last executing test programs: 9m24.693247977s ago: executing program 3 (id=80): syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40000) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10005}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000880), 0x8e5b, r5}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) 9m23.185148872s ago: executing program 3 (id=81): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) writev(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x7f}, &(0x7f00000010c0)=0x8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) timer_create(0x8, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000180)) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x30, r5, 0x1, 0x70bd2a, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x4c090) pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000019180)=[{&(0x7f0000000180)='W', 0x1}, {&(0x7f000001a200)="ec9c652af50e58ebe710e588b2c13162edfd97b95b36ee8f56326ccfde826e6eb0cd0b5901e8cdb9c6616e69b3fb7fbe3db4086b52aceaad091844ba247d642a8b7b776ce2e69b121c81f1ade8342f5931a31230d1eb31923b57fc9707e23dc9ac9a9bebaa49880b894705a53ad666ca6204b9b92b9e29a683f0580aec8115acfbd6f35cf4028d409adca7c29c76d2da6cd86c9932e0936bb0d3388eac34d08cde2935c0da6972c7b09066e76d0937921085d20717b135e93e402da17e3e00f2f4d21502b008377d91c462e6a33e1f3b55d478ede6abd4b6adcb1f598c1dd9e8813c8bfcba78b52128901e83d74090cf0977b59568e9e8169364b95adc29736435d594588eb7d3ce33265cf46f2f69d3534eecb6bf6e76c6c161fd4bebefc4c8e209d8b60eb26cf80fc56c5de82c5c9acf5c8ead5518b29646b8fc9a2bb908e72f6bc1848768fa8d4e699a1e58b8a7ac05845a3daa4a9b3cf3050345ac4aeda0f84c5757de7aa878eaf7a2b291fc561310b643c49f72d09d2b1a8bf2bcc797522cae2c0f4c89b4026a413938bab83097883980c790c8fde07f774f9b457442da4f19be009a70d5d833bdd27d9acd41a6fce04d371a871cff7fc9948626b1d604f6d5bf30a9d11fa0fbf69583ae1bd9bec9b406ea756bbec82235bcc63a38a58f97170b8549d8316f59ab3327e1253fb72dd587ab25f1148138a358ac3ff515bb1fb75420f3c43c240476bca5139b8462002f4b5d605063e7822154ae255c3324d45e1838466d509d19bee491d86ca045acbc1caa962559d1909f2b3d3abb76ebccc0b03562e9b44520c10835901eeb60d1ad799e0524b4b09ce0c51ab757e294486aaf504c0235814cd98db607ddacda9d8f06b28dcd09ffaa56c68135006a06e01c1045ad6c2b97ff9a833eed3c86d40735197ebc3636bd1baffc5eb51fe3bc1300a663ae2cda1a62712438cf74cd747d624990ebcc0211302f55d95fd797ee4098ccf780a392a647856fce5c8d7b3808b08febced378a29054018104c3c7d594bc10fbec03ac58a4c9f7593c0c12116804b13d66dd43e2429139df5bb1b11ee06295621497b9c4129f8bc6b677872640f2be6cd128ad7a6532183ae3148e79341632fb6697cef4ace508f8ed459789f84d4cffe41b24fd69381770aeb255228237b8d7224b478262af22027eca8a7f628256191f4b0048aada1ce45f0383213566060855d9f2e7d7f8d53449212b36e235216ebfc3c9f7e3492478a5cba68fe476461564fac618c517b3afad929a3a636ec9655d6003724ffb34aff8f524b540c8b9a1e7b7c48426b6cd55175ccce8416e3d50ae4968cd1f65b7d082bc15c6c0d4b9280a9445ec08d2e2e7d6b5eaa7a5835c6c695140bec0d2772c96f3e0a8e634bfdc7483d6e3e4ca8cbb3a345b4f0e1584a1c3eae32cd0f4643dcd7fe7622b26044bae3cb576a0140fd4ad9d58aefe2e99afe93197388ea725b2778c7b7efc0022683ef0c8a971fab5c655bcd2572d3b00a8672460f12a69ac423092d42fa004d295d7158b7ea89c5ff896ed6982f70ae3ddc836cc7f26bb5c62f79385aa37b7a249dd5b6f05bf667f3080e466845180c36659b9c174092ba7fa907c45ff94fa6e68dc0f60e2b5c7dbfde54511534c0020dc3abecc56b7f055ed6a247d66fa13a42c4e12a524335831c4cee455f563ba67bec59c686065ecd085acf9f01553f0be8a53e3cbb5a7ac1cbfae2f97b355c78747f51394f042ce5318e741bccbc3b5c909d895e84059441165691dc8e7dd00b37c12aa40f192e12842db1df16f4fb57832cd9d04459df52c34b19bf364c474b6f018b04de5a6f5ee6eab448b9846cb261a527cd8debefd75823ff3c5842e8bebf13bb79259fd737cb98a1d9267143d37edab147d05ba22c2e94f42a43c33514239721bf8ce0fe17cbba9460b4ae58c6df77581fbdf1fb18112d97ebac59cf62374728bd6d537d8a163440e5d9b9a837c29fe28ae6d5a1124953f28063d4ce1f95284010cca1acc378ab03a68948b04d8422781412f06d9f2d3b8f4a3e0e9512dc3774f5b4ffe503d90c852058b5c69c3bd98b7833f583a2019a6d82fd34a755f7e4d1ddaaeffcb25c18a55bf7b299bdcec41bc2c5907f67e01aa817b1f3a8c1a2669dc07383c8df40a5b8dd208b096a29b33d72f67a76036409fa70632dd8d05267c366b23ab55c5aff1c761b4397d9dc1855d9d55b889dcc52396eb301ca2378f6b933b98b136290b761f9bacb9ee675f74129a7723892fb6eee56ca07c98defbd78f404dfa1f5f906836a4cf63389df075289298e21fb62a5802f40a787f3b57290cba89864463f99e55fdb6c6bf5e61643a3448cfec9ef62017668bd79a2ce44d5f19d8d6065454281457a7411f77d1680f7fb4677ac4cd781abc5f9f6ee2a079f40167ea623ce9673d9fda978c9a0a1fe7541bb67e80bd742fd6560c1fd01c76592c8c6a0035b196ebd7c4cdb9dd3c8daeff9075dac90b079ca80b7c4a7816aa0d13e3495ce3e82528e77633dfb869390e003b906d52c2eeb08336c3175567379b37945378e6e33990bc59239c18590a47ec12d0c71474de887ab77bc1c493d4194ddf240ba2c306e062afe5e5ab102554d395ddc29b93283e0679ac6c6a7a0ab5042d584ccb0ad4e054bc55f5cbac99dbd4de422653112b5c9b69441929b5a0c20e388ed18d616ee49a3bd69e998ed301ea7986fbc6a3ec63d92b41b1b09a18f79431bb4ba62913b27e7bc90e87d8f8ca65d3fa98efa497cc508bf88458eaec60dd8f96e3356e148364a1ec0c66572274d320186c74156821033bd0ba000c96f5bc8bf357e2c5ccd2ca70da8948cf4525c6879e8e9575d99c2924a6c70b613d99781a5cad65794570313410548d9f98eb3c19bd3b309bddc908d1c760a330b8945eff8ccdfe1b15f43cdfa086d4ee1fbbda90ce74918cbb696307ce831a6676e5f5ecdef5899fc99d04a45357ad064f017255d5a20d4c4482ff9c3b000c15ed2d8c0f22d2ccf620fb47b60f4e089d51391cac8e8e8c6ab2da12324a5b1c47e205fe7f3308d544d88d10d5e7e2daae133d18c7c26b96b1f75a14b7dd0e2e05210f9a9bafb0073dc2880f921aa91125acb36eb8bbea02950f8053fb13a80a5f6739185ff35a2858da3c9cb3c39674cd137ef9c0ae4c0e8e70098edd2128638f63ddfd5a657c65136a66d7c9fa2f1c6447ca3d8c78914e02dc335ea10b066d962e5efd9d8df2e3bd8931436b431d997470bd4edf95207bdd9302cfd0a2f2f506939a53277bfa2598d97ca39f5d626bc2180caf157d0c8b734aeb4a48ff70a34b474c48449004252778922e30c0acbfa71476756bc7a701913c72a880eecb6e581362e5bbb2b98b32752cf8337bf4694524ed681c7d7595bba7a4320ace65b63f3888ce70247471c6fa6f3436ce62b5268ecf17ce47487cb4cd53448c96ac75afc8601d3cd2642e9d915909fa9d891f5459f5a4785e4a43307bc901bcff84241cdab0e1c60486f5d675643da9f1df54a33a3b175a86466b54b476a5e1cded4c158f21b788913bae7c720b44657cbab637914e5684552c1f52774491197babca355bdcfbf9d71ebb62b55bae27b093de66619332f8367d967b8ad9bc3cef9b0785d44e4de5c3ca8f8f61f8a4bbdc084a177b67ba6b93f0108eb9ddb8745a5d6f01b8d498a26c5fd25846145b25d1483fe8700ed3e6d32579ffc3a1b6d4f8cc0dfd418d91d1192c2146016da6b9d47b6b0744507ca3f7e25568fc7dfec0931f2521da83edf4ea7c90aaafe384d291a353d6fb13189ce4b5012c305d7603b9e8c92c0c84bbf6c4d0e84652d1f798e343b2c5b03ab6f3dfe0b1732091f645faa99e0c81e504c74a2b41642cc380110b08227555f75c6f5591f1a7b1889687040d2637a839bb4b635c8b44e1c54c8dc4a89c5f52a8e87af328eda6d687c32273abbfd8472cea05355d69e2da87d6acc38cd176e9ca94b6e4d9b4cae20957c2cfbaf246a07af325525fd571b7278d80d363681a03ce0efb32d2590099efd6c5e34098aef479c120e8f8047af491a7b2a477c2b6cbf6601034ba62ae8ba4b6672b3fde6e476eab61d9b7e30330070dfaf291407eba906d26f29409b549d03e49abc982ffa19777f79d1d7a2fe5a01d5b22fee13d2d8a986a0176efdb95fa2c834334ee9b224358a9a10add79bf5f8e37af7890dda281ef829ec56224b9fb51e563529cc62895f668ac6b1326a019c4723963efc3fae902823cdfe6e9085ece4f76c1475bfe236780e3c657ec16e6be64eab934b406c0080294e01058972651e239395764c070e5bbde22c67e00df8260ab93ff18cdeba44850788ee5acdb43d631e7a8ab27ca90983dd9b02a2e20b248a1235e2d81b8d5796cbeb38ae85d085a6d1f78f83cbb57a037e04ecc0bdd5552809a772afc4bfd174c084a7bbf86ab225e6eac1e92c7ef382fef1d180a3acb66fa0aa640027a66e2df70326ddced43fc95fa1715cc077531f181236aaeee8c1a51f6e1fd665c030ae8adab340c9d1477b991009911c62c04cad3ce35eff11ffecb831d5eaaf62a2bcf1a09a11b76338703bd75d16b345308aebf0c639260b42661cf5ae016a438ed4b02d30fa39ed958915e85c946e7deedfecd8996cd8c315ff2ca97436e17c04b36e5f3884a8de9784db3e64038c2b6ccd37c26622a8ebe3526ebff089f7663c49c9096e610f6247d094a9f80fed2b3ef7391ddbaa82dec4ede535dfea38339e62a2f8162b2c4a8b655c75b06663d0438d5f702955034eacc030a7fcba025354ac824862554ceffc9fd3f72be56e6503275b5ea240296326eaf2fe496e8267ed312e3baff2161fc9b20ec5047baf5a0b941b4e1ea956a6d1660fd151be3db03a7034a82bc5a84b3705beaa4d677287ceb03ec289fc5b350b9ef7b47cb8f72d661bf2d825adaa5584a3ea9f165cd565804e3b21d3aa828702618433b3062d95b459cb7755634d0a95ff0e3cefb778e9cd50bc631b8afc1fafb57739cb353de52e063eda81f90f90f7494e066ba87c6c06255135eb3e7d9c499f0dd9189c22844549236a1e05d7c742288c2b2279e95df1030afb637ffd5695ee1f80d9a6a0055f0cf5a7be519777c630f26ae5b220a041dac821c9848712992708a7c61c76e409818e5509abca21724065a6e403b85e1146d8fa38605d62fab5cfc5840aafb2ea1ab039a97ff456c635558db0c6079bfbcacc30de820d3a99dbe7e19d2ff8f6e0c78f53fca479dc5db36d9f651d63b7b3a8752178d9aafd6330ad314a0217540c9f34e67e72671d6ae279c99da937faa0551dc468c94a50c5255e5eaf4df333837741520fa28ec2405202f580837d70b4cc7c0222444c1ebfb56d2e035587a988483b6fa3e56c438b38c570dad7980e31db331239810aff8dbf8b23f10b1b1f28f7c5fb479291b60c75666affdbd1531f3149f99334012a2d5f1e2a2c8ccd6832a1203bf5ad6d82dfabd66c2538149ee53be59f048724ad76e2da7691d73e3563b02a00a662531e9764656cab5247d3b14153f487a297bd83d1006630db69f4a7da40375b37d295338f5fc7d57125eeba23388be43c4ec934bb7b3577f909a5fe9eb2e25bfacc88aff651a85801003c743047b8a90fe326ac8e5b6a496770c86445f0e776b5c9a79d4737c926b8772a7b57ede72697d59df85de0c3281011152bde80bdc67ed90412c3ea62ca4e97fed79ec5600b56596038503354b3ce33a7e0e97497d7ca8f73146e5faa8585ed5659c70ab56c0f2a67d27de1a5668ac8ef044bc6e1bd0d4856e59191632d42951416778804182bf6c4e9462f0e43345ac4e6153f23fe9cada54d8df8cdd68d2cd4ab61fa6f69d9d6000c22e01a395af7a2d5a3b7588e68834310297e857674ebafcae6ed8bb404fa371660e79895afb8ae17c4dee509ce029551547321656712354f6e01c5820f3d303947c418b45d5d0cbbc3c66b51453b9197572afeabc35deba1892fac1ceff80f6f4fc3b972effab58782c34588c656e2b2048532a71395efa8721775f750660aed7182c7f2b3b", 0x10c5}, {&(0x7f000001a180)="9d204fe2a34a358cfe3e68fa3685ea170c6609b5d5429a9a1da19a41790b929611d618", 0x23}, {&(0x7f0000019080)="c3c7afb61ccb55348090c220a44bba501c6fdef6409f4029eb6295c249c6a062a9639acee9e265228ecdae398fefe5c86599f53694efed3045eb831233548360dc7b07939615f1dc8365ff88303a5db71e8ea513a2d6c3c20b03da7d0da0b1214004d59da20e5be76de3ea60b899738f43a38bfad827c0c27eecb511", 0x7c}], 0x4}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="5c00000014006b03000000d86e6c1d00028400000000564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20008010) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_dev$loop(&(0x7f00000000c0), 0xfaa6, 0x6200) ioctl$LOOP_SET_FD(r9, 0x4c00, r8) 9m20.23855358s ago: executing program 3 (id=85): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x256c, 0x6d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0xd, "", [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x3, 0x1, 0x2, 0xd3, {0x9, 0x21, 0x6, 0x10, 0x1, {0x22, 0x217}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x57, 0x94, 0x9}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x201, 0x81, 0x40, 0x9, 0x20, 0xd}, 0x41, &(0x7f00000004c0)=ANY=[], 0x7, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x42, &(0x7f00000009c0)=@string={0x42, 0x3, "cc6a41eb63515dad06d8c533bd288382c2002caca26ea1a91849426323fb27f8b6ec82a67ed1749d2546a5286064ea917288d17d8336289ccc14f28a7fdde80b"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x807}}, {0x34, &(0x7f0000000680)=@string={0x34, 0x3, "c7f28702b9e0bd6af3f780b472bea59d080cfa3e31049636b43a62447994ac3c2bd8d5dbcbb161e2bb3a476909f0141df068"}}, {0xc7, &(0x7f0000000840)=ANY=[@ANYBLOB="c703728da943e55eaa0d855816165dc67db2832ca22bb7710a7244fa6a28848ebe3a617906d30e4ab0dc8504c22ce90da6d016862fc79bf3f75822ec3ad8098857fa6c0c72c25a67bf16b6d4d78cdc1d47f4cfd7a691aec67845306eebeb027f58e5cfa0cf337824f48343d56d09f5744f4506938ed632539b1b96764f711aca162eb682ed1326cf7ffaca128c06d8e44a65e5cdfc4b5bfac26cb0ded0562e6efe96dba0c184bff33186fb53bf49b0889c252ca6547deee88d487f961b34f1b46209dd39d251c4cd53de511282a16ac8703df1fa48918dd35d6cd6d662ca6591397f7b420a10e63ab6ef481ebd729af7345765057b4fd587c38d59b9e64496af132035c19465828191983c97ac1d65385724e2353fbcc4903a23e6a0e7f787faa753c4817750385af363be2a7c6a2f50b077c384530079c08a6a333fc5", @ANYRES8=r0, @ANYRES32=r0]}]}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000080)=0xc) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000000100)=0x1, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x4010, 0xffffffffffffffff, 0x638f4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x20e6, 0x0, @empty}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000000000000000000001ff02000000000000000000000000000120e620e6003000000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f2021222324252627"], 0x64) socket$inet_udp(0x2, 0x2, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000440)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)={0x48, 0x0, 0x714, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') creat(&(0x7f0000000440)='./bus\x00', 0xf2) 9m5.983169802s ago: executing program 3 (id=107): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) 9m3.986224968s ago: executing program 3 (id=113): socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x0, 0x0) preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x2, 0x0, 0x1) ioprio_get$pid(0x1, r0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x64, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) mount$overlay(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@verity_require}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') creat(&(0x7f0000000040)='./file1\x00', 0x108) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0xa}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000340)={0x3, r5, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) 9m2.342092508s ago: executing program 3 (id=116): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom1\x00', 0x6, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x26, 0x101, 0x70bd27, 0xfffffffc, {0x2c}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x489d6}, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0, 0x5c}], 0x1, 0x51, &(0x7f0000000180)=[@efer={0x2, 0x901}], 0x1) r5 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket(0x10, 0x2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000844) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) ioctl$FICLONE(r7, 0x40049409, r2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000200)="66b98605000066b80800000066ba000000000f30297d00650fd38800000f01cb0f070f07dae9f619f20f009200d0ce", 0x2f}], 0x1, 0x43, 0x0, 0xfffffffffffffde3) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8m46.686143763s ago: executing program 32 (id=116): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom1\x00', 0x6, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x26, 0x101, 0x70bd27, 0xfffffffc, {0x2c}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x489d6}, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0, 0x5c}], 0x1, 0x51, &(0x7f0000000180)=[@efer={0x2, 0x901}], 0x1) r5 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket(0x10, 0x2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000844) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) ioctl$FICLONE(r7, 0x40049409, r2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000200)="66b98605000066b80800000066ba000000000f30297d00650fd38800000f01cb0f070f07dae9f619f20f009200d0ce", 0x2f}], 0x1, 0x43, 0x0, 0xfffffffffffffde3) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8m21.085386345s ago: executing program 4 (id=208): bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x68, 0xba, 0x20, 0x2040, 0xb210, 0xbcda, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x9, 0x20, 0xd2, "", [{{0x9, 0x4, 0xe0, 0x1, 0x0, 0x37, 0xcc, 0xf2}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00030400a5a82ef6a9fdaaa05854443d5cb1601e"], 0x0, 0x0}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x5, 0x1e0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000dc0)={0x28, 0x14, 0x211, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "4ac2411e47061aefad04000000"}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000980)=ANY=[@ANYRES8=r2, @ANYBLOB="8222d1836be697dfaf4c9e8eff832fa9ea9e7d19a6fcd6a4276b70ba917edb381d2d9dfdb6e8c75cede358ac5f6d6847ee56dc1bfe0a995d6aa252edcdd83a817437b2007440b51c25374457e4f4fbcf258a379d4a9a7a34008f88316966652c94d2347ffe25cd5d0ac38b5554b560c098b6fb306c2b9cc4c927157639b57b9b0621fbedf1089bb97d8d048c9dab5c418d1fba68b426ead703d238ba2331ffffffe100"/182, @ANYRESOCT=r1, @ANYRES16, @ANYBLOB="01b31c7b04ce037ab01ec58c611ce603d3ed886c214cbecb44010969e32063e3c61867eaab96932e241fceefa9bbcf4ca7f561b178679bc6c12b275efd91cf24ea2ed612895e246c6237ed31fa9b5a4d5c50b5e047e8f5576b2c3c42d7b206d9eed2ada9ff58efcdee6a6990b2bc00db2ae46ce21bb00c42404a539abc3ce8f543b6fbf579fcd78afc68045e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x3c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xf}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x28}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x5}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xb}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040020) 8m18.792616637s ago: executing program 4 (id=213): r0 = syz_open_dev$cec(0x0, 0x0, 0xe8c00) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000003940)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4040000) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x7) setfsuid(0xee00) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', 0x0}) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0, 0x208800, 0x0) 8m17.445910275s ago: executing program 4 (id=214): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000101000028"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="00000090582a"], 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e001500000005002b"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect(0x2, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x74, 0x21, 0xe0, 0x40, 0x16c0, 0x5df, 0xa276, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x5, 0xd0, 0x7f, "", [{{0x9, 0x4, 0x20, 0xc, 0x0, 0x3, 0x0, 0x0, 0x9, [@uac_as]}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1744}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) mount(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) setreuid(0x0, 0xee01) 8m15.444879312s ago: executing program 4 (id=220): fcntl$addseals(0xffffffffffffffff, 0x409, 0x4) fallocate(0xffffffffffffffff, 0x0, 0x800657, 0x40000b7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x40800) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000240)="94", 0x1) tee(r1, r3, 0x8f5, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 8m7.755016019s ago: executing program 4 (id=231): getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f00000000c0)) 8m7.503440699s ago: executing program 4 (id=233): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 7m51.596672416s ago: executing program 33 (id=233): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 10.92105697s ago: executing program 1 (id=1205): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'hsr0\x00', 0xca58c30f81b6079f}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, 0xfffffffffffffffd) ioctl$int_in(r0, 0x5452, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x181800) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000000)={0x1, 0x7f, 0x7, 0xffffffffffffffff}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x2, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback={0xffff0000}, 0x3}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000140)={0x28, 0x6, r3, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) syz_open_procfs(0x0, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='dummy_hcd.0', 0xb) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = socket(0x1, 0x5, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x7bdf, 0x4000, 0x7, 0x39d}, 0x0, 0x4, 0x0, 0x0) io_uring_setup(0x3eac, &(0x7f0000000080)={0x0, 0x2d91, 0x1000, 0x0, 0x2ca}) 8.219056853s ago: executing program 2 (id=1211): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010023010000340200000600000008000100", @ANYRES32, @ANYBLOB="08000300ff"], 0x24}}, 0x0) 8.183649725s ago: executing program 2 (id=1212): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) 7.288438812s ago: executing program 2 (id=1213): clock_gettime(0x3, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040)={r0, r1/1000+60000}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x2122, 0x0) 7.221622807s ago: executing program 1 (id=1214): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = semget$private(0x0, 0x7, 0x191) semtimedop(r4, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0) semop(r4, &(0x7f0000000000)=[{0x0, 0xe8c7}], 0x1) semctl$SETVAL(r4, 0x0, 0x10, &(0x7f0000000180)=0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, 0x0) shutdown(r7, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="500088c42f5ac700"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700200100000000000000000000000000001400350077673100"/56], 0x50}}, 0x0) r9 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r9, 0x7, 0x2, r2}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) eventfd2(0xe5c, 0x80000) 7.139235262s ago: executing program 0 (id=1215): shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x72a, 0x1000000, 0x0) 7.10219071s ago: executing program 2 (id=1216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xdc}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x80057}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x20000406) 6.893697612s ago: executing program 0 (id=1217): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000001200)=0x4) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) 3.988249914s ago: executing program 0 (id=1218): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x101080, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 3.917478926s ago: executing program 2 (id=1219): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) 3.120295834s ago: executing program 0 (id=1220): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1c43f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="0200000000000000010203131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f401171c336e925cc3806a95840d0ba1ab26c7c56852f61270f616423e10d0879c48b6190191627a979e34a4d81e3d80c4b862964cd0000000000000000"], 0x48, 0xfffffffffffffffc) statx(r1, &(0x7f0000000300)='./file0\x00', 0x800, 0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xb) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000540), 0x200080, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 3.099652289s ago: executing program 1 (id=1221): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) 2.975131673s ago: executing program 2 (id=1222): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.273266047s ago: executing program 0 (id=1223): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080060000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0xa}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000340)={0x3, r4, 0xfffffffa, 0x7ffffe02, 0xb, 0x1fd, 0x1}) 2.271614839s ago: executing program 1 (id=1224): socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x0, 0x0) preadv2(r4, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x2, 0x0, 0x1) ioprio_get$pid(0x1, r0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff71a4f0ff000000002d040000000000003d400300000000006504000001ed000079110000000000006c440000000000007a0ab0fe000000007b13000000000000c500f9ffffff00009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a94aa8e98b0b263f0083bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e05000000d03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf2871ed2aa2a05e319374511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b2"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mount$overlay(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@verity_require}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) creat(&(0x7f0000000040)='./file1\x00', 0x108) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0xa}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000340)={0x3, r6, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) 174.420643ms ago: executing program 1 (id=1225): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x1000000, 0x0) 17.243737ms ago: executing program 0 (id=1226): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8) syz_usb_connect$uac1(0x0, 0x79, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000300000020410e44424000010203010902670003010480010904000000010100000a240102000a000201020904010004010101010200000724010310000009050109000208a66b07250100f000000904020000010200000904020101010200000905820900040206090725010c030001"], &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) 0s ago: executing program 1 (id=1227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xdc}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x80057}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x20000406) kernel console output (not intermixed with test programs): nfig 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.368953][ T5625] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 366.368975][ T5625] usb 2-1: config 1 has no interface number 0 [ 366.369023][ T5625] usb 2-1: config 1 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 366.369053][ T5625] usb 2-1: config 1 interface 2 has no altsetting 1 [ 366.372852][ T5625] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 366.372885][ T5625] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.372908][ T5625] usb 2-1: Product: syz [ 366.372923][ T5625] usb 2-1: Manufacturer: syz [ 366.372937][ T5625] usb 2-1: SerialNumber: syz [ 367.546957][ T5624] Bluetooth: hci5: command tx timeout [ 367.940179][ T5624] Bluetooth: hci2: command tx timeout [ 368.347913][ T5725] usb 2-1: USB disconnect, device number 32 [ 369.627087][ T5624] Bluetooth: hci5: command tx timeout [ 370.137949][ T5705] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 370.300698][ T5705] usb 1-1: Using ep0 maxpacket: 16 [ 370.302718][ T5705] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.302787][ T5705] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 370.305187][ T5705] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 370.305218][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.305237][ T5705] usb 1-1: Product: syz [ 370.305249][ T5705] usb 1-1: Manufacturer: syz [ 370.305257][ T5705] usb 1-1: SerialNumber: syz [ 370.320972][ T5705] usb 1-1: config 0 descriptor?? [ 371.420802][ T6031] usb 1-1: USB disconnect, device number 35 [ 371.427264][ T5705] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 371.546655][ T7851] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.548742][ T7851] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.548980][ T7851] bridge_slave_0: entered allmulticast mode [ 371.564385][ T7851] bridge_slave_0: entered promiscuous mode [ 371.578786][ T5705] usb 3-1: not running at top speed; connect to a high speed hub [ 371.580340][ T5705] usb 3-1: config 5 has an invalid interface number: 32 but max is 0 [ 371.580368][ T5705] usb 3-1: config 5 has no interface number 0 [ 371.580402][ T5705] usb 3-1: config 5 interface 32 has no altsetting 0 [ 371.594862][ T5705] usb 3-1: string descriptor 0 read error: -22 [ 371.595021][ T5705] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=a2.76 [ 371.595048][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.707030][ T5624] Bluetooth: hci5: command tx timeout [ 371.710072][ T7851] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.710223][ T7851] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.710465][ T7851] bridge_slave_1: entered allmulticast mode [ 371.744926][ T7851] bridge_slave_1: entered promiscuous mode [ 371.834429][ T8002] Invalid source name [ 371.834450][ T8002] UBIFS error (pid: 8002): cannot open "/dev/sequencer", error -22 [ 371.844925][ T5705] usb 3-1: USB disconnect, device number 29 [ 372.516425][ T7851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.093217][ T7851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.789274][ T5624] Bluetooth: hci5: command tx timeout [ 374.772971][ T7851] team0: Port device team_slave_0 added [ 374.801206][ T7851] team0: Port device team_slave_1 added [ 374.907417][ T5725] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 375.211291][ T5725] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 375.292495][ T5725] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 375.292534][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 375.292565][ T5725] usb 1-1: Product: syz [ 375.292581][ T5725] usb 1-1: Manufacturer: syz [ 375.292596][ T5725] usb 1-1: SerialNumber: syz [ 377.985901][ T5725] usb 1-1: can't set config #1, error -71 [ 378.059410][ T5725] usb 1-1: USB disconnect, device number 36 [ 378.351513][ T7851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.351587][ T7851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.351620][ T7851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.505393][ T8064] comedi comedi3: pcl816: I/O port conflict (0x100,16) [ 379.199252][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.199334][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.735628][ T7851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.736071][ T7851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.736681][ T7851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.133088][ T8083] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 382.133169][ T8083] UDF-fs: Scanning with blocksize 512 failed [ 382.229012][ T8083] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 382.229061][ T8083] UDF-fs: Scanning with blocksize 1024 failed [ 382.296459][ T8083] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 382.296512][ T8083] UDF-fs: Scanning with blocksize 2048 failed [ 382.427469][ T8083] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 382.427672][ T8083] UDF-fs: Scanning with blocksize 4096 failed [ 384.476012][ T8096] netlink: 9 bytes leftover after parsing attributes in process `syz.1.577'. [ 384.637335][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.578'. [ 384.637382][ T8096] netlink: 9 bytes leftover after parsing attributes in process `syz.1.577'. [ 384.807079][ T1112] bridge_slave_1: left allmulticast mode [ 384.807120][ T1112] bridge_slave_1: left promiscuous mode [ 384.813094][ T1112] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.837899][ T1112] bridge_slave_0: left allmulticast mode [ 385.837925][ T1112] bridge_slave_0: left promiscuous mode [ 385.838106][ T1112] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.764378][ T8135] overlayfs: overlapping lowerdir path [ 386.898123][ T1112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.027628][ T1112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.088982][ T1112] bond0 (unregistering): Released all slaves [ 387.194991][ T7851] hsr_slave_0: entered promiscuous mode [ 387.195889][ T7851] hsr_slave_1: entered promiscuous mode [ 387.205351][ T7851] debugfs: 'hsr0' already exists in 'hsr' [ 387.205380][ T7851] Cannot create hsr debugfs directory [ 388.526534][ T8154] binder: 8153:8154 ioctl c0306201 200000000080 returned -14 [ 388.531691][ T8154] binder: 8153:8154 ioctl c0306201 2000000003c0 returned -14 [ 388.568272][ T1112] hsr_slave_0: left promiscuous mode [ 388.607061][ T1112] hsr_slave_1: left promiscuous mode [ 388.608186][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.662357][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.756997][ T5332] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 388.925902][ T5332] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 388.944813][ T5332] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 388.944850][ T5332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 388.944872][ T5332] usb 3-1: Product: syz [ 388.944887][ T5332] usb 3-1: Manufacturer: syz [ 388.944902][ T5332] usb 3-1: SerialNumber: syz [ 389.263094][ T5332] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 389.289554][ T5332] usb 3-1: USB disconnect, device number 30 [ 389.370397][ T5332] usblp0: removed [ 390.007548][ T1112] team0 (unregistering): Port device team_slave_1 removed [ 390.128490][ T1112] team0 (unregistering): Port device team_slave_0 removed [ 390.995712][ T8185] binder: 8184:8185 ioctl c0306201 200000000080 returned -14 [ 391.000598][ T8185] binder: 8184:8185 ioctl c0306201 2000000003c0 returned -14 [ 391.040060][ T8186] comedi comedi3: pcl816: I/O port conflict (0x100,16) [ 394.802977][ T7944] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.803123][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.803320][ T7944] bridge_slave_0: entered allmulticast mode [ 394.863584][ T8211] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 395.335234][ T7944] bridge_slave_0: entered promiscuous mode [ 395.522888][ T7944] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.523031][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.523168][ T7944] bridge_slave_1: entered allmulticast mode [ 395.527531][ T7944] bridge_slave_1: entered promiscuous mode [ 395.760047][ T8217] binder: 8216:8217 ioctl c0306201 200000000080 returned -14 [ 395.765449][ T8217] binder: 8216:8217 ioctl c0306201 2000000003c0 returned -14 [ 395.778668][ T7944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.903474][ T7944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.904491][ T8219] netlink: 9 bytes leftover after parsing attributes in process `syz.2.607'. [ 396.047291][ T8219] netlink: 9 bytes leftover after parsing attributes in process `syz.2.607'. [ 396.847828][ T8237] netlink: 24 bytes leftover after parsing attributes in process `syz.0.609'. [ 396.997259][ T6031] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 397.152736][ T6031] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 397.152777][ T6031] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1015, setting to 64 [ 397.152808][ T6031] usb 2-1: config 0 interface 0 has no altsetting 0 [ 397.152844][ T6031] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 397.152869][ T6031] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.168538][ T6031] usb 2-1: config 0 descriptor?? [ 397.169648][ T8226] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 397.202278][ T7944] team0: Port device team_slave_0 added [ 397.400855][ T6031] usbhid 2-1:0.0: can't add hid device: -71 [ 397.400994][ T6031] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 397.421077][ T7944] team0: Port device team_slave_1 added [ 397.427663][ T6031] usb 2-1: USB disconnect, device number 33 [ 398.426148][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 400.197557][ T7944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.197577][ T7944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.197608][ T7944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.203848][ T7944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.203866][ T7944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.203897][ T7944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.380641][ T8277] binder: 8276:8277 ioctl c0306201 200000000080 returned -14 [ 400.392552][ T8277] binder: 8276:8277 ioctl c0306201 2000000003c0 returned -14 [ 401.975430][ T8297] netlink: 24 bytes leftover after parsing attributes in process `syz.2.619'. [ 402.097717][ T7944] hsr_slave_0: entered promiscuous mode [ 402.130504][ T7944] hsr_slave_1: entered promiscuous mode [ 402.131635][ T7944] debugfs: 'hsr0' already exists in 'hsr' [ 402.131663][ T7944] Cannot create hsr debugfs directory [ 402.176486][ T8301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.621'. [ 403.746142][ T8334] binder: 8333:8334 ioctl c0306201 200000000080 returned -14 [ 403.757517][ T8334] binder: 8333:8334 ioctl c0306201 2000000003c0 returned -14 [ 404.000520][ T8327] evm: overlay not supported [ 404.271533][ T5615] Bluetooth: hci4: command 0x0c1a tx timeout [ 405.084755][ T8354] overlayfs: failed to resolve './file0': -2 [ 406.347260][ T5615] Bluetooth: hci4: command 0x0c1a tx timeout [ 406.371695][ T8359] netlink: 24 bytes leftover after parsing attributes in process `syz.0.631'. [ 406.489954][ T8364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.632'. [ 407.005445][ T8379] binder: 8378:8379 ioctl c0306201 200000000080 returned -14 [ 407.008432][ T8379] binder: 8378:8379 ioctl c0306201 2000000003c0 returned -14 [ 407.535423][ T8389] overlayfs: failed to resolve './file0': -2 [ 409.417219][ T8404] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 409.417239][ T8404] UDF-fs: Scanning with blocksize 512 failed [ 409.417652][ T8404] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 409.417663][ T8404] UDF-fs: Scanning with blocksize 1024 failed [ 409.417884][ T8404] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 409.417894][ T8404] UDF-fs: Scanning with blocksize 2048 failed [ 409.418121][ T8404] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 409.418131][ T8404] UDF-fs: Scanning with blocksize 4096 failed [ 409.969780][ T8415] binder: 8414:8415 ioctl c0306201 200000000080 returned -14 [ 409.991842][ T8415] binder: 8414:8415 ioctl c0306201 2000000003c0 returned -14 [ 410.947090][ T8425] netlink: 24 bytes leftover after parsing attributes in process `syz.0.647'. [ 411.082088][ T1112] bridge_slave_1: left allmulticast mode [ 411.082117][ T1112] bridge_slave_1: left promiscuous mode [ 411.121393][ T1112] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.524146][ T1112] bridge_slave_0: left allmulticast mode [ 411.524186][ T1112] bridge_slave_0: left promiscuous mode [ 411.524479][ T1112] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.867209][ T8441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.650'. [ 414.886126][ T8442] netlink: 9 bytes leftover after parsing attributes in process `syz.1.651'. [ 414.997355][ T8442] netlink: 9 bytes leftover after parsing attributes in process `syz.1.651'. [ 415.246303][ T8451] binder: 8450:8451 ioctl c0306201 200000000080 returned -14 [ 415.258324][ T1112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.263495][ T8451] binder: 8450:8451 ioctl c0306201 2000000003c0 returned -14 [ 416.261122][ T1112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.350550][ T1112] bond0 (unregistering): Released all slaves [ 416.577427][ T8461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.658'. [ 417.191347][ T8466] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 417.191502][ T8466] UDF-fs: Scanning with blocksize 512 failed [ 417.277722][ T8466] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 417.277746][ T8466] UDF-fs: Scanning with blocksize 1024 failed [ 417.278293][ T8466] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 417.278310][ T8466] UDF-fs: Scanning with blocksize 2048 failed [ 417.278615][ T8466] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 417.278629][ T8466] UDF-fs: Scanning with blocksize 4096 failed [ 418.837372][ T8496] netlink: 9 bytes leftover after parsing attributes in process `syz.0.664'. [ 419.032955][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 419.070172][ T1112] hsr_slave_0: left promiscuous mode [ 420.064710][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 420.067689][ T5615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 420.071587][ T5615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 420.072707][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 420.110404][ T1112] hsr_slave_1: left promiscuous mode [ 420.111563][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.281613][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.267289][ T5624] Bluetooth: hci1: command tx timeout [ 422.640396][ T8528] netlink: 24 bytes leftover after parsing attributes in process `syz.0.669'. [ 424.313348][ T8543] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 424.313436][ T8543] UDF-fs: Scanning with blocksize 512 failed [ 424.346917][ T5624] Bluetooth: hci1: command tx timeout [ 424.380227][ T8543] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 424.380315][ T8543] UDF-fs: Scanning with blocksize 1024 failed [ 424.397310][ T8543] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 424.397365][ T8543] UDF-fs: Scanning with blocksize 2048 failed [ 424.435465][ T8543] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 424.435749][ T8543] UDF-fs: Scanning with blocksize 4096 failed [ 424.851584][ T8545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'. [ 425.018028][ T1112] team0 (unregistering): Port device team_slave_1 removed [ 425.070449][ T1112] team0 (unregistering): Port device team_slave_0 removed [ 425.504069][ T8552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.674'. [ 425.611397][ T5615] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 425.623957][ T8557] netlink: 9 bytes leftover after parsing attributes in process `syz.0.675'. [ 425.665735][ T5615] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 425.669009][ T5615] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 425.671922][ T5615] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 425.672835][ T5615] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 425.847369][ T8557] netlink: 9 bytes leftover after parsing attributes in process `syz.0.675'. [ 426.437893][ T5624] Bluetooth: hci1: command tx timeout [ 426.965761][ T8589] netlink: 24 bytes leftover after parsing attributes in process `syz.1.679'. [ 427.867712][ T5624] Bluetooth: hci6: command tx timeout [ 428.039667][ T8605] binder: 8604:8605 ioctl 4018620d 0 returned -22 [ 428.060635][ T8605] binder: 8604:8605 ioctl c0306201 200000000080 returned -14 [ 428.066197][ T8605] binder: 8604:8605 ioctl c0306201 2000000003c0 returned -14 [ 428.507229][ T5624] Bluetooth: hci1: command tx timeout [ 429.946900][ T5624] Bluetooth: hci6: command tx timeout [ 430.249274][ T8639] netlink: 9 bytes leftover after parsing attributes in process `syz.0.685'. [ 430.491530][ T8639] netlink: 9 bytes leftover after parsing attributes in process `syz.0.685'. [ 430.883822][ T8653] netlink: 24 bytes leftover after parsing attributes in process `syz.2.689'. [ 431.047106][ T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 431.232742][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 431.235969][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 431.236006][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 431.267189][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 431.267224][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.267245][ T10] usb 1-1: Product: syz [ 431.267260][ T10] usb 1-1: Manufacturer: syz [ 431.267275][ T10] usb 1-1: SerialNumber: syz [ 431.308402][ T10] usb 1-1: config 0 descriptor?? [ 431.327905][ T10] em28xx 1-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 431.857913][ T8655] binder: BINDER_SET_CONTEXT_MGR already set [ 431.857933][ T8655] binder: 8654:8655 ioctl 4018620d 200000000040 returned -16 [ 432.021212][ T3096] bridge_slave_1: left allmulticast mode [ 432.021257][ T3096] bridge_slave_1: left promiscuous mode [ 432.021548][ T3096] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.026919][ T5624] Bluetooth: hci6: command tx timeout [ 432.138836][ T3096] bridge_slave_0: left allmulticast mode [ 432.138876][ T3096] bridge_slave_0: left promiscuous mode [ 432.139178][ T3096] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.310181][ T5732] usb 1-1: USB disconnect, device number 37 [ 432.661396][ T8678] netlink: 9 bytes leftover after parsing attributes in process `syz.2.697'. [ 432.767552][ T8678] netlink: 9 bytes leftover after parsing attributes in process `syz.2.697'. [ 433.010104][ T3096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.070212][ T8682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.698'. [ 433.127834][ T3096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.650425][ T3096] bond0 (unregistering): Released all slaves [ 434.096260][ T8692] binder: BINDER_SET_CONTEXT_MGR already set [ 434.096278][ T8692] binder: 8691:8692 ioctl 4018620d 200000000040 returned -16 [ 434.145552][ T5624] Bluetooth: hci6: command tx timeout [ 434.501704][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 434.557660][ T8501] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.557808][ T8501] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.558072][ T8501] bridge_slave_0: entered allmulticast mode [ 434.561383][ T8501] bridge_slave_0: entered promiscuous mode [ 434.681509][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 434.681541][ T10] usb 3-1: config 0 has no interface number 0 [ 434.681591][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.681621][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.681645][ T10] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 434.681690][ T10] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 434.681715][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.717013][ T5725] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 434.763057][ T10] usb 3-1: config 0 descriptor?? [ 434.866956][ T5725] usb 1-1: Using ep0 maxpacket: 16 [ 434.869378][ T5725] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 434.869414][ T5725] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 434.872533][ T5725] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 434.872565][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.872587][ T5725] usb 1-1: Product: syz [ 434.872601][ T5725] usb 1-1: Manufacturer: syz [ 434.872615][ T5725] usb 1-1: SerialNumber: syz [ 434.960241][ T3096] hsr_slave_0: left promiscuous mode [ 434.964656][ T5725] usb 1-1: config 0 descriptor?? [ 435.003735][ T3096] hsr_slave_1: left promiscuous mode [ 435.004810][ T3096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.053209][ T5725] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 435.053314][ T5725] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 435.080146][ T3096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.394510][ T8695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.399293][ T8695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.480398][ T10] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.0002/input/input6 [ 435.594014][ T10] uclogic 0003:28BD:0042.0002: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1 [ 435.635002][ T5725] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 435.641486][ T5725] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 435.641795][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 435.641992][ T5725] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 435.642008][ T5725] em28xx 1-1:0.0: No AC97 audio processor [ 435.838707][ T10] usb 3-1: USB disconnect, device number 31 [ 435.857925][ T5725] usb 1-1: USB disconnect, device number 38 [ 435.986423][ T8712] fido_id[8712]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 436.092290][ T5725] em28xx 1-1:0.0: Disconnecting em28xx [ 436.260451][ T5725] em28xx 1-1:0.0: Freeing device [ 436.531329][ T8722] netlink: 24 bytes leftover after parsing attributes in process `syz.0.709'. [ 437.600467][ T8724] binder: BINDER_SET_CONTEXT_MGR already set [ 437.600485][ T8724] binder: 8723:8724 ioctl 4018620d 200000000040 returned -16 [ 437.711244][ T3096] team0 (unregistering): Port device team_slave_1 removed [ 437.818041][ T3096] team0 (unregistering): Port device team_slave_0 removed [ 438.102825][ T8501] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.102904][ T8501] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.103068][ T8501] bridge_slave_1: entered allmulticast mode [ 438.104999][ T8501] bridge_slave_1: entered promiscuous mode [ 438.587849][ T5332] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 438.770877][ T8501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.797027][ T8501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.816630][ T5332] usb 3-1: Using ep0 maxpacket: 16 [ 438.825660][ T5332] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.825699][ T5332] usb 3-1: config 0 interface 0 has no altsetting 0 [ 438.825737][ T5332] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 438.825771][ T5332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.944755][ T5332] usb 3-1: config 0 descriptor?? [ 440.654632][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.654710][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.737974][ T8501] team0: Port device team_slave_0 added [ 441.100053][ T8501] team0: Port device team_slave_1 added [ 442.869152][ T5332] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 444.302030][ T5332] usb 3-1: USB disconnect, device number 32 [ 444.416291][ T8754] fido_id[8754]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 444.527620][ T8501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.527639][ T8501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.527670][ T8501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.587390][ T8501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.587411][ T8501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.587441][ T8501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.003309][ T8553] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.003560][ T8553] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.003784][ T8553] bridge_slave_0: entered allmulticast mode [ 445.039965][ T8553] bridge_slave_0: entered promiscuous mode [ 445.114482][ T8553] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.114645][ T8553] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.114819][ T8553] bridge_slave_1: entered allmulticast mode [ 445.139577][ T8553] bridge_slave_1: entered promiscuous mode [ 445.216339][ T8501] hsr_slave_0: entered promiscuous mode [ 445.224347][ T8501] hsr_slave_1: entered promiscuous mode [ 445.225493][ T8501] debugfs: 'hsr0' already exists in 'hsr' [ 445.225521][ T8501] Cannot create hsr debugfs directory [ 446.107635][ T8553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.155978][ T8553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.239030][ T5705] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 446.400219][ T5705] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 446.400249][ T5705] usb 1-1: config 0 has no interface number 0 [ 446.400310][ T5705] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.400337][ T5705] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.400360][ T5705] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 446.400407][ T5705] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 446.400432][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.418213][ T5705] usb 1-1: config 0 descriptor?? [ 446.553187][ T8553] team0: Port device team_slave_0 added [ 446.933115][ T8553] team0: Port device team_slave_1 added [ 446.959096][ T8791] JFS: discard option not supported on device [ 447.034840][ T8791] Mount JFS Failure: -5 [ 447.035184][ T8791] jfs_mount failed w/return code = -5 [ 447.834268][ T8787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.835754][ T8787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.931613][ T5705] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0042.0004/input/input7 [ 448.078255][ T5705] uclogic 0003:28BD:0042.0004: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.0-1/input1 [ 448.100372][ T8553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.100392][ T8553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.100421][ T8553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.106489][ T8553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.106506][ T8553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.106532][ T8553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.429693][ T8553] hsr_slave_0: entered promiscuous mode [ 449.458312][ T8553] hsr_slave_1: entered promiscuous mode [ 449.459421][ T8553] debugfs: 'hsr0' already exists in 'hsr' [ 449.459447][ T8553] Cannot create hsr debugfs directory [ 449.588314][ T5732] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 449.752966][ T5732] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 449.753003][ T5732] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 449.753026][ T5732] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 449.796404][ T5732] usb 3-1: string descriptor 0 read error: -22 [ 449.796554][ T5732] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 449.796580][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.848212][ T8798] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 449.848352][ T8798] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 449.875861][ T5732] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 451.262475][ T6031] usb 3-1: USB disconnect, device number 33 [ 451.367502][ T5705] usb 1-1: USB disconnect, device number 39 [ 452.039252][ T8829] openvswitch: netlink: IP tunnel dst address not specified [ 453.122864][ T6031] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 453.286634][ T8839] team0: Device xfrm0 is of different type [ 453.301729][ T6031] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 453.301760][ T6031] usb 2-1: config 0 has no interface number 0 [ 453.301808][ T6031] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.301851][ T6031] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.301880][ T6031] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 453.301926][ T6031] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 453.301951][ T6031] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.384176][ T6031] usb 2-1: config 0 descriptor?? [ 453.464298][ T8845] netlink: 48 bytes leftover after parsing attributes in process `syz.2.734'. [ 453.522328][ T8842] tipc: Started in network mode [ 453.522363][ T8842] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 453.648707][ T8842] tipc: Enabled bearer , priority 0 [ 454.031936][ T8833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.033353][ T8833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.217171][ T6031] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0042.0005/input/input8 [ 455.347589][ T1430] bridge_slave_1: left allmulticast mode [ 455.347632][ T1430] bridge_slave_1: left promiscuous mode [ 455.347941][ T1430] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.497968][ T6031] uclogic 0003:28BD:0042.0005: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.1-1/input1 [ 455.534031][ T6031] usb 2-1: USB disconnect, device number 34 [ 455.834720][ T1430] bridge_slave_0: left allmulticast mode [ 455.834757][ T1430] bridge_slave_0: left promiscuous mode [ 455.835038][ T1430] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.863905][ T8859] fido_id[8859]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 457.573054][ T1430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.783523][ T1430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.869567][ T1430] bond0 (unregistering): Released all slaves [ 457.910393][ T9] tipc: Node number set to 11578026 [ 457.934497][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 458.148445][ T5705] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 458.306930][ T5705] usb 1-1: Using ep0 maxpacket: 32 [ 458.309207][ T5705] usb 1-1: unable to get BOS descriptor or descriptor too short [ 458.310383][ T5705] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.310409][ T5705] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 458.310472][ T5705] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 458.312702][ T5705] usb 1-1: New USB device found, idVendor=0e41, idProduct=4244, bcdDevice= 0.40 [ 458.312729][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.312748][ T5705] usb 1-1: Product: syz [ 458.312762][ T5705] usb 1-1: Manufacturer: syz [ 458.312781][ T5705] usb 1-1: SerialNumber: syz [ 458.357014][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 458.478428][ T1430] hsr_slave_0: left promiscuous mode [ 458.514850][ T8884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.743'. [ 458.534193][ T1430] hsr_slave_1: left promiscuous mode [ 458.535186][ T1430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.568236][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 458.568271][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.568291][ T9] usb 2-1: Product: syz [ 458.568305][ T9] usb 2-1: Manufacturer: syz [ 458.568329][ T9] usb 2-1: SerialNumber: syz [ 458.570928][ T1430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.697650][ T5705] usb 1-1: 0:2 : does not exist [ 458.734732][ T5705] usb 1-1: unknown interface protocol 0x1, assuming v1 [ 458.734781][ T5705] usb 1-1: cannot find UAC_HEADER [ 458.822960][ T5705] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 458.836902][ T5705] usb 1-1: USB disconnect, device number 40 [ 458.951593][ T8569] udevd[8569]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 459.054244][ T197] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 459.837681][ T5705] usb 2-1: USB disconnect, device number 35 [ 460.477561][ T197] usb 2-1: Service connection timeout for: 256 [ 460.477586][ T197] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 461.569845][ T8901] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 461.569873][ T8901] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 461.569885][ T8901] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 461.677190][ T197] ath9k_htc: Failed to initialize the device [ 461.680419][ T5705] usb 2-1: ath9k_htc: USB layer deinitialized [ 462.165985][ T8912] netlink: 24 bytes leftover after parsing attributes in process `syz.0.753'. [ 462.638514][ T1430] team0 (unregistering): Port device team_slave_1 removed [ 462.746877][ T197] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 462.829120][ T1430] team0 (unregistering): Port device team_slave_0 removed [ 462.908944][ T197] usb 2-1: Using ep0 maxpacket: 32 [ 462.911386][ T197] usb 2-1: unable to get BOS descriptor or descriptor too short [ 462.913134][ T197] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.913160][ T197] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 462.913224][ T197] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 462.915873][ T197] usb 2-1: New USB device found, idVendor=0e41, idProduct=4244, bcdDevice= 0.40 [ 462.915891][ T197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.915903][ T197] usb 2-1: Product: syz [ 462.915912][ T197] usb 2-1: Manufacturer: syz [ 462.915920][ T197] usb 2-1: SerialNumber: syz [ 463.295557][ T197] usb 2-1: 0:2 : does not exist [ 463.320069][ T197] usb 2-1: unknown interface protocol 0x1, assuming v1 [ 463.320088][ T197] usb 2-1: cannot find UAC_HEADER [ 464.137212][ T197] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 464.315572][ T197] usb 2-1: USB disconnect, device number 36 [ 464.480544][ T8569] udevd[8569]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 464.974497][ T197] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 465.157072][ T197] usb 2-1: Using ep0 maxpacket: 8 [ 465.165364][ T197] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.165400][ T197] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 465.165428][ T197] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 465.165442][ T197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.177827][ T197] usb 2-1: config 0 descriptor?? [ 466.468443][ T8941] netlink: 68 bytes leftover after parsing attributes in process `syz.2.759'. [ 466.712356][ T8943] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 466.712384][ T8943] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 466.712396][ T8943] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 466.929946][ T5732] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 467.076880][ T5732] usb 3-1: Using ep0 maxpacket: 8 [ 467.084271][ T5732] usb 3-1: unable to get BOS descriptor or descriptor too short [ 467.105465][ T5732] usb 3-1: config 4 interface 0 has no altsetting 0 [ 467.119489][ T5732] usb 3-1: string descriptor 0 read error: -22 [ 467.119599][ T5732] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 467.119625][ T5732] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 467.174887][ T5732] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 467.196026][ T5732] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 467.196386][ T5732] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 467.196437][ T5732] usb 3-1: media controller created [ 467.241787][ T197] usbhid 2-1:0.0: can't add hid device: -71 [ 467.242041][ T197] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 467.264549][ T197] usb 2-1: USB disconnect, device number 37 [ 467.285528][ T5732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 467.624668][ T9] usb 3-1: USB disconnect, device number 34 [ 468.030096][ T8961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.763'. [ 470.218198][ T197] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 470.377034][ T197] usb 3-1: Using ep0 maxpacket: 32 [ 470.384912][ T197] usb 3-1: unable to get BOS descriptor or descriptor too short [ 470.385896][ T197] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 470.385912][ T197] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 470.385948][ T197] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 470.390895][ T197] usb 3-1: New USB device found, idVendor=0e41, idProduct=4244, bcdDevice= 0.40 [ 470.390924][ T197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.390943][ T197] usb 3-1: Product: syz [ 470.390956][ T197] usb 3-1: Manufacturer: syz [ 470.390969][ T197] usb 3-1: SerialNumber: syz [ 470.691074][ T197] usb 3-1: 0:2 : does not exist [ 470.703695][ T197] usb 3-1: unknown interface protocol 0x1, assuming v1 [ 470.703714][ T197] usb 3-1: cannot find UAC_HEADER [ 470.790423][ T9004] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 470.790452][ T9004] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 470.790466][ T9004] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 471.135591][ T197] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 471.156400][ T197] usb 3-1: USB disconnect, device number 35 [ 471.789529][ T9017] netlink: 68 bytes leftover after parsing attributes in process `syz.1.772'. [ 472.506930][ T5732] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 472.670766][ T5732] usb 2-1: Using ep0 maxpacket: 8 [ 472.694415][ T8501] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 472.706710][ T5732] usb 2-1: unable to get BOS descriptor or descriptor too short [ 472.708817][ T5732] usb 2-1: config 4 interface 0 has no altsetting 0 [ 472.716297][ T5732] usb 2-1: string descriptor 0 read error: -22 [ 472.716408][ T5732] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 472.716434][ T5732] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 472.856983][ T5732] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 472.885848][ T5732] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 472.886245][ T5732] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 472.886301][ T5732] usb 2-1: media controller created [ 472.934567][ T9030] netlink: 24 bytes leftover after parsing attributes in process `syz.0.775'. [ 472.940332][ T8501] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 472.963239][ T5732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 473.042137][ T8501] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 473.462964][ T5732] usb 2-1: USB disconnect, device number 38 [ 473.814583][ T8501] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 473.855953][ T8501] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 473.939982][ T8501] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 474.251210][ T8501] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 474.338845][ T8501] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 475.941450][ T9051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.779'. [ 477.488211][ T8553] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 477.707431][ T8553] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 477.776668][ T8553] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 477.778549][ T9076] binder: 9075:9076 ioctl c0306201 2000000003c0 returned -14 [ 478.037590][ T8553] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 478.218869][ T8553] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 478.869983][ T8553] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 478.879362][ T9085] netlink: 24 bytes leftover after parsing attributes in process `syz.0.784'. [ 478.910785][ T8553] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 479.175059][ T8553] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 479.278619][ T9088] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 479.278655][ T9088] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 479.278668][ T9088] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 480.165575][ T9097] netlink: 68 bytes leftover after parsing attributes in process `syz.2.785'. [ 480.509714][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 480.510201][ T5625] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 480.568579][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 480.618051][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 480.620094][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 480.645462][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 480.646472][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 480.851321][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 480.852439][ T5625] usb 3-1: Using ep0 maxpacket: 8 [ 480.853634][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 480.853700][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 480.855950][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 480.855968][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.855980][ T9] usb 1-1: Product: syz [ 480.855988][ T9] usb 1-1: Manufacturer: syz [ 480.855997][ T9] usb 1-1: SerialNumber: syz [ 480.909699][ T5625] usb 3-1: unable to get BOS descriptor or descriptor too short [ 480.917580][ T5625] usb 3-1: config 4 interface 0 has no altsetting 0 [ 480.978023][ T9] usb 1-1: config 0 descriptor?? [ 481.000900][ T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 481.000926][ T9] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 481.053457][ T5625] usb 3-1: string descriptor 0 read error: -22 [ 481.053630][ T5625] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 481.053658][ T5625] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 481.223544][ T5625] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 481.266097][ T5625] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 481.277567][ T5625] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 481.277695][ T5625] usb 3-1: media controller created [ 481.382973][ T5625] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 481.603710][ T9] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 481.604447][ T9] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 481.606000][ T9] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 481.606024][ T9] em28xx 1-1:0.0: No AC97 audio processor [ 481.751520][ T9] usb 1-1: USB disconnect, device number 41 [ 481.779678][ T9] em28xx 1-1:0.0: Disconnecting em28xx [ 481.844505][ T5625] usb 3-1: USB disconnect, device number 36 [ 481.981204][ T9] em28xx 1-1:0.0: Freeing device [ 482.551754][ T9114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.789'. [ 482.746875][ T5615] Bluetooth: hci2: command tx timeout [ 482.766973][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 483.966681][ T9] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 483.967115][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.967176][ T9] usb 3-1: Product: syz [ 483.967252][ T9] usb 3-1: Manufacturer: syz [ 483.967268][ T9] usb 3-1: SerialNumber: syz [ 484.093070][ T9] usb 3-1: config 0 descriptor?? [ 484.296275][ T9] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 037 [ 484.411148][ T9113] netlink: 'syz.2.788': attribute type 8 has an invalid length. [ 484.629823][ T9] (null): failure reading functionality [ 484.656358][ T8553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.768743][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 484.820800][ T8553] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.826891][ T5615] Bluetooth: hci2: command tx timeout [ 484.850195][ T1457] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.850350][ T1457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.013951][ T9122] binder: 9121:9122 ioctl c0306201 2000000003c0 returned -14 [ 485.021556][ T1457] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.021694][ T1457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.458079][ T9139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.794'. [ 486.910826][ T5615] Bluetooth: hci2: command tx timeout [ 487.044096][ T9143] netlink: 68 bytes leftover after parsing attributes in process `syz.0.796'. [ 487.334719][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 487.377971][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 487.380777][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 487.386676][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 487.389377][ T5705] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 487.397992][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 487.539914][ T5705] usb 1-1: Using ep0 maxpacket: 8 [ 487.546610][ T5705] usb 1-1: unable to get BOS descriptor or descriptor too short [ 487.564803][ T5705] usb 1-1: config 4 interface 0 has no altsetting 0 [ 487.573736][ T5705] usb 1-1: string descriptor 0 read error: -22 [ 487.573831][ T5705] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 487.573854][ T5705] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 487.646584][ T5705] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 487.703013][ T5705] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 487.703374][ T5705] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 487.703424][ T5705] usb 1-1: media controller created [ 487.780607][ T5705] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 487.811701][ T5854] usb 3-1: USB disconnect, device number 37 [ 487.985621][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.799'. [ 488.253154][ T5705] usb 1-1: USB disconnect, device number 42 [ 488.306020][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.799'. [ 489.273769][ T5624] Bluetooth: hci2: command tx timeout [ 489.867488][ T5624] Bluetooth: hci1: command tx timeout [ 490.239311][ T9183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.804'. [ 491.329878][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.808'. [ 491.946896][ T5615] Bluetooth: hci1: command tx timeout [ 492.103242][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.808'. [ 492.269276][ T9205] netlink: 68 bytes leftover after parsing attributes in process `syz.0.810'. [ 492.678652][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 493.606858][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 493.611893][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 493.614363][ T9] usb 1-1: config 4 interface 0 has no altsetting 0 [ 493.622505][ T9] usb 1-1: string descriptor 0 read error: -22 [ 493.622603][ T9] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 493.622635][ T9] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 493.662788][ T9] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 493.761764][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 493.762002][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 493.762034][ T9] usb 1-1: media controller created [ 493.808670][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 494.027074][ T5615] Bluetooth: hci1: command tx timeout [ 494.252571][ T9] usb 1-1: USB disconnect, device number 43 [ 494.289534][ T9224] netlink: 24 bytes leftover after parsing attributes in process `syz.1.816'. [ 495.513902][ T9232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.819'. [ 495.744637][ T9232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.819'. [ 495.848942][ T5725] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 496.031452][ T5725] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 496.031488][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.031510][ T5725] usb 1-1: Product: syz [ 496.031524][ T5725] usb 1-1: Manufacturer: syz [ 496.031539][ T5725] usb 1-1: SerialNumber: syz [ 496.106914][ T5615] Bluetooth: hci1: command tx timeout [ 496.332583][ T5705] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 497.018888][ T9] usb 1-1: USB disconnect, device number 44 [ 497.129162][ T9100] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.129246][ T9100] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.129413][ T9100] bridge_slave_0: entered allmulticast mode [ 497.138155][ T9100] bridge_slave_0: entered promiscuous mode [ 497.406863][ T9100] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.406993][ T9100] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.407261][ T9100] bridge_slave_1: entered allmulticast mode [ 497.412084][ T9100] bridge_slave_1: entered promiscuous mode [ 497.787397][ T5705] usb 1-1: Service connection timeout for: 256 [ 497.787453][ T5705] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 498.302220][ T9258] netlink: 68 bytes leftover after parsing attributes in process `syz.0.825'. [ 498.419198][ T5705] ath9k_htc: Failed to initialize the device [ 498.419653][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 498.467023][ T8812] bridge_slave_1: left allmulticast mode [ 498.467071][ T8812] bridge_slave_1: left promiscuous mode [ 498.467367][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.525108][ T9262] netlink: 24 bytes leftover after parsing attributes in process `syz.2.827'. [ 498.620253][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.828'. [ 498.746866][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 498.796066][ T9267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.828'. [ 498.898531][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 498.902280][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 498.904586][ T9] usb 1-1: config 4 interface 0 has no altsetting 0 [ 498.918974][ T9] usb 1-1: string descriptor 0 read error: -22 [ 498.919077][ T9] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 498.919100][ T9] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 498.973706][ T9] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 499.014920][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 499.015343][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 499.015398][ T9] usb 1-1: media controller created [ 499.032867][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 499.377806][ T9] usb 1-1: USB disconnect, device number 45 [ 499.428756][ T8812] bridge_slave_0: left allmulticast mode [ 499.428796][ T8812] bridge_slave_0: left promiscuous mode [ 499.429090][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.938187][ T8812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.068863][ T8812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.130055][ T8812] bond0 (unregistering): Released all slaves [ 500.613407][ T9100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.634234][ T9100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.997071][ T9100] team0: Port device team_slave_0 added [ 501.003041][ T9100] team0: Port device team_slave_1 added [ 501.230152][ T8812] hsr_slave_0: left promiscuous mode [ 501.246492][ T8812] hsr_slave_1: left promiscuous mode [ 501.445329][ T8812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.562773][ T8812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.825030][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.825694][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.495275][ T9299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.837'. [ 503.541599][ T9301] netlink: 68 bytes leftover after parsing attributes in process `syz.2.838'. [ 504.312886][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 504.622831][ T8812] team0 (unregistering): Port device team_slave_1 removed [ 504.649920][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 504.652499][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 504.653804][ T9] usb 3-1: config 4 interface 0 has no altsetting 0 [ 504.657272][ T9] usb 3-1: string descriptor 0 read error: -22 [ 504.657366][ T9] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 504.657389][ T9] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 504.682010][ T9] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 504.715188][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 504.717748][ T8812] team0 (unregistering): Port device team_slave_0 removed [ 504.746473][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 504.746545][ T9] usb 3-1: media controller created [ 504.870003][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.842'. [ 504.937985][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 505.036903][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 505.093673][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.842'. [ 505.196049][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.196080][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 505.196103][ T10] usb 1-1: config 1 has no interface number 0 [ 505.196152][ T10] usb 1-1: config 1 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 505.196179][ T10] usb 1-1: config 1 interface 2 has no altsetting 0 [ 505.201090][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 505.201120][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.201139][ T10] usb 1-1: Product: syz [ 505.201153][ T10] usb 1-1: Manufacturer: syz [ 505.201166][ T10] usb 1-1: SerialNumber: syz [ 505.357751][ T5625] usb 3-1: USB disconnect, device number 38 [ 505.799712][ T9100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.799731][ T9100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.799763][ T9100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.083568][ T9100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.083588][ T9100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.083613][ T9100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.334433][ T10] usb 1-1: USB disconnect, device number 46 [ 507.503115][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 507.833259][ T9144] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.847454][ T9144] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.848101][ T9144] bridge_slave_0: entered allmulticast mode [ 507.851416][ T9144] bridge_slave_0: entered promiscuous mode [ 507.889293][ T9100] hsr_slave_0: entered promiscuous mode [ 507.890862][ T9100] hsr_slave_1: entered promiscuous mode [ 507.892134][ T9100] debugfs: 'hsr0' already exists in 'hsr' [ 507.892162][ T9100] Cannot create hsr debugfs directory [ 507.892974][ T9144] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.893160][ T9144] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.893385][ T9144] bridge_slave_1: entered allmulticast mode [ 508.182440][ T9144] bridge_slave_1: entered promiscuous mode [ 509.057992][ T9360] netlink: 24 bytes leftover after parsing attributes in process `syz.1.849'. [ 509.255529][ T9365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.851'. [ 509.282396][ T9144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.368886][ T9365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.851'. [ 509.400603][ T9144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.844098][ T9144] team0: Port device team_slave_0 added [ 509.891781][ T9144] team0: Port device team_slave_1 added [ 510.013743][ T9382] netlink: 68 bytes leftover after parsing attributes in process `syz.2.854'. [ 510.376139][ T9144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.376160][ T9144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.376190][ T9144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.538517][ T5705] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 511.267316][ T9144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.267336][ T9144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.267368][ T9144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.335821][ T5705] usb 3-1: Using ep0 maxpacket: 8 [ 511.346574][ T5705] usb 3-1: unable to get BOS descriptor or descriptor too short [ 511.359976][ T5705] usb 3-1: config 4 interface 0 has no altsetting 0 [ 511.378338][ T5705] usb 3-1: string descriptor 0 read error: -22 [ 511.378474][ T5705] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 511.378499][ T5705] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 512.140134][ T5705] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 512.163225][ T5705] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 512.163471][ T5705] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 512.163501][ T5705] usb 3-1: media controller created [ 512.250084][ T5705] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 513.278736][ T5705] usb 3-1: USB disconnect, device number 39 [ 513.424596][ T5261] 8021q: adding VLAN 0 to HW filter on device eth6 [ 513.492114][ T9409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.861'. [ 513.545336][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.861'. [ 513.619734][ T9414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.863'. [ 513.772070][ T9144] hsr_slave_0: entered promiscuous mode [ 513.792973][ T9144] hsr_slave_1: entered promiscuous mode [ 513.795365][ T9144] debugfs: 'hsr0' already exists in 'hsr' [ 513.795395][ T9144] Cannot create hsr debugfs directory [ 519.099256][ T9441] netlink: 68 bytes leftover after parsing attributes in process `syz.2.872'. [ 519.347114][ T5625] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 520.897325][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 520.986885][ T5625] usb 3-1: Using ep0 maxpacket: 8 [ 520.989969][ T5625] usb 3-1: unable to get BOS descriptor or descriptor too short [ 520.991750][ T5625] usb 3-1: config 4 interface 0 has no altsetting 0 [ 520.996561][ T5625] usb 3-1: string descriptor 0 read error: -22 [ 520.996682][ T5625] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 521.033154][ T5625] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 521.046821][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 521.082969][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.083034][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 521.083060][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.084913][ T5625] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 521.141531][ T10] usb 1-1: config 0 descriptor?? [ 521.157967][ T5625] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 521.158402][ T5625] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 521.158460][ T5625] usb 3-1: media controller created [ 521.202128][ T5625] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 521.263517][ T10] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 521.651806][ T5854] usb 3-1: USB disconnect, device number 40 [ 521.758539][ T10] gspca_vc032x: reg_r err -32 [ 521.758717][ T10] vc032x 1-1:0.0: probe with driver vc032x failed with error -32 [ 523.180389][ T5625] usb 1-1: USB disconnect, device number 47 [ 524.577158][ T9466] overlayfs: failed to resolve './file0': -2 [ 526.810689][ T9490] netlink: 68 bytes leftover after parsing attributes in process `syz.2.884'. [ 527.063550][ T9500] netlink: 24 bytes leftover after parsing attributes in process `syz.1.885'. [ 527.126873][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 527.279031][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 527.304251][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 527.327011][ T10] usb 3-1: config 4 interface 0 has no altsetting 0 [ 527.360325][ T10] usb 3-1: string descriptor 0 read error: -22 [ 527.360393][ T10] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 527.360408][ T10] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 527.424453][ T10] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 527.445763][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 527.451660][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 527.468677][ T10] usb 3-1: media controller created [ 527.519587][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 527.890345][ T10] usb 3-1: USB disconnect, device number 41 [ 529.786967][ T5854] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 529.872507][ T9526] overlayfs: failed to resolve './file0': -2 [ 531.176841][ T5854] usb 1-1: Using ep0 maxpacket: 32 [ 531.179245][ T5854] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.179272][ T5854] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 531.179350][ T5854] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 531.179379][ T5854] usb 1-1: config 1 interface 0 has no altsetting 1 [ 531.179399][ T5854] usb 1-1: config 1 interface 1 has no altsetting 0 [ 531.184807][ T5854] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 531.184839][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.184861][ T5854] usb 1-1: Product: syz [ 531.184877][ T5854] usb 1-1: Manufacturer: syz [ 531.184892][ T5854] usb 1-1: SerialNumber: syz [ 531.350631][ T5854] usb 1-1: interface 2 not found [ 531.352962][ T5854] usb 1-1: selecting invalid altsetting 0 [ 531.384695][ T5854] usb 1-1: selecting invalid altsetting 0 [ 531.384741][ T5854] usbtest 1-1:1.1: probe with driver usbtest failed with error -22 [ 531.403050][ T5854] usb 1-1: selecting invalid altsetting 0 [ 531.403099][ T5854] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 531.403623][ T5854] usb 1-1: selecting invalid altsetting 0 [ 531.403658][ T5854] snd-ua101 1-1:1.1: probe with driver snd-ua101 failed with error -22 [ 531.877775][ T6031] usb 1-1: USB disconnect, device number 48 [ 533.168007][ T9555] openvswitch: netlink: IP tunnel dst address not specified [ 540.460219][ T9630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.913'. [ 540.574325][ T8812] bridge_slave_1: left allmulticast mode [ 540.574364][ T8812] bridge_slave_1: left promiscuous mode [ 540.574645][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.810065][ T8812] bridge_slave_0: left allmulticast mode [ 540.810105][ T8812] bridge_slave_0: left promiscuous mode [ 540.810379][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.954484][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 540.964336][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 540.997473][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 541.033296][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 541.046017][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 543.227079][ T5615] Bluetooth: hci5: command tx timeout [ 543.318015][ T8812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.417965][ T8812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.480079][ T8812] bond0 (unregistering): Released all slaves [ 543.626092][ T9618] vlan2: entered allmulticast mode [ 543.626112][ T9618] bond0: entered allmulticast mode [ 543.626121][ T9618] bond_slave_0: entered allmulticast mode [ 543.626138][ T9618] bond_slave_1: entered allmulticast mode [ 544.070815][ T9678] overlayfs: failed to resolve './file0': -2 [ 545.317116][ T5615] Bluetooth: hci5: command tx timeout [ 546.918548][ T9695] openvswitch: netlink: IP tunnel dst address not specified [ 547.508715][ T5615] Bluetooth: hci5: command tx timeout [ 547.602463][ T8812] hsr_slave_0: left promiscuous mode [ 547.646739][ T8812] hsr_slave_1: left promiscuous mode [ 547.647887][ T8812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.670884][ T8812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.208761][ T8812] team0 (unregistering): Port device team_slave_1 removed [ 548.297075][ T5615] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 548.339169][ T8812] team0 (unregistering): Port device team_slave_0 removed [ 548.339991][ T5615] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 548.368705][ T5615] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 548.378322][ T5615] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 548.392558][ T5615] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 549.550061][ T5615] Bluetooth: hci5: command tx timeout [ 550.426982][ T5615] Bluetooth: hci6: command tx timeout [ 552.507068][ T5615] Bluetooth: hci6: command tx timeout [ 553.240449][ T9100] netdevsim netdevsim6: probe with driver netdevsim failed with error -12 [ 554.586914][ T5615] Bluetooth: hci6: command tx timeout [ 554.955987][ T9638] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.956137][ T9638] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.956396][ T9638] bridge_slave_0: entered allmulticast mode [ 555.007774][ T9638] bridge_slave_0: entered promiscuous mode [ 556.667291][ T5615] Bluetooth: hci6: command tx timeout [ 557.069468][ T9638] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.069547][ T9638] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.069777][ T9638] bridge_slave_1: entered allmulticast mode [ 557.071795][ T9638] bridge_slave_1: entered promiscuous mode [ 557.962355][ T1457] bridge_slave_1: left allmulticast mode [ 557.962398][ T1457] bridge_slave_1: left promiscuous mode [ 557.962699][ T1457] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.368961][ T1457] bridge_slave_0: left allmulticast mode [ 558.369003][ T1457] bridge_slave_0: left promiscuous mode [ 558.369293][ T1457] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.875156][ T9836] overlayfs: failed to resolve './file0': -2 [ 562.091861][ T1457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.059201][ T1457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.149595][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.149678][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.639636][ T1457] bond0 (unregistering): Released all slaves [ 563.995369][ T9856] vlan2: entered allmulticast mode [ 563.995394][ T9856] bond0: entered allmulticast mode [ 563.995408][ T9856] bond_slave_0: entered allmulticast mode [ 563.995436][ T9856] bond_slave_1: entered allmulticast mode [ 564.167849][ T9638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.310486][ T9638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.545703][ T1457] hsr_slave_0: left promiscuous mode [ 564.561106][ T1457] hsr_slave_1: left promiscuous mode [ 564.562343][ T1457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.819579][ T1457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.926417][ T9869] overlayfs: overlapping lowerdir path [ 567.294894][ T9889] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 567.294922][ T9889] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 567.294934][ T9889] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 568.248976][ T1457] team0 (unregistering): Port device team_slave_1 removed [ 568.380646][ T1457] team0 (unregistering): Port device team_slave_0 removed [ 569.158556][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.976'. [ 570.614464][ T9638] team0: Port device team_slave_0 added [ 570.676247][ T9638] team0: Port device team_slave_1 added [ 571.052779][ T9701] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.055170][ T9701] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.055411][ T9701] bridge_slave_0: entered allmulticast mode [ 571.080925][ T9701] bridge_slave_0: entered promiscuous mode [ 571.084474][ T9638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.084491][ T9638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.084521][ T9638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.142054][ T9638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.142073][ T9638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.142104][ T9638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.214874][ T9701] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.215134][ T9701] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.215367][ T9701] bridge_slave_1: entered allmulticast mode [ 571.240596][ T9701] bridge_slave_1: entered promiscuous mode [ 571.365032][ T9701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.390863][ T9638] hsr_slave_0: entered promiscuous mode [ 571.392340][ T9638] hsr_slave_1: entered promiscuous mode [ 571.395457][ T9638] debugfs: 'hsr0' already exists in 'hsr' [ 571.395486][ T9638] Cannot create hsr debugfs directory [ 571.555762][ T9701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.604099][ T9931] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 571.604127][ T9931] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 571.604139][ T9931] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 571.659578][ T9928] 9p: Could not find request transport: fd00000000000000000003 [ 572.413284][ T9701] team0: Port device team_slave_0 added [ 573.014806][ T9701] team0: Port device team_slave_1 added [ 573.532272][ T9701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.532293][ T9701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.532322][ T9701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.609119][ T9701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.609158][ T9701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.609190][ T9701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.656953][ T5732] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 573.813631][ T5732] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 573.813726][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.813749][ T5732] usb 1-1: Product: syz [ 573.813765][ T5732] usb 1-1: Manufacturer: syz [ 573.813780][ T5732] usb 1-1: SerialNumber: syz [ 573.944540][ T5705] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 574.357750][ T1457] bridge_slave_1: left allmulticast mode [ 574.357800][ T1457] bridge_slave_1: left promiscuous mode [ 574.359466][ T1457] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.377176][ T6031] usb 1-1: USB disconnect, device number 49 [ 575.381072][ T5705] usb 1-1: Service connection timeout for: 256 [ 575.381096][ T5705] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 575.470248][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 575.927127][ T5705] ath9k_htc: Failed to initialize the device [ 575.927644][ T6031] usb 1-1: ath9k_htc: USB layer deinitialized [ 575.980807][ T1457] bridge_slave_0: left allmulticast mode [ 575.980849][ T1457] bridge_slave_0: left promiscuous mode [ 575.981133][ T1457] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.656277][ T9970] 9p: Could not find request transport: fd00000000000000000003 [ 577.777088][ T5625] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 577.796450][ T9976] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 577.796476][ T9976] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 577.796488][ T9976] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 577.966924][ T5625] usb 2-1: Using ep0 maxpacket: 32 [ 577.969418][ T5625] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.969446][ T5625] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 577.969516][ T5625] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 577.969546][ T5625] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 577.969566][ T5625] usb 2-1: config 1 interface 0 has no altsetting 1 [ 577.969586][ T5625] usb 2-1: config 1 interface 1 has no altsetting 0 [ 577.972708][ T5625] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 577.972738][ T5625] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.972759][ T5625] usb 2-1: Product: syz [ 577.972775][ T5625] usb 2-1: Manufacturer: syz [ 577.972790][ T5625] usb 2-1: SerialNumber: syz [ 578.083259][ T5625] usb 2-1: interface 2 not found [ 578.083308][ T5625] usb 2-1: selecting invalid altsetting 0 [ 578.102910][ T5625] usb 2-1: selecting invalid altsetting 0 [ 578.102936][ T5625] usbtest 2-1:1.1: probe with driver usbtest failed with error -22 [ 578.104028][ T5625] usb 2-1: selecting invalid altsetting 0 [ 578.104051][ T5625] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 578.104316][ T5625] usb 2-1: selecting invalid altsetting 0 [ 578.104334][ T5625] snd-ua101 2-1:1.1: probe with driver snd-ua101 failed with error -22 [ 578.288798][ T5625] usb 2-1: USB disconnect, device number 39 [ 578.368892][ T1457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.448087][ T1457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.516154][ T1457] bond0 (unregistering): Released all slaves [ 578.764833][ T9701] hsr_slave_0: entered promiscuous mode [ 578.876901][ T9701] hsr_slave_1: entered promiscuous mode [ 578.878058][ T9701] debugfs: 'hsr0' already exists in 'hsr' [ 578.878086][ T9701] Cannot create hsr debugfs directory [ 580.108660][ T1457] hsr_slave_0: left promiscuous mode [ 580.162961][ T1457] hsr_slave_1: left promiscuous mode [ 580.164093][ T1457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.472836][ T1457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.626880][ T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 582.776912][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 582.781576][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 582.807849][ T10] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 582.807884][ T10] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 582.807904][ T10] usb 1-1: Product: syz [ 582.807925][ T10] usb 1-1: Manufacturer: syz [ 582.807940][ T10] usb 1-1: SerialNumber: syz [ 583.068114][ T1457] team0 (unregistering): Port device team_slave_1 removed [ 583.095074][ T10] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 583.095102][ T10] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 583.095123][ T10] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 583.095141][ T10] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 583.147052][ T5854] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 583.211810][ T1457] team0 (unregistering): Port device team_slave_0 removed [ 583.295866][ T10] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 583.296058][ T10] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 583.319442][ T5854] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.319470][ T5854] usb 2-1: config 0 has no interfaces? [ 583.319499][ T5854] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 583.319521][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.355767][ T5854] usb 2-1: config 0 descriptor?? [ 583.422574][ T10] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 583.462176][ T10] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 583.494064][ T10] usb 1-1: USB disconnect, device number 50 [ 583.526182][ T10] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 583.560135][ T10] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 583.563432][ T10] visor 1-1:1.0: device disconnected [ 583.572496][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1007'. [ 583.597680][ T5625] usb 2-1: USB disconnect, device number 40 [ 583.738923][T10015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1007'. [ 585.715901][T10034] overlayfs: failed to resolve './file0': -2 [ 588.289267][ T9638] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 588.646448][ T9638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 588.756100][T10045] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1014'. [ 589.266621][ T9638] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 589.943577][ T9638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 589.970815][T10047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1016'. [ 589.971070][ T9638] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 590.043299][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1017'. [ 590.061390][ T9638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 590.094187][ T9638] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 590.131446][ T9638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 590.204757][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1017'. [ 590.626981][ T6031] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 590.708367][ T9701] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 590.750863][ T9701] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 590.752949][ T9701] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 590.808479][ T6031] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 590.808520][ T6031] usb 2-1: can't read configurations, error -61 [ 590.823070][ T9701] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 590.836976][ T5625] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 590.850821][ T9701] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 590.936906][ T6031] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 591.082610][ T9701] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 591.084757][ T9701] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 591.087020][ T5625] usb 1-1: Using ep0 maxpacket: 8 [ 591.089333][ T5625] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 591.093058][ T5625] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 591.093091][ T5625] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 591.093113][ T5625] usb 1-1: Product: syz [ 591.093128][ T5625] usb 1-1: Manufacturer: syz [ 591.093143][ T5625] usb 1-1: SerialNumber: syz [ 591.258741][ T6031] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 591.259236][ T6031] usb 2-1: can't read configurations, error -61 [ 591.306836][ T6031] usb usb2-port1: attempt power cycle [ 591.747071][ T6031] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 591.780548][ T6031] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 591.780592][ T6031] usb 2-1: can't read configurations, error -61 [ 591.873608][ T9701] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 591.918782][ T6031] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 591.934739][ T5625] usb 1-1: palm_os_3_probe - error -110 getting connection information [ 591.934855][ T5625] visor 1-1:1.0: probe with driver visor failed with error -110 [ 592.031091][ T6031] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 592.031134][ T6031] usb 2-1: can't read configurations, error -61 [ 592.088943][ T6031] usb usb2-port1: unable to enumerate USB device [ 592.294756][T10079] overlayfs: failed to resolve './file0': -2 [ 593.181892][ T9638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.401519][ T9638] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.445471][ T8812] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.445625][ T8812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.506582][ T8812] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.514710][ T8812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.607625][ T9701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.679421][ T9638] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 593.679449][ T9638] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 593.733791][ T5625] usb 1-1: USB disconnect, device number 51 [ 593.766442][ T9701] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.826624][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.865155][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.951772][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1026'. [ 593.993875][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.994081][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.075498][T10092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1026'. [ 594.717138][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1027'. [ 594.796383][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1027'. [ 597.725303][ T9638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.620553][ T9701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.027988][ T6031] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 599.280800][ T9638] veth0_vlan: entered promiscuous mode [ 599.377198][ T6031] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 599.377330][ T6031] usb 1-1: can't read configurations, error -61 [ 599.479381][T10152] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 599.479911][T10152] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 599.479935][T10152] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 599.576935][ T6031] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 600.003992][ T6031] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 600.004038][ T6031] usb 1-1: can't read configurations, error -61 [ 600.004457][ T6031] usb usb1-port1: attempt power cycle [ 600.230247][ T9638] veth1_vlan: entered promiscuous mode [ 600.341634][T10154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1037'. [ 600.346883][ T6031] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 600.386290][ T6031] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 600.386330][ T6031] usb 1-1: can't read configurations, error -61 [ 600.453944][T10158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1037'. [ 600.526850][ T6031] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 600.551650][ T6031] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 600.551702][ T6031] usb 1-1: can't read configurations, error -61 [ 600.552133][ T6031] usb usb1-port1: unable to enumerate USB device [ 601.542349][ T5615] Bluetooth: hci3: unexpected event for opcode 0x201c [ 601.638689][ T9701] veth0_vlan: entered promiscuous mode [ 601.729904][ T9701] veth1_vlan: entered promiscuous mode [ 602.597793][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 602.672734][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 602.677449][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 602.683756][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 602.705319][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 602.911409][ T9701] veth0_macvtap: entered promiscuous mode [ 602.920525][ T9701] veth1_macvtap: entered promiscuous mode [ 603.254029][ T9701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.365147][ T9701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.459039][ T8812] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.470841][ T1473] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.470907][ T1473] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.470948][ T1473] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.363261][ T5615] Bluetooth: hci1: command tx timeout [ 605.937754][ T6031] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 606.130163][ T6031] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 606.130207][ T6031] usb 1-1: can't read configurations, error -61 [ 606.366898][ T6031] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 606.540500][ T6031] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 606.540539][ T6031] usb 1-1: can't read configurations, error -61 [ 606.558493][ T6031] usb usb1-port1: attempt power cycle [ 607.018321][ T6031] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 607.069706][ T6031] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 607.069751][ T6031] usb 1-1: can't read configurations, error -61 [ 607.161154][ T1473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.161178][ T1473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.219636][ T6031] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 607.254488][ T6031] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 607.254526][ T6031] usb 1-1: can't read configurations, error -61 [ 607.255055][ T6031] usb usb1-port1: unable to enumerate USB device [ 607.547297][ T5615] Bluetooth: hci1: command tx timeout [ 607.634519][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1050'. [ 607.769993][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1050'. [ 609.082487][T10231] overlayfs: failed to resolve './file0': -2 [ 610.035087][ T5615] Bluetooth: hci1: command tx timeout [ 610.061162][T10236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1055'. [ 611.513548][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 611.579260][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 611.585658][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 611.591263][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 611.594965][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 611.834070][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1060'. [ 612.106877][ T5615] Bluetooth: hci1: command tx timeout [ 612.748056][T10265] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 612.749645][T10265] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 612.749665][T10265] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 613.230639][T10274] overlayfs: failed to resolve './file0': -2 [ 613.286526][ T10] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 613.891732][ T5615] Bluetooth: hci2: command tx timeout [ 614.284303][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.284333][ T10] usb 1-1: config 0 has no interfaces? [ 614.284366][ T10] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 614.284391][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.321374][ T10] usb 1-1: config 0 descriptor?? [ 614.556254][ T9] usb 1-1: USB disconnect, device number 60 [ 615.294582][T10289] comedi comedi3: pcl816: I/O port conflict (0x100,16) [ 616.280819][ T5615] Bluetooth: hci2: command tx timeout [ 616.321933][T10178] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.322514][T10178] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.462382][T10178] bridge_slave_0: entered allmulticast mode [ 616.749872][T10178] bridge_slave_0: entered promiscuous mode [ 617.710331][T10178] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.710470][T10178] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.710710][T10178] bridge_slave_1: entered allmulticast mode [ 617.745276][T10178] bridge_slave_1: entered promiscuous mode [ 617.879274][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1069'. [ 617.886889][ T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 618.051252][T10281] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 618.051281][T10281] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 618.051307][T10281] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 618.074633][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 618.074670][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 618.074708][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 618.074731][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.120742][T10296] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 618.268460][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 618.291717][T10281] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 618.334175][T10178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.350710][ T5615] Bluetooth: hci2: command tx timeout [ 618.356002][T10281] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 618.543869][T10301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1070'. [ 618.806240][T10178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.446341][ T9] usb 1-1: USB disconnect, device number 61 [ 620.582391][ T5615] Bluetooth: hci2: command tx timeout [ 620.949394][T10178] team0: Port device team_slave_0 added [ 621.115104][T10178] team0: Port device team_slave_1 added [ 621.667091][ T8812] bridge_slave_1: left allmulticast mode [ 621.667133][ T8812] bridge_slave_1: left promiscuous mode [ 621.667444][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.784661][ T8812] bridge_slave_0: left allmulticast mode [ 621.784702][ T8812] bridge_slave_0: left promiscuous mode [ 621.785013][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.916958][T10319] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 622.917020][T10319] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 622.917566][T10319] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 624.126974][ T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 624.278948][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.278979][ T10] usb 3-1: config 0 has no interfaces? [ 624.279020][ T10] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 624.279038][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.284306][ T10] usb 3-1: config 0 descriptor?? [ 624.387488][ T8812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.468179][ T8812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.490612][ T8812] bond0 (unregistering): Released all slaves [ 624.491782][ T6031] usb 3-1: USB disconnect, device number 42 [ 624.585391][T10178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.585405][T10178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.585422][T10178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.600874][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.600967][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.973932][T10178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.973946][T10178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.973964][T10178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.123320][T10328] comedi comedi3: pcl816: I/O port conflict (0x100,16) [ 625.732025][T10330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1078'. [ 629.982201][T10343] 9p: Bad value for 'rfdno' [ 630.197350][ T8812] hsr_slave_0: left promiscuous mode [ 630.236978][ T8812] hsr_slave_1: left promiscuous mode [ 630.238115][ T8812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.292612][ T8812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.541286][T10353] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 630.541403][T10353] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 630.541565][T10353] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 631.517441][ T8812] veth1_vlan: left promiscuous mode [ 631.517577][ T8812] veth0_vlan: left promiscuous mode [ 632.186836][ T5725] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 632.240069][T10367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1087'. [ 632.347219][ T5725] usb 2-1: Using ep0 maxpacket: 8 [ 632.350830][ T5725] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 632.355060][ T5725] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 632.355094][ T5725] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 632.355116][ T5725] usb 2-1: Product: syz [ 632.355132][ T5725] usb 2-1: Manufacturer: syz [ 632.355147][ T5725] usb 2-1: SerialNumber: syz [ 632.617758][ T5725] usb 2-1: Invalid connection information received from device [ 632.935691][ T10] usb 2-1: USB disconnect, device number 45 [ 633.417440][ T8812] team0 (unregistering): Port device team_slave_1 removed [ 633.457571][ T8812] team0 (unregistering): Port device team_slave_0 removed [ 633.547314][ T6031] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 633.710857][T10379] comedi comedi3: pcl816: I/O port conflict (0x100,16) [ 633.792404][ T6031] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.792443][ T6031] usb 1-1: config 0 has no interfaces? [ 633.792613][ T6031] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 633.792677][ T6031] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.396390][ T6031] usb 1-1: config 0 descriptor?? [ 635.779351][ T6031] usb 1-1: USB disconnect, device number 62 [ 636.740807][T10178] hsr_slave_0: entered promiscuous mode [ 636.755668][T10178] hsr_slave_1: entered promiscuous mode [ 636.769064][T10178] debugfs: 'hsr0' already exists in 'hsr' [ 636.769095][T10178] Cannot create hsr debugfs directory [ 636.780360][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 642.656890][ T10] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 642.851567][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 642.892735][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 642.893946][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.893974][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 642.894026][ T10] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 642.896238][ T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=4244, bcdDevice= 0.40 [ 642.896267][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.896279][ T10] usb 1-1: Product: syz [ 642.896288][ T10] usb 1-1: Manufacturer: syz [ 642.896296][ T10] usb 1-1: SerialNumber: syz [ 643.286046][ T10] usb 1-1: 0:2 : does not exist [ 643.311018][ T10] usb 1-1: unknown interface protocol 0x1, assuming v1 [ 643.311047][ T10] usb 1-1: cannot find UAC_HEADER [ 643.709422][ T10] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 643.752631][ T10] usb 1-1: USB disconnect, device number 63 [ 645.559246][ T5261] 8021q: adding VLAN 0 to HW filter on device eth6 [ 645.561755][T10247] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.562010][T10247] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.562236][T10247] bridge_slave_0: entered allmulticast mode [ 645.637686][T10442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1101'. [ 645.666490][ T9401] udevd[9401]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 645.834639][T10247] bridge_slave_0: entered promiscuous mode [ 645.874877][T10247] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.875107][T10247] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.875332][T10247] bridge_slave_1: entered allmulticast mode [ 645.906243][T10247] bridge_slave_1: entered promiscuous mode [ 646.752222][T10247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.766746][T10247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.860534][ T10] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 647.339361][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.339395][ T10] usb 1-1: config 0 has no interfaces? [ 647.339429][ T10] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 647.339456][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.602414][T10455] ISOFS: Unable to identify CD-ROM format. [ 648.341111][ T10] usb 1-1: config 0 descriptor?? [ 649.206360][T10247] team0: Port device team_slave_0 added [ 649.380182][ T10] usb 1-1: can't set config #0, error -71 [ 649.408848][ T10] usb 1-1: USB disconnect, device number 64 [ 649.684192][T10247] team0: Port device team_slave_1 added [ 650.376614][T10479] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5605] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[10479] [ 651.903882][ T8812] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.380561][T10492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1111'. [ 652.494005][T10247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.494024][T10247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.494050][T10247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.562993][T10247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.563015][T10247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.563046][T10247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.946108][T10499] ISOFS: Unable to identify CD-ROM format. [ 654.686875][ T6190] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 654.820782][T10247] hsr_slave_0: entered promiscuous mode [ 654.823326][T10247] hsr_slave_1: entered promiscuous mode [ 654.826948][T10247] debugfs: 'hsr0' already exists in 'hsr' [ 654.826976][T10247] Cannot create hsr debugfs directory [ 654.850248][ T6190] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.850278][ T6190] usb 1-1: config 0 has no interfaces? [ 654.850308][ T6190] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 654.850333][ T6190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.906268][ T6190] usb 1-1: config 0 descriptor?? [ 655.121867][ T5332] usb 1-1: USB disconnect, device number 65 [ 655.428376][ T8812] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.323355][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1122'. [ 658.892120][ T8812] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.416870][ T5854] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 660.581575][ T5854] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 660.581606][ T5854] usb 3-1: config 0 has no interfaces? [ 660.581653][ T5854] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 660.581680][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.648494][ T5854] usb 3-1: config 0 descriptor?? [ 660.858540][ T5854] usb 3-1: USB disconnect, device number 43 [ 661.011418][ T8812] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.106835][ T10] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 661.256834][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 661.259947][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 661.259984][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 661.296331][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 661.296364][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.296385][ T10] usb 2-1: Product: syz [ 661.296399][ T10] usb 2-1: Manufacturer: syz [ 661.296414][ T10] usb 2-1: SerialNumber: syz [ 661.341332][ T10] usb 2-1: config 0 descriptor?? [ 661.361948][ T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 661.361989][ T10] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 661.434718][T10608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1132'. [ 661.973662][ T10] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 662.020194][ T10] em28xx 2-1:0.0: Config register raw data: 0x11 [ 662.227645][ T10] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 662.227671][ T10] em28xx 2-1:0.0: No AC97 audio processor [ 662.262978][ T10] usb 2-1: USB disconnect, device number 46 [ 662.274064][ T10] em28xx 2-1:0.0: Disconnecting em28xx [ 662.337528][ T10] em28xx 2-1:0.0: Freeing device [ 662.571508][ T8812] bridge_slave_1: left allmulticast mode [ 662.571549][ T8812] bridge_slave_1: left promiscuous mode [ 662.571839][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.595149][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 663.631709][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 663.660917][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 663.685112][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 664.019611][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 664.030209][ T8812] bridge_slave_0: left allmulticast mode [ 664.030244][ T8812] bridge_slave_0: left promiscuous mode [ 664.030491][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.605248][T10653] comedi comedi3: pcl816: I/O port conflict (0x100,16) [ 668.188323][ T5624] Bluetooth: hci5: command tx timeout [ 668.886819][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 669.160895][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.160936][ T10] usb 2-1: config 0 has no interfaces? [ 669.160969][ T10] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 669.160995][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.407879][T10675] ISOFS: Unable to identify CD-ROM format. [ 669.933728][ T10] usb 2-1: config 0 descriptor?? [ 670.037578][ T8812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 670.080199][ T5615] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 670.086177][ T5615] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 670.090188][ T5615] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 670.098998][ T8812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 670.124758][ T5615] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 670.125522][ T5615] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 670.144976][ T10] usb 2-1: USB disconnect, device number 47 [ 670.182923][ T8812] bond0 (unregistering): Released all slaves [ 670.277789][ T8305] Bluetooth: hci5: command tx timeout [ 670.477439][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 670.769176][T10689] 9p: Bad value for 'rfdno' [ 671.347765][ T6031] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 671.499067][ T6031] usb 2-1: Using ep0 maxpacket: 32 [ 671.504750][ T6031] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 671.504784][ T6031] usb 2-1: config 0 has no interface number 0 [ 671.504835][ T6031] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 671.504861][ T6031] usb 2-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 671.510480][ T6031] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 671.510512][ T6031] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.510530][ T6031] usb 2-1: Product: syz [ 671.510545][ T6031] usb 2-1: Manufacturer: syz [ 671.510561][ T6031] usb 2-1: SerialNumber: syz [ 671.532142][ T6031] usb 2-1: config 0 descriptor?? [ 671.571923][ T6031] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 671.668144][T10708] comedi comedi3: pcl816: I/O port conflict (0x100,16) [ 671.793983][ T6031] usb 2-1: qt2_setup_urbs - submit read urb failed -90 [ 671.799145][ T6031] quatech2 2-1:0.51: probe with driver quatech2 failed with error -90 [ 672.346882][ T5615] Bluetooth: hci6: command tx timeout [ 672.347313][ T5615] Bluetooth: hci5: command tx timeout [ 672.532525][ T6031] usb 2-1: USB disconnect, device number 48 [ 674.426946][ T5615] Bluetooth: hci6: command tx timeout [ 674.426986][ T5615] Bluetooth: hci5: command tx timeout [ 676.437778][ T6190] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 676.508605][ T5624] Bluetooth: hci6: command tx timeout [ 676.600962][ T6190] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.600992][ T6190] usb 3-1: config 0 has no interfaces? [ 676.601022][ T6190] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 676.601046][ T6190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.633378][ T6190] usb 3-1: config 0 descriptor?? [ 676.842111][ T10] usb 3-1: USB disconnect, device number 44 [ 678.614968][ T5624] Bluetooth: hci6: command tx timeout [ 681.300792][T10782] comedi comedi3: pcl816: I/O port conflict (0x100,16) [ 682.418328][ T8812] hsr_slave_0: left promiscuous mode [ 682.456960][ T8812] hsr_slave_1: left promiscuous mode [ 682.458167][ T8812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.458196][ T8812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.512807][ T8812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.512830][ T8812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.567060][ T6190] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 682.586042][ T8812] veth1_macvtap: left promiscuous mode [ 682.586115][ T8812] veth0_macvtap: left promiscuous mode [ 682.586342][ T8812] veth1_vlan: left promiscuous mode [ 682.586500][ T8812] veth0_vlan: left promiscuous mode [ 682.730902][ T6190] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.730934][ T6190] usb 2-1: config 0 has no interfaces? [ 682.730966][ T6190] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 682.730989][ T6190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.736480][ T6190] usb 2-1: config 0 descriptor?? [ 682.946876][ T5854] usb 2-1: USB disconnect, device number 49 [ 683.692749][T10801] ISOFS: Unable to identify CD-ROM format. [ 684.327590][ T8812] team0 (unregistering): Port device team_slave_1 removed [ 684.417532][ T8812] team0 (unregistering): Port device team_slave_0 removed [ 686.065389][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.067349][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.182181][T10178] netdevsim netdevsim6: probe with driver netdevsim failed with error -12 [ 694.009107][T10866] ISOFS: Unable to identify CD-ROM format. [ 695.172176][T10880] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 697.935381][T10677] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.936232][T10677] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.936414][T10677] bridge_slave_0: entered allmulticast mode [ 698.014793][T10677] bridge_slave_0: entered promiscuous mode [ 698.070993][T10677] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.071123][T10677] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.071355][T10677] bridge_slave_1: entered allmulticast mode [ 698.088514][T10677] bridge_slave_1: entered promiscuous mode [ 698.734601][T10931] dummy_hcd dummy_hcd.0: remove, state 4 [ 698.735180][T10931] usb usb1: USB disconnect, device number 1 [ 698.865903][ T8812] bridge_slave_1: left allmulticast mode [ 698.865946][ T8812] bridge_slave_1: left promiscuous mode [ 698.866248][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.587131][T10931] dummy_hcd dummy_hcd.0: stopped [ 699.587157][T10931] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 699.782031][ T8812] bridge_slave_0: left allmulticast mode [ 699.782073][ T8812] bridge_slave_0: left promiscuous mode [ 699.782404][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.097369][ T8812] bridge_slave_1: left allmulticast mode [ 700.097409][ T8812] bridge_slave_1: left promiscuous mode [ 700.097728][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.280456][ T8812] bridge_slave_0: left allmulticast mode [ 700.280498][ T8812] bridge_slave_0: left promiscuous mode [ 700.280805][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.085891][ T8812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 701.178541][ T8812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 701.240983][ T8812] bond0 (unregistering): Released all slaves [ 701.578677][ T8812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 701.657571][ T8812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 701.721724][ T8812] bond0 (unregistering): Released all slaves [ 701.771337][T10677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.887216][T10677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.908054][T10633] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.908747][T10633] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.908995][T10633] bridge_slave_0: entered allmulticast mode [ 701.939457][T10633] bridge_slave_0: entered promiscuous mode [ 701.991341][T10633] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.992916][T10633] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.993128][T10633] bridge_slave_1: entered allmulticast mode [ 701.996250][T10633] bridge_slave_1: entered promiscuous mode [ 702.239278][T10677] team0: Port device team_slave_0 added [ 702.350311][T10677] team0: Port device team_slave_1 added [ 702.354769][T10633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.424032][T10633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.523531][T10677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.523553][T10677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.523583][T10677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.604431][T10677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.604453][T10677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.604485][T10677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.660397][T10633] team0: Port device team_slave_0 added [ 702.693094][T10633] team0: Port device team_slave_1 added [ 702.846997][T10633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.847017][T10633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.847045][T10633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.534997][T10633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.535017][T10633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.535047][T10633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.771241][T10677] hsr_slave_0: entered promiscuous mode [ 706.772821][T10677] hsr_slave_1: entered promiscuous mode [ 706.774101][T10677] debugfs: 'hsr0' already exists in 'hsr' [ 706.774128][T10677] Cannot create hsr debugfs directory [ 707.387327][ T5332] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 707.567056][ T5332] usb 3-1: Using ep0 maxpacket: 32 [ 707.652585][ T5332] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 707.653021][ T5332] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 707.653079][ T5332] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 707.653130][ T5332] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 708.187821][T11004] overlayfs: failed to resolve './file0': -2 [ 708.386310][ T8812] hsr_slave_0: left promiscuous mode [ 708.708453][ T8812] hsr_slave_1: left promiscuous mode [ 708.949522][ T5332] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 708.949560][ T5332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.949580][ T5332] usb 3-1: Product: syz [ 708.949594][ T5332] usb 3-1: Manufacturer: syz [ 708.949607][ T5332] usb 3-1: SerialNumber: syz [ 709.082071][ T8812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.097886][ T8812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.114022][ T5332] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 709.114164][ T5332] imon 3-1:155.0: unable to initialize intf0, err -19 [ 709.114183][ T5332] imon:imon_probe: failed to initialize context! [ 709.114194][ T5332] imon 3-1:155.0: unable to register, err -19 [ 709.280918][T11013] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASA[ 709.280918][T11013] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 709.281060][T11013] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 709.281083][T11013] CPU: 1 UID: 0 PID: 11013 Comm: syz.0.1226 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 709.281109][T11013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 709.281122][T11013] RIP: 0010:dummy_udc_start+0xd0/0x1f0 [ 709.281302][T11013] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 93 00 00 00 e8 95 12 98 fa eb 0c e8 8e 12 98 fa eb 05 e8 87 12 98 fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 01 86 01 fb 4d 8b 36 4c 89 f7 e8 [ 709.281323][T11013] RSP: 0018:ffffc90003e2f830 EFLAGS: 00010246 [ 709.281370][T11013] RAX: 0000000000000000 RBX: ffff88805eb3c090 RCX: 0000000000080000 [ 709.281387][T11013] RDX: ffffc90005359000 RSI: 0000000000001ab2 RDI: 0000000000001ab3 [ 709.281402][T11013] RBP: ffff88802aed0000 R08: ffff888031a98000 R09: 0000000000000004 [ 709.281418][T11013] R10: 0000000000000100 R11: 0000000000000005 R12: dffffc0000000000 [ 709.281433][T11013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 709.281448][T11013] FS: 00007fe4505e66c0(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 709.281468][T11013] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 709.281484][T11013] CR2: 000000110c2ab3a4 CR3: 0000000036100000 CR4: 00000000003526f0 [ 709.281505][T11013] Call Trace: [ 709.281536][T11013] [ 709.281590][T11013] ? __pfx_dummy_udc_start+0x10/0x10 [ 709.281658][T11013] gadget_bind_driver+0x3a8/0x9e0 [ 709.281814][T11013] ? __pfx_gadget_bind_driver+0x10/0x10 [ 709.281844][T11013] really_probe+0x254/0xae0 [ 709.281958][T11013] __driver_probe_device+0x1e8/0x360 [ 709.281993][T11013] driver_probe_device+0x4f/0x240 [ 709.282027][T11013] __driver_attach+0x339/0x600 [ 709.282060][T11013] bus_for_each_dev+0x23e/0x2c0 [ 709.282084][T11013] ? __pfx___driver_attach+0x10/0x10 [ 709.282115][T11013] ? __pfx_bus_for_each_dev+0x10/0x10 [ 709.282137][T11013] ? rt_spin_unlock+0x157/0x200 [ 709.282229][T11013] ? rt_spin_unlock+0x163/0x200 [ 709.282252][T11013] bus_add_driver+0x348/0x670 [ 709.282281][T11013] driver_register+0x23a/0x320 [ 709.282303][T11013] usb_gadget_register_driver_owner+0xf9/0x270 [ 709.282339][T11013] raw_ioctl+0x1503/0x40d0 [ 709.282432][T11013] ? tomoyo_path_number_perm+0x219/0x5f0 [ 709.282515][T11013] ? do_vfs_ioctl+0x1184/0x1550 [ 709.282610][T11013] ? __pfx_raw_ioctl+0x10/0x10 [ 709.282637][T11013] ? handle_mm_fault+0x1326/0x13f0 [ 709.282701][T11013] ? hook_file_ioctl+0x1f3/0x600 [ 709.282811][T11013] ? __asan_memset+0x22/0x50 [ 709.282893][T11013] ? smack_file_ioctl+0x263/0x360 [ 709.282936][T11013] ? __pfx_smack_file_ioctl+0x10/0x10 [ 709.282963][T11013] ? __fget_files+0x2a/0x420 [ 709.283007][T11013] ? __fget_files+0x3a8/0x420 [ 709.283029][T11013] ? __fget_files+0x2a/0x420 [ 709.283054][T11013] ? bpf_lsm_file_ioctl+0x9/0x20 [ 709.283129][T11013] ? __pfx_raw_ioctl+0x10/0x10 [ 709.283154][T11013] __se_sys_ioctl+0xff/0x170 [ 709.283184][T11013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.283237][T11013] do_syscall_64+0x174/0x580 [ 709.283307][T11013] ? trace_irq_disable+0x3b/0x140 [ 709.283367][T11013] ? clear_bhb_loop+0x40/0x90 [ 709.283391][T11013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.283412][T11013] RIP: 0033:0x7fe45238dcab [ 709.283432][T11013] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 709.283451][T11013] RSP: 002b:00007fe4505e3f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 709.283475][T11013] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fe45238dcab [ 709.283490][T11013] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 709.283503][T11013] RBP: 00007fe4505e4fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 709.283517][T11013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 709.283530][T11013] R13: 0000200000000700 R14: 0000000000000000 R15: 0000000000000000 [ 709.283551][T11013] [ 709.283559][T11013] Modules linked in: [ 709.283601][T11013] ---[ end trace 0000000000000000 ]--- [ 709.296514][T11013] RIP: 0010:dummy_udc_start+0xd0/0x1f0 [ 709.296555][T11013] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 93 00 00 00 e8 95 12 98 fa eb 0c e8 8e 12 98 fa eb 05 e8 87 12 98 fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 01 86 01 fb 4d 8b 36 4c 89 f7 e8 [ 709.296572][T11013] RSP: 0018:ffffc90003e2f830 EFLAGS: 00010246 [ 709.296592][T11013] RAX: 0000000000000000 RBX: ffff88805eb3c090 RCX: 0000000000080000 [ 709.296606][T11013] RDX: ffffc90005359000 RSI: 0000000000001ab2 RDI: 0000000000001ab3 [ 709.297599][T11013] RBP: ffff88802aed0000 R08: ffff888031a98000 R09: 0000000000000004 [ 709.297616][T11013] R10: 0000000000000100 R11: 0000000000000005 R12: dffffc0000000000 [ 709.297629][T11013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 709.297641][T11013] FS: 00007fe4505e66c0(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 709.297658][T11013] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 709.297672][T11013] CR2: 00007fe452377180 CR3: 0000000036100000 CR4: 00000000003526f0 [ 709.297750][T11013] Kernel panic - not syncing: Fatal exception [ 709.298104][T11013] Kernel Offset: disabled