585deb93805d57feb84ac0258edb24b5900f2c5968fcd356490637064b081c855ce0ab23a4dc60e3f96b12af2b063b746230ae3060f20d4896ff2b4660d1202b0824bc3453cd02822eeed96fcb29751f72a5f0b79bbf8393a48c185bcf136cabb6d1e9c7afbaed55375854b4de6f5f783d36f6861e72605dbaede5cd79517485bb044ae1b5ba0b841d5bfbeb10edbfa7b5f62642d2300e227dd8f30c9509a4b676ce1a61e02b4e114e6cdbd2d1075ea33ea1e90fa1f199f1cb17499ef3bdc27f2d8e181702cbfeb39194f21719b13ce6026a7a89aac9c426f2f685c6d027f90c0257c7371b9d8299da70c860565eeaeaaeed3848798de37940d18c1a8fa457befa0fb3cb10e09209068f17177388e87b9e5a8c144db7dd9436ca3d7538a098897d19688e13e460ae875f23d092fd15edd033b756a3b3e4666ccf9bcee85df232f58a71c9ada85e93974b8b0c67ef45389ae498c19050508177cf98e22e107ad0b674e1afddd1da2711458d1f8eb082e9fa7ba3deb05188b3adfa40dc5da189383a707ad475e439d8d9e7066198c128b5b7c11648435401eaccde148c0da9b3fb1bc37e0cce5fe9e31f072495843fc02ab4d6c49e3cb2e36b665156ad207314bad641f9305e5c40dbb092a891ef055b8d341a4f8be4adec3c33cec6175bcb6d0e81f8d99d77ca1f24e8da084eef3d2e26859255dec0a3d8873e6dfba404e643bb571774490d237dbbe497c5374ebc7beebedcb824583f1008c3843350faff3e30b37073911dc4a339e86c7391bafa13e8fdb7a49e1c157fd6e4eb2e52ed6dcb1b1f99762737494fb2657c88ed552b21ce32658d1863a7a83853ac6004193723ad968688292ef85f08dc37e527cd42c61aefd2de5a9ca128133d584bd8279b35efca959f58ab2145822ec0996be28915fb68d8a0ebd6732cc0c7f53d6742c8fc30da74057a1545e620c9a63ddfa582b936a11c7b19cc41f38e6f3762e3b8f0db76fcaeae74492a182ab3cb16351c7ffb51e1ccd817b2beaa0bb9a66021f3538b16917efbf545f02209982fa9e6f50b6312f4b83bbbcd75fc9cfdebd69d5893f3a4e4aff445fa1eb526f41a40dcab6389726d4027163aa72538c33e36c8f5013b997cc6f3bae"}, 0xff2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c900000014003100fc010000000000000000000000000001ef948c95c530"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 26.471972529s ago: executing program 4 (id=6321): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r0, &(0x7f00000022c0)=[{{&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001ec0), 0x0, &(0x7f0000002b00)=ANY=[], 0x198}}], 0x2, 0x2000c044) syz_emit_ethernet(0x66, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x30, 0x3a, 0x0, @private1, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0}}}}}}}, 0x0) writev(r0, &(0x7f0000002640)=[{&(0x7f0000000c40)="b4", 0xfdef}], 0x1) 9.670633317s ago: executing program 5 (id=6360): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x140800, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) vmsplice(r2, 0x0, 0xad, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000140)=0x1) read(r5, 0x0, 0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) syz_emit_ethernet(0x12, &(0x7f00000002c0)=ANY=[], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c5}, 0x200408f0) fcntl$lock(r6, 0x26, &(0x7f0000000200)={0x1, 0x4, 0x3, 0x100000000000000}) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x2, 0x1, 0x7fff, 0x2e}) poll(&(0x7f0000000140)=[{r4, 0x2cfc08c20dafc34e}, {r2, 0xf102}], 0x2, 0x8000007) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x2, 0x5, 0x3, 0x2, 0x12, "1b10b9ad000003aacd862793f19cca2400"}) 8.24268962s ago: executing program 2 (id=6363): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xc, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x2, 0x8, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x10, 0x5, 0x401, 0xfffffff9, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x5, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd51, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x80007, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x9e9, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x7, 0x8000, 0xf47, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d85, 0xb, 0xfffffff7, 0x8, 0x140f2, 0x5398, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0xc63f, 0xffffffff, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = getpid() process_vm_readv(0x0, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}}) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) setpgid(0x0, r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) poll(&(0x7f0000000280)=[{r3, 0x2004}], 0x1, 0x8) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 7.339695571s ago: executing program 5 (id=6365): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 7.301758282s ago: executing program 2 (id=6366): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$namespace(r0, &(0x7f0000002b80)='ns/ipc\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0), 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$unix(0x1, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000040)=0x40, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_open_dev$radio(0x0, 0x3, 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x400, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x3afb075, 0x0) 7.085348147s ago: executing program 5 (id=6367): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r3, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff, 0x800005, 0x80000}) connect$inet6(0xffffffffffffffff, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) 5.802243016s ago: executing program 0 (id=6368): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r0, &(0x7f00000022c0)=[{{&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000d00)}], 0x1, &(0x7f0000002b00)=ANY=[], 0x198}}], 0x2, 0x2000c044) syz_emit_ethernet(0x66, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x30, 0x3a, 0x0, @private1, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0}}}}}}}, 0x0) writev(r0, &(0x7f0000002640)=[{&(0x7f0000000c40)="b4", 0xfdef}], 0x1) 5.801631966s ago: executing program 5 (id=6369): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) unshare(0x28000600) rmdir(0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) r2 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000017000000bfa30000000000000703000028feffff620af4fff8ffffff61a4f0ff0000000015040000000001d80f030000000000003404000001ed0a0014040000170000803c400000000000007b0a00fe000000004e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090d030000003acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e31a3446cd57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat(r2, &(0x7f0000000100)='./file0\x00', 0x200380, 0x148) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf250000ffff", @ANYRES32=0x0, @ANYBLOB="17810000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r1, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 5.547858503s ago: executing program 0 (id=6370): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$namespace(r0, &(0x7f0000002b80)='ns/ipc\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0), 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$unix(0x1, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000040)=0x40, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_open_dev$radio(0x0, 0x3, 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x400, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x3afb075, 0x0) 5.054326563s ago: executing program 2 (id=6371): ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(0x0, &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) close(0x3) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.967525646s ago: executing program 5 (id=6372): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x0, 0x7}, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40448c0}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x2b, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xc5, 0x0, 0xe1b31c0aaf6f5dc5}}, 0x40) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$autofs(0xffffffffffffff9c, 0x0, 0x200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xaf, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) 3.723095975s ago: executing program 0 (id=6373): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xc, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x2, 0x8, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x10, 0x5, 0x401, 0xfffffff9, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x5, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd51, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x80007, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x9e9, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x7, 0x8000, 0xf47, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d85, 0xb, 0xfffffff7, 0x8, 0x140f2, 0x5398, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0xc63f, 0xffffffff, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = getpid() process_vm_readv(0x0, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}}) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) setpgid(0x0, r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) poll(&(0x7f0000000280)=[{r3, 0x2004}], 0x1, 0x8) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 3.460644501s ago: executing program 2 (id=6374): utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) 3.405651632s ago: executing program 5 (id=6375): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x803, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x30bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x8}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10003, 0xc6d, 0x7ffffffd, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0x9, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x4, 0xfff, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8000, 0x8, 0x6, 0xa, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x9, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x6, 0xe2f3, 0x4, 0x7f, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x9, 0x6, 0xfffffffe, 0x6, 0x5, 0x7ff, 0x1, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x5, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x7, 0xc28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0x100, 0x8, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x6, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x0, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 3.227884796s ago: executing program 2 (id=6376): r0 = syz_usb_connect$lan78xx(0x6, 0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) fallocate(r1, 0x3, 0x3, 0x8100c60) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) 1.717360301s ago: executing program 0 (id=6377): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r0, &(0x7f00000022c0)=[{{&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000d00)}], 0x1, &(0x7f0000002b00)=ANY=[], 0x198}}], 0x2, 0x2000c044) syz_emit_ethernet(0x66, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x30, 0x3a, 0x0, @private1, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0}}}}}}}, 0x0) writev(r0, &(0x7f0000002640)=[{&(0x7f0000000c40)="b4", 0xfdef}], 0x1) 1.650189552s ago: executing program 0 (id=6378): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init() r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000004000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0xe301931e84abcad4, 0x9, '\x00', 0x0, 0x25, r1}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f00000000c0)=0x9732) listen(r4, 0xec) accept4$bt_l2cap(r4, 0x0, 0x0, 0x800) close(0x3) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) 880.930531ms ago: executing program 0 (id=6379): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$namespace(r0, &(0x7f0000002b80)='ns/ipc\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0), 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$unix(0x1, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000040)=0x40, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_open_dev$radio(0x0, 0x3, 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x400, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x3afb075, 0x0) 0s ago: executing program 2 (id=6380): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$namespace(r0, &(0x7f0000002b80)='ns/ipc\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0), 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$unix(0x1, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000040)=0x40, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_open_dev$radio(0x0, 0x3, 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x400, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x3afb075, 0x0) kernel console output (not intermixed with test programs): device number 55 using dummy_hcd [ 1759.793301][ T787] usb 1-1: device descriptor read/64, error -71 [ 1759.844386][T22665] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1759.862962][ T27] usb 3-1: USB disconnect, device number 19 [ 1759.890055][T22665] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1759.923746][T22665] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1759.966599][T22665] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1760.004408][T22665] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1760.053477][T25319] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1760.103713][T22665] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1760.143241][ T787] usb 1-1: new low-speed USB device number 56 using dummy_hcd [ 1760.163724][T25319] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1760.173916][T22665] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1760.250787][T22665] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1760.313555][ T787] usb 1-1: device descriptor read/64, error -71 [ 1760.419826][T22665] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1760.440604][ T787] usb usb1-port1: attempt power cycle [ 1760.543669][T22665] usb 5-1: USB disconnect, device number 49 [ 1760.899837][ T787] usb 1-1: new low-speed USB device number 57 using dummy_hcd [ 1760.943822][ T787] usb 1-1: device descriptor read/8, error -71 [ 1761.223553][ T787] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 1761.275828][ T787] usb 1-1: device descriptor read/8, error -71 [ 1761.404069][ T787] usb usb1-port1: unable to enumerate USB device [ 1762.220254][T25331] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1762.296287][T25331] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1762.302492][T25331] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1763.483271][T24926] Bluetooth: hci1: command 0x0c1a tx timeout [ 1764.428798][T18652] Bluetooth: hci0: command 0x0c1a tx timeout [ 1764.431201][T25336] fuse: Bad value for 'fd' [ 1764.436108][T24926] Bluetooth: hci3: command 0x0c1a tx timeout [ 1764.573695][T25345] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1764.873173][ T787] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1764.875032][T25358] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1765.091569][T25358] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1765.093602][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1765.113253][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1765.237435][ T787] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1765.258364][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.293549][ T787] usb 1-1: config 0 descriptor?? [ 1765.323139][T22665] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1765.503318][T22665] usb 3-1: Using ep0 maxpacket: 16 [ 1765.515892][T22665] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1765.527555][T22665] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1765.539869][T22665] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1765.550109][T22665] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1765.560060][T22665] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1765.575633][T22665] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1765.585269][T22665] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1765.595717][T22665] usb 3-1: Manufacturer: syz [ 1765.603838][T22665] usb 3-1: config 0 descriptor?? [ 1765.662755][T25209] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1765.712669][ T787] usbhid 1-1:0.0: can't add hid device: -32 [ 1765.720690][ T787] usbhid: probe of 1-1:0.0 failed with error -32 [ 1765.853070][T25209] usb 5-1: Using ep0 maxpacket: 32 [ 1765.860353][T25209] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 231, changing to 7 [ 1765.874886][T25209] usb 5-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 1765.884402][T25209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.892603][T25209] usb 5-1: Product: syz [ 1765.895277][T22665] rc_core: IR keymap rc-hauppauge not found [ 1765.897664][T25209] usb 5-1: Manufacturer: syz [ 1765.908923][T25209] usb 5-1: SerialNumber: syz [ 1765.913335][T22665] Registered IR keymap rc-empty [ 1765.989458][T22665] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1766.067540][T22665] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1766.339312][T22665] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1766.478841][T25209] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1766.481397][T22665] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input49 [ 1766.517075][T22665] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1766.523077][T25209] usb 5-1: USB disconnect, device number 50 [ 1766.578347][T25133] udevd[25133]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1766.595164][T22665] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1766.633901][T22665] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1766.665135][T22665] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1766.703336][T22665] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1766.733645][T22665] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1766.763209][T22665] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1766.809949][T22665] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1766.971835][T22665] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1767.003185][T22665] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1767.067326][T22665] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1767.280204][T22665] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1767.473244][T25288] usb 6-1: new low-speed USB device number 55 using dummy_hcd [ 1767.663526][T22665] usb 3-1: USB disconnect, device number 20 [ 1767.684173][T25209] usb 1-1: USB disconnect, device number 59 [ 1767.783445][T25288] usb 6-1: device descriptor read/64, error -71 [ 1768.665992][T25288] usb 6-1: new low-speed USB device number 56 using dummy_hcd [ 1768.895650][T25288] usb 6-1: device descriptor read/64, error -71 [ 1768.979837][T25379] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1769.018032][T25379] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1769.029422][T25379] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1769.114529][T25288] usb usb6-port1: attempt power cycle [ 1769.333336][T25392] fuse: Bad value for 'fd' [ 1769.643375][T25288] usb 6-1: new low-speed USB device number 57 using dummy_hcd [ 1769.684237][T25288] usb 6-1: device descriptor read/8, error -71 [ 1770.729488][T24926] Bluetooth: hci1: command 0x0c1a tx timeout [ 1771.103601][T24926] Bluetooth: hci3: command 0x0c1a tx timeout [ 1771.112597][T24926] Bluetooth: hci0: command 0x0c1a tx timeout [ 1772.024698][T25288] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1772.288311][T25288] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1772.299750][T25288] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1772.317374][T25288] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1772.330248][T25288] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.365055][T25288] usb 6-1: config 0 descriptor?? [ 1772.499981][ T787] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1772.693268][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 1772.723465][ T787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1772.767432][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1772.780808][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1772.791240][ T787] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1772.802395][ T787] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1773.173529][ T787] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1773.183043][ T787] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1773.191313][ T787] usb 1-1: Manufacturer: syz [ 1773.279948][ T787] usb 1-1: config 0 descriptor?? [ 1773.723995][T25288] usbhid 6-1:0.0: can't add hid device: -32 [ 1773.730231][T25288] usbhid: probe of 6-1:0.0 failed with error -32 [ 1773.773523][ T787] rc_core: IR keymap rc-hauppauge not found [ 1773.779918][ T787] Registered IR keymap rc-empty [ 1773.802273][ T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1773.843952][ T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1773.892720][ T787] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1774.163720][ T787] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input50 [ 1774.415602][ T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1774.514163][ T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1774.594107][ T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1774.633630][T25426] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1774.642783][T25426] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1774.652325][T25426] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1774.663167][ T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1774.703704][ T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1774.775587][ T27] usb 6-1: USB disconnect, device number 59 [ 1774.793247][ T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1774.863526][ T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1774.933343][ T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1775.803308][ T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1775.833136][ T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1775.843557][T24926] Bluetooth: hci1: command 0x0c1a tx timeout [ 1775.932793][ T787] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1775.965297][ T787] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1776.640747][ T27] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 1776.703151][ T787] usb 1-1: USB disconnect, device number 60 [ 1776.724101][T24926] Bluetooth: hci3: command 0x0c1a tx timeout [ 1776.730381][T24926] Bluetooth: hci0: command 0x0c1a tx timeout [ 1776.868971][ T27] usb 5-1: device descriptor read/64, error -71 [ 1777.173182][ T27] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 1777.453846][ T27] usb 5-1: device descriptor read/64, error -71 [ 1778.131984][ T27] usb usb5-port1: attempt power cycle [ 1778.444250][T25463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5443'. [ 1780.114357][T25469] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1780.153900][T25469] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1780.161406][T25469] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1780.444448][T18863] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1780.600884][ T27] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1780.682787][T18863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1780.736900][T18863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1780.792312][T18863] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1780.839446][T18863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1780.956549][T18863] usb 3-1: config 0 descriptor?? [ 1781.168701][T25477] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1781.196706][T25477] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1781.210706][T25477] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1781.363842][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 1781.386391][ T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1781.397991][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1781.409647][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1781.419895][ T27] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1781.430284][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1781.473649][ T27] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1781.489371][ T27] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1781.503078][ T27] usb 5-1: Manufacturer: syz [ 1781.536195][ T27] usb 5-1: config 0 descriptor?? [ 1781.802411][T18863] usbhid 3-1:0.0: can't add hid device: -32 [ 1781.874972][T18863] usbhid: probe of 3-1:0.0 failed with error -32 [ 1782.483628][T18652] Bluetooth: hci1: command 0x0c1a tx timeout [ 1782.613095][ T27] rc_core: IR keymap rc-hauppauge not found [ 1782.691215][ T27] Registered IR keymap rc-empty [ 1782.698988][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1782.737644][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1782.789857][ T27] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1782.817404][ T27] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input51 [ 1783.036516][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1783.201300][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1783.210675][T24926] Bluetooth: hci0: command 0x0c1a tx timeout [ 1783.295424][T24926] Bluetooth: hci3: command 0x0c1a tx timeout [ 1783.495578][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1783.535408][T25209] usb 3-1: USB disconnect, device number 21 [ 1783.551414][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1783.818590][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1784.362529][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1784.393281][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1784.460004][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1785.203811][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1785.220940][T25509] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5454'. [ 1785.253264][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1785.305387][ T27] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1785.337219][ T27] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1786.223354][ T27] usb 5-1: USB disconnect, device number 54 [ 1788.814964][T25524] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1788.873353][T25524] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1788.879920][T25524] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1788.921658][T25540] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1789.153245][T18863] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1789.183253][T25288] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1789.351523][T18863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1789.530727][T25288] usb 3-1: Using ep0 maxpacket: 16 [ 1789.567566][T25288] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1789.732407][T18863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1789.752662][T25288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1789.764933][T18863] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1789.774169][T25288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1789.784571][T18863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.793980][T25288] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1789.812529][T18863] usb 6-1: config 0 descriptor?? [ 1789.823533][T25288] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1789.839748][T25288] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1789.881565][T25288] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1789.934577][T24926] Bluetooth: hci1: command 0x0c1a tx timeout [ 1790.129418][T25549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5466'. [ 1790.320424][T25288] usb 3-1: Manufacturer: syz [ 1790.744279][T25288] usb 3-1: config 0 descriptor?? [ 1790.865983][T18863] usbhid 6-1:0.0: can't add hid device: -32 [ 1790.872887][T18863] usbhid: probe of 6-1:0.0 failed with error -32 [ 1790.883135][T24926] Bluetooth: hci0: command 0x0c1a tx timeout [ 1790.964118][T24926] Bluetooth: hci3: command 0x0c1a tx timeout [ 1791.433114][T25288] rc_core: IR keymap rc-hauppauge not found [ 1791.439259][T25288] Registered IR keymap rc-empty [ 1791.456369][T25288] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1791.524252][T25288] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1791.621762][T25288] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1791.781255][T25288] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input52 [ 1792.086586][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.093597][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.101624][T25288] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1792.163479][T25288] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1792.193625][T25288] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1792.240391][T25288] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1792.314049][T25288] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1792.371169][T25288] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1792.418228][T25288] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1792.472050][T14651] usb 6-1: USB disconnect, device number 60 [ 1792.478410][T25288] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1792.636753][T25288] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1792.653353][ T787] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 1792.702708][T25288] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1793.456235][ T787] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0xA has invalid maxpacket 12408, setting to 64 [ 1793.457127][T25288] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1793.467788][ T787] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1793.485115][T25578] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1793.487453][ T787] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1793.543062][ T787] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1793.554586][ T787] usb 1-1: Product: syz [ 1793.558943][ T787] usb 1-1: Manufacturer: syz [ 1793.573042][ T787] usb 1-1: SerialNumber: syz [ 1793.579698][T25288] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1793.753231][ T787] usb 1-1: config 0 descriptor?? [ 1793.753699][T25578] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1794.643441][ T787] usb 1-1: selecting invalid altsetting 0 [ 1794.923243][T25288] usb 3-1: USB disconnect, device number 22 [ 1794.946894][ T787] usb 1-1: USB disconnect, device number 61 [ 1795.026710][T25586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5475'. [ 1796.743243][T25288] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1796.943259][T25288] usb 5-1: Using ep0 maxpacket: 16 [ 1796.975084][T25288] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1797.013233][T25288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1797.065543][T25288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1797.113572][T25288] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1797.137344][T25288] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1797.169818][T25288] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1797.190053][T25288] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1797.212870][T25288] usb 5-1: Manufacturer: syz [ 1797.298880][T25288] usb 5-1: config 0 descriptor?? [ 1798.793270][T25288] rc_core: IR keymap rc-hauppauge not found [ 1798.799528][T25288] Registered IR keymap rc-empty [ 1798.911333][T25288] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1799.991522][T25288] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1800.045702][T25288] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1800.161376][T25620] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1800.292048][T25620] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1800.304377][T25288] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input53 [ 1801.524974][T25288] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1801.584566][T25632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5487'. [ 1801.594321][T25288] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1801.625733][T25288] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1801.666732][T25288] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1801.723194][T25288] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1801.783244][T25288] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1801.837766][T25288] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1801.893595][T25288] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1801.946621][T25288] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1801.999754][T25288] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1802.093487][ T27] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1802.469806][T25288] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1802.828578][T25288] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1802.843864][T25288] usb 5-1: USB disconnect, device number 55 [ 1803.383335][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 1803.394260][ T27] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1803.405712][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1803.456174][ T27] usb 3-1: config 0 descriptor?? [ 1803.506541][ T27] as10x_usb: device has been detected [ 1803.532497][ T27] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1803.625338][ T27] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1803.706954][ T27] as10x_usb: error during firmware upload part1 [ 1803.728275][ T27] Registered device nBox DVB-T Dongle [ 1804.146672][ T27] usb 3-1: USB disconnect, device number 23 [ 1804.271162][ T27] Unregistered device nBox DVB-T Dongle [ 1804.292186][ T27] as10x_usb: device has been disconnected [ 1805.955243][T25288] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1806.207149][T25288] usb 6-1: Using ep0 maxpacket: 16 [ 1806.356369][T25288] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1806.404591][T25288] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1806.449004][T25288] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1806.563953][T25288] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1806.591960][T25288] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1806.638888][T25288] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1806.650230][T25288] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1806.667445][T25288] usb 6-1: Manufacturer: syz [ 1806.677047][T25288] usb 6-1: config 0 descriptor?? [ 1806.897978][T25670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5499'. [ 1806.907712][T25670] bridge_slave_1: left allmulticast mode [ 1806.913750][T25670] bridge_slave_1: left promiscuous mode [ 1806.919853][T25670] bridge0: port 2(bridge_slave_1) entered disabled state [ 1806.937221][T25670] bridge_slave_0: left allmulticast mode [ 1806.943485][T25670] bridge_slave_0: left promiscuous mode [ 1806.949870][T25670] bridge0: port 1(bridge_slave_0) entered disabled state [ 1807.173633][T25288] rc_core: IR keymap rc-hauppauge not found [ 1807.179686][T25288] Registered IR keymap rc-empty [ 1808.056752][T25288] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1808.093464][T25288] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1808.144023][T25288] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1808.303278][T25288] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input54 [ 1808.338694][T25691] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1808.829307][T25288] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1808.924182][T25288] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1809.147812][T25288] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1809.384197][T25288] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1809.525777][T25288] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1809.611114][T25288] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1809.643557][T25288] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1809.673518][T25288] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1809.893216][T25288] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1810.203160][T25288] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1810.241127][T25288] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1810.573524][T25288] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1810.621235][T25288] usb 6-1: USB disconnect, device number 61 [ 1814.432434][T25738] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5509'. [ 1814.623288][T22665] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1817.293965][T22665] usb 1-1: Using ep0 maxpacket: 16 [ 1817.324084][T22665] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1817.354397][T22665] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1817.391427][T22665] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1817.442762][T22665] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1817.466841][T22665] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1817.505690][T22665] usb 1-1: string descriptor 0 read error: -71 [ 1817.512256][T22665] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1817.900679][T22665] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1817.994935][T22665] usb 1-1: config 0 descriptor?? [ 1818.000688][T22665] usb 1-1: can't set config #0, error -71 [ 1818.027557][T22665] usb 1-1: USB disconnect, device number 62 [ 1820.709420][T25780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5525'. [ 1820.833111][T14651] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1821.085279][T14651] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1821.175006][T14651] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1821.215379][T14651] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1821.257612][T14651] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1821.298032][T14651] usb 6-1: config 0 descriptor?? [ 1821.939504][T14651] usbhid 6-1:0.0: can't add hid device: -32 [ 1821.949036][T14651] usbhid: probe of 6-1:0.0 failed with error -32 [ 1823.692858][T14651] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1823.721369][ T787] usb 6-1: USB disconnect, device number 62 [ 1823.907135][T14651] usb 3-1: Using ep0 maxpacket: 32 [ 1824.003976][T14651] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1824.033175][T14651] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.110376][T14651] usb 3-1: config 0 descriptor?? [ 1824.168853][T14651] as10x_usb: device has been detected [ 1824.218053][T14651] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1824.579033][T14651] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1824.616182][T14651] as10x_usb: error during firmware upload part1 [ 1824.641588][T14651] Registered device nBox DVB-T Dongle [ 1824.678862][T14651] usb 3-1: USB disconnect, device number 24 [ 1824.745798][T14651] Unregistered device nBox DVB-T Dongle [ 1824.766817][T14651] as10x_usb: device has been disconnected [ 1827.123371][T14651] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1827.257351][T22665] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1827.323186][T14651] usb 5-1: Using ep0 maxpacket: 32 [ 1827.340864][T14651] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 1827.373579][T14651] usb 5-1: config 0 has no interface number 0 [ 1827.380244][T14651] usb 5-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1827.391534][T14651] usb 5-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 1827.403586][T14651] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1827.443258][T14651] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1827.517266][T14651] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.525934][T14651] usb 5-1: Product: syz [ 1827.531047][T14651] usb 5-1: Manufacturer: syz [ 1827.537278][T14651] usb 5-1: SerialNumber: syz [ 1827.562523][T22665] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1827.665861][T14651] usb 5-1: config 0 descriptor?? [ 1827.671831][T25841] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1827.683203][T22665] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1827.728617][T14651] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input55 [ 1827.736067][T22665] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1827.757651][T22665] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.780418][T22665] usb 6-1: config 0 descriptor?? [ 1828.050146][T18863] usb 5-1: USB disconnect, device number 56 [ 1828.539434][T22665] usbhid 6-1:0.0: can't add hid device: -32 [ 1828.564127][T22665] usbhid: probe of 6-1:0.0 failed with error -32 [ 1830.409548][T14651] usb 6-1: USB disconnect, device number 63 [ 1833.793204][T14651] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1835.344784][T14651] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1835.367364][T14651] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1835.395094][T14651] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1835.404849][T14651] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.424325][T14651] usb 5-1: config 0 descriptor?? [ 1836.065214][T14651] usbhid 5-1:0.0: can't add hid device: -32 [ 1836.084074][T14651] usbhid: probe of 5-1:0.0 failed with error -32 [ 1837.321599][T14651] usb 5-1: USB disconnect, device number 57 [ 1840.566168][T25970] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1840.592537][T25970] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1840.611632][T25970] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1840.893079][T11099] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1841.093038][T11099] usb 3-1: Using ep0 maxpacket: 32 [ 1841.103715][T11099] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1841.113259][ T8] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1841.126075][T11099] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1841.135894][T11099] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1841.145245][T11099] usb 3-1: Product: syz [ 1841.149957][T11099] usb 3-1: Manufacturer: syz [ 1841.155601][T11099] usb 3-1: SerialNumber: syz [ 1841.188496][T11099] usb 3-1: config 0 descriptor?? [ 1841.196054][T25972] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1841.228240][T11099] hub 3-1:0.0: bad descriptor, ignoring hub [ 1841.253392][T11099] hub: probe of 3-1:0.0 failed with error -5 [ 1841.324703][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1841.339100][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1841.352367][ T8] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1841.386023][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.406781][ T8] usb 5-1: config 0 descriptor?? [ 1841.870627][T24926] Bluetooth: hci1: command 0x0c1a tx timeout [ 1841.883322][T25972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1841.918700][T25972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1842.606060][ T8] usbhid 5-1:0.0: can't add hid device: -32 [ 1842.613099][ T8] usbhid: probe of 5-1:0.0 failed with error -32 [ 1842.649021][T18652] Bluetooth: hci0: command 0x0c1a tx timeout [ 1842.658233][T24926] Bluetooth: hci3: command 0x0c1a tx timeout [ 1842.862584][T25995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1842.974438][T25995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1843.289952][T25995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1843.374113][T25995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1844.183876][T11099] usb 3-1: USB disconnect, device number 25 [ 1844.469193][T25209] usb 5-1: USB disconnect, device number 58 [ 1844.756461][T26014] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1844.820516][T26014] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1844.860693][T26014] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1846.454744][T18652] Bluetooth: hci1: command 0x0c1a tx timeout [ 1846.893103][T18652] Bluetooth: hci3: command 0x0c1a tx timeout [ 1846.902815][T18652] Bluetooth: hci0: command 0x0c1a tx timeout [ 1847.613319][ T8] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1847.813087][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 1847.825591][ T8] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1847.865349][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1848.007723][ T8] usb 6-1: config 0 descriptor?? [ 1848.032395][ T8] as10x_usb: device has been detected [ 1848.042891][ T8] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1848.090186][ T8] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1848.125576][ T8] as10x_usb: error during firmware upload part1 [ 1848.134743][ T8] Registered device nBox DVB-T Dongle [ 1848.233488][T25209] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1848.534042][ T8] usb 6-1: USB disconnect, device number 64 [ 1848.653843][T25209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1848.667044][T25209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1848.677984][T25209] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1848.687572][T25209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1848.770258][T25209] usb 1-1: config 0 descriptor?? [ 1848.804958][ T8] Unregistered device nBox DVB-T Dongle [ 1848.808837][ T8] as10x_usb: device has been disconnected [ 1848.963374][T18652] Bluetooth: hci3: command 0x0c1a tx timeout [ 1849.133701][T18863] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1849.183866][T25209] cp2112 0003:10C4:EA90.0029: unknown main item tag 0x0 [ 1849.191929][T25209] cp2112 0003:10C4:EA90.0029: unknown main item tag 0x0 [ 1849.199724][T25209] cp2112 0003:10C4:EA90.0029: unknown main item tag 0x0 [ 1849.207526][T25209] cp2112 0003:10C4:EA90.0029: unknown main item tag 0x0 [ 1849.215467][T25209] cp2112 0003:10C4:EA90.0029: unknown main item tag 0x0 [ 1849.222585][T25209] cp2112 0003:10C4:EA90.0029: unknown main item tag 0x0 [ 1849.230002][T25209] cp2112 0003:10C4:EA90.0029: unknown main item tag 0x0 [ 1849.239676][T25209] cp2112 0003:10C4:EA90.0029: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1849.331768][T18863] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 1849.372011][T18863] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1849.381974][T25209] cp2112 0003:10C4:EA90.0029: error requesting version [ 1849.402685][T18863] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1849.416421][T25209] cp2112: probe of 0003:10C4:EA90.0029 failed with error -32 [ 1849.422073][T18863] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1850.234583][T26057] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1850.264618][T18863] usb 5-1: Product: syz [ 1850.290004][T18863] usb 5-1: Manufacturer: syz [ 1850.316775][T26057] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1850.332817][T18863] usb 5-1: SerialNumber: syz [ 1850.348607][T26057] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1850.378596][T18863] usb 5-1: config 0 descriptor?? [ 1850.423967][T26054] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1850.496733][T18863] usb 5-1: selecting invalid altsetting 0 [ 1850.755947][T22665] usb 5-1: USB disconnect, device number 59 [ 1851.011919][T18863] usb 1-1: USB disconnect, device number 63 [ 1852.302176][T18652] Bluetooth: hci1: command 0x0c1a tx timeout [ 1852.403736][T24926] Bluetooth: hci0: command 0x0c1a tx timeout [ 1852.410020][T18652] Bluetooth: hci3: command 0x0c1a tx timeout [ 1852.473061][T26085] autofs4:pid:26085:autofs_fill_super: called with bogus options [ 1852.602126][T26090] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1853.529841][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.541540][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.440495][T26099] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1854.449259][T26099] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1854.457124][T26099] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1855.915822][T18652] Bluetooth: hci1: command 0x0c1a tx timeout [ 1856.419826][T22665] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1856.483135][T24926] Bluetooth: hci0: command 0x0c1a tx timeout [ 1856.489441][T18652] Bluetooth: hci3: command 0x0c1a tx timeout [ 1856.643190][T22665] usb 5-1: Using ep0 maxpacket: 32 [ 1856.655914][T22665] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1856.689266][T22665] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1856.719145][T22665] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1856.729081][T22665] usb 5-1: Product: syz [ 1856.746224][T22665] usb 5-1: Manufacturer: syz [ 1856.766931][T22665] usb 5-1: SerialNumber: syz [ 1856.777852][T22665] usb 5-1: config 0 descriptor?? [ 1856.794711][T26107] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1856.814213][T22665] hub 5-1:0.0: bad descriptor, ignoring hub [ 1856.833161][T25288] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1856.841757][T22665] hub: probe of 5-1:0.0 failed with error -5 [ 1857.036265][T25288] usb 1-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 1857.063111][T25288] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1857.084770][T25288] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1857.107820][T25288] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1857.124502][T25288] usb 1-1: Product: syz [ 1857.133313][T25288] usb 1-1: Manufacturer: syz [ 1857.138262][T25288] usb 1-1: SerialNumber: syz [ 1857.169179][T25288] usb 1-1: config 0 descriptor?? [ 1857.191413][T26116] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1857.237398][T25288] usb 1-1: selecting invalid altsetting 0 [ 1857.453334][T26107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1859.194437][T11099] usb 1-1: USB disconnect, device number 64 [ 1859.213725][T26107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1859.363830][T24926] Bluetooth: hci3: command 0x0c1a tx timeout [ 1859.553394][ T8] usb 5-1: USB disconnect, device number 60 [ 1859.577307][T26129] autofs4:pid:26129:autofs_fill_super: called with bogus options [ 1860.971099][T26139] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1860.977496][T26139] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1862.223195][T26139] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1862.325638][T24926] Bluetooth: hci1: command 0x0c1a tx timeout [ 1863.067446][T24926] Bluetooth: hci3: command 0x0c1a tx timeout [ 1863.067446][T18652] Bluetooth: hci0: command 0x0c1a tx timeout [ 1863.183183][ T8] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1864.113056][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 1864.120304][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1864.144052][ T8] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1864.187092][ T8] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1864.226047][ T8] usb 1-1: Product: syz [ 1864.231846][ T8] usb 1-1: Manufacturer: syz [ 1864.283072][ T8] usb 1-1: SerialNumber: syz [ 1864.479821][ T8] usb 1-1: config 0 descriptor?? [ 1864.549046][T26154] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1864.625511][ T8] hub 1-1:0.0: bad descriptor, ignoring hub [ 1864.631695][ T8] hub: probe of 1-1:0.0 failed with error -5 [ 1864.923160][T11099] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1865.180608][T11099] usb 3-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 1865.514259][T26154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1865.547175][T11099] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1865.733640][T26154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1865.751228][T11099] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1865.763899][T11099] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1865.772803][T11099] usb 3-1: Product: syz [ 1865.777639][T11099] usb 3-1: Manufacturer: syz [ 1865.782489][T11099] usb 3-1: SerialNumber: syz [ 1865.896119][T11099] usb 3-1: config 0 descriptor?? [ 1865.914611][T26170] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1866.143186][T24926] Bluetooth: hci3: command 0x0c1a tx timeout [ 1866.154817][T11099] usb 3-1: selecting invalid altsetting 0 [ 1866.314190][T26178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1866.365758][T26178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1868.327235][T26181] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1868.336333][T11099] usb 3-1: USB disconnect, device number 26 [ 1869.645023][ T5764] usb 1-1: USB disconnect, device number 65 [ 1869.693227][T26181] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1869.707169][T26181] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1870.173584][T18652] Bluetooth: hci1: command 0x0c1a tx timeout [ 1870.795493][T26196] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1871.763203][T18652] Bluetooth: hci3: command 0x0c1a tx timeout [ 1871.770212][T18652] Bluetooth: hci0: command 0x0c1a tx timeout [ 1872.054110][T26199] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1872.323252][T26199] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1872.346066][T26199] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1873.883885][T26222] netlink: 'syz.4.5646': attribute type 49 has an invalid length. [ 1874.004694][T24926] Bluetooth: hci1: command 0x0c1a tx timeout [ 1874.413045][T24926] Bluetooth: hci3: command 0x0c1a tx timeout [ 1874.419993][T24926] Bluetooth: hci0: command 0x0c1a tx timeout [ 1874.523037][T11099] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1875.283698][T11099] usb 1-1: Using ep0 maxpacket: 32 [ 1875.300992][T11099] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1875.334313][T11099] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1875.347892][T11099] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1875.428246][T11099] usb 1-1: Product: syz [ 1875.462563][T11099] usb 1-1: Manufacturer: syz [ 1875.486098][T11099] usb 1-1: SerialNumber: syz [ 1875.523057][T11099] usb 1-1: config 0 descriptor?? [ 1875.539021][T26224] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1875.555945][T11099] hub 1-1:0.0: bad descriptor, ignoring hub [ 1875.562814][T11099] hub: probe of 1-1:0.0 failed with error -5 [ 1876.213027][T22665] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1876.258571][T26224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1876.362885][T26224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1876.430730][T22665] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 1876.493113][T24926] Bluetooth: hci3: command 0x0c1a tx timeout [ 1876.544638][T22665] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1876.642785][T22665] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1876.746517][T22665] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1876.837417][T22665] usb 5-1: Product: syz [ 1876.876573][T22665] usb 5-1: Manufacturer: syz [ 1876.935188][T22665] usb 5-1: SerialNumber: syz [ 1876.996607][T22665] usb 5-1: config 0 descriptor?? [ 1877.003832][T26240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1877.024667][T26240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1877.026902][T26233] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1877.081856][T22665] usb 5-1: selecting invalid altsetting 0 [ 1877.330075][T26240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1877.550470][T26240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1880.759940][T26251] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1880.767023][T26244] snd-usb-audio 5-1:0.0: Runtime PM usage count underflow! [ 1880.806204][ T27] usb 1-1: USB disconnect, device number 66 [ 1880.916641][T26251] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1880.945339][T14651] usb 5-1: USB disconnect, device number 61 [ 1880.962006][T26251] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1882.040799][T24926] Bluetooth: hci1: command 0x0c1a tx timeout [ 1883.435956][T24926] Bluetooth: hci0: command 0x0c1a tx timeout [ 1883.683045][T18652] Bluetooth: hci3: command 0x0c1a tx timeout [ 1885.653289][T14651] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1885.773038][T18652] Bluetooth: hci3: command 0x0c1a tx timeout [ 1886.831972][T14651] usb 3-1: Using ep0 maxpacket: 32 [ 1886.856242][T14651] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1886.885248][T14651] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1886.903628][T14651] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1886.912344][T14651] usb 3-1: Product: syz [ 1886.953367][T14651] usb 3-1: Manufacturer: syz [ 1886.967168][T14651] usb 3-1: SerialNumber: syz [ 1886.989986][T14651] usb 3-1: config 0 descriptor?? [ 1887.083407][T26285] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1887.092401][T14651] hub 3-1:0.0: bad descriptor, ignoring hub [ 1887.120152][T14651] hub: probe of 3-1:0.0 failed with error -5 [ 1888.394058][T26285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1888.418167][T26285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1889.481972][T26316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1889.531661][T26316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1889.843835][T25209] usb 3-1: USB disconnect, device number 27 [ 1890.593202][T25209] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1890.917849][T25209] usb 5-1: Using ep0 maxpacket: 32 [ 1891.336814][T25209] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1891.462893][T25209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1891.517593][T25209] usb 5-1: config 0 descriptor?? [ 1891.530548][T25209] as10x_usb: device has been detected [ 1891.558858][T25209] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1891.647042][T25209] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1891.703876][T25209] as10x_usb: error during firmware upload part1 [ 1891.831356][T25209] Registered device nBox DVB-T Dongle [ 1891.857803][T25209] usb 5-1: USB disconnect, device number 62 [ 1891.996947][T25209] Unregistered device nBox DVB-T Dongle [ 1892.007280][T25209] as10x_usb: device has been disconnected [ 1893.863057][T25288] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1894.053183][T25288] usb 3-1: Using ep0 maxpacket: 32 [ 1894.070792][T25288] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1894.104517][T25288] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1894.114957][T25288] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1894.124267][T25288] usb 3-1: Product: syz [ 1894.129511][T25288] usb 3-1: Manufacturer: syz [ 1894.135451][T25288] usb 3-1: SerialNumber: syz [ 1894.154757][T25288] usb 3-1: config 0 descriptor?? [ 1894.182029][T26352] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1894.191777][T25288] hub 3-1:0.0: bad descriptor, ignoring hub [ 1894.202669][T25288] hub: probe of 3-1:0.0 failed with error -5 [ 1895.496646][T26352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1895.563431][T26352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1895.899588][T26365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1895.935676][T26365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1896.218254][T26365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1896.234848][T26365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1901.263840][T26421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5696'. [ 1903.648773][ T27] usb 3-1: USB disconnect, device number 28 [ 1905.083077][ T27] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1906.108134][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 1906.166445][ T27] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1906.184200][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1906.214227][ T27] usb 3-1: config 0 descriptor?? [ 1906.242451][ T27] as10x_usb: device has been detected [ 1906.377874][ T27] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1906.543683][ T27] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1906.587085][ T27] as10x_usb: error during firmware upload part1 [ 1906.601930][ T27] Registered device nBox DVB-T Dongle [ 1906.614026][ T27] usb 3-1: USB disconnect, device number 29 [ 1906.630493][T26478] bridge0: entered promiscuous mode [ 1906.660738][ T27] Unregistered device nBox DVB-T Dongle [ 1906.667908][ T27] as10x_usb: device has been disconnected [ 1908.053475][T26487] mmap: syz.0.5713 (26487) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1908.403994][T18863] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1908.683036][T18863] usb 1-1: Using ep0 maxpacket: 16 [ 1908.733247][T18863] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 1908.743303][T18863] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1908.752186][T18863] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1908.762412][T18863] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1908.771934][T18863] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1908.781624][T18863] usb 1-1: config 0 has no interface number 0 [ 1908.793092][T18863] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1908.871995][T18863] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1908.934310][T18863] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1908.983358][T18863] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1909.010794][T18863] usb 1-1: config 0 interface 125 has no altsetting 0 [ 1909.027169][T18863] usb 1-1: config 0 interface 125 has no altsetting 2 [ 1909.055608][T18863] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1909.077985][T18863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.210296][T18863] usb 1-1: Product: syz [ 1909.931756][T18863] usb 1-1: Manufacturer: syz [ 1909.937343][T18863] usb 1-1: SerialNumber: syz [ 1909.972523][T18863] usb 1-1: config 0 descriptor?? [ 1909.997696][T18863] usb 1-1: selecting invalid altsetting 2 [ 1910.824048][ C0] usb 1-1: async_complete: urb error -71 [ 1910.829872][ C0] usb 1-1: async_complete: urb error -71 [ 1910.835913][ C0] usb 1-1: async_complete: urb error -71 [ 1910.841855][ C0] usb 1-1: async_complete: urb error -71 [ 1910.861544][T18863] get_1284_register: usb error -71 [ 1910.871852][T18863] usb 1-1: USB disconnect, device number 67 [ 1911.385724][ T8] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1911.647427][ T8] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1911.669791][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1911.689275][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1911.701951][ T8] usb 6-1: Product: syz [ 1911.709020][ T8] usb 6-1: Manufacturer: syz [ 1911.722418][ T8] usb 6-1: SerialNumber: syz [ 1911.911507][T26537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5726'. [ 1912.731188][ T8] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 65 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1914.161120][ T27] usb 6-1: USB disconnect, device number 65 [ 1914.179834][ T27] usblp0: removed [ 1915.473311][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.490382][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1916.855011][T26569] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1917.348566][T26556] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1917.380990][T26556] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1917.427195][T26556] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1917.538661][T26579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5736'. [ 1918.219016][T18652] Bluetooth: hci1: command 0x0c1a tx timeout [ 1919.443213][T18652] Bluetooth: hci3: command 0x0c1a tx timeout [ 1919.610064][T18652] Bluetooth: hci0: command 0x0c1a tx timeout [ 1922.803098][T18652] Bluetooth: hci3: command 0x0c1a tx timeout [ 1924.279812][T26625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5747'. [ 1926.453253][T26627] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1926.657760][T26627] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1926.801468][T26627] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1927.523667][T24926] Bluetooth: hci1: command 0x0c1a tx timeout [ 1927.664946][T18863] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1927.954800][T18863] usb 3-1: Using ep0 maxpacket: 8 [ 1927.980150][T18863] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 1928.010394][T18863] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1928.027997][T18863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1928.081077][T18863] usb 3-1: Product: syz [ 1928.108680][T18863] usb 3-1: Manufacturer: syz [ 1928.126959][T18863] usb 3-1: SerialNumber: syz [ 1928.152477][T18863] usb 3-1: config 0 descriptor?? [ 1928.153115][T11099] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1928.598432][T18863] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1928.623438][T18863] usb 3-1: setting power ON [ 1928.626637][T11099] usb 5-1: Using ep0 maxpacket: 32 [ 1928.633375][T18863] dvb-usb: bulk message failed: -22 (2/0) [ 1928.652591][T18863] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1928.703842][T26663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5757'. [ 1928.721760][T18863] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1928.743607][T24926] Bluetooth: hci0: command 0x0c1a tx timeout [ 1928.803141][T24926] Bluetooth: hci3: command 0x0c1a tx timeout [ 1928.963231][T18863] usb 3-1: media controller created [ 1929.464379][T11099] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1929.473964][T11099] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1929.486011][T11099] usb 5-1: config 0 descriptor?? [ 1929.497785][T11099] as10x_usb: device has been detected [ 1929.535885][T18863] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1931.079384][T18863] usb 3-1: selecting invalid altsetting 6 [ 1931.082972][T11099] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1931.085498][T18863] usb 3-1: digital interface selection failed (-22) [ 1931.144648][T18863] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1931.171049][T11099] usb 5-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 1931.196713][T18863] usb 3-1: setting power OFF [ 1931.201381][T18863] dvb-usb: bulk message failed: -22 (2/0) [ 1931.229375][T18863] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1931.233050][T11099] as10x_usb: error during firmware upload part1 [ 1931.291954][T26672] bridge0: entered promiscuous mode [ 1931.294433][T18863] (NULL device *): no alternate interface [ 1931.297752][T11099] Registered device nBox DVB-T Dongle [ 1931.361392][T18863] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1931.403248][T11099] usb 5-1: USB disconnect, device number 63 [ 1931.451056][T18863] usb 3-1: USB disconnect, device number 30 [ 1931.557576][T11099] Unregistered device nBox DVB-T Dongle [ 1931.562019][T11099] as10x_usb: device has been disconnected [ 1932.367429][T26670] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1932.423323][T26670] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1932.438215][T26670] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1933.363073][T24926] Bluetooth: hci1: command 0x0c1a tx timeout [ 1934.483171][T24926] Bluetooth: hci3: command 0x0c1a tx timeout [ 1934.490175][T24926] Bluetooth: hci0: command 0x0c1a tx timeout [ 1935.613120][ T27] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1935.833309][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 1935.850535][ T27] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1935.865106][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1935.915970][ T27] usb 1-1: config 0 descriptor?? [ 1935.935493][ T27] as10x_usb: device has been detected [ 1935.941928][ T27] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1936.043710][ T27] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1936.075459][ T27] as10x_usb: error during firmware upload part1 [ 1936.082675][ T27] Registered device nBox DVB-T Dongle [ 1936.320483][T25209] usb 1-1: USB disconnect, device number 68 [ 1936.427024][T25209] Unregistered device nBox DVB-T Dongle [ 1936.450247][T25209] as10x_usb: device has been disconnected [ 1937.643666][T26723] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1937.667945][T26723] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1937.678752][T26723] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1938.663620][T26741] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1939.369765][T26736] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1939.402406][T26736] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1939.412018][T26736] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1940.183848][T25209] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1940.493584][T25209] usb 5-1: Using ep0 maxpacket: 16 [ 1940.597443][T25209] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 1940.706303][T25209] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1940.723212][T18652] Bluetooth: hci1: command 0x0c1a tx timeout [ 1940.817906][T25209] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1940.928220][T25209] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1941.054613][T25209] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1941.847063][T18652] Bluetooth: hci3: command 0x0c1a tx timeout [ 1941.853292][T18652] Bluetooth: hci0: command 0x0c1a tx timeout [ 1941.913137][T25209] usb 5-1: config 0 has no interface number 0 [ 1942.115655][T25209] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1942.127415][T25209] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1942.139080][T25209] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1942.156202][T25209] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1942.180248][T25209] usb 5-1: config 0 interface 125 has no altsetting 0 [ 1942.188645][T25209] usb 5-1: config 0 interface 125 has no altsetting 2 [ 1942.203027][T25209] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1942.231455][T25209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1942.240105][T25209] usb 5-1: Product: syz [ 1942.244797][T25209] usb 5-1: Manufacturer: syz [ 1942.249422][T25209] usb 5-1: SerialNumber: syz [ 1942.257982][T25209] usb 5-1: config 0 descriptor?? [ 1942.270621][T25209] usb 5-1: selecting invalid altsetting 2 [ 1942.583793][ C1] usb 5-1: async_complete: urb error -71 [ 1942.589663][ C1] usb 5-1: async_complete: urb error -71 [ 1942.595539][ C1] usb 5-1: async_complete: urb error -71 [ 1942.601661][ C1] usb 5-1: async_complete: urb error -71 [ 1942.613696][T25209] get_1284_register: usb error -71 [ 1942.635800][T25209] usb 5-1: USB disconnect, device number 64 [ 1944.793329][T26767] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1944.821241][T26767] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1944.965704][T26767] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1946.018918][T26789] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1946.026089][T26789] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1946.043818][T26789] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1947.203506][T24926] Bluetooth: hci1: command 0x0c1a tx timeout [ 1949.040744][T24926] Bluetooth: hci3: command 0x0c1a tx timeout [ 1949.042979][T18652] Bluetooth: hci0: command 0x0c1a tx timeout [ 1950.853183][T26823] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1950.883458][T26823] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1950.939585][T26823] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1951.433287][T25209] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1951.663072][T25209] usb 3-1: Using ep0 maxpacket: 32 [ 1951.715157][T25209] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1951.733261][T25209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1951.751552][T25209] usb 3-1: config 0 descriptor?? [ 1951.757298][ T27] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1952.603071][T18652] Bluetooth: hci1: command 0x0c1a tx timeout [ 1952.615120][T25209] as10x_usb: device has been detected [ 1952.624605][T25209] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1952.673505][T25209] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1952.973193][T18652] Bluetooth: hci3: command 0x0c1a tx timeout [ 1952.979563][T18652] Bluetooth: hci0: command 0x0c1a tx timeout [ 1953.103931][T25209] as10x_usb: error during firmware upload part1 [ 1953.477923][ T27] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1953.579160][T25209] Registered device nBox DVB-T Dongle [ 1953.581674][T25209] usb 3-1: USB disconnect, device number 31 [ 1953.593330][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1953.602150][ T27] usb 6-1: Product: syz [ 1953.611190][ T27] usb 6-1: Manufacturer: syz [ 1953.622994][ T27] usb 6-1: SerialNumber: syz [ 1953.633867][T25209] Unregistered device nBox DVB-T Dongle [ 1953.640386][ T27] usb 6-1: config 0 descriptor?? [ 1953.670824][T25209] as10x_usb: device has been disconnected [ 1954.246547][T26852] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1954.306713][T26852] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1954.358833][T26852] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1955.965864][T18652] Bluetooth: hci1: command 0x0c1a tx timeout [ 1956.322988][T18652] Bluetooth: hci0: command 0x0c1a tx timeout [ 1956.369397][ T27] usb 6-1: f81604_write: reg: 105 data: a1 failed: -EPROTO [ 1956.392205][ T27] f81604 6-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 1956.403425][T18652] Bluetooth: hci3: command 0x0c1a tx timeout [ 1956.423028][ T27] f81604: probe of 6-1:0.0 failed with error -71 [ 1956.613211][ T27] usb 6-1: USB disconnect, device number 66 [ 1957.745801][T26871] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1960.371561][T26886] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5818'. [ 1960.720513][T26888] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1962.063147][T11099] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1962.319134][T11099] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1962.337494][T11099] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1962.361712][T11099] usb 1-1: Product: syz [ 1962.366743][T11099] usb 1-1: Manufacturer: syz [ 1962.371731][T11099] usb 1-1: SerialNumber: syz [ 1962.383916][T11099] usb 1-1: config 0 descriptor?? [ 1962.774085][T22665] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1963.126214][T22665] usb 6-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 1963.147123][T22665] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1963.196408][T22665] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1963.281474][T22665] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1963.331079][T22665] usb 6-1: Product: syz [ 1963.351756][T22665] usb 6-1: Manufacturer: syz [ 1963.369479][T22665] usb 6-1: SerialNumber: syz [ 1963.434437][T22665] usb 6-1: config 0 descriptor?? [ 1963.459866][T11099] usb 1-1: f81604_read: reg: 100f failed: -EREMOTEIO [ 1963.472864][T26906] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1963.629277][T22665] usb 6-1: selecting invalid altsetting 0 [ 1963.904418][T11099] usb 1-1: f81604_read: reg: 200e failed: -EPROTO [ 1965.719374][T26905] snd-usb-audio 6-1:0.0: Runtime PM usage count underflow! [ 1965.735266][T11099] usb 1-1: USB disconnect, device number 69 [ 1965.796789][ T27] usb 6-1: USB disconnect, device number 67 [ 1965.841447][T11099] usb 1-1: f81604_read: reg: 100f failed: -ENODEV [ 1965.926700][ T5435] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 1966.041886][T11099] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 1966.290156][T26928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5830'. [ 1967.693123][T22665] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1968.062215][T22665] usb 6-1: Using ep0 maxpacket: 32 [ 1968.132322][T22665] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1968.249414][T22665] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1968.353524][T22665] usb 6-1: config 0 descriptor?? [ 1968.378323][T22665] as10x_usb: device has been detected [ 1968.618920][T22665] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1968.876216][T22665] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1968.911497][T22665] as10x_usb: error during firmware upload part1 [ 1968.939422][T22665] Registered device nBox DVB-T Dongle [ 1968.947703][T22665] usb 6-1: USB disconnect, device number 68 [ 1969.028671][T22665] Unregistered device nBox DVB-T Dongle [ 1969.031573][T22665] as10x_usb: device has been disconnected [ 1969.095301][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 1969.095314][ T28] audit: type=1326 audit(1784023539.944:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26950 comm="syz.4.5835" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58979de59 code=0x7ffc0000 [ 1969.194242][ T28] audit: type=1326 audit(1784023539.974:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26950 comm="syz.4.5835" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58979de59 code=0x7ffc0000 [ 1969.326387][ T28] audit: type=1326 audit(1784023539.974:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26950 comm="syz.4.5835" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58979de59 code=0x7ffc0000 [ 1969.469466][ T28] audit: type=1326 audit(1784023539.974:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26950 comm="syz.4.5835" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff58979de59 code=0x7ffc0000 [ 1969.514607][ T28] audit: type=1326 audit(1784023539.974:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26950 comm="syz.4.5835" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58979de59 code=0x7ffc0000 [ 1969.703038][ T28] audit: type=1326 audit(1784023540.054:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26950 comm="syz.4.5835" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58979de59 code=0x7ffc0000 [ 1969.731775][ T28] audit: type=1326 audit(1784023540.054:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26950 comm="syz.4.5835" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58979de59 code=0x7ffc0000 [ 1969.758408][T22665] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1969.859915][ T28] audit: type=1326 audit(1784023540.054:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26950 comm="syz.4.5835" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff58979de59 code=0x7ffc0000 [ 1970.045194][ T28] audit: type=1326 audit(1784023540.054:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26950 comm="syz.4.5835" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58979de59 code=0x7ffc0000 [ 1970.075025][ T28] audit: type=1326 audit(1784023540.064:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26950 comm="syz.4.5835" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58979de59 code=0x7ffc0000 [ 1970.105898][T22665] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1970.116295][T22665] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.130394][T22665] usb 1-1: Product: syz [ 1970.135413][T22665] usb 1-1: Manufacturer: syz [ 1970.140270][T22665] usb 1-1: SerialNumber: syz [ 1970.153717][T22665] usb 1-1: config 0 descriptor?? [ 1970.396098][T26963] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1970.957546][T26971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5840'. [ 1971.043125][T11099] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1971.913454][T11099] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 1971.924026][T11099] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1971.947273][T11099] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1971.957354][T11099] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1971.967583][T11099] usb 5-1: Product: syz [ 1971.972087][T11099] usb 5-1: Manufacturer: syz [ 1971.979157][T11099] usb 5-1: SerialNumber: syz [ 1972.003603][T11099] usb 5-1: config 0 descriptor?? [ 1972.012548][T26965] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1972.074548][T11099] usb 5-1: selecting invalid altsetting 0 [ 1972.179637][T22665] usb 1-1: f81604_read: reg: 100f failed: -EREMOTEIO [ 1972.586577][T22665] usb 1-1: f81604_read: reg: 200e failed: -EPROTO [ 1972.891815][T22665] usb 1-1: USB disconnect, device number 70 [ 1973.095324][ T5435] usb 1-1: f81604_read: reg: 100f failed: -ENODEV [ 1973.102111][ T5435] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 1973.259318][T22665] usb 1-1: f81604_read: reg: 100f failed: -ENODEV [ 1973.277296][ T8] usb 5-1: USB disconnect, device number 65 [ 1973.365129][T22665] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 1975.570653][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 1975.570670][ T28] audit: type=1326 audit(1784023546.414:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27002 comm="syz.4.5848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58979de59 code=0x7ffc0000 [ 1975.573069][T22665] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1975.759673][ T28] audit: type=1326 audit(1784023546.414:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27002 comm="syz.4.5848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58979de59 code=0x7ffc0000 [ 1975.820387][ T28] audit: type=1326 audit(1784023546.414:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27002 comm="syz.4.5848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58979de59 code=0x7ffc0000 [ 1975.888676][ T28] audit: type=1326 audit(1784023546.414:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27002 comm="syz.4.5848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58979de59 code=0x7ffc0000 [ 1975.913994][ T28] audit: type=1326 audit(1784023546.414:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27002 comm="syz.4.5848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff58979de59 code=0x7ffc0000 [ 1975.970420][ T28] audit: type=1326 audit(1784023546.464:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27002 comm="syz.4.5848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58979de59 code=0x7ffc0000 [ 1976.003257][T22665] usb 1-1: Using ep0 maxpacket: 32 [ 1976.010739][T22665] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1976.021209][ T28] audit: type=1326 audit(1784023546.464:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27002 comm="syz.4.5848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff58979de59 code=0x7ffc0000 [ 1976.050534][T22665] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1976.075295][ T28] audit: type=1326 audit(1784023546.464:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27002 comm="syz.4.5848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58979de59 code=0x7ffc0000 [ 1976.086262][T22665] usb 1-1: config 0 descriptor?? [ 1976.156342][ T28] audit: type=1326 audit(1784023546.464:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27002 comm="syz.4.5848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58979de59 code=0x7ffc0000 [ 1976.178071][T22665] as10x_usb: device has been detected [ 1976.199883][T22665] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1976.251024][ T28] audit: type=1326 audit(1784023546.464:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27002 comm="syz.4.5848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58979de59 code=0x7ffc0000 [ 1976.265007][T22665] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1976.337898][T22665] as10x_usb: error during firmware upload part1 [ 1976.370064][T22665] Registered device nBox DVB-T Dongle [ 1976.413065][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.416015][T22665] usb 1-1: USB disconnect, device number 71 [ 1976.443059][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.532168][T22665] Unregistered device nBox DVB-T Dongle [ 1976.554898][T22665] as10x_usb: device has been disconnected [ 1976.790186][T27022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5850'. [ 1979.953841][T27048] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1980.493135][T18863] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1980.819709][T18863] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1981.009625][T18863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.108112][T18863] usb 5-1: Product: syz [ 1981.125075][T18863] usb 5-1: Manufacturer: syz [ 1981.141249][T18863] usb 5-1: SerialNumber: syz [ 1981.154654][T18863] usb 5-1: config 0 descriptor?? [ 1981.225802][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 1981.225818][ T28] audit: type=1326 audit(1784023552.074:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27060 comm="syz.0.5858" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee019de59 code=0x7ffc0000 [ 1981.386661][ T28] audit: type=1326 audit(1784023552.074:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27060 comm="syz.0.5858" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee019de59 code=0x7ffc0000 [ 1981.414908][ T28] audit: type=1326 audit(1784023552.074:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27060 comm="syz.0.5858" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcee019de59 code=0x7ffc0000 [ 1981.441135][ T28] audit: type=1326 audit(1784023552.074:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27060 comm="syz.0.5858" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee019de59 code=0x7ffc0000 [ 1981.467615][ T28] audit: type=1326 audit(1784023552.074:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27060 comm="syz.0.5858" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee019de59 code=0x7ffc0000 [ 1981.543077][ T28] audit: type=1326 audit(1784023552.134:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27060 comm="syz.0.5858" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee019de59 code=0x7ffc0000 [ 1981.577942][ T28] audit: type=1326 audit(1784023552.134:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27060 comm="syz.0.5858" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee019de59 code=0x7ffc0000 [ 1981.608690][ T28] audit: type=1326 audit(1784023552.134:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27060 comm="syz.0.5858" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fcee019de59 code=0x7ffc0000 [ 1981.635797][ T28] audit: type=1326 audit(1784023552.134:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27060 comm="syz.0.5858" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee019de59 code=0x7ffc0000 [ 1981.661589][ T28] audit: type=1326 audit(1784023552.134:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27060 comm="syz.0.5858" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee019de59 code=0x7ffc0000 [ 1981.708087][T27071] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5860'. [ 1982.223771][T18863] usb 5-1: f81604_read: reg: 100f failed: -EREMOTEIO [ 1982.711000][T18863] usb 5-1: f81604_read: reg: 200e failed: -EPROTO [ 1982.752466][T18863] usb 5-1: USB disconnect, device number 66 [ 1982.828248][T18863] usb 5-1: f81604_read: reg: 100f failed: -ENODEV [ 1982.903108][T14651] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1983.133039][T14651] usb 1-1: Using ep0 maxpacket: 32 [ 1983.154243][T14651] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1983.154532][ T5435] usb 5-1: f81604_read: reg: 200f failed: -ENODEV [ 1983.164448][T14651] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1983.215760][T14651] usb 1-1: config 0 descriptor?? [ 1983.263589][T14651] as10x_usb: device has been detected [ 1983.269782][T14651] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1983.305943][T18863] usb 5-1: f81604_read: reg: 200f failed: -ENODEV [ 1983.361041][T14651] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1983.409318][T14651] as10x_usb: error during firmware upload part1 [ 1983.427502][T14651] Registered device nBox DVB-T Dongle [ 1983.459483][T11099] usb 1-1: USB disconnect, device number 72 [ 1983.600551][T27084] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1983.704509][T11099] Unregistered device nBox DVB-T Dongle [ 1983.715054][T11099] as10x_usb: device has been disconnected [ 1985.654755][T27118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5870'. [ 1986.897482][T18863] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1987.321344][T18863] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1987.553280][T18863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1987.564923][T18863] usb 6-1: Product: syz [ 1987.569304][T18863] usb 6-1: Manufacturer: syz [ 1987.575631][T18863] usb 6-1: SerialNumber: syz [ 1987.591632][T18863] usb 6-1: config 0 descriptor?? [ 1988.103571][ T27] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1988.303573][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 1988.319795][ T27] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1988.334436][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1988.368517][ T27] usb 1-1: config 0 descriptor?? [ 1988.395537][ T27] as10x_usb: device has been detected [ 1988.428404][ T27] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1988.509118][ T27] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1988.536690][ T27] as10x_usb: error during firmware upload part1 [ 1988.561294][ T27] Registered device nBox DVB-T Dongle [ 1988.603786][ T27] usb 1-1: USB disconnect, device number 73 [ 1988.777110][T27151] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1988.788572][ T27] Unregistered device nBox DVB-T Dongle [ 1988.800070][ T27] as10x_usb: device has been disconnected [ 1989.021744][T18863] usb 6-1: f81604_read: reg: 200f failed: -EPROTO [ 1989.146019][T18863] usb 6-1: USB disconnect, device number 69 [ 1989.154504][T18863] usb 6-1: f81604_read: reg: 100f failed: -ENODEV [ 1989.223191][T18863] usb 6-1: f81604_read: reg: 200f failed: -ENODEV [ 1990.966631][T27163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5880'. [ 1992.003738][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 1992.003757][ T28] audit: type=1326 audit(1784023562.844:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27168 comm="syz.2.5881" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f0b9de59 code=0x7ffc0000 [ 1992.281566][ T28] audit: type=1326 audit(1784023562.844:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27168 comm="syz.2.5881" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f0b9de59 code=0x7ffc0000 [ 1992.724000][ T28] audit: type=1326 audit(1784023562.844:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27168 comm="syz.2.5881" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f0b9de59 code=0x7ffc0000 [ 1992.793030][ T28] audit: type=1326 audit(1784023562.844:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27168 comm="syz.2.5881" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f0b9de59 code=0x7ffc0000 [ 1992.833318][ T28] audit: type=1326 audit(1784023562.844:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27168 comm="syz.2.5881" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f97f0b9de59 code=0x7ffc0000 [ 1992.872986][ T28] audit: type=1326 audit(1784023562.994:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27168 comm="syz.2.5881" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f0b9de59 code=0x7ffc0000 [ 1992.940664][ T28] audit: type=1326 audit(1784023562.994:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27168 comm="syz.2.5881" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f0b9de59 code=0x7ffc0000 [ 1992.971486][T27186] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1993.034428][ T28] audit: type=1326 audit(1784023562.994:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27168 comm="syz.2.5881" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f97f0b9de59 code=0x7ffc0000 [ 1993.071044][ T28] audit: type=1326 audit(1784023562.994:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27168 comm="syz.2.5881" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f0b9de59 code=0x7ffc0000 [ 1993.100542][ T28] audit: type=1326 audit(1784023562.994:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27168 comm="syz.2.5881" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f0b9de59 code=0x7ffc0000 [ 1994.780786][T27185] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1994.801915][T27185] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1994.823515][T27185] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1995.042996][T18652] Bluetooth: hci1: command 0x0c1a tx timeout [ 1996.136553][T27204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5892'. [ 1996.803022][T18652] Bluetooth: hci0: command 0x0c1a tx timeout [ 1996.901867][T18652] Bluetooth: hci3: command 0x0c1a tx timeout [ 2000.043629][T27222] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2000.060715][T27222] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2000.094635][T27222] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2000.587858][T18652] Bluetooth: hci1: command 0x0c1a tx timeout [ 2001.943384][T27255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5903'. [ 2002.752171][T24926] Bluetooth: hci3: command 0x0c1a tx timeout [ 2002.752170][T18652] Bluetooth: hci0: command 0x0c1a tx timeout [ 2004.393018][T25209] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2004.593718][T25209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2004.617298][T25209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2004.629516][T25209] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2004.685618][T25209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2004.774689][T25209] usb 3-1: config 0 descriptor?? [ 2005.595180][T27272] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2005.779800][T27272] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2005.786377][T27272] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2006.012596][T25209] cp2112 0003:10C4:EA90.002A: unknown main item tag 0x0 [ 2006.093943][T25209] cp2112 0003:10C4:EA90.002A: unknown main item tag 0x0 [ 2006.102120][T25209] cp2112 0003:10C4:EA90.002A: unknown main item tag 0x0 [ 2006.114147][T25209] cp2112 0003:10C4:EA90.002A: unknown main item tag 0x0 [ 2006.124342][T25209] cp2112 0003:10C4:EA90.002A: unknown main item tag 0x0 [ 2006.133600][T25209] cp2112 0003:10C4:EA90.002A: unknown main item tag 0x0 [ 2006.141412][T25209] cp2112 0003:10C4:EA90.002A: unknown main item tag 0x0 [ 2006.165457][T25209] cp2112 0003:10C4:EA90.002A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 2006.263046][T25209] cp2112 0003:10C4:EA90.002A: Part Number: 0x00 Device Version: 0x00 [ 2006.480825][T25209] cp2112 0003:10C4:EA90.002A: error requesting SMBus config [ 2006.559555][T25209] cp2112: probe of 0003:10C4:EA90.002A failed with error -32 [ 2007.283305][T24926] Bluetooth: hci1: command 0x0c1a tx timeout [ 2007.843372][T24926] Bluetooth: hci3: command 0x0c1a tx timeout [ 2007.843638][T18652] Bluetooth: hci0: command 0x0c1a tx timeout [ 2008.147728][T25209] usb 3-1: USB disconnect, device number 32 [ 2008.252594][T27305] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2010.555539][T27316] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2010.573479][T27316] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2010.579663][T27316] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2011.443007][T24926] Bluetooth: hci1: command 0x0c1a tx timeout [ 2012.403023][T14651] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2012.649274][T24926] Bluetooth: hci3: command 0x0c1a tx timeout [ 2012.661892][T24926] Bluetooth: hci0: command 0x0c1a tx timeout [ 2012.683653][T27354] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2013.628023][T14651] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2013.709977][T14651] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2013.846941][T14651] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2013.863038][T14651] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2013.897525][T14651] usb 5-1: config 0 descriptor?? [ 2014.253719][T14651] usbhid 5-1:0.0: can't add hid device: -71 [ 2014.260114][T14651] usbhid: probe of 5-1:0.0 failed with error -71 [ 2014.276816][T14651] usb 5-1: USB disconnect, device number 67 [ 2015.969282][T27376] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2015.983247][T27376] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2016.098487][T27376] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2017.141309][T27353] Bluetooth: hci1: command 0x0c1a tx timeout [ 2018.119624][T27409] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2018.236726][T27353] Bluetooth: hci3: command 0x0c1a tx timeout [ 2018.237387][T24926] Bluetooth: hci0: command 0x0c1a tx timeout [ 2018.333044][ T8] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2018.555898][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2018.568207][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2018.581289][ T8] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2018.592073][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2018.625514][ T8] usb 3-1: config 0 descriptor?? [ 2019.254950][ T8] cp2112 0003:10C4:EA90.002B: unknown main item tag 0x0 [ 2019.262484][ T8] cp2112 0003:10C4:EA90.002B: unknown main item tag 0x0 [ 2019.311651][ T8] cp2112 0003:10C4:EA90.002B: unknown main item tag 0x0 [ 2019.386989][ T8] cp2112 0003:10C4:EA90.002B: unknown main item tag 0x0 [ 2019.404554][ T8] cp2112 0003:10C4:EA90.002B: unknown main item tag 0x0 [ 2019.411930][ T8] cp2112 0003:10C4:EA90.002B: unknown main item tag 0x0 [ 2019.431253][ T8] cp2112 0003:10C4:EA90.002B: unknown main item tag 0x0 [ 2019.475006][ T8] cp2112 0003:10C4:EA90.002B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 2020.433304][ T8] cp2112 0003:10C4:EA90.002B: Part Number: 0x00 Device Version: 0x00 [ 2020.472452][ T8] cp2112 0003:10C4:EA90.002B: error requesting SMBus config [ 2020.505134][ T8] cp2112: probe of 0003:10C4:EA90.002B failed with error -32 [ 2020.527965][T27421] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2020.543201][T27421] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2020.555125][T27421] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2021.523019][T24926] Bluetooth: hci1: command 0x0c1a tx timeout [ 2022.682991][T27353] Bluetooth: hci0: command 0x0c1a tx timeout [ 2022.683387][T24926] Bluetooth: hci3: command 0x0c1a tx timeout [ 2023.247657][ T8] usb 3-1: USB disconnect, device number 33 [ 2026.087493][T27470] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2030.404556][T27499] netlink: 'syz.2.5971': attribute type 49 has an invalid length. [ 2035.122824][T27535] netlink: 'syz.0.5981': attribute type 49 has an invalid length. [ 2035.889649][T27543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5984'. [ 2035.983076][T27543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5984'. [ 2036.003805][T27543] netlink: 'syz.0.5984': attribute type 15 has an invalid length. [ 2036.050932][T27543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5984'. [ 2036.093315][T27543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5984'. [ 2036.166353][T27543] netlink: 'syz.0.5984': attribute type 15 has an invalid length. [ 2036.243303][T27543] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 60387 - 0 [ 2036.252301][T27543] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 60387 - 0 [ 2036.263056][T27543] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 60387 - 0 [ 2036.271983][T27543] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 60387 - 0 [ 2037.848935][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.855795][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.826774][T27570] netlink: 'syz.5.5992': attribute type 49 has an invalid length. [ 2043.732144][T27608] netlink: 'syz.2.6003': attribute type 49 has an invalid length. [ 2048.478686][T27639] netlink: 'syz.4.6014': attribute type 49 has an invalid length. [ 2052.036539][T27680] netlink: 'syz.2.6027': attribute type 49 has an invalid length. [ 2054.119555][T27696] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2055.603175][ T27] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 2055.745902][T27714] netlink: 'syz.4.6036': attribute type 49 has an invalid length. [ 2056.165168][ T27] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2056.215334][ T27] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 2056.267050][ T27] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2056.294485][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2056.343732][ T27] usb 6-1: Product: syz [ 2056.358268][ T27] usb 6-1: Manufacturer: syz [ 2056.375591][ T27] usb 6-1: SerialNumber: syz [ 2056.412304][ T27] usb 6-1: config 0 descriptor?? [ 2056.430928][T27706] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2056.443613][T27706] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2057.313837][ T27] usb 6-1: ucan: probing device on interface #0 [ 2057.348497][ T27] usb 6-1: ucan: invalid EP count (1) [ 2057.360754][ T27] usb 6-1: ucan: probe failed; try to update the device firmware [ 2059.202697][T18863] usb 6-1: USB disconnect, device number 70 [ 2059.695610][T27742] netlink: 'syz.2.6046': attribute type 49 has an invalid length. [ 2061.245361][T27763] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2062.223065][T27747] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2062.784766][T27747] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2062.795229][T27747] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2062.805826][T27747] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2062.815389][T27747] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2062.828565][T27747] usb 5-1: Product: syz [ 2062.845998][T27747] usb 5-1: Manufacturer: syz [ 2062.865537][T27747] usb 5-1: SerialNumber: syz [ 2062.892040][T27747] usb 5-1: config 0 descriptor?? [ 2062.932675][T27747] usb 5-1: selecting invalid altsetting 0 [ 2063.184802][T22665] usb 5-1: USB disconnect, device number 68 [ 2065.091442][T27801] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2065.134416][T27801] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2065.141344][T27801] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2066.231439][T27822] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2066.493294][T24926] Bluetooth: hci1: command 0x0c1a tx timeout [ 2067.203050][T27353] Bluetooth: hci0: command 0x0c1a tx timeout [ 2067.209379][T24926] Bluetooth: hci3: command 0x0c1a tx timeout [ 2069.244848][T27847] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2069.252719][T27847] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2069.259549][T27847] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2070.563104][T24926] Bluetooth: hci1: command 0x0c1a tx timeout [ 2071.307248][T24926] Bluetooth: hci3: command 0x0c1a tx timeout [ 2071.313604][T27353] Bluetooth: hci0: command 0x0c1a tx timeout [ 2071.940849][T27882] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2073.642766][T27894] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2073.733209][T27894] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2073.739859][T27894] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2074.890630][T24926] Bluetooth: hci1: command 0x0c1a tx timeout [ 2075.043622][T27919] netlink: 'syz.4.6091': attribute type 49 has an invalid length. [ 2075.826310][T27353] Bluetooth: hci0: command 0x0c1a tx timeout [ 2075.826324][T24926] Bluetooth: hci3: command 0x0c1a tx timeout [ 2077.820892][T27934] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2077.854777][T27934] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2077.868291][T27934] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2078.270147][T24926] Bluetooth: hci1: command 0x0c1a tx timeout [ 2079.970556][T24926] Bluetooth: hci3: command 0x0c1a tx timeout [ 2079.977327][T27353] Bluetooth: hci0: command 0x0c1a tx timeout [ 2088.207857][T28065] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2093.255262][T28123] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 2093.357746][T28123] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 2094.318237][T28134] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2096.623468][T28160] netlink: 'syz.5.6166': attribute type 49 has an invalid length. [ 2096.887798][T28152] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2096.896808][T28152] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2096.907170][T28152] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2098.201090][T28176] netlink: 'syz.5.6171': attribute type 49 has an invalid length. [ 2098.536868][T27353] Bluetooth: hci1: command 0x0c1a tx timeout [ 2099.172562][T27353] Bluetooth: hci3: command 0x0c1a tx timeout [ 2099.172609][T24926] Bluetooth: hci0: command 0x0c1a tx timeout [ 2099.927314][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.939419][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2100.025781][T28183] nbd: socks must be embedded in a SOCK_ITEM attr [ 2100.076825][T28183] block nbd0: shutting down sockets [ 2100.134114][T28190] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2101.374156][T28200] netlink: 'syz.5.6179': attribute type 49 has an invalid length. [ 2103.006177][T28208] netlink: 'syz.2.6182': attribute type 49 has an invalid length. [ 2104.323109][T28220] futex_wake_op: syz.4.6178 tries to shift op by 36; fix this program [ 2104.564951][T28220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6178'. [ 2105.836746][T28233] netlink: 'syz.4.6189': attribute type 49 has an invalid length. [ 2106.841153][T28243] netlink: 'syz.4.6192': attribute type 49 has an invalid length. [ 2107.485605][T28254] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2108.603534][T28269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6200'. [ 2108.642725][T28269] vlan2: entered promiscuous mode [ 2108.648372][T28269] batadv0: entered promiscuous mode [ 2109.213590][T28270] netlink: 'syz.5.6201': attribute type 49 has an invalid length. [ 2109.912676][T28278] netlink: 'syz.5.6204': attribute type 49 has an invalid length. [ 2111.312389][T28301] ip6t_srh: unknown srh match flags FF3F [ 2114.349338][T28311] netlink: 'syz.2.6212': attribute type 49 has an invalid length. [ 2115.115947][T28314] netlink: 'syz.4.6214': attribute type 49 has an invalid length. [ 2115.280908][T28324] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2115.783065][T18863] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 2116.382991][T18863] usb 1-1: Using ep0 maxpacket: 8 [ 2116.397240][T18863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2116.432219][T18863] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2116.454008][T18863] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2116.468426][T18863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2116.517494][T18863] usb 1-1: config 0 descriptor?? [ 2116.618191][T18863] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 2116.827461][T18863] usb 1-1: USB disconnect, device number 74 [ 2116.961432][T28338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2117.028849][T28338] batadv_slave_1: entered promiscuous mode [ 2117.611435][T28341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6222'. [ 2119.442472][T28355] syzkaller0: entered promiscuous mode [ 2119.497704][T28355] syzkaller0: entered allmulticast mode [ 2120.470531][T28366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6231'. [ 2125.074145][T18863] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 2125.723825][T18863] usb 1-1: Using ep0 maxpacket: 32 [ 2125.824155][T18863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2125.851933][T18863] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2125.894970][T18863] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2125.923014][T18863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2125.950193][T18863] usb 1-1: Product: syz [ 2125.953835][T28414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6243'. [ 2125.955312][T18863] usb 1-1: Manufacturer: syz [ 2125.974020][T18863] usb 1-1: SerialNumber: syz [ 2125.987476][T18863] usb 1-1: config 0 descriptor?? [ 2126.080453][T28414] vlan2: entered promiscuous mode [ 2126.096480][T28414] batadv0: entered promiscuous mode [ 2127.218858][T28404] xt_connbytes: Forcing CT accounting to be enabled [ 2127.230952][T28404] set match dimension is over the limit! [ 2127.241235][T28404] unsupported nlmsg_type 40 [ 2127.454305][T18863] usb 1-1: USB disconnect, device number 75 [ 2128.658305][T28437] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2128.694226][T28437] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2128.744623][T28437] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2129.633153][T11099] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2129.918932][T11099] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2129.978173][T24926] Bluetooth: hci1: command 0x0c1a tx timeout [ 2130.015183][T11099] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2130.096236][T11099] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2130.179146][T11099] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2130.294442][T11099] usb 3-1: config 0 descriptor?? [ 2130.724095][T24926] Bluetooth: hci0: command 0x0c1a tx timeout [ 2130.813001][T24926] Bluetooth: hci3: command 0x0c1a tx timeout [ 2131.326743][T11099] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 2131.338113][T11099] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 2131.370645][T11099] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 2131.407600][T11099] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 2131.523665][T11099] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 2131.531369][T11099] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 2131.550083][T11099] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 2131.617158][T11099] cp2112 0003:10C4:EA90.002C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 2131.918854][T11099] cp2112 0003:10C4:EA90.002C: Part Number: 0x00 Device Version: 0x00 [ 2132.415434][T11099] cp2112 0003:10C4:EA90.002C: error reading lock byte: -32 [ 2132.459182][T11099] usb 3-1: USB disconnect, device number 34 [ 2133.142804][T28481] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2133.174118][T28481] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2133.208948][T28481] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2133.633335][T25209] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 2133.832943][T25209] usb 1-1: Using ep0 maxpacket: 8 [ 2133.844639][T25209] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2133.859230][T25209] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2133.868758][T25209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2133.925098][T25209] usb 1-1: config 0 descriptor?? [ 2134.062927][T25209] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 2134.403491][T24926] Bluetooth: hci1: command 0x0c1a tx timeout [ 2135.213150][T24926] Bluetooth: hci0: command 0x0c1a tx timeout [ 2135.293517][T24926] Bluetooth: hci3: command 0x0c1a tx timeout [ 2135.629459][T25209] gspca_vc032x: reg_w err -71 [ 2135.638172][T25209] vc032x: probe of 1-1:0.0 failed with error -71 [ 2135.649907][T25209] usb 1-1: USB disconnect, device number 76 [ 2136.893442][T28530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6274'. [ 2137.132741][T28520] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2137.412432][T28520] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2137.422190][T28527] netlink: 'syz.2.6273': attribute type 49 has an invalid length. [ 2137.600500][T28520] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2138.484872][T27353] Bluetooth: hci1: command 0x0c1a tx timeout [ 2139.604176][T24926] Bluetooth: hci0: command 0x0c1a tx timeout [ 2139.610568][T27353] Bluetooth: hci3: command 0x0c1a tx timeout [ 2140.133809][T28549] syzkaller0: entered promiscuous mode [ 2140.143557][T28549] syzkaller0: entered allmulticast mode [ 2140.167806][T28549] TC_ACT_REPEAT abuse ? [ 2142.112516][T28562] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2142.120118][T28562] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2142.158490][T28562] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2142.836866][T28574] netlink: 'syz.5.6286': attribute type 49 has an invalid length. [ 2143.283360][T27353] Bluetooth: hci1: command 0x0c1a tx timeout [ 2144.244510][T27353] Bluetooth: hci0: command 0x0c1a tx timeout [ 2144.250865][T27353] Bluetooth: hci3: command 0x0c1a tx timeout [ 2145.997482][T28619] netlink: 'syz.5.6298': attribute type 49 has an invalid length. [ 2146.556142][T28612] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2146.576275][T28612] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2146.829256][T28612] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2146.951926][T28623] autofs4:pid:28623:autofs_fill_super: called with bogus options [ 2147.065017][T28626] trusted_key: encrypted_key: insufficient parameters specified [ 2147.992181][T27353] Bluetooth: hci1: command 0x0c1a tx timeout [ 2148.236201][T28626] netlink: 'syz.2.6300': attribute type 10 has an invalid length. [ 2148.245174][T28626] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6300'. [ 2148.266878][T28626] team0: Port device geneve0 added [ 2148.685280][T27353] Bluetooth: hci0: command 0x0c1a tx timeout [ 2148.883421][T27353] Bluetooth: hci3: command 0x0c1a tx timeout [ 2149.312922][T25209] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2149.922996][T27747] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2150.243881][T27747] usb 5-1: Using ep0 maxpacket: 32 [ 2150.306185][T27747] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2150.490595][T25209] usb 3-1: device descriptor read/all, error -71 [ 2150.520147][T27747] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 2150.538098][T27747] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2150.566820][T27747] usb 5-1: config 0 descriptor?? [ 2150.765896][T28664] netlink: 'syz.5.6307': attribute type 49 has an invalid length. [ 2151.029009][T27747] usb 5-1: USB disconnect, device number 69 [ 2151.485587][T28663] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2151.511566][T28663] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2151.543540][T28663] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2153.123120][T27353] Bluetooth: hci1: command 0x0c1a tx timeout [ 2153.523176][T27353] Bluetooth: hci0: command 0x0c1a tx timeout [ 2153.603338][T27353] Bluetooth: hci3: command 0x0c1a tx timeout [ 2154.445234][T28699] netlink: 'syz.4.6318': attribute type 49 has an invalid length. [ 2155.079313][T28707] autofs4:pid:28707:autofs_fill_super: called with bogus options [ 2155.807138][T28702] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2155.858063][T28702] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2155.874398][T28702] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2156.828090][T28714] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6323'. [ 2157.021313][T28727] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 2157.041388][T17459] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 2157.067924][T17459] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 2157.102605][T17459] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2157.372235][T17459] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 2157.500753][T17459] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 2157.523711][T17459] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2157.664086][T24926] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2157.683045][T24926] Bluetooth: hci1: command 0x0c1a tx timeout [ 2157.690674][T24926] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2157.700555][T24926] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2157.708807][T24926] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2157.719522][T24926] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2157.727958][T24926] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2157.985686][T28736] Bluetooth: hci3: command 0x0c1a tx timeout [ 2158.037390][T28736] Bluetooth: hci0: command 0x0c1a tx timeout [ 2158.073121][T17459] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 2158.283743][T17459] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 2158.541188][T17459] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2158.597135][T28740] netlink: 'syz.2.6329': attribute type 49 has an invalid length. [ 2158.689935][T17459] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 2158.707792][T17459] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 2158.720742][T17459] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2159.677111][T28750] overlayfs: failed to resolve './file0/file1': -2 [ 2159.776769][T18652] Bluetooth: hci2: command tx timeout [ 2159.976191][T17459] tipc: Left network mode [ 2160.102566][T22665] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 2160.404304][T22665] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 2160.451641][T22665] usb 1-1: config 0 has no interface number 0 [ 2160.468808][T22665] usb 1-1: config 0 interface 41 has no altsetting 0 [ 2160.498203][T22665] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2160.521199][T22665] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2160.608362][T22665] usb 1-1: Product: syz [ 2160.735513][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.742029][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.750344][T22665] usb 1-1: Manufacturer: syz [ 2160.899796][T22665] usb 1-1: SerialNumber: syz [ 2160.914085][T22665] usb 1-1: config 0 descriptor?? [ 2160.944138][T28734] chnl_net:caif_netlink_parms(): no params data found [ 2161.648655][T28734] bridge0: port 1(bridge_slave_0) entered blocking state [ 2161.679096][T28734] bridge0: port 1(bridge_slave_0) entered disabled state [ 2161.714887][T28734] bridge_slave_0: entered allmulticast mode [ 2161.742784][T28734] bridge_slave_0: entered promiscuous mode [ 2161.785296][T22665] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 2162.212995][T28780] syz.5.6336 (28780): drop_caches: 2 [ 2162.219704][T18652] Bluetooth: hci2: command tx timeout [ 2162.266370][T28734] bridge0: port 2(bridge_slave_1) entered blocking state [ 2162.344625][T28734] bridge0: port 2(bridge_slave_1) entered disabled state [ 2162.357283][T28734] bridge_slave_1: entered allmulticast mode [ 2162.443388][T22665] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 2162.473807][T22665] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 2162.481551][T28734] bridge_slave_1: entered promiscuous mode [ 2162.486292][T22665] CoreChips: probe of 1-1:0.41 failed with error -71 [ 2162.553959][T22665] usb 1-1: USB disconnect, device number 77 [ 2163.217629][T28734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2163.374567][T28734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2163.868120][T28734] team0: Port device team_slave_0 added [ 2164.035780][T28734] team0: Port device team_slave_1 added [ 2164.143353][ C0] vkms_vblank_simulate: vblank timer overrun [ 2164.253075][T18652] Bluetooth: hci2: command tx timeout [ 2164.334841][T28803] syzkaller0: entered promiscuous mode [ 2164.351365][T28803] syzkaller0: entered allmulticast mode [ 2164.527502][T28734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2164.573171][T28734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2164.600107][ C0] vkms_vblank_simulate: vblank timer overrun [ 2164.658183][T28734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2164.778631][T17459] hsr_slave_0: left promiscuous mode [ 2164.798899][T17459] hsr_slave_1: left promiscuous mode [ 2164.831116][T17459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2164.863783][T17459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2164.879436][T17459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2164.907608][T17459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2165.883476][T17459] veth1_macvtap: left promiscuous mode [ 2165.930616][T17459] veth0_macvtap: left promiscuous mode [ 2165.980041][T17459] veth1_vlan: left promiscuous mode [ 2166.010527][T17459] veth0_vlan: left promiscuous mode [ 2166.323129][T18652] Bluetooth: hci2: command tx timeout [ 2166.852040][T17459] pim6reg (unregistering): left allmulticast mode [ 2166.921968][T17459] bond6 (unregistering): (slave geneve3): Releasing active interface [ 2168.308327][T17459] bond6 (unregistering): Released all slaves [ 2168.604244][T17459] bond5 (unregistering): Released all slaves [ 2168.922125][T17459] bond4 (unregistering): Released all slaves [ 2169.208258][T17459] bond3 (unregistering): Released all slaves [ 2169.583141][T17459] bond2 (unregistering): Released all slaves [ 2169.666242][T17459] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 2170.002660][T17459] bond1 (unregistering): Released all slaves [ 2170.897491][T17459] team0 (unregistering): Port device team_slave_1 removed [ 2170.980539][T17459] team0 (unregistering): Port device team_slave_0 removed [ 2171.057001][T17459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2171.138568][T17459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2171.725827][T17459] bond0 (unregistering): Released all slaves [ 2171.783808][T28734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2171.791620][T28734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2171.819010][T28734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2172.174264][T28734] hsr_slave_0: entered promiscuous mode [ 2172.207826][T28734] hsr_slave_1: entered promiscuous mode [ 2172.324791][T28734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2172.364735][T28734] Cannot create hsr debugfs directory [ 2174.420224][T28909] syzkaller0: entered promiscuous mode [ 2174.556799][T28909] syzkaller0: entered allmulticast mode [ 2176.424662][T28917] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2176.430898][T28917] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2176.483553][T28917] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2176.513212][T28917] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2176.533778][T28917] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2176.614819][T28917] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2176.725196][T28937] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6369'. [ 2177.668797][T28734] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2178.017003][T28940] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2178.103332][T28940] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2178.183203][T28734] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2178.219677][T28940] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2178.234332][T28940] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2178.737525][T28734] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2178.826253][T28734] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2179.261400][T28955] syzkaller0: entered promiscuous mode [ 2179.283136][T18652] Bluetooth: hci1: command 0x0c1a tx timeout [ 2179.364209][T28955] syzkaller0: entered allmulticast mode [ 2180.182035][T28736] Bluetooth: hci0: command 0x0c1a tx timeout [ 2180.243563][T28736] Bluetooth: hci2: command 0x0c1a tx timeout [ 2180.250096][T28736] Bluetooth: hci3: command 0x0c1a tx timeout [ 2182.339652][T28736] Bluetooth: hci2: command 0x0c1a tx timeout [ 2184.411562][T28736] Bluetooth: hci2: command 0x0c1a tx timeout [ 2185.886297][T28734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2185.913854][T28979] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2185.920013][T28979] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2185.938653][T28734] 8021q: adding VLAN 0 to HW filter on device team0 [ 2185.949833][T28979] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2185.971852][T18042] bridge0: port 1(bridge_slave_0) entered blocking state [ 2185.979434][T18042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2185.993546][T28979] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2186.049906][T18042] bridge0: port 2(bridge_slave_1) entered blocking state [ 2186.058202][T18042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2187.120456][T29019] netlink: 'syz.2.6387': attribute type 49 has an invalid length. [ 2187.753442][T29019] veth0_to_bond: entered promiscuous mode [ 2187.760619][T29019] veth0_to_bond: entered allmulticast mode [ 2187.921535][T28734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2188.013272][T18652] Bluetooth: hci2: command 0x0c1a tx timeout [ 2188.020479][T28736] Bluetooth: hci3: command 0x0c1a tx timeout [ 2188.027333][T28736] Bluetooth: hci0: command 0x0c1a tx timeout [ 2188.033210][T24926] Bluetooth: hci1: command 0x0c1a tx timeout [ 2188.372091][T28734] veth0_vlan: entered promiscuous mode [ 2188.394788][T28734] veth1_vlan: entered promiscuous mode [ 2188.434353][T28734] veth0_macvtap: entered promiscuous mode [ 2188.446345][T28734] veth1_macvtap: entered promiscuous mode [ 2188.468049][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2188.480578][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2188.493836][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2188.505263][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2188.516386][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2188.527989][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2188.538709][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2188.551111][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2188.568791][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2188.580931][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2188.602516][T28734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2188.632616][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2188.659889][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2188.671300][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2188.687149][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2188.697754][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2188.717859][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2188.729424][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2188.750163][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2188.764119][T28734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2188.786555][T28734] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2188.802774][T28734] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2188.822946][T28734] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2188.831917][T28734] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2188.968511][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2188.993828][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2189.030376][ T8954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2189.043669][ T8954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2222.168493][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.175964][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2268.246416][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2283.608535][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.615341][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.048884][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.055941][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.491009][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.497540][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2457.693588][ T8955] ------------[ cut here ]------------ [ 2457.700387][ T8955] WARNING: CPU: 0 PID: 8955 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3b9/0x830 [ 2457.711715][ T8955] Modules linked in: [ 2457.716738][ T8955] CPU: 0 PID: 8955 Comm: kworker/u4:24 Not tainted syzkaller #0 [ 2457.725340][ T8955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2457.735839][ T8955] Workqueue: iou_exit io_ring_exit_work [ 2457.743031][ T8955] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 2457.749432][ T8955] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 e1 ff 10 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 f1 a8 03 f7 e9 b1 fd ff ff e8 e7 a8 03 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 2457.771413][ T8955] RSP: 0018:ffffc90003537a40 EFLAGS: 00010293 [ 2457.778672][ T8955] RAX: ffffffff8a833c89 RBX: ffff88806a652000 RCX: ffff888029648000 [ 2457.787932][ T8955] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 2457.797993][ T8955] RBP: ffffc90003537bb0 R08: ffffc900035379c7 R09: 1ffff920006a6f38 [ 2457.806960][ T8955] R10: dffffc0000000000 R11: fffff520006a6f39 R12: dffffc0000000000 [ 2457.817390][ T8955] R13: 0000000100034a00 R14: 0000000100034a01 R15: ffff88806a652510 [ 2457.828323][ T8955] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2457.840158][ T8955] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2457.849299][ T8955] CR2: 00005627a660f660 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 2457.858388][ T8955] Call Trace: [ 2457.862038][ T8955] [ 2457.865538][ T8955] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 2457.872006][ T8955] ? _raw_spin_unlock_irq+0x23/0x50 [ 2457.877927][ T8955] ? process_scheduled_works+0x975/0x1600 [ 2457.884472][ T8955] ? process_scheduled_works+0x975/0x1600 [ 2457.890505][ T8955] process_scheduled_works+0xa60/0x1600 [ 2457.896763][ T8955] ? worker_attach_to_pool+0x370/0x370 [ 2457.903670][ T8955] ? assign_work+0x3cc/0x5d0 [ 2457.909197][ T8955] worker_thread+0xa5e/0xfe0 [ 2457.914365][ T8955] kthread+0x2fa/0x390 [ 2457.920879][ T8955] ? pr_cont_work+0x550/0x550 [ 2457.926311][ T8955] ? kthread_blkcg+0xd0/0xd0 [ 2457.931397][ T8955] ret_from_fork+0x48/0x80 [ 2457.936567][ T8955] ? kthread_blkcg+0xd0/0xd0 [ 2457.942445][ T8955] ret_from_fork_asm+0x11/0x20 [ 2457.948911][ T8955] [ 2457.952131][ T8955] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2457.961092][ T8955] CPU: 0 PID: 8955 Comm: kworker/u4:24 Not tainted syzkaller #0 [ 2457.969831][ T8955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2457.981825][ T8955] Workqueue: iou_exit io_ring_exit_work [ 2457.988033][ T8955] Call Trace: [ 2457.991507][ T8955] [ 2457.994847][ T8955] dump_stack_lvl+0x18c/0x250 [ 2457.999778][ T8955] ? show_regs_print_info+0x20/0x20 [ 2458.005738][ T8955] ? load_image+0x420/0x420 [ 2458.010418][ T8955] panic+0x2ca/0x720 [ 2458.014885][ T8955] ? bpf_jit_dump+0xd0/0xd0 [ 2458.019621][ T8955] ? ret_from_fork_asm+0x11/0x20 [ 2458.025261][ T8955] __warn+0x2e0/0x470 [ 2458.029571][ T8955] ? io_ring_exit_work+0x3b9/0x830 [ 2458.036080][ T8955] ? io_ring_exit_work+0x3b9/0x830 [ 2458.042042][ T8955] report_bug+0x2be/0x4f0 [ 2458.046769][ T8955] ? io_ring_exit_work+0x3b9/0x830 [ 2458.051911][ T8955] ? io_ring_exit_work+0x3b9/0x830 [ 2458.057306][ T8955] ? io_ring_exit_work+0x3bb/0x830 [ 2458.062626][ T8955] handle_bug+0xcf/0x120 [ 2458.067422][ T8955] exc_invalid_op+0x1a/0x50 [ 2458.072188][ T8955] asm_exc_invalid_op+0x1a/0x20 [ 2458.077993][ T8955] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 2458.084925][ T8955] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 e1 ff 10 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 f1 a8 03 f7 e9 b1 fd ff ff e8 e7 a8 03 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 2458.105684][ T8955] RSP: 0018:ffffc90003537a40 EFLAGS: 00010293 [ 2458.111853][ T8955] RAX: ffffffff8a833c89 RBX: ffff88806a652000 RCX: ffff888029648000 [ 2458.120280][ T8955] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 2458.129514][ T8955] RBP: ffffc90003537bb0 R08: ffffc900035379c7 R09: 1ffff920006a6f38 [ 2458.138392][ T8955] R10: dffffc0000000000 R11: fffff520006a6f39 R12: dffffc0000000000 [ 2458.146458][ T8955] R13: 0000000100034a00 R14: 0000000100034a01 R15: ffff88806a652510 [ 2458.154698][ T8955] ? io_ring_exit_work+0x3b9/0x830 [ 2458.159988][ T8955] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 2458.166488][ T8955] ? _raw_spin_unlock_irq+0x23/0x50 [ 2458.172155][ T8955] ? process_scheduled_works+0x975/0x1600 [ 2458.178514][ T8955] ? process_scheduled_works+0x975/0x1600 [ 2458.184695][ T8955] process_scheduled_works+0xa60/0x1600 [ 2458.191070][ T8955] ? worker_attach_to_pool+0x370/0x370 [ 2458.197106][ T8955] ? assign_work+0x3cc/0x5d0 [ 2458.201823][ T8955] worker_thread+0xa5e/0xfe0 [ 2458.206608][ T8955] kthread+0x2fa/0x390 [ 2458.210895][ T8955] ? pr_cont_work+0x550/0x550 [ 2458.216286][ T8955] ? kthread_blkcg+0xd0/0xd0 [ 2458.221348][ T8955] ret_from_fork+0x48/0x80 [ 2458.226286][ T8955] ? kthread_blkcg+0xd0/0xd0 [ 2458.230916][ T8955] ret_from_fork_asm+0x11/0x20 [ 2458.235929][ T8955] [ 2458.239681][ T8955] Kernel Offset: disabled [ 2458.245083][ T8955] Rebooting in 86400 seconds..