last executing test programs: 12m31.280269857s ago: executing program 0 (id=12): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) r1 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r1, &(0x7f0000000080)=""/77, 0xffffff0f) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0xf) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x24}}, 0x4000000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, 0x0, &(0x7f0000000100)) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, &(0x7f0000000100)) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 12m25.83982953s ago: executing program 0 (id=17): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224000100000000090400000103010000092100000001220100090581"], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x340, 0x84, 0x3c, 0xf4, 0x20, 0x10ce, 0xea6a, 0xef2f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x7, 0x80, 0x1, "", [{{0x9, 0x4, 0xe3, 0xf9, 0x0, 0xb5, 0x67, 0x31, 0x9}}]}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5d}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) close(r4) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000308004600002c000000000006907864010101ac1414aa4404c55100004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0bded2a7be91332eb1e1bcbfc42cc2372c98e16cfb"], 0x0) creat(0x0, 0xd931d3864d39dcdb) syz_emit_ethernet(0x7a, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffb7feff1eff0086dd674a9e6c00442f8200000000000000000000000000000000ff02000000000000000000000000000104206558000000770c0008000c0086dd88ca88be0001000415988e35010000000000c289080c22eb000000012e0059040200000000000003000485150800655800000004dc2e95f15b46ba2cd96b9075fb48da6b891da2bef5c475c404240931250d"], 0x0) 12m21.648561622s ago: executing program 0 (id=22): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'tunl0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x80, 0x80, 0x2, 0x10, {{0x32, 0x4, 0x0, 0x1, 0xc8, 0x68, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x11}, {[@timestamp={0x44, 0x10, 0xaf, 0x0, 0x3, [0x919, 0x1c0, 0xdf]}, @timestamp_prespec={0x44, 0x4, 0xc4, 0x3, 0x8}, @timestamp_prespec={0x44, 0x34, 0x1f, 0x3, 0x6, [{@broadcast, 0x7a28589a}, {@empty, 0x8001}, {@multicast1, 0xe58}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x400}, {@loopback, 0x7}]}, @timestamp_prespec={0x44, 0xc, 0x3b, 0x3, 0x3, [{@broadcast, 0x1}]}, @ssrr={0x89, 0x1f, 0x1, [@broadcast, @broadcast, @remote, @private=0xa010100, @loopback, @multicast2, @private=0xa010101]}, @timestamp={0x44, 0x8, 0x95, 0x0, 0x5, [0x100]}, @cipso={0x86, 0x29, 0x2, [{0x2, 0xf, "f96f6e19d41bf51da49edadaa8"}, {0x6, 0x8, "9c1d7adc2ab8"}, {0x1, 0x8, "02f4ae962563"}, {0x1, 0x4, "8693"}]}, @cipso={0x86, 0xc, 0xffffffffffffffff, [{0x6, 0x6, "e035fb66"}]}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)=@bridge_dellink={0xb8, 0x11, 0x100, 0x70bd2a, 0x25dfdbfc, {0x7, 0x0, 0x0, r2, 0x10000, 0x41}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x23646}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x2c46}, @IFLA_VFINFO_LIST={0x70, 0x16, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xb5}}, @IFLA_VF_MAC={0x28, 0x1, {0x2, @random="4a0c72ae92e2"}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x6, 0xc9c, 0x2}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x8}}]}]}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x53}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x8}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8040}, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x548, 0x300, 0x3d0, 0x3d0, 0x230, 0x160, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x3, 0x0, [0x40, 0x8, 0x1, 0x5, 0xfff7, 0x3, 0x8000, 0x2, 0x5, 0x1, 0x4d, 0x5, 0x5, 0x7, 0x8, 0x30b0], 0xa}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@local, 0xb, 0x20, 0x1d}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], 'geneve0\x00', 'macvtap0\x00', {}, {}, 0x3c, 0x3, 0x1, 0x26}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0xe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xc0fb, 0x80, 0x2, 0x27e, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x44, 0x0, r3, 0x0, 0x0, 0x0, 0x40000000}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0x613, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x58}}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0xc, {0xfff, 0x7}}, 0x1) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="00089364d4e6a375f238bbf563c844f56b2d00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="d800", 0x2}], 0x1}, 0x40) r9 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="340000001100010028bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="567404008010000014003d"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x64000850) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000280)=@IORING_OP_FUTEX_WAIT={0x33, 0x0, 0x0, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}}) io_uring_enter(r9, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="01002cbd7000110000000200000008000300", @ANYRES32=r15, @ANYBLOB="0c0099000200000025000000080026008009000008002700020000000800a0"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) sendmmsg(r8, &(0x7f0000000000), 0x4000078, 0x40040) r17 = socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) sync() sendmsg$nl_route(r17, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32, @ANYBLOB="01000000000000001c0012000c"], 0x3c}}, 0x0) 12m15.373492524s ago: executing program 0 (id=29): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x6, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0xa, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x44) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000fcffffff000000008000000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = syz_open_dev$loop(&(0x7f0000000200), 0x800000000005, 0x86100) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001280)={r8, 0x0, {0x2a12, 0x80010000, 0x0, 0x3, 0x4, 0x0, 0x0, 0x1f, 0x9, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e74600000000000000000000008bd009000000000000b400", [0xe0]}}) ioctl$PPPIOCGDEBUG(r8, 0x80047441, &(0x7f0000000200)) r10 = socket$key(0xf, 0x3, 0x2) sendmmsg(r10, &(0x7f0000008b80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="3f08455947310ae88d91827c3613", 0xe}, {&(0x7f00000000c0)="25e392c4", 0x4}], 0x2}}], 0x1, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r11, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r11, 0x0) 12m10.0604218s ago: executing program 0 (id=36): socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, 0x0, 0x880) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x7}, &(0x7f00000001c0)=0x10001, 0x0, 0xffffffff, 0x9, 0x7, 0x0, 0x24, 0xffffffffffffffff}}], 0x58, 0x800}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x400000000000032a}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 12m7.393316324s ago: executing program 0 (id=37): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='utf8', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = memfd_create(0x0, 0x0) ftruncate(r1, 0x8800000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) sendfile(0xffffffffffffffff, r1, 0x0, 0x1000009) 11m51.912677632s ago: executing program 32 (id=37): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='utf8', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = memfd_create(0x0, 0x0) ftruncate(r1, 0x8800000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) sendfile(0xffffffffffffffff, r1, 0x0, 0x1000009) 12.37658285s ago: executing program 2 (id=1267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) r4 = socket(0x10, 0x803, 0x0) write(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r4, 0x0, 0x0, 0x20000090, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x10120, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000640)={0x0, 0x0, 0x28, 0x5, 0x3}) syz_open_dev$vcsn(0x0, 0xd0f, 0x103000) keyctl$set_reqkey_keyring(0xe, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xb, '\x00', 0x0, @sk_skb}, 0x94) getpgid(r0) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12.366703161s ago: executing program 3 (id=1268): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000080)="93", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x400000, 0x4) 10.279335706s ago: executing program 3 (id=1272): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r3, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r4, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}, 0xddda}, {{0x0, 0x0, 0x0}, 0x6c2}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x20, 0x0) 10.265315997s ago: executing program 5 (id=1274): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mknod(0x0, 0x8001420, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x1ff, 0xb, 0x1, 0x0, 0x9}) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) 8.94976261s ago: executing program 5 (id=1275): add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000140)="47181f988989f25fff7f0000", 0xc, 0xffffffffffffffff) unshare(0x2a020400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x4, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x101, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x3e3, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x100, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0xfffffffd, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0xb, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x100], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x7, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0x8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) socket$tipc(0x1e, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3fc, 0x7, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x800, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x7], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x2, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x10000, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff65, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00', {0xf, 0x7, 0x6, 0x8}, 0x46, [0x6, 0x3, 0x8, 0x7, 0x3, 0x8, 0xffff, 0x2, 0x1ff, 0x704e, 0x6, 0x2, 0x1, 0x4, 0x7fffffff, 0xc, 0x280, 0x7, 0x4, 0xbf6, 0x6, 0xfff, 0x0, 0x80000005, 0x2, 0x4ebe, 0x3, 0x2, 0x3, 0x0, 0x9, 0x2, 0x8, 0x5, 0x9, 0x0, 0x1, 0x400, 0x0, 0x8, 0x6, 0x1, 0x3, 0x2, 0x3, 0x80, 0x4, 0x40, 0xe, 0xffff, 0x3ca5, 0x81, 0xfffff68e, 0x6, 0x2, 0x10, 0x8001, 0x3, 0x9, 0x4, 0x6, 0xfffffffe, 0xe, 0x3ff], [0x103, 0x3817a07c, 0xfffffffd, 0x2d, 0xd7, 0x2, 0x435f78e4, 0x4, 0x1b9e, 0x0, 0x1, 0x1, 0x4, 0x7, 0x4, 0x80, 0x0, 0x8, 0x4, 0x3, 0x10, 0x1, 0x77, 0x100, 0x0, 0x7f, 0x6, 0x6, 0x0, 0x80, 0x49, 0x4, 0x9, 0x80000000, 0xd, 0x64, 0x2, 0xe2, 0x0, 0x3, 0x9, 0x6, 0xeebe, 0x5, 0x0, 0x1b, 0xaea0, 0x9, 0x9d, 0xefcc, 0x2, 0x81, 0x6, 0x4, 0x2, 0x2, 0x10000, 0x7f, 0x10, 0xff, 0x2, 0x8, 0xe, 0x7], [0x8000, 0x1, 0x0, 0xb, 0x10001, 0x5, 0x6c5e, 0x401, 0x7, 0xb44, 0x1000, 0xc5d3dd53, 0x9, 0x4, 0x3a, 0x3, 0x80000000, 0x5, 0xa5ff, 0x0, 0x9, 0x0, 0x1, 0x80, 0x0, 0x1, 0xfffff564, 0x5, 0x9, 0x5, 0x5, 0x2, 0x3, 0x8, 0x5, 0xd, 0x6, 0x3ff, 0x3, 0x2, 0x1a, 0x5a, 0x7, 0x400, 0x380000, 0x1, 0x7, 0x3, 0x4, 0xa, 0xfffffffd, 0x5, 0xfffffff7, 0x4, 0x0, 0x1, 0xffffff00, 0x6, 0x2, 0xde2, 0x6, 0x7, 0xb7a, 0x4], [0x3ff, 0x4, 0x1, 0x5, 0x7ff, 0xf7fffffa, 0x3, 0x6, 0x2, 0x8000000, 0x7, 0x8, 0x7, 0x8, 0xf, 0x6, 0x5, 0x329d, 0x49, 0x78079c2a, 0x0, 0x3, 0x5, 0x600, 0x7, 0xbfd2, 0x3, 0x6, 0xffffff7f, 0x0, 0xe, 0x9, 0x6, 0xfffffff2, 0xf, 0x10001, 0xb, 0x2, 0x9, 0x4, 0x8, 0xd195, 0x5, 0xba, 0x10000, 0x8, 0x609a, 0xffff, 0x9, 0x6, 0x51, 0x4, 0xa, 0x9, 0xd9, 0x5, 0x9, 0x2, 0xd, 0x5, 0x7, 0x2, 0xff, 0x4]}, 0x45c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xbb5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) 8.618030602s ago: executing program 3 (id=1277): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/64, 0x40}], 0x1, 0x5, 0xffe) 8.407220023s ago: executing program 1 (id=1279): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb146000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54}) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x4000080) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x11, 0xffff, 0x4, 0xfffffffd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(0x0, 0x201, 0x402) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 8.120444395s ago: executing program 5 (id=1282): syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 7.04084872s ago: executing program 2 (id=1285): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mknod(0x0, 0x8001420, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x1ff, 0xb, 0x1, 0x0, 0x9}) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) 6.669223883s ago: executing program 1 (id=1287): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum64={0x4, 0x0, 0x0, 0x13, 0x1, 0x1}]}, {0x0, [0x61, 0x30, 0x61, 0x61]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x90}, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 6.504477556s ago: executing program 5 (id=1290): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{0xfffffffc, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x70}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) ioctl$sock_inet_SIOCGARP(r1, 0x8954, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x8, 0x4) socket(0x2b, 0x1, 0x1) sendmmsg$inet(r6, &(0x7f0000000240)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) 6.126686465s ago: executing program 1 (id=1293): openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0xce, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 5.609421861s ago: executing program 2 (id=1295): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/eem.usb0\x00', 0x1ed) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/eem.usb0/host_addr\x00', 0x0, 0x0) read(r5, &(0x7f00000002c0)=""/128, 0x80) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) read(0xffffffffffffffff, &(0x7f0000000080)=""/10, 0xa) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0), 0x4) 5.082063036s ago: executing program 5 (id=1296): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0xf0f02a, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xcb}, 0x2d, 0x0) keyctl$revoke(0x3, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f407000904008100", 0x12) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0xb00}], 0x1, 0x0, 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000002200)="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", 0xff8) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0) 4.099440831s ago: executing program 2 (id=1298): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x100008b}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) shutdown(r0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @mcast1, 0xc58e}, 0x1c) 3.964523555s ago: executing program 3 (id=1299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) r4 = socket(0x10, 0x803, 0x0) write(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r4, 0x0, 0x0, 0x20000090, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x10120, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000640)={0x0, 0x0, 0x28, 0x5, 0x3}) syz_open_dev$vcsn(0x0, 0xd0f, 0x103000) keyctl$set_reqkey_keyring(0xe, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xb, '\x00', 0x0, @sk_skb}, 0x94) getpgid(r0) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.734530078s ago: executing program 1 (id=1300): r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x201, 0xc1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.659205733s ago: executing program 1 (id=1301): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable', 0x8) shutdown(r0, 0x1) 3.60043858s ago: executing program 1 (id=1302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) r4 = socket(0x10, 0x803, 0x0) write(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r4, 0x0, 0x0, 0x20000090, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x10120, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000640)={0x0, 0x0, 0x28, 0x5, 0x3}) syz_open_dev$vcsn(0x0, 0xd0f, 0x103000) keyctl$set_reqkey_keyring(0xe, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xb, '\x00', 0x0, @sk_skb}, 0x94) getpgid(r0) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.087715607s ago: executing program 3 (id=1304): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0xb2) 1.984326172s ago: executing program 4 (id=1305): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0xf0f02a, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xcb}, 0x2d, 0x0) keyctl$revoke(0x3, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f407000904008100", 0x12) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x8000) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0xb00}], 0x1, 0x0, 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000002200)="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", 0xff8) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0) 1.006157279s ago: executing program 5 (id=1306): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) r1 = creat(0x0, 0xecf86c37d53049cc) close(r1) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000400)={0xc}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x7, 0x1, 0x1, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x92, 0x20, 0x3, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xa, 0x5, 0xe}}}}}]}}]}}, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f00000003c0)=0x8000, 0x4) r4 = dup(r2) write$UHID_INPUT(r4, &(0x7f00000005c0)={0xf, {"a2e3ad214fc752f91b500e0f30f70e06d038e7ff7fc6e5539b3275078b089b3b08385d090890e0878f0e1ac6e7049b3d6d959bffe8d178708c523c921b1b5b31300d3b5d0736cd3b78130baa61d8e809fc889b0709b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44381d31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b51df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b906000000783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51015f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ff33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f761f13a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a99cc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000029566e78000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebbd633500", 0x1010}}, 0x1006) 941.698591ms ago: executing program 3 (id=1307): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001", @ANYRES16], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 668.485478ms ago: executing program 4 (id=1308): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x200) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010800000000000000000800fffc"], 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 622.122804ms ago: executing program 4 (id=1309): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/64, 0x40}], 0x1, 0x5, 0xffe) 601.436234ms ago: executing program 2 (id=1310): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) 400.606256ms ago: executing program 2 (id=1311): socket$inet6(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) pipe2$9p(&(0x7f0000000000), 0x80880) socket$packet(0x11, 0x3, 0x300) socket$unix(0x1, 0x2, 0x0) socket$kcm(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) memfd_create(&(0x7f00000005c0)='\'\xfb\x00@\x1fW\xc3N\xa5~uv4A\xb9\xda\x82s\x1cQ\x1bM\xa1\xdb\xa8%\x8c5\xf9\x97\x03\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="043e1d", @ANYRES16=r0], 0x22) 400.197871ms ago: executing program 4 (id=1312): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum64={0x4, 0x0, 0x0, 0x13, 0x1, 0x1}]}, {0x0, [0x61, 0x30, 0x61, 0x61]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x90}, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 216.379617ms ago: executing program 4 (id=1313): prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x7) sendmsg(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000900)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @remote}, 0x0, 0x2, 0x1, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000700)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000780)='./file0\x00') lgetxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@known='system.posix_acl_default\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r4 = socket$inet6(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090524bd7000fddbdf2502180000", @ANYRES32=r6, @ANYBLOB="0800020064010102080009000700200008000200ffff00080009000300000008000900"], 0x48}, 0x1, 0x0, 0x0, 0x4044814}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) mknodat$null(r3, &(0x7f0000000000)='./file1\x00', 0x1000, 0x103) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000180)='./file1\x00', 0x8ae) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)="ce", 0x1}], 0x1, 0x8) socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_provisioning(0x0, &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x48, 0xfffffffffffffffa) 0s ago: executing program 4 (id=1314): socket(0x1d, 0x80802, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020}, 0x2020) openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x4, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x5, 0x8000000003, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) kernel console output (not intermixed with test programs): netdevsim3 [ 371.975767][ T7585] netlink: 24 bytes leftover after parsing attributes in process `syz.4.369'. [ 371.978837][ T7585] netlink: 67 bytes leftover after parsing attributes in process `syz.4.369'. [ 375.854427][ T7260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.876467][ T5965] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 376.118837][ T5965] usb 3-1: config 0 has no interfaces? [ 376.159409][ T5965] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 376.159472][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 376.159489][ T5965] usb 3-1: Product: syz [ 376.159501][ T5965] usb 3-1: Manufacturer: syz [ 376.159513][ T5965] usb 3-1: SerialNumber: syz [ 377.174659][ T5965] usb 3-1: config 0 descriptor?? [ 377.298581][ T7260] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.429940][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.431681][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.540221][ T7642] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.540347][ T7642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.666102][ T5720] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 378.623700][ T5720] usb 5-1: config 0 has no interfaces? [ 379.414729][ T5720] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 379.414757][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.414773][ T5720] usb 5-1: Product: syz [ 379.414786][ T5720] usb 5-1: Manufacturer: syz [ 379.414798][ T5720] usb 5-1: SerialNumber: syz [ 379.478828][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.478903][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.515136][ T5720] usb 5-1: config 0 descriptor?? [ 379.704010][ T5883] usb 3-1: USB disconnect, device number 9 [ 379.763667][ T821] usb 5-1: USB disconnect, device number 10 [ 380.379347][ T5883] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 381.057313][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 381.059725][ T5883] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 381.059746][ T5883] usb 3-1: config 0 has no interface number 0 [ 381.059787][ T5883] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 381.059808][ T5883] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 381.067511][ T5883] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 381.067536][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.067553][ T5883] usb 3-1: Product: syz [ 381.067565][ T5883] usb 3-1: Manufacturer: syz [ 381.067578][ T5883] usb 3-1: SerialNumber: syz [ 381.101310][ T5883] usb 3-1: config 0 descriptor?? [ 381.102254][ T7654] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 381.102438][ T7654] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 381.331166][ T7654] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 381.331279][ T7654] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 381.834312][ T5883] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 381.835000][ T5883] asix 3-1:0.34: probe with driver asix failed with error -61 [ 383.005761][ T9] usb 3-1: USB disconnect, device number 10 [ 384.246118][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.390'. [ 384.367060][ T7694] bridge_slave_1: left allmulticast mode [ 384.367178][ T7694] bridge_slave_1: left promiscuous mode [ 384.375574][ T7694] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.913438][ T7697] 9pnet_fd: Insufficient options for proto=fd [ 384.914586][ T7697] netlink: ct family unspecified [ 384.914601][ T7697] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.827608][ T7694] bridge_slave_0: left allmulticast mode [ 385.827641][ T7694] bridge_slave_0: left promiscuous mode [ 385.827802][ T7694] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.161496][ T7709] input: syz1 as /devices/virtual/input/input20 [ 390.231929][ T7721] netlink: 24 bytes leftover after parsing attributes in process `syz.1.396'. [ 390.288708][ T7722] netlink: 67 bytes leftover after parsing attributes in process `syz.1.396'. [ 391.119043][ T7719] Bluetooth: MGMT ver 1.23 [ 393.011836][ T5613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 393.015085][ T5613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 393.050091][ T5613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 393.081685][ T5613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 393.110702][ T5613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 393.555719][ T7747] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 395.287867][ T7775] netlink: 24 bytes leftover after parsing attributes in process `syz.3.412'. [ 395.343493][ T7776] netlink: 67 bytes leftover after parsing attributes in process `syz.3.412'. [ 396.723980][ T6417] Bluetooth: hci5: command tx timeout [ 398.758185][ T6417] Bluetooth: hci5: command tx timeout [ 399.121584][ T7790] ceph: No mds server is up or the cluster is laggy [ 399.407472][ T820] libceph: connect (1)[c::]:6789 error -101 [ 399.601135][ T820] libceph: mon0 (1)[c::]:6789 connect error [ 400.251900][ T7802] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 400.255741][ T7802] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 400.309208][ T7802] vhci_hcd vhci_hcd.0: Device attached [ 400.350731][ T9] libceph: connect (1)[c::]:6789 error -101 [ 400.350915][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 400.878601][ T7804] vhci_hcd: connection closed [ 400.904666][ T6417] Bluetooth: hci5: command tx timeout [ 401.543614][ T3546] vhci_hcd vhci_hcd.1: stop threads [ 401.564079][ T3546] vhci_hcd vhci_hcd.1: release socket [ 401.989969][ T3546] vhci_hcd vhci_hcd.1: disconnect device [ 403.636693][ T6417] Bluetooth: hci5: command tx timeout [ 404.003022][ T7821] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 404.007874][ T7821] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 404.013519][ T7821] vhci_hcd vhci_hcd.0: Device attached [ 404.994877][ T7822] vhci_hcd: connection closed [ 405.039524][ T7631] vhci_hcd vhci_hcd.3: stop threads [ 405.039561][ T7631] vhci_hcd vhci_hcd.3: release socket [ 405.039597][ T7631] vhci_hcd vhci_hcd.3: disconnect device [ 406.445256][ T7833] netlink: 16 bytes leftover after parsing attributes in process `syz.4.426'. [ 406.445291][ T7833] netlink: 16 bytes leftover after parsing attributes in process `syz.4.426'. [ 406.468348][ T7830] netlink: 'syz.1.425': attribute type 3 has an invalid length. [ 407.153193][ T7836] netlink: 'syz.3.427': attribute type 3 has an invalid length. [ 408.762374][ T7849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 409.143639][ T7854] ceph: No mds server is up or the cluster is laggy [ 409.149595][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 409.151972][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 409.459630][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 409.462927][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 409.987567][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 409.987752][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 410.567762][ T7840] netlink: 'syz.4.429': attribute type 3 has an invalid length. [ 412.446109][ T5883] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 412.599488][ T5883] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.599511][ T5883] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 412.602495][ T5883] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 412.602519][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.602536][ T5883] usb 5-1: Product: syz [ 412.602547][ T5883] usb 5-1: Manufacturer: syz [ 412.602559][ T5883] usb 5-1: SerialNumber: syz [ 412.886080][ T5720] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 412.976584][ T5588] usb 5-1: USB disconnect, device number 11 [ 413.039538][ T5720] usb 3-1: config 0 has no interfaces? [ 413.044270][ T5720] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 413.044296][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.044312][ T5720] usb 3-1: Product: syz [ 413.044323][ T5720] usb 3-1: Manufacturer: syz [ 413.044335][ T5720] usb 3-1: SerialNumber: syz [ 413.317109][ T5720] usb 3-1: config 0 descriptor?? [ 413.954656][ T5720] usb 3-1: USB disconnect, device number 11 [ 415.255524][ T7918] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 415.256716][ T7918] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 415.263824][ T7918] vhci_hcd vhci_hcd.0: Device attached [ 415.998361][ T7920] vhci_hcd: connection closed [ 416.004270][ T10] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 416.122091][ T193] vhci_hcd vhci_hcd.2: stop threads [ 416.122155][ T193] vhci_hcd vhci_hcd.2: release socket [ 416.838787][ T193] vhci_hcd vhci_hcd.2: disconnect device [ 418.178794][ T7939] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 418.178859][ T7939] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 418.208322][ T7939] vhci_hcd vhci_hcd.0: Device attached [ 418.476419][ T5965] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 418.797474][ T5965] usb 5-1: Using ep0 maxpacket: 8 [ 419.066531][ T7941] vhci_hcd: connection reset by peer [ 419.297423][ T1921] vhci_hcd vhci_hcd.2: stop threads [ 419.297766][ T1921] vhci_hcd vhci_hcd.2: release socket [ 419.481179][ T1921] vhci_hcd vhci_hcd.2: disconnect device [ 419.541769][ T5965] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 419.830418][ T5965] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 419.830476][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.830494][ T5965] usb 5-1: Product: syz [ 419.830544][ T5965] usb 5-1: Manufacturer: syz [ 419.830557][ T5965] usb 5-1: SerialNumber: syz [ 420.545135][ T5965] usb 5-1: config 0 descriptor?? [ 421.491572][ T5965] usb 5-1: can't set config #0, error -71 [ 421.535111][ T5965] usb 5-1: USB disconnect, device number 12 [ 421.638537][ T7946] batadv_slave_0: entered promiscuous mode [ 421.787709][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 422.356150][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 422.456146][ T5965] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 422.509340][ T9] usb 3-1: config 0 has no interfaces? [ 422.527275][ T9] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 422.527300][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.527315][ T9] usb 3-1: Product: syz [ 422.527326][ T9] usb 3-1: Manufacturer: syz [ 422.527338][ T9] usb 3-1: SerialNumber: syz [ 422.535414][ T9] usb 3-1: config 0 descriptor?? [ 422.671446][ T5965] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.671491][ T5965] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.671510][ T5965] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 422.671537][ T5965] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 422.912370][ T5965] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 422.928757][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.928871][ T5965] usb 5-1: Product: syz [ 422.928945][ T5965] usb 5-1: Manufacturer: syz [ 422.929009][ T5965] usb 5-1: SerialNumber: syz [ 423.383055][ T821] usb 3-1: USB disconnect, device number 12 [ 423.421778][ T7726] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.421893][ T7726] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.422100][ T7726] bridge_slave_0: entered allmulticast mode [ 423.429193][ T7726] bridge_slave_0: entered promiscuous mode [ 423.460268][ T5965] usbtmc 5-1:1.0: bulk endpoints not found [ 423.474852][ T5965] usbtouchscreen 5-1:1.0: probe with driver usbtouchscreen failed with error -12 [ 423.638447][ T5733] usb 5-1: USB disconnect, device number 13 [ 423.678024][ T7726] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.678183][ T7726] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.678400][ T7726] bridge_slave_1: entered allmulticast mode [ 423.690781][ T7726] bridge_slave_1: entered promiscuous mode [ 424.787444][ T7986] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 424.787714][ T7986] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 424.789103][ T7986] vhci_hcd vhci_hcd.0: Device attached [ 425.573266][ T821] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 425.872823][ T7988] vhci_hcd: connection closed [ 426.116725][ T7726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.163362][ T1300] vhci_hcd vhci_hcd.1: stop threads [ 426.163524][ T1300] vhci_hcd vhci_hcd.1: release socket [ 426.364810][ T1300] vhci_hcd vhci_hcd.1: disconnect device [ 427.917215][ T7994] batadv_slave_0: entered promiscuous mode [ 427.929537][ T7726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.316264][ T7726] team0: Port device team_slave_0 added [ 429.316590][ T8012] netlink: 'syz.1.463': attribute type 3 has an invalid length. [ 430.248540][ T7643] bridge_slave_1: left allmulticast mode [ 430.248570][ T7643] bridge_slave_1: left promiscuous mode [ 430.248815][ T7643] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.671349][ T8024] ceph: No mds server is up or the cluster is laggy [ 430.740419][ T7643] bridge_slave_0: left allmulticast mode [ 430.740485][ T7643] bridge_slave_0: left promiscuous mode [ 430.741130][ T7643] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.756586][ T5588] libceph: connect (1)[c::]:6789 error -101 [ 430.864852][ T5588] libceph: mon0 (1)[c::]:6789 connect error [ 431.116733][ T5618] libceph: connect (1)[c::]:6789 error -101 [ 431.150818][ T5618] libceph: mon0 (1)[c::]:6789 connect error [ 431.496142][ T821] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 434.426629][ T7643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.507130][ T7643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.537889][ T7643] bond0 (unregistering): Released all slaves [ 434.707200][ T7726] team0: Port device team_slave_1 added [ 434.726045][ T5733] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 434.856055][ T5733] usb 3-1: device descriptor read/64, error -71 [ 434.941327][ T8047] batadv_slave_0: entered promiscuous mode [ 436.834219][ T5733] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 437.021831][ T7726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.021846][ T7726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.021867][ T7726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.056176][ T5733] usb 3-1: device descriptor read/64, error -71 [ 437.103208][ T7726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.103221][ T7726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.103239][ T7726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.167703][ T5733] usb usb3-port1: attempt power cycle [ 437.366140][ T5588] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 437.522925][ T5588] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 437.524705][ T5588] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 437.524720][ T5588] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.524729][ T5588] usb 2-1: Product: syz [ 437.524736][ T5588] usb 2-1: Manufacturer: syz [ 437.524742][ T5588] usb 2-1: SerialNumber: syz [ 437.605753][ T7643] hsr_slave_0: left promiscuous mode [ 438.054540][ T7643] hsr_slave_1: left promiscuous mode [ 438.101544][ T7643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.420897][ T5588] usb 2-1: usb_control_msg returned -71 [ 438.421086][ T5588] usbtmc 2-1:1.0: can't read capabilities [ 439.194797][ T7643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.234813][ T5588] usb 2-1: USB disconnect, device number 15 [ 440.819414][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.819479][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.718757][ T8111] ceph: No mds server is up or the cluster is laggy [ 441.721030][ T10] libceph: connect (1)[c::]:6789 error -101 [ 441.721207][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 441.830714][ T7643] team0 (unregistering): Port device team_slave_1 removed [ 441.926523][ T7643] team0 (unregistering): Port device team_slave_0 removed [ 442.071624][ T10] libceph: connect (1)[c::]:6789 error -101 [ 442.071806][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 442.250706][ T7726] hsr_slave_0: entered promiscuous mode [ 442.251855][ T7726] hsr_slave_1: entered promiscuous mode [ 442.336048][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 442.497878][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 442.497903][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 442.497923][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.500707][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 442.500731][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.500748][ T9] usb 3-1: Product: syz [ 442.500760][ T9] usb 3-1: Manufacturer: syz [ 442.500772][ T9] usb 3-1: SerialNumber: syz [ 443.763499][ T8130] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 443.763574][ T8130] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 443.766745][ T8130] vhci_hcd vhci_hcd.0: Device attached [ 444.032999][ T8133] vhci_hcd: connection closed [ 444.043035][ T8101] vhci_hcd vhci_hcd.4: stop threads [ 444.043091][ T8101] vhci_hcd vhci_hcd.4: release socket [ 444.043223][ T8101] vhci_hcd vhci_hcd.4: disconnect device [ 444.066654][ T821] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 445.504547][ T9] usb 3-1: can't set config #1, error -71 [ 445.511806][ T9] usb 3-1: USB disconnect, device number 16 [ 445.982868][ T8146] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 445.982935][ T8146] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 445.983609][ T8146] vhci_hcd vhci_hcd.0: Device attached [ 446.177408][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 447.259896][ T9] usb 3-1: device descriptor read/64, error -71 [ 447.307355][ T8149] vhci_hcd: connection closed [ 447.356705][ T5733] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 447.390127][ T13] vhci_hcd vhci_hcd.3: stop threads [ 447.390184][ T13] vhci_hcd vhci_hcd.3: release socket [ 447.471502][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 447.606051][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 447.936495][ T9] usb 3-1: device descriptor read/64, error -71 [ 448.265375][ T9] usb usb3-port1: attempt power cycle [ 448.516141][ T821] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 448.856064][ T821] usb 2-1: device not accepting address 16, error -71 [ 449.081144][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5 [ 454.356171][ T5733] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 454.604499][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 454.706570][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 454.737806][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 454.815728][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 454.817186][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 455.405739][ T8204] comedi comedi0: pcm3724: I/O base address not correctly aligned [ 455.479000][ T8197] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 455.479074][ T8197] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 455.479525][ T8197] vhci_hcd vhci_hcd.0: Device attached [ 455.778553][ T8202] vhci_hcd: connection closed [ 455.779422][ T1040] vhci_hcd vhci_hcd.2: stop threads [ 455.779487][ T1040] vhci_hcd vhci_hcd.2: release socket [ 455.779594][ T1040] vhci_hcd vhci_hcd.2: disconnect device [ 458.193059][ T5738] libceph: connect (1)[c::]:6789 error -101 [ 458.193173][ T5738] libceph: mon0 (1)[c::]:6789 connect error [ 458.359479][ T8221] ceph: No mds server is up or the cluster is laggy [ 458.418514][ T5738] libceph: connect (1)[c::]:6789 error -101 [ 458.418716][ T5738] libceph: mon0 (1)[c::]:6789 connect error [ 458.688377][ T5720] libceph: connect (1)[c::]:6789 error -101 [ 458.688495][ T5720] libceph: mon0 (1)[c::]:6789 connect error [ 459.310907][ T8236] 9pnet_fd: Insufficient options for proto=fd [ 459.320169][ T8236] netlink: ct family unspecified [ 459.320321][ T8236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.656893][ T5613] Bluetooth: hci2: command tx timeout [ 460.196124][ T1328] bridge_slave_1: left allmulticast mode [ 460.196146][ T1328] bridge_slave_1: left promiscuous mode [ 460.196312][ T1328] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.346066][ T5720] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 460.387004][ T1328] bridge_slave_0: left allmulticast mode [ 460.387025][ T1328] bridge_slave_0: left promiscuous mode [ 460.387186][ T1328] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.496105][ T5720] usb 3-1: Using ep0 maxpacket: 8 [ 460.498554][ T5720] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 460.500451][ T5720] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 460.500465][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.500481][ T5720] usb 3-1: Product: syz [ 460.500488][ T5720] usb 3-1: Manufacturer: syz [ 460.500496][ T5720] usb 3-1: SerialNumber: syz [ 460.559409][ T5720] usb 3-1: config 0 descriptor?? [ 460.565714][ T5720] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 460.565760][ T5720] usb 3-1: setting power ON [ 460.565776][ T5720] dvb-usb: bulk message failed: -22 (2/0) [ 460.601929][ T5720] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 460.602874][ T5720] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 460.602924][ T5720] usb 3-1: media controller created [ 460.643743][ T5720] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 460.672772][ T5720] usb 3-1: selecting invalid altsetting 6 [ 460.672792][ T5720] usb 3-1: digital interface selection failed (-22) [ 460.672804][ T5720] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 460.673603][ T5720] usb 3-1: setting power OFF [ 460.673620][ T5720] dvb-usb: bulk message failed: -22 (2/0) [ 460.673635][ T5720] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 460.673645][ T5720] (NULL device *): no alternate interface [ 460.758690][ T5720] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 461.080255][ T5733] IPVS: starting estimator thread 0... [ 461.376600][ T8249] IPVS: using max 7 ests per chain, 16800 per kthread [ 461.530010][ T5733] usb 3-1: USB disconnect, device number 20 [ 461.806036][ T5613] Bluetooth: hci2: command tx timeout [ 461.955232][ T8253] comedi comedi0: pcm3724: I/O base address not correctly aligned [ 463.424388][ T8266] netlink: 'syz.1.508': attribute type 9 has an invalid length. [ 464.247136][ T5613] Bluetooth: hci2: command tx timeout [ 464.965280][ T8272] netlink: 'syz.1.509': attribute type 9 has an invalid length. [ 466.289164][ T5613] Bluetooth: hci2: command tx timeout [ 467.454495][ T5720] IPVS: starting estimator thread 0... [ 467.517068][ T1328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.547262][ T8279] IPVS: using max 9 ests per chain, 21600 per kthread [ 467.804302][ T1328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.021327][ T1328] bond0 (unregistering): Released all slaves [ 468.103119][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6 [ 469.549691][ T8296] comedi comedi0: pcm3724: I/O base address not correctly aligned [ 470.776873][ T8308] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 470.776938][ T8308] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 470.777434][ T8308] vhci_hcd vhci_hcd.0: Device attached [ 471.246537][ T31] usb 35-1: new high-speed USB device number 4 using vhci_hcd [ 471.544721][ T8309] vhci_hcd: connection reset by peer [ 471.603455][ T8101] vhci_hcd vhci_hcd.1: stop threads [ 471.603508][ T8101] vhci_hcd vhci_hcd.1: release socket [ 471.603734][ T8101] vhci_hcd vhci_hcd.1: disconnect device [ 473.417885][ T1328] hsr_slave_0: left promiscuous mode [ 473.621340][ T1328] hsr_slave_1: left promiscuous mode [ 473.622010][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.121803][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.820009][ T1328] team0 (unregistering): Port device team_slave_1 removed [ 474.860108][ T1328] team0 (unregistering): Port device team_slave_0 removed [ 476.426074][ T31] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 479.464496][ T8376] comedi comedi0: pcm3724: I/O base address not correctly aligned [ 480.115702][ T5613] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 481.761467][ T8391] netlink: 'syz.4.528': attribute type 9 has an invalid length. [ 484.927056][ T8406] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 484.927080][ T8406] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 484.927140][ T8406] vhci_hcd vhci_hcd.0: Device attached [ 484.943634][ T8409] vhci_hcd: connection closed [ 484.945184][ T13] vhci_hcd vhci_hcd.4: stop threads [ 484.945199][ T13] vhci_hcd vhci_hcd.4: release socket [ 484.945219][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 484.968153][ T5260] 8021q: adding VLAN 0 to HW filter on device eth7 [ 486.717565][ T8417] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 486.717659][ T8417] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 486.718100][ T8417] vhci_hcd vhci_hcd.0: Device attached [ 487.872865][ T8418] vhci_hcd: connection closed [ 487.918316][ T13] vhci_hcd vhci_hcd.1: stop threads [ 487.918386][ T13] vhci_hcd vhci_hcd.1: release socket [ 487.918488][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 489.639227][ T8432] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 489.644912][ T8430] ceph: No mds server is up or the cluster is laggy [ 489.651977][ T8432] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 489.653690][ T8432] vhci_hcd vhci_hcd.0: Device attached [ 489.686542][ T8433] vhci_hcd: connection closed [ 489.707859][ T66] vhci_hcd vhci_hcd.4: stop threads [ 489.707883][ T66] vhci_hcd vhci_hcd.4: release socket [ 490.037369][ T66] vhci_hcd vhci_hcd.4: disconnect device [ 490.806068][ T5588] libceph: connect (1)[c::]:6789 error -101 [ 490.806203][ T5588] libceph: mon0 (1)[c::]:6789 connect error [ 491.720190][ T5733] libceph: connect (1)[c::]:6789 error -101 [ 491.800995][ T5733] libceph: mon0 (1)[c::]:6789 connect error [ 492.039000][ T8446] ceph: No mds server is up or the cluster is laggy [ 492.117645][ T9] libceph: connect (1)[c::]:6789 error -101 [ 492.117852][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 492.243858][ T8192] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.243951][ T8192] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.244095][ T8192] bridge_slave_0: entered allmulticast mode [ 492.251396][ T8192] bridge_slave_0: entered promiscuous mode [ 492.281730][ T8192] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.281801][ T8192] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.281946][ T8192] bridge_slave_1: entered allmulticast mode [ 492.296165][ T8192] bridge_slave_1: entered promiscuous mode [ 493.156223][ T31] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 493.214434][ T8192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.254149][ T8192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.487181][ T8469] input: syz1 as /devices/virtual/input/input23 [ 494.400392][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 494.400419][ T31] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 494.400439][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 494.625183][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 494.625211][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.625228][ T31] usb 5-1: Product: syz [ 494.625240][ T31] usb 5-1: Manufacturer: syz [ 494.625253][ T31] usb 5-1: SerialNumber: syz [ 494.746567][ T31] hub 5-1:1.0: bad descriptor, ignoring hub [ 494.746602][ T31] hub 5-1:1.0: probe with driver hub failed with error -5 [ 494.962765][ T8192] team0: Port device team_slave_0 added [ 494.984057][ T31] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 495.005293][ T8192] team0: Port device team_slave_1 added [ 495.117257][ T31] usb 5-1: USB disconnect, device number 14 [ 495.240695][ T8192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.240712][ T8192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.240734][ T8192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.346793][ T8192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.346812][ T8192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.346835][ T8192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.094536][ T31] usblp0: removed [ 496.657065][ T8489] ceph: No mds server is up or the cluster is laggy [ 496.658939][ T5733] libceph: connect (1)[c::]:6789 error -101 [ 496.659127][ T5733] libceph: mon0 (1)[c::]:6789 connect error [ 497.380982][ T5733] libceph: connect (1)[c::]:6789 error -101 [ 497.381169][ T5733] libceph: mon0 (1)[c::]:6789 connect error [ 498.687989][ T8192] hsr_slave_0: entered promiscuous mode [ 498.692390][ T8192] hsr_slave_1: entered promiscuous mode [ 498.880606][ T5260] 8021q: adding VLAN 0 to HW filter on device eth8 [ 499.809749][ T8509] ceph: No mds server is up or the cluster is laggy [ 500.568399][ T5618] libceph: connect (1)[c::]:6789 error -101 [ 500.568591][ T5618] libceph: mon0 (1)[c::]:6789 connect error [ 501.040677][ T5618] libceph: connect (1)[c::]:6789 error -101 [ 501.040791][ T5618] libceph: mon0 (1)[c::]:6789 connect error [ 501.149910][ T8528] 9p: Bad value for 'rfdno' [ 501.846367][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.846433][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.848096][ T5618] libceph: connect (1)[c::]:6789 error -101 [ 501.848285][ T5618] libceph: mon0 (1)[c::]:6789 connect error [ 501.963340][ T8529] input: syz1 as /devices/virtual/input/input24 [ 503.811409][ T5618] libceph: connect (1)[c::]:6789 error -101 [ 503.881712][ T5618] libceph: mon0 (1)[c::]:6789 connect error [ 505.282563][ T8566] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 505.282598][ T8566] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 505.283001][ T8566] vhci_hcd vhci_hcd.0: Device attached [ 505.473177][ T8568] vhci_hcd: connection closed [ 505.505506][ T8554] vhci_hcd vhci_hcd.4: stop threads [ 505.505609][ T8554] vhci_hcd vhci_hcd.4: release socket [ 505.505703][ T8554] vhci_hcd vhci_hcd.4: disconnect device [ 506.070010][ T8569] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 506.070081][ T8569] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 506.071986][ T8569] vhci_hcd vhci_hcd.0: Device attached [ 506.308503][ T8574] vhci_hcd: connection closed [ 506.369962][ T8551] vhci_hcd vhci_hcd.1: stop threads [ 506.370057][ T8551] vhci_hcd vhci_hcd.1: release socket [ 506.370220][ T8551] vhci_hcd vhci_hcd.1: disconnect device [ 510.502152][ T8603] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 510.502259][ T8603] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 510.502574][ T8603] vhci_hcd vhci_hcd.0: Device attached [ 510.978253][ T9] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 511.327635][ T8606] vhci_hcd: connection reset by peer [ 511.331675][ T8551] vhci_hcd vhci_hcd.2: stop threads [ 511.331744][ T8551] vhci_hcd vhci_hcd.2: release socket [ 511.331812][ T8551] vhci_hcd vhci_hcd.2: disconnect device [ 512.810850][ T8615] input: syz1 as /devices/virtual/input/input25 [ 516.010547][ T8624] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 516.010574][ T8624] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 516.010651][ T8624] vhci_hcd vhci_hcd.0: Device attached [ 516.053220][ T8632] vhci_hcd: connection reset by peer [ 516.059810][ T8551] vhci_hcd vhci_hcd.2: stop threads [ 516.059833][ T8551] vhci_hcd vhci_hcd.2: release socket [ 516.093515][ T8636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 516.157749][ T8636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 516.159835][ T8636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 516.167440][ T8636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 516.168326][ T8551] vhci_hcd vhci_hcd.2: disconnect device [ 516.195372][ T8636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 516.300433][ T9] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 516.476010][ T5588] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 516.632796][ T5588] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 516.632824][ T5588] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 516.632845][ T5588] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 516.649668][ T5588] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 516.649719][ T5588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.649736][ T5588] usb 5-1: Product: syz [ 516.649748][ T5588] usb 5-1: Manufacturer: syz [ 516.649760][ T5588] usb 5-1: SerialNumber: syz [ 516.689586][ T5588] hub 5-1:1.0: bad descriptor, ignoring hub [ 516.689621][ T5588] hub 5-1:1.0: probe with driver hub failed with error -5 [ 518.021340][ T5588] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 518.086812][ T8661] netlink: 'syz.3.576': attribute type 9 has an invalid length. [ 518.368791][ T5613] Bluetooth: hci5: command tx timeout [ 518.872972][ T5588] usb 5-1: USB disconnect, device number 15 [ 518.900979][ T5588] usblp0: removed [ 520.436013][ T5613] Bluetooth: hci5: command tx timeout [ 522.092117][ T8696] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 522.092167][ T8696] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 522.092543][ T8696] vhci_hcd vhci_hcd.0: Device attached [ 522.516150][ T5613] Bluetooth: hci5: command tx timeout [ 522.546585][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 522.666706][ T5733] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 522.708287][ T8697] vhci_hcd: connection reset by peer [ 522.719663][ T1921] vhci_hcd vhci_hcd.4: stop threads [ 522.719752][ T1921] vhci_hcd vhci_hcd.4: release socket [ 522.740152][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 522.783999][ T9] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 523.104665][ T1921] vhci_hcd vhci_hcd.4: disconnect device [ 523.256427][ T9] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 523.256491][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.256542][ T9] usb 3-1: Product: syz [ 523.256588][ T9] usb 3-1: Manufacturer: syz [ 523.256603][ T9] usb 3-1: SerialNumber: syz [ 523.818830][ T9] usb 3-1: config 0 descriptor?? [ 523.861677][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 523.861713][ T9] usb 3-1: setting power ON [ 523.861726][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 523.991385][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 524.031505][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 524.031671][ T9] usb 3-1: media controller created [ 524.564562][ T8694] dvb-usb: bulk message failed: -22 (3/0) [ 524.564640][ T8694] dvb-usb: bulk message failed: -22 (79/0) [ 524.598187][ T5613] Bluetooth: hci5: command tx timeout [ 525.350864][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 525.906056][ T9] usb 3-1: selecting invalid altsetting 6 [ 525.906081][ T9] usb 3-1: digital interface selection failed (-22) [ 525.906125][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 525.907971][ T9] usb 3-1: setting power OFF [ 525.907989][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 525.908071][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 525.908125][ T9] (NULL device *): no alternate interface [ 526.204967][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 526.283922][ T9] usb 3-1: USB disconnect, device number 21 [ 527.826481][ T5733] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 530.353611][ T8734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.590'. [ 530.405669][ T8736] netlink: 67 bytes leftover after parsing attributes in process `syz.2.590'. [ 537.147193][ T8761] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 537.147550][ T8761] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 537.148068][ T8761] vhci_hcd vhci_hcd.0: Device attached [ 537.655037][ T8763] vhci_hcd: connection closed [ 537.660697][ T1282] vhci_hcd vhci_hcd.3: stop threads [ 537.660756][ T1282] vhci_hcd vhci_hcd.3: release socket [ 537.660989][ T1282] vhci_hcd vhci_hcd.3: disconnect device [ 537.759530][ T5618] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 537.759800][ T5618] usb 39-1: enqueue for inactive port 0 [ 537.962633][ T5618] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 543.062481][ T8804] ceph: No mds server is up or the cluster is laggy [ 543.231204][ T5612] libceph: connect (1)[c::]:6789 error -101 [ 543.231774][ T5612] libceph: mon0 (1)[c::]:6789 connect error [ 543.507027][ T5618] libceph: connect (1)[c::]:6789 error -101 [ 543.507211][ T5618] libceph: mon0 (1)[c::]:6789 connect error [ 546.691363][ T8838] input: syz1 as /devices/virtual/input/input26 [ 546.918192][ T68] bridge_slave_1: left allmulticast mode [ 546.918226][ T68] bridge_slave_1: left promiscuous mode [ 546.918849][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.178135][ T68] bridge_slave_0: left allmulticast mode [ 548.178159][ T68] bridge_slave_0: left promiscuous mode [ 548.178318][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.218401][ T8897] 9p: Bad value for 'rfdno' [ 551.934988][ T8896] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 551.935024][ T8896] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 551.935393][ T8896] vhci_hcd vhci_hcd.0: Device attached [ 552.445703][ T8899] vhci_hcd: connection closed [ 552.488043][ T5965] usb 41-1: new high-speed USB device number 4 using vhci_hcd [ 552.549379][ T8119] vhci_hcd vhci_hcd.4: stop threads [ 552.549416][ T8119] vhci_hcd vhci_hcd.4: release socket [ 552.551693][ T8119] vhci_hcd vhci_hcd.4: disconnect device [ 553.990242][ T8902] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 553.990266][ T8902] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 553.990339][ T8902] vhci_hcd vhci_hcd.0: Device attached [ 554.149618][ T8906] vhci_hcd: connection closed [ 554.253580][ T1328] vhci_hcd vhci_hcd.2: stop threads [ 554.253643][ T1328] vhci_hcd vhci_hcd.2: release socket [ 554.253775][ T1328] vhci_hcd vhci_hcd.2: disconnect device [ 554.417191][ T8207] libceph: connect (1)[c::]:6789 error -101 [ 554.520355][ T8207] libceph: mon0 (1)[c::]:6789 connect error [ 554.817055][ T8207] libceph: connect (1)[c::]:6789 error -101 [ 554.817837][ T8207] libceph: mon0 (1)[c::]:6789 connect error [ 555.344957][ T8207] libceph: connect (1)[c::]:6789 error -101 [ 555.443092][ T8207] libceph: mon0 (1)[c::]:6789 connect error [ 556.731886][ T8909] ceph: No mds server is up or the cluster is laggy [ 557.271234][ T8207] libceph: connect (1)[c::]:6789 error -101 [ 557.271371][ T8207] libceph: mon0 (1)[c::]:6789 connect error [ 557.522832][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 557.646145][ T5965] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 557.951588][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.236005][ T68] bond0 (unregistering): Released all slaves [ 559.482404][ T8920] netlink: 'syz.2.621': attribute type 3 has an invalid length. [ 559.781457][ T8941] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 559.781482][ T8941] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 559.782024][ T8941] vhci_hcd vhci_hcd.0: Device attached [ 560.593335][ T8942] vhci_hcd: connection closed [ 560.606379][ T5733] usb 39-1: new high-speed USB device number 4 using vhci_hcd [ 560.662065][ T66] vhci_hcd vhci_hcd.3: stop threads [ 560.662120][ T66] vhci_hcd vhci_hcd.3: release socket [ 560.662654][ T66] vhci_hcd vhci_hcd.3: disconnect device [ 561.950302][ T8950] 9p: Bad value for 'rfdno' [ 562.676613][ T8623] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.677007][ T8623] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.883723][ T8623] bridge_slave_0: entered allmulticast mode [ 562.965110][ T8623] bridge_slave_0: entered promiscuous mode [ 563.002671][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.002731][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.180242][ T8623] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.180363][ T8623] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.180569][ T8623] bridge_slave_1: entered allmulticast mode [ 563.193559][ T8623] bridge_slave_1: entered promiscuous mode [ 563.659276][ T8623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.728184][ T8623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.786028][ T5618] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 563.956182][ T5618] usb 2-1: Using ep0 maxpacket: 32 [ 563.958726][ T5618] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 563.958773][ T5618] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 563.958796][ T5618] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 563.958819][ T5618] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 563.961293][ T5618] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 563.961317][ T5618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.961335][ T5618] usb 2-1: Product: syz [ 563.961401][ T5618] usb 2-1: Manufacturer: syz [ 563.961414][ T5618] usb 2-1: SerialNumber: syz [ 564.761929][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 564.829101][ T5618] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input27 [ 564.986288][ T5618] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 564.986358][ T5618] (id 0x00) [ 565.666347][ T5618] rc_core: IR keymap rc-imon-pad not found [ 565.666382][ T5618] Registered IR keymap rc-empty [ 565.666750][ T5618] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 565.666804][ T5618] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 565.782042][ T5733] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 565.795601][ T5618] imon:send_packet: packet tx failed (-71) [ 565.830472][ T5618] imon 2-1:155.0: remote input dev register failed [ 565.831029][ T5618] imon 2-1:155.0: imon_init_intf0: rc device setup failed [ 566.265007][ T68] hsr_slave_0: left promiscuous mode [ 566.616443][ T68] hsr_slave_1: left promiscuous mode [ 566.662549][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.494521][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.852831][ T8999] 9p: Bad value for 'rfdno' [ 573.015178][ T9014] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 573.015205][ T9014] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 573.015308][ T9014] vhci_hcd vhci_hcd.0: Device attached [ 573.169176][ T9016] vhci_hcd: connection closed [ 573.172906][ T13] vhci_hcd vhci_hcd.3: stop threads [ 573.172930][ T13] vhci_hcd vhci_hcd.3: release socket [ 573.172964][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 573.770034][ T5618] imon 2-1:155.0: unable to initialize intf0, err 0 [ 573.770055][ T5618] imon:imon_probe: failed to initialize context! [ 573.770066][ T5618] imon 2-1:155.0: unable to register, err -19 [ 573.865503][ T5618] usb 2-1: USB disconnect, device number 18 [ 576.144732][ T8636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 576.269284][ T8636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 576.306000][ T8636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 576.387113][ T8636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 576.537984][ T8636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 579.501929][ T68] team0 (unregistering): Port device team_slave_1 removed [ 579.586900][ T68] team0 (unregistering): Port device team_slave_0 removed [ 580.221484][ T8636] Bluetooth: hci2: command tx timeout [ 580.457802][ T9069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.650'. [ 580.819062][ T8207] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 581.064548][ T8207] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 581.064605][ T8207] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 581.064658][ T8207] usb 2-1: config 220 has no interface number 2 [ 581.064815][ T8207] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 581.064852][ T8207] usb 2-1: config 220 interface 0 has no altsetting 0 [ 581.064868][ T8207] usb 2-1: config 220 interface 76 has no altsetting 0 [ 581.064926][ T8207] usb 2-1: config 220 interface 1 has no altsetting 0 [ 581.073887][ T8207] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 581.073920][ T8207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.073970][ T8207] usb 2-1: Product: syz [ 581.073983][ T8207] usb 2-1: Manufacturer: syz [ 581.074038][ T8207] usb 2-1: SerialNumber: syz [ 581.171793][ T9081] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 581.171818][ T9081] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 581.171882][ T9081] vhci_hcd vhci_hcd.0: Device attached [ 581.230449][ T9086] vhci_hcd: connection closed [ 581.270177][ T9084] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 581.270278][ T9084] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 581.270971][ T9084] vhci_hcd vhci_hcd.0: Device attached [ 581.299277][ T66] vhci_hcd vhci_hcd.4: stop threads [ 581.299341][ T66] vhci_hcd vhci_hcd.4: release socket [ 581.299442][ T66] vhci_hcd vhci_hcd.4: disconnect device [ 581.714954][ T9088] vhci_hcd: connection closed [ 581.729232][ T1871] vhci_hcd vhci_hcd.2: stop threads [ 581.729258][ T1871] vhci_hcd vhci_hcd.2: release socket [ 581.729563][ T1871] vhci_hcd vhci_hcd.2: disconnect device [ 581.731005][ T5738] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 582.356526][ T8636] Bluetooth: hci2: command tx timeout [ 582.844906][ T8207] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 582.845116][ T8207] uvcvideo 2-1:220.0: No valid video chain found. [ 582.881999][ T8207] usb 2-1: selecting invalid altsetting 0 [ 582.959551][ T8207] usb 2-1: selecting invalid altsetting 0 [ 582.959653][ T8207] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 583.069344][ T8207] usb 2-1: USB disconnect, device number 19 [ 584.436097][ T8636] Bluetooth: hci2: command tx timeout [ 585.766205][ T68] bridge_slave_1: left allmulticast mode [ 585.766238][ T68] bridge_slave_1: left promiscuous mode [ 585.766485][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.575631][ T8636] Bluetooth: hci2: command tx timeout [ 587.397984][ T68] bridge_slave_0: left allmulticast mode [ 587.398006][ T68] bridge_slave_0: left promiscuous mode [ 587.398169][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.326877][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.527378][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.598186][ T68] bond0 (unregistering): Released all slaves [ 589.617907][ T5883] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 589.777473][ T5883] usb 2-1: Using ep0 maxpacket: 8 [ 589.779774][ T5883] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 589.779798][ T5883] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 589.779841][ T5883] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 589.779862][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.061064][ T8207] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 592.659184][ T8207] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 592.659221][ T8207] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 592.659285][ T8207] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 592.770072][ T8207] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 592.770135][ T8207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.770183][ T8207] usb 3-1: Product: syz [ 592.770196][ T8207] usb 3-1: Manufacturer: syz [ 592.770209][ T8207] usb 3-1: SerialNumber: syz [ 592.878997][ T8207] hub 3-1:1.0: bad descriptor, ignoring hub [ 592.879032][ T8207] hub 3-1:1.0: probe with driver hub failed with error -5 [ 592.925744][ T9185] input: syz1 as /devices/virtual/input/input29 [ 593.301692][ T5733] usb 2-1: USB disconnect, device number 20 [ 593.323475][ T8207] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 593.509783][ T8207] usb 3-1: USB disconnect, device number 22 [ 593.680066][ T8207] usblp0: removed [ 596.332387][ T9036] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.332593][ T9036] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.332763][ T9036] bridge_slave_0: entered allmulticast mode [ 597.351018][ T9036] bridge_slave_0: entered promiscuous mode [ 597.368111][ T9036] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.368297][ T9036] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.368498][ T9036] bridge_slave_1: entered allmulticast mode [ 597.373706][ T9036] bridge_slave_1: entered promiscuous mode [ 598.531078][ T9036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.955811][ T9036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.505048][ T9240] binder: 9239:9240 ioctl c0306201 0 returned -14 [ 602.571430][ T9036] team0: Port device team_slave_0 added [ 602.600360][ T9036] team0: Port device team_slave_1 added [ 603.246588][ T5965] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 603.459825][ T5965] usb 4-1: Using ep0 maxpacket: 8 [ 603.690446][ T5965] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 603.690473][ T5965] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 603.690519][ T5965] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 603.690539][ T5965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.743543][ T9036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.743558][ T9036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.743579][ T9036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.013747][ T9036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.013761][ T9036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.013782][ T9036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.766136][ T9256] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 604.766178][ T9256] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 604.766584][ T9256] vhci_hcd vhci_hcd.0: Device attached [ 604.910760][ T9249] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 604.910784][ T9249] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 604.910852][ T9249] vhci_hcd vhci_hcd.0: Device attached [ 604.924061][ T9261] vhci_hcd: connection closed [ 604.934877][ T3546] vhci_hcd vhci_hcd.2: stop threads [ 604.934903][ T3546] vhci_hcd vhci_hcd.2: release socket [ 604.953074][ T3546] vhci_hcd vhci_hcd.2: disconnect device [ 604.989422][ T9260] vhci_hcd: connection closed [ 605.009517][ T193] vhci_hcd vhci_hcd.4: stop threads [ 605.009578][ T193] vhci_hcd vhci_hcd.4: release socket [ 605.009700][ T193] vhci_hcd vhci_hcd.4: disconnect device [ 606.797036][ T9036] hsr_slave_0: entered promiscuous mode [ 606.797958][ T9036] hsr_slave_1: entered promiscuous mode [ 606.884828][ T9] usb 4-1: USB disconnect, device number 13 [ 607.123711][ T9273] netlink: 'syz.1.685': attribute type 3 has an invalid length. [ 614.126042][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 614.308394][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 614.312017][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 614.312032][ T9] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 614.312058][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 614.312069][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.757260][ T9319] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 614.757310][ T9319] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 614.757900][ T9319] vhci_hcd vhci_hcd.0: Device attached [ 615.268889][ T9320] vhci_hcd: connection closed [ 615.286710][ T68] vhci_hcd vhci_hcd.3: stop threads [ 615.286766][ T68] vhci_hcd vhci_hcd.3: release socket [ 615.286878][ T68] vhci_hcd vhci_hcd.3: disconnect device [ 617.222915][ T9] libceph: connect (1)[c::]:6789 error -101 [ 617.307227][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 617.400002][ T8207] usb 5-1: USB disconnect, device number 16 [ 617.413035][ T9326] ceph: No mds server is up or the cluster is laggy [ 618.626513][ T5883] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 618.803078][ T9036] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 619.012903][ T5883] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 619.012939][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.012957][ T5883] usb 4-1: Product: syz [ 619.012982][ T5883] usb 4-1: Manufacturer: syz [ 619.012994][ T5883] usb 4-1: SerialNumber: syz [ 619.020721][ T5883] usb 4-1: config 0 descriptor?? [ 619.029972][ T5883] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 619.033651][ T9036] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 619.037686][ T9036] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 619.054024][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 619.055729][ T5883] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 619.055793][ T5883] usb 4-1: media controller created [ 619.249252][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 619.333316][ T5883] DVB: Unable to find symbol mt352_attach() [ 619.524228][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.704'. [ 619.546654][ T9036] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 619.549100][ T9036] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 619.594880][ T5883] DVB: Unable to find symbol nxt6000_attach() [ 619.594895][ T5883] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 619.664854][ T5883] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 619.835741][ T9036] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 619.860007][ T9036] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 620.033079][ T5883] dvb-usb: schedule remote query interval to 1000 msecs. [ 620.033103][ T5883] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 620.033362][ T5883] dvb-usb: bulk message failed: -22 (7/0) [ 620.058465][ T5883] dvb-usb: bulk message failed: -22 (7/0) [ 620.103477][ T5883] usb 4-1: USB disconnect, device number 14 [ 620.178741][ T9036] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 620.531099][ T9370] binder: 9367:9370 ioctl c0306201 200000000040 returned -22 [ 620.793627][ T5883] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 621.611238][ T9] libceph: connect (1)[c::]:6789 error -101 [ 621.611421][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 621.850808][ T9375] ceph: No mds server is up or the cluster is laggy [ 622.788514][ T9] libceph: connect (1)[c::]:6789 error -101 [ 622.788704][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 623.216746][ T9036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.259961][ T9036] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.531253][ T9396] ceph: No mds server is up or the cluster is laggy [ 623.559507][ T9] libceph: connect (1)[c::]:6789 error -101 [ 623.658909][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 624.071328][ T9] libceph: connect (1)[c::]:6789 error -101 [ 624.071454][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 624.441707][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.441774][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.600576][ T5733] libceph: connect (1)[c::]:6789 error -101 [ 624.600694][ T5733] libceph: mon0 (1)[c::]:6789 connect error [ 624.611888][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.612020][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.719239][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.719320][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.287036][ T5733] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 625.911095][ T5733] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 625.911122][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.911140][ T5733] usb 3-1: Product: syz [ 625.911152][ T5733] usb 3-1: Manufacturer: syz [ 625.911164][ T5733] usb 3-1: SerialNumber: syz [ 626.092095][ T5733] usb 3-1: config 0 descriptor?? [ 626.097530][ T5733] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 626.116324][ T5733] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 626.119269][ T5733] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 626.119332][ T5733] usb 3-1: media controller created [ 626.930923][ T5733] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 627.156573][ T5733] DVB: Unable to find symbol mt352_attach() [ 628.329854][ T5733] DVB: Unable to find symbol nxt6000_attach() [ 628.329868][ T5733] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 628.334821][ T5733] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input31 [ 628.350181][ T9438] binder: 9435:9438 ioctl c0306201 200000000040 returned -22 [ 628.788071][ T9440] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 628.788133][ T9440] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 628.788754][ T9440] vhci_hcd vhci_hcd.0: Device attached [ 629.349666][ T5733] dvb-usb: schedule remote query interval to 1000 msecs. [ 629.349692][ T5733] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 629.349708][ T5733] dvb-usb: bulk message failed: -22 (7/0) [ 629.349729][ T5733] dvb-usb: bulk message failed: -22 (7/0) [ 629.377455][ T5733] usb 3-1: USB disconnect, device number 23 [ 629.415961][ T9] usb 35-1: new high-speed USB device number 5 using vhci_hcd [ 631.035298][ T9441] vhci_hcd: connection reset by peer [ 631.083597][ T7641] vhci_hcd vhci_hcd.1: stop threads [ 631.083659][ T7641] vhci_hcd vhci_hcd.1: release socket [ 631.083818][ T7641] vhci_hcd vhci_hcd.1: disconnect device [ 634.516069][ T9] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 634.821796][ T5733] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 638.806008][ T8207] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 638.873524][ T5613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 638.914692][ T5613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 638.928517][ T5613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 638.931687][ T5613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 638.932617][ T9] libceph: connect (1)[c::]:6789 error -101 [ 638.932786][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 638.954332][ T9] libceph: connect (1)[c::]:6789 error -101 [ 638.954451][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 638.956893][ T9480] ceph: No mds server is up or the cluster is laggy [ 638.995160][ T5613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 639.208023][ T9] libceph: connect (1)[c::]:6789 error -101 [ 639.208201][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 639.482273][ T9490] trusted_key: encrypted_key: insufficient parameters specified [ 640.238972][ T9] libceph: connect (1)[c::]:6789 error -101 [ 640.239155][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 641.279553][ T8636] Bluetooth: hci5: command tx timeout [ 643.325206][ T8636] Bluetooth: hci5: command tx timeout [ 645.493421][ T8636] Bluetooth: hci5: command tx timeout [ 647.556135][ T5613] Bluetooth: hci5: command tx timeout [ 652.927914][ T8207] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 653.017066][ T9573] macvlan2: entered promiscuous mode [ 653.017091][ T9573] bridge0: entered promiscuous mode [ 653.099853][ T9576] input: syz1 as /devices/virtual/input/input32 [ 653.128519][ T8207] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 653.128544][ T8207] usb 5-1: config 0 has no interface number 0 [ 653.128667][ T8207] usb 5-1: config 0 interface 41 has no altsetting 0 [ 653.135743][ T8207] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 653.135802][ T8207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.136022][ T8207] usb 5-1: Product: syz [ 653.136072][ T8207] usb 5-1: Manufacturer: syz [ 653.136120][ T8207] usb 5-1: SerialNumber: syz [ 653.282428][ T8207] usb 5-1: config 0 descriptor?? [ 654.321472][ T8207] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 656.455017][ T9] usb 5-1: USB disconnect, device number 17 [ 661.333037][ T9] libceph: connect (1)[c::]:6789 error -101 [ 661.333288][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 661.333860][ T9] libceph: connect (1)[c::]:6789 error -101 [ 661.334051][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 661.334839][ T9609] ceph: No mds server is up or the cluster is laggy [ 661.435111][ T9589] netlink: 'syz.4.765': attribute type 3 has an invalid length. [ 661.517219][ T9616] binder: 9615:9616 ioctl c0306201 200000000040 returned -14 [ 662.286879][ T9] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 662.611488][ T9] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 662.611560][ T9] usb 4-1: config 0 has no interface number 0 [ 662.611905][ T9] usb 4-1: config 0 interface 41 has no altsetting 0 [ 662.778678][ T9] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 662.778704][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.778722][ T9] usb 4-1: Product: syz [ 662.778734][ T9] usb 4-1: Manufacturer: syz [ 662.778747][ T9] usb 4-1: SerialNumber: syz [ 662.828294][ T9] usb 4-1: config 0 descriptor?? [ 664.472759][ T9] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 664.619287][ T9646] ceph: No mds server is up or the cluster is laggy [ 664.666845][ T9] libceph: connect (1)[c::]:6789 error -101 [ 664.674630][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 665.168526][ T9] libceph: connect (1)[c::]:6789 error -101 [ 665.347564][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 666.002455][ T31] usb 4-1: USB disconnect, device number 16 [ 667.306551][ T9662] netlink: 'syz.3.785': attribute type 3 has an invalid length. [ 673.546967][ T9685] ceph: No mds server is up or the cluster is laggy [ 673.558707][ T5965] libceph: connect (1)[c::]:6789 error -101 [ 673.559369][ T5965] libceph: mon0 (1)[c::]:6789 connect error [ 674.082903][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 674.083089][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 674.350124][ T9484] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.350239][ T9484] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.350353][ T9484] bridge_slave_0: entered allmulticast mode [ 674.356920][ T9484] bridge_slave_0: entered promiscuous mode [ 674.359944][ T9484] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.360128][ T9484] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.360302][ T9484] bridge_slave_1: entered allmulticast mode [ 674.362752][ T9484] bridge_slave_1: entered promiscuous mode [ 675.205060][ T5965] libceph: connect (1)[c::]:6789 error -101 [ 675.205262][ T5965] libceph: mon0 (1)[c::]:6789 connect error [ 676.621030][ T9484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.665613][ T9484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.896106][ T5733] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 677.114835][ T5733] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 677.114860][ T5733] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 677.114877][ T5733] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 677.114922][ T5733] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 677.114944][ T5733] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 677.119829][ T5733] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 677.119855][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 677.119872][ T5733] usb 5-1: Product: syz [ 677.119883][ T5733] usb 5-1: Manufacturer: syz [ 677.664539][ T5733] cdc_wdm 5-1:1.0: skipping garbage [ 677.664559][ T5733] cdc_wdm 5-1:1.0: skipping garbage [ 677.686056][ T9733] netlink: 'syz.1.798': attribute type 3 has an invalid length. [ 677.701179][ T9484] team0: Port device team_slave_0 added [ 677.724808][ T5733] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 677.724901][ T5733] cdc_wdm 5-1:1.0: Unknown control protocol [ 677.731068][ T9484] team0: Port device team_slave_1 added [ 677.806032][ T5738] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 677.958345][ T5738] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 677.958371][ T5738] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 677.958391][ T5738] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 677.960871][ T5738] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 677.960896][ T5738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.960912][ T5738] usb 4-1: Product: syz [ 677.960923][ T5738] usb 4-1: Manufacturer: syz [ 677.960935][ T5738] usb 4-1: SerialNumber: syz [ 678.184130][ T5738] hub 4-1:1.0: bad descriptor, ignoring hub [ 678.184166][ T5738] hub 4-1:1.0: probe with driver hub failed with error -5 [ 678.186685][ T5965] usb 5-1: USB disconnect, device number 18 [ 678.277714][ T5738] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 678.485064][ T9484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.485079][ T9484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.485100][ T9484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.575111][ T9484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.575122][ T9484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.575135][ T9484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.042339][ T9484] hsr_slave_0: entered promiscuous mode [ 679.070827][ T9484] hsr_slave_1: entered promiscuous mode [ 679.072758][ T9484] debugfs: 'hsr0' already exists in 'hsr' [ 679.072786][ T9484] Cannot create hsr debugfs directory [ 679.441222][ T8636] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 680.637831][ T9758] efs: cannot read volume header [ 680.752093][ T3724] bridge_slave_1: left allmulticast mode [ 680.752116][ T3724] bridge_slave_1: left promiscuous mode [ 680.752286][ T3724] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.757992][ T5965] usb 4-1: USB disconnect, device number 17 [ 681.787831][ T3724] bridge_slave_0: left allmulticast mode [ 681.787864][ T3724] bridge_slave_0: left promiscuous mode [ 681.788134][ T3724] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.811918][ T5965] usblp0: removed [ 682.493132][ T9774] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 683.701852][ T3724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.843645][ T3724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.857770][ T3724] bond0 (unregistering): Released all slaves [ 686.009906][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.009969][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.743237][ T9804] ceph: No mds server is up or the cluster is laggy [ 686.950820][ T5965] libceph: connect (1)[c::]:6789 error -101 [ 687.119691][ T5965] libceph: mon0 (1)[c::]:6789 connect error [ 687.532803][ T5965] libceph: connect (1)[c::]:6789 error -101 [ 687.610361][ T5965] libceph: mon0 (1)[c::]:6789 connect error [ 687.983096][ T3724] hsr_slave_0: left promiscuous mode [ 688.092302][ T3724] hsr_slave_1: left promiscuous mode [ 688.093285][ T3724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.148506][ T3724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.610731][ T5733] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 691.173937][ T5733] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 691.173962][ T5733] usb 3-1: config 0 has no interface number 0 [ 691.174006][ T5733] usb 3-1: config 0 interface 41 has no altsetting 0 [ 691.201439][ T5733] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 691.201456][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.201467][ T5733] usb 3-1: Product: syz [ 691.201474][ T5733] usb 3-1: Manufacturer: syz [ 691.201481][ T5733] usb 3-1: SerialNumber: syz [ 691.301717][ T5733] usb 3-1: config 0 descriptor?? [ 692.410641][ T5733] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 692.511734][ T3724] team0 (unregistering): Port device team_slave_1 removed [ 692.566822][ T3724] team0 (unregistering): Port device team_slave_0 removed [ 692.648277][ T31] usb 3-1: USB disconnect, device number 24 [ 694.063143][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5 [ 697.570617][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 698.272288][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 698.296125][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 698.401104][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 698.401963][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 698.768912][ T5883] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 698.936267][ T5883] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 698.936335][ T5883] usb 2-1: config 0 has no interface number 0 [ 698.936448][ T5883] usb 2-1: config 0 interface 41 has no altsetting 0 [ 699.094298][ T5883] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 699.094326][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.094343][ T5883] usb 2-1: Product: syz [ 699.094356][ T5883] usb 2-1: Manufacturer: syz [ 699.094368][ T5883] usb 2-1: SerialNumber: syz [ 699.565683][ T5883] usb 2-1: config 0 descriptor?? [ 699.775976][ T5612] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 699.935880][ T5612] usb 4-1: Using ep0 maxpacket: 8 [ 699.939302][ T5612] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 699.939325][ T5612] usb 4-1: config 0 has no interface number 0 [ 699.939361][ T5612] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 699.939432][ T5612] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 699.939455][ T5612] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 699.939478][ T5612] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 699.939513][ T5612] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 699.939531][ T5612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.943836][ T5612] usb 4-1: config 0 descriptor?? [ 700.098116][ T5612] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 700.203914][ T5883] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 700.231913][ T5883] usb 2-1: USB disconnect, device number 21 [ 700.378478][ T5612] usb 4-1: USB disconnect, device number 18 [ 700.378748][ C0] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 700.539663][ T5613] Bluetooth: hci2: command tx timeout [ 700.623975][ T5612] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 701.662412][ T9939] comedi comedi0: pcm3724: I/O base address not correctly aligned [ 701.730630][ T5613] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 702.632964][ T5613] Bluetooth: hci2: command tx timeout [ 704.062112][ T9957] efs: cannot read volume header [ 704.676243][ T5613] Bluetooth: hci2: command tx timeout [ 706.763371][ T5613] Bluetooth: hci2: command tx timeout [ 707.307479][ T5720] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 707.514335][ T9996] binder: 9994:9996 ioctl c0306201 200000000040 returned -22 [ 707.518243][ T5720] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 707.518267][ T5720] usb 2-1: config 0 has no interface number 0 [ 707.518310][ T5720] usb 2-1: config 0 interface 41 has no altsetting 0 [ 707.520460][ T5720] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 707.520484][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.520501][ T5720] usb 2-1: Product: syz [ 707.520513][ T5720] usb 2-1: Manufacturer: syz [ 707.520525][ T5720] usb 2-1: SerialNumber: syz [ 707.525238][ T9996] binder: 9994:9996 ioctl c0306201 200000000640 returned -22 [ 707.534681][ T5720] usb 2-1: config 0 descriptor?? [ 707.845892][ T9903] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.846059][ T9903] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.846220][ T9903] bridge_slave_0: entered allmulticast mode [ 707.848993][ T9903] bridge_slave_0: entered promiscuous mode [ 707.852117][ T9903] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.852323][ T9903] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.898767][ T9903] bridge_slave_1: entered allmulticast mode [ 707.900867][ T9903] bridge_slave_1: entered promiscuous mode [ 708.494340][ T5720] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 708.494979][ T5720] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 708.570340][ T5720] usb 2-1: USB disconnect, device number 22 [ 708.669025][ T8101] bridge_slave_1: left allmulticast mode [ 708.669059][ T8101] bridge_slave_1: left promiscuous mode [ 708.669358][ T8101] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.807586][ T8101] bridge_slave_0: left allmulticast mode [ 708.807619][ T8101] bridge_slave_0: left promiscuous mode [ 708.807892][ T8101] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.332162][ T8101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.419360][ T8101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.486175][ T8101] bond0 (unregistering): Released all slaves [ 709.533015][ T9998] batadv_slave_0: entered promiscuous mode [ 710.074270][T10028] netlink: 277 bytes leftover after parsing attributes in process `syz.3.861'. [ 711.028050][ T9903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.245679][ T9903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.445351][T10055] 9p: Bad value for 'rfdno' [ 713.019152][ T8101] hsr_slave_0: left promiscuous mode [ 713.065938][ T31] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 713.084546][ T8101] hsr_slave_1: left promiscuous mode [ 713.085480][ T8101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.139606][ T8101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.469493][ T5733] libceph: connect (1)[c::]:6789 error -101 [ 713.470196][ T5733] libceph: mon0 (1)[c::]:6789 connect error [ 713.470608][T10070] ceph: No mds server is up or the cluster is laggy [ 713.471887][ T5733] libceph: connect (1)[c::]:6789 error -101 [ 713.472438][ T5733] libceph: mon0 (1)[c::]:6789 connect error [ 713.729568][ T5720] libceph: connect (1)[c::]:6789 error -101 [ 713.754133][ T5720] libceph: mon0 (1)[c::]:6789 connect error [ 714.260628][ T5720] libceph: connect (1)[c::]:6789 error -101 [ 714.261181][ T5720] libceph: mon0 (1)[c::]:6789 connect error [ 714.436287][ T31] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 714.436312][ T31] usb 5-1: config 0 has no interface number 0 [ 714.436356][ T31] usb 5-1: config 0 interface 41 has no altsetting 0 [ 714.447192][ T31] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 714.447253][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.447271][ T31] usb 5-1: Product: syz [ 714.447282][ T31] usb 5-1: Manufacturer: syz [ 714.447294][ T31] usb 5-1: SerialNumber: syz [ 714.495354][ T31] usb 5-1: config 0 descriptor?? [ 715.510907][ T31] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 715.511341][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 715.517295][ T31] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -32 [ 715.679779][T10087] netlink: 277 bytes leftover after parsing attributes in process `syz.3.871'. [ 716.533002][ T5612] usb 5-1: USB disconnect, device number 19 [ 719.079526][ T8101] team0 (unregistering): Port device team_slave_1 removed [ 719.201319][ T8101] team0 (unregistering): Port device team_slave_0 removed [ 719.513596][T10108] efs: cannot read volume header [ 720.569789][ T9903] team0: Port device team_slave_0 added [ 720.572646][T10098] netlink: 'syz.3.874': attribute type 3 has an invalid length. [ 720.586769][ T9903] team0: Port device team_slave_1 added [ 720.814266][ T9903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.814283][ T9903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.814312][ T9903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.818712][ T9903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.818725][ T9903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.818747][ T9903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.745001][ T9903] hsr_slave_0: entered promiscuous mode [ 721.747461][ T9903] hsr_slave_1: entered promiscuous mode [ 722.815256][T10119] Bluetooth: hci0: unsupported parameter 255 [ 722.815280][T10119] Bluetooth: hci0: unsupported parameter 255 [ 723.470594][ T5720] libceph: connect (1)[c::]:6789 error -101 [ 723.480202][ T5720] libceph: mon0 (1)[c::]:6789 connect error [ 723.492986][T10127] ceph: No mds server is up or the cluster is laggy [ 723.817581][ T5720] libceph: connect (1)[c::]:6789 error -101 [ 723.834830][ T5720] libceph: mon0 (1)[c::]:6789 connect error [ 724.340600][ T5720] libceph: connect (1)[c::]:6789 error -101 [ 724.340780][ T5720] libceph: mon0 (1)[c::]:6789 connect error [ 725.757499][ T5883] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 726.566722][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 726.836001][ T5883] usb 5-1: unable to get BOS descriptor or descriptor too short [ 726.849717][ T5883] usb 5-1: config 4 interface 0 has no altsetting 0 [ 726.868410][ T5883] usb 5-1: string descriptor 0 read error: -22 [ 726.868501][ T5883] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 726.868521][ T5883] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 726.967702][ T5883] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 726.971776][ T9903] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 727.020705][ T5883] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 727.021061][ T5883] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 727.021090][ T5883] usb 5-1: media controller created [ 727.057898][ T9903] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 727.064032][T10146] netlink: 'syz.1.887': attribute type 3 has an invalid length. [ 727.071752][ T9903] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 727.606923][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 727.650701][ T9903] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 727.662441][ T9903] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 727.819834][T10149] 9p: Bad value for 'rfdno' [ 728.121034][ T9903] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 728.130204][ T9903] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 728.135458][ T5883] zl10353_read_register: readreg error (reg=127, ret==0) [ 728.241009][ T9903] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 728.517884][ T5883] usb 5-1: USB disconnect, device number 20 [ 729.930953][ T9903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.068401][ T9903] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.169142][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.170079][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.313124][ T1871] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.313257][ T1871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.441529][T10182] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 731.441547][T10182] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 731.441602][T10182] vhci_hcd vhci_hcd.0: Device attached [ 731.466520][T10183] vhci_hcd: connection closed [ 731.469100][ T1871] vhci_hcd vhci_hcd.1: stop threads [ 731.469122][ T1871] vhci_hcd vhci_hcd.1: release socket [ 731.469159][ T1871] vhci_hcd vhci_hcd.1: disconnect device [ 734.169237][ T9903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.295966][ T5613] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 735.043684][ T9903] veth0_vlan: entered promiscuous mode [ 735.100189][ T9903] veth1_vlan: entered promiscuous mode [ 735.426514][ T9903] veth0_macvtap: entered promiscuous mode [ 735.473929][ T9903] veth1_macvtap: entered promiscuous mode [ 735.820531][ T9903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.892691][ T9903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.055771][ T8101] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.095581][ T8101] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.105747][ T8101] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.130084][ T8101] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.206141][T10237] binder: 10236:10237 ioctl c0306201 200000000640 returned -22 [ 736.676157][T10242] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 736.676184][T10242] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 736.676274][T10242] vhci_hcd vhci_hcd.0: Device attached [ 737.698139][T10243] vhci_hcd: connection closed [ 737.915920][ T7641] vhci_hcd vhci_hcd.2: stop threads [ 737.915946][ T7641] vhci_hcd vhci_hcd.2: release socket [ 737.916022][ T7641] vhci_hcd vhci_hcd.2: disconnect device [ 738.084961][ T820] usb 37-1: new high-speed USB device number 5 using vhci_hcd [ 738.085027][ T820] usb 37-1: enqueue for inactive port 0 [ 738.158853][ T820] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 738.673240][ T1871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.673259][ T1871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.445096][ T3724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.445116][ T3724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.863666][T10271] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 743.863703][T10271] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 743.864423][T10271] vhci_hcd vhci_hcd.0: Device attached [ 744.477290][T10273] vhci_hcd: connection closed [ 744.507524][ T56] vhci_hcd vhci_hcd.2: stop threads [ 744.507581][ T56] vhci_hcd vhci_hcd.2: release socket [ 744.508717][ T56] vhci_hcd vhci_hcd.2: disconnect device [ 744.591643][ T820] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 746.896309][ T5612] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 747.112512][ T5612] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 747.112590][ T5612] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 747.112608][ T5612] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 747.112753][ T5612] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 747.112839][ T5612] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 747.266081][ T5612] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 747.266561][ T5612] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 747.266988][ T5612] usb 3-1: Product: syz [ 747.267520][ T5612] usb 3-1: Manufacturer: syz [ 747.317943][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.317996][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.882681][ T5612] cdc_wdm 3-1:1.0: skipping garbage [ 747.882733][ T5612] cdc_wdm 3-1:1.0: skipping garbage [ 750.481352][ T5612] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 750.481372][ T5612] cdc_wdm 3-1:1.0: Unknown control protocol [ 750.576187][ T5612] usb 3-1: USB disconnect, device number 25 [ 754.209902][T10321] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 754.210059][T10321] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 754.210589][T10321] vhci_hcd vhci_hcd.0: Device attached [ 754.675630][T10322] vhci_hcd: connection closed [ 754.725046][ T56] vhci_hcd vhci_hcd.3: stop threads [ 754.725112][ T56] vhci_hcd vhci_hcd.3: release socket [ 755.060774][ T56] vhci_hcd vhci_hcd.3: disconnect device [ 756.661527][T10331] input: syz1 as /devices/virtual/input/input33 [ 760.381306][ T8207] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 760.381452][ T820] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 760.508995][T10370] netlink: 24 bytes leftover after parsing attributes in process `syz.4.945'. [ 760.549677][ T820] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 760.549704][ T820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.549721][ T820] usb 4-1: Product: syz [ 760.549733][ T820] usb 4-1: Manufacturer: syz [ 760.549746][ T820] usb 4-1: SerialNumber: syz [ 760.556741][ T8207] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 760.556768][ T8207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.556785][ T8207] usb 3-1: Product: syz [ 760.556797][ T8207] usb 3-1: Manufacturer: syz [ 760.556809][ T8207] usb 3-1: SerialNumber: syz [ 760.609251][ T8207] usb 3-1: config 0 descriptor?? [ 760.610879][ T820] usb 4-1: config 0 descriptor?? [ 760.859764][T10372] ceph: No mds server is up or the cluster is laggy [ 760.873272][ T31] libceph: connect (1)[c::]:6789 error -101 [ 760.873861][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 760.906846][ T8207] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 760.907434][T10370] netlink: 67 bytes leftover after parsing attributes in process `syz.4.945'. [ 761.127526][ T31] libceph: connect (1)[c::]:6789 error -101 [ 761.128141][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 761.735311][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 761.735481][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 761.760725][ T820] usb 4-1: can't set config #0, error -71 [ 762.012302][T10380] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13) [ 762.012341][T10380] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 762.012821][T10380] vhci_hcd vhci_hcd.0: Device attached [ 762.346186][ T5883] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 762.528323][T10381] vhci_hcd: connection reset by peer [ 762.552892][ T43] vhci_hcd vhci_hcd.5: stop threads [ 762.554897][ T43] vhci_hcd vhci_hcd.5: release socket [ 762.555084][ T43] vhci_hcd vhci_hcd.5: disconnect device [ 762.910415][ T8207] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 762.917641][ T8207] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 762.917710][ T8207] usb 3-1: media controller created [ 762.918967][ T820] usb 4-1: USB disconnect, device number 19 [ 763.013205][ T8207] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 763.574011][ T8207] DVB: Unable to find symbol mt352_attach() [ 763.811022][ T8207] DVB: Unable to find symbol nxt6000_attach() [ 763.811070][ T8207] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 764.577064][ T8207] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input35 [ 764.687113][ T8207] dvb-usb: schedule remote query interval to 1000 msecs. [ 764.687134][ T8207] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 764.687150][ T8207] dvb-usb: bulk message failed: -22 (7/0) [ 764.687164][ T8207] dvb-usb: bulk message failed: -22 (7/0) [ 764.702611][ T8207] usb 3-1: USB disconnect, device number 26 [ 765.455937][ T5965] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 765.688718][ T5965] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 765.688744][ T5965] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 765.688760][ T5965] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 765.688805][ T5965] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 765.688827][ T5965] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 765.691493][ T5965] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 765.691517][ T5965] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 765.691535][ T5965] usb 6-1: Product: syz [ 765.691547][ T5965] usb 6-1: Manufacturer: syz [ 765.768670][T10402] efs: cannot read volume header [ 766.583411][ T8207] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 766.593616][ T5965] cdc_wdm 6-1:1.0: skipping garbage [ 766.593634][ T5965] cdc_wdm 6-1:1.0: skipping garbage [ 766.777135][ T5965] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 766.777154][ T5965] cdc_wdm 6-1:1.0: Unknown control protocol [ 767.038753][ T5965] usb 6-1: USB disconnect, device number 2 [ 767.498027][T10415] netlink: 'syz.5.951': attribute type 9 has an invalid length. [ 768.366773][ T5883] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 768.669780][T10416] efs: cannot read volume header [ 769.061992][ T8207] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 769.245879][ T8207] usb 4-1: Using ep0 maxpacket: 8 [ 769.248462][ T8207] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 769.248485][ T8207] usb 4-1: config 0 has no interface number 0 [ 769.248525][ T8207] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 769.248545][ T8207] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 769.248566][ T8207] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 769.248589][ T8207] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 769.248625][ T8207] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 769.248645][ T8207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.520759][ T8207] usb 4-1: config 0 descriptor?? [ 769.682543][ T8207] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 769.822134][T10424] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 769.896196][T10423] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 769.896234][T10423] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 769.896282][T10423] vhci_hcd vhci_hcd.0: Device attached [ 769.900327][T10425] vhci_hcd: connection closed [ 769.932283][ T56] vhci_hcd vhci_hcd.2: stop threads [ 769.932310][ T56] vhci_hcd vhci_hcd.2: release socket [ 769.932344][ T56] vhci_hcd vhci_hcd.2: disconnect device [ 770.049871][ T5733] usb 4-1: USB disconnect, device number 20 [ 770.104705][ T5733] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 773.292904][T10455] netlink: 36 bytes leftover after parsing attributes in process `syz.2.970'. [ 774.308811][T10458] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 774.923113][ T37] audit: type=1800 audit(1785039627.784:2): pid=10467 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.974" name="host_addr" dev="configfs" ino=24486 res=0 errno=0 [ 776.055907][ T5612] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 776.211834][ T5612] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 776.214098][ T5612] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 776.214112][ T5612] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 776.214141][ T5612] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 776.214155][ T5612] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 776.216889][ T5612] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 776.216912][ T5612] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 776.216929][ T5612] usb 2-1: Product: syz [ 776.216942][ T5612] usb 2-1: Manufacturer: syz [ 776.275112][ T5612] cdc_wdm 2-1:1.0: skipping garbage [ 776.275131][ T5612] cdc_wdm 2-1:1.0: skipping garbage [ 776.320896][ T5612] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 776.320916][ T5612] cdc_wdm 2-1:1.0: Unknown control protocol [ 776.684091][ C1] cdc_wdm 2-1:1.0: Unexpected error -71 [ 776.684509][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 776.684574][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 776.684791][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 776.684801][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 776.685004][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 776.685012][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 776.685227][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 776.685236][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 776.685448][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 776.685463][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 776.685678][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 776.685694][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 776.685911][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 776.685925][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 776.686144][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 776.686161][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 776.686521][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 776.686537][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 776.687043][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 776.687061][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 776.698807][ T5612] usb 2-1: USB disconnect, device number 23 [ 776.698891][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 777.159525][T10496] netlink: 'syz.1.976': attribute type 9 has an invalid length. [ 778.847659][T10498] efs: cannot read volume header [ 780.415962][ T31] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 780.575953][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 780.603731][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.603760][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.603795][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 780.603814][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.685137][ T31] usb 2-1: config 0 descriptor?? [ 780.707956][ T31] hub 2-1:0.0: USB hub found [ 780.951259][ T31] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 781.257374][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 781.257505][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 781.316884][ T31] usb 2-1: USB disconnect, device number 24 [ 782.863975][T10504] Set syz1 is full, maxelem 6117 reached [ 783.019747][T10554] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 783.019841][T10554] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 783.020251][T10554] vhci_hcd vhci_hcd.0: Device attached [ 783.516325][ T5612] usb 35-1: new high-speed USB device number 6 using vhci_hcd [ 783.630047][T10555] vhci_hcd: connection reset by peer [ 783.721814][ T8101] vhci_hcd vhci_hcd.1: stop threads [ 783.721877][ T8101] vhci_hcd vhci_hcd.1: release socket [ 783.722273][ T8101] vhci_hcd vhci_hcd.1: disconnect device [ 788.276465][T10587] efs: cannot read volume header [ 789.045972][ T5612] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 789.547046][T10593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1023'. [ 789.547934][T10593] netlink: 67 bytes leftover after parsing attributes in process `syz.2.1023'. [ 791.917744][T10615] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1032'. [ 792.296729][ T5883] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 793.102923][ T5883] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 793.102950][ T5883] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 793.102967][ T5883] usb 6-1: config 220 has no interface number 2 [ 793.103030][ T5883] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 793.103054][ T5883] usb 6-1: config 220 interface 0 has no altsetting 0 [ 793.103068][ T5883] usb 6-1: config 220 interface 76 has no altsetting 0 [ 793.103084][ T5883] usb 6-1: config 220 interface 1 has no altsetting 0 [ 793.203696][ T5883] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 793.203724][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.203741][ T5883] usb 6-1: Product: syz [ 793.203754][ T5883] usb 6-1: Manufacturer: syz [ 793.203767][ T5883] usb 6-1: SerialNumber: syz [ 794.289984][ T5883] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 794.290015][ T5883] uvcvideo 6-1:220.0: No valid video chain found. [ 794.290072][ T5883] usb 6-1: selecting invalid altsetting 0 [ 794.336367][ T5883] usb 6-1: selecting invalid altsetting 0 [ 794.336423][ T5883] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 794.442522][ T5883] usb 6-1: USB disconnect, device number 3 [ 794.515196][T10582] Set syz1 is full, maxelem 6117 reached [ 795.717429][ T821] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 795.865930][ T821] usb 3-1: Using ep0 maxpacket: 8 [ 795.869016][ T821] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 795.869040][ T821] usb 3-1: config 0 has no interface number 0 [ 795.869064][ T821] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 795.869076][ T821] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 795.869087][ T821] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 795.869099][ T821] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 795.869120][ T821] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 795.869131][ T821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.963994][ T821] usb 3-1: config 0 descriptor?? [ 796.002572][ T821] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 797.148590][ T5733] usb 3-1: USB disconnect, device number 27 [ 797.183075][ T5733] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 797.510682][ T820] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 797.685936][ T820] usb 6-1: Using ep0 maxpacket: 8 [ 797.688189][ T820] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 797.688214][ T820] usb 6-1: config 0 has no interface number 0 [ 797.688253][ T820] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 797.688272][ T820] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 797.688293][ T820] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 797.688314][ T820] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 797.688350][ T820] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 797.688370][ T820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.366965][ T820] usb 6-1: config 0 descriptor?? [ 798.422519][ T820] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 798.593724][T10677] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 798.593749][T10677] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 798.593846][T10677] vhci_hcd vhci_hcd.0: Device attached [ 798.619707][T10679] vhci_hcd: connection closed [ 798.623125][ T8551] vhci_hcd vhci_hcd.2: stop threads [ 798.623143][ T8551] vhci_hcd vhci_hcd.2: release socket [ 798.623166][ T8551] vhci_hcd vhci_hcd.2: disconnect device [ 798.800922][ T5588] usb 6-1: USB disconnect, device number 4 [ 798.806916][ T5588] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 799.183241][T10689] efs: cannot read volume header [ 801.469590][T10705] efs: cannot read volume header [ 803.456924][ T820] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 803.605964][ T820] usb 2-1: Using ep0 maxpacket: 8 [ 803.608686][ T820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 803.608727][ T820] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 803.608748][ T820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.625423][ T820] usb 2-1: config 0 descriptor?? [ 803.885706][ T820] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 804.183207][T10723] efs: cannot read volume header [ 804.475551][ T821] usb 2-1: USB disconnect, device number 25 [ 805.640995][T10736] efs: cannot read volume header [ 809.024369][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.024435][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.246755][T10728] Set syz1 is full, maxelem 6117 reached [ 809.915983][ T5733] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 810.865978][ T5733] usb 3-1: Using ep0 maxpacket: 8 [ 810.868542][ T5733] usb 3-1: unable to get BOS descriptor or descriptor too short [ 810.869859][ T5733] usb 3-1: config 4 interface 0 has no altsetting 0 [ 810.873015][ T5733] usb 3-1: string descriptor 0 read error: -22 [ 810.873104][ T5733] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 810.873125][ T5733] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 810.987652][ T5733] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 811.007613][ T5733] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 811.007967][ T5733] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 811.008011][ T5733] usb 3-1: media controller created [ 811.081850][ T5733] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 811.928127][T10783] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 812.073206][ T5733] zl10353_read_register: readreg error (reg=127, ret==0) [ 812.327892][ T5733] usb 3-1: USB disconnect, device number 28 [ 815.587610][T10847] efs: cannot read volume header [ 819.115329][T10880] input: syz1 as /devices/virtual/input/input37 [ 821.165923][T10881] Bluetooth: hci2: command 0x0406 tx timeout [ 827.039817][T10957] efs: cannot read volume header [ 828.099040][ T5588] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 828.247917][ T5588] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 828.247944][ T5588] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 828.247960][ T5588] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 828.248004][ T5588] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 828.248027][ T5588] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 828.250796][ T5588] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 828.250822][ T5588] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 828.250840][ T5588] usb 6-1: Product: syz [ 828.250852][ T5588] usb 6-1: Manufacturer: syz [ 828.289362][ T5588] cdc_wdm 6-1:1.0: skipping garbage [ 828.289380][ T5588] cdc_wdm 6-1:1.0: skipping garbage [ 828.308583][ T5588] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 828.308603][ T5588] cdc_wdm 6-1:1.0: Unknown control protocol [ 828.465942][ T5733] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 828.620670][ T5733] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 828.620695][ T5733] usb 3-1: config 0 has no interface number 0 [ 828.620736][ T5733] usb 3-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 828.620756][ T5733] usb 3-1: config 0 interface 41 has no altsetting 0 [ 828.624309][ T5733] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 828.624334][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.624351][ T5733] usb 3-1: Product: syz [ 828.624363][ T5733] usb 3-1: Manufacturer: syz [ 828.624376][ T5733] usb 3-1: SerialNumber: syz [ 828.699065][ T5733] usb 3-1: config 0 descriptor?? [ 828.713866][ T5733] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 828.731905][ C1] cdc_wdm 6-1:1.0: Unexpected error -71 [ 828.731975][ C1] wdm_int_callback: 29 callbacks suppressed [ 828.731989][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 828.732001][ C1] wdm_int_callback: 29 callbacks suppressed [ 828.732013][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 828.732231][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 828.732247][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 828.732478][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 828.732494][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 828.732718][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 828.732734][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 828.732949][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 828.732963][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 828.733176][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 828.733194][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 828.733408][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 828.733424][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 828.733643][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 828.733660][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 828.733884][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 828.733900][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 828.734112][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 828.734129][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 828.800486][ T821] usb 6-1: USB disconnect, device number 5 [ 828.800597][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 829.056023][ T5612] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 829.216032][ T5612] usb 2-1: Using ep0 maxpacket: 8 [ 829.218046][ T5612] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 829.218069][ T5612] usb 2-1: config 0 has no interface number 0 [ 829.218108][ T5612] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 829.218127][ T5612] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 829.218144][ T5612] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 829.218180][ T5612] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 829.218199][ T5612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.286547][ T5612] usb 2-1: config 0 descriptor?? [ 829.355313][T11004] netlink: 'syz.5.1168': attribute type 9 has an invalid length. [ 830.016991][ T5612] ldusb 2-1:0.55: Interrupt in endpoint not found [ 830.218133][ T5733] usb 2-1: USB disconnect, device number 26 [ 831.258327][ T821] usb 3-1: USB disconnect, device number 29 [ 831.575996][ T5738] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 831.676972][T11032] Set syz1 is full, maxelem 6117 reached [ 831.725944][ T5738] usb 2-1: Using ep0 maxpacket: 32 [ 831.728400][ T5738] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.728427][ T5738] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.728461][ T5738] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 831.728481][ T5738] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.803880][ T5738] usb 2-1: config 0 descriptor?? [ 831.872798][ T5738] hub 2-1:0.0: USB hub found [ 832.020830][ T5738] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 832.292232][ T5738] usbhid 2-1:0.0: can't add hid device: -71 [ 832.292343][ T5738] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 832.338813][ T5738] usb 2-1: USB disconnect, device number 27 [ 832.716026][ T5733] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 832.872991][ T5733] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 832.873074][ T5733] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 832.873092][ T5733] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 832.873137][ T5733] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 832.873159][ T5733] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 832.882534][ T5733] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 832.882562][ T5733] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 832.882581][ T5733] usb 6-1: Product: syz [ 832.882593][ T5733] usb 6-1: Manufacturer: syz [ 833.529694][ T5733] cdc_wdm 6-1:1.0: skipping garbage [ 833.529714][ T5733] cdc_wdm 6-1:1.0: skipping garbage [ 833.570256][ T5733] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 833.570277][ T5733] cdc_wdm 6-1:1.0: Unknown control protocol [ 833.885894][ T5733] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 833.986118][ C1] cdc_wdm 6-1:1.0: Unexpected error -71 [ 833.986193][ C1] wdm_int_callback: 310 callbacks suppressed [ 833.986209][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 833.986222][ C1] wdm_int_callback: 310 callbacks suppressed [ 833.986234][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 833.986456][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 833.986473][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 833.986888][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 833.986905][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 833.987137][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 833.987153][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 833.987377][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 833.987394][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 833.987634][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 833.987651][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 833.987743][ T821] usb 6-1: USB disconnect, device number 6 [ 833.987877][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 833.987893][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 833.987907][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 834.038131][ T5733] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 834.038156][ T5733] usb 2-1: config 0 has no interface number 0 [ 834.038197][ T5733] usb 2-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 834.038216][ T5733] usb 2-1: config 0 interface 41 has no altsetting 0 [ 834.097415][ T5733] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 834.097442][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.097460][ T5733] usb 2-1: Product: syz [ 834.097472][ T5733] usb 2-1: Manufacturer: syz [ 834.097485][ T5733] usb 2-1: SerialNumber: syz [ 834.186414][ T5733] usb 2-1: config 0 descriptor?? [ 834.195227][ T5733] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -22 [ 835.011748][T11082] netlink: 'syz.5.1199': attribute type 9 has an invalid length. [ 835.170498][ T5613] Bluetooth: hci4: Unable to find connection for big 0x00 [ 835.181284][T11086] tipc: Started in network mode [ 835.181312][T11086] tipc: Node identity f2e513c91b2f, cluster identity 4711 [ 835.183439][T11086] tipc: Enabled bearer , priority 0 [ 835.191795][T11086] syzkaller0: entered promiscuous mode [ 835.191816][T11086] syzkaller0: entered allmulticast mode [ 835.215576][T11086] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 835.753232][T11086] tipc: Resetting bearer [ 835.869650][T11084] tipc: Resetting bearer [ 836.057938][T11084] tipc: Disabling bearer [ 836.764894][ T5738] usb 2-1: USB disconnect, device number 28 [ 837.015893][ T5612] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 837.346026][ T5612] usb 3-1: Using ep0 maxpacket: 32 [ 837.348063][ T5612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.348090][ T5612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.348131][ T5612] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 837.348151][ T5612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.362791][ T5612] usb 3-1: config 0 descriptor?? [ 837.368570][ T5612] hub 3-1:0.0: USB hub found [ 837.465816][T11136] netlink: 'syz.1.1232': attribute type 9 has an invalid length. [ 838.295726][ T5612] hub 3-1:0.0: 1 port detected [ 838.593505][T11140] efs: cannot read volume header [ 839.332659][ T5612] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 839.333431][ T5733] usb 3-1: USB disconnect, device number 30 [ 840.338481][T11156] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 840.775908][ T821] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 840.925907][ T821] usb 4-1: Using ep0 maxpacket: 8 [ 840.928184][ T821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 840.928226][ T821] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 840.928245][ T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.936534][ T5733] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 840.986465][ T821] usb 4-1: config 0 descriptor?? [ 841.095000][ T5733] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 841.095026][ T5733] usb 3-1: config 0 has no interface number 0 [ 841.095068][ T5733] usb 3-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 841.095088][ T5733] usb 3-1: config 0 interface 41 has no altsetting 0 [ 841.100633][ T5733] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 841.100659][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.100676][ T5733] usb 3-1: Product: syz [ 841.100688][ T5733] usb 3-1: Manufacturer: syz [ 841.100701][ T5733] usb 3-1: SerialNumber: syz [ 841.129922][ T5733] usb 3-1: config 0 descriptor?? [ 841.165289][ T5733] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 841.231964][ T821] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 841.545877][ T5733] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 841.676089][ T5733] usb 2-1: device descriptor read/64, error -71 [ 841.726973][ T5612] usb 4-1: USB disconnect, device number 21 [ 842.869729][ T5733] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 843.089409][ T5733] usb 2-1: device descriptor read/64, error -71 [ 843.887953][ T5733] usb usb2-port1: attempt power cycle [ 844.107244][ T5738] usb 3-1: USB disconnect, device number 31 [ 845.147567][ T5733] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 845.593293][T11228] efs: cannot read volume header [ 846.051786][ T5733] usb 2-1: device descriptor read/8, error -71 [ 848.037525][T11251] input: syz0 as /devices/virtual/input/input38 [ 848.265890][ T5883] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 848.444145][ T5883] usb 4-1: Using ep0 maxpacket: 8 [ 848.876348][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 848.876409][ T5883] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 848.876429][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.348947][ T37] audit: type=1326 audit(1785039702.274:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11262 comm="syz.5.1282" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f586e19de99 code=0x0 [ 849.436400][ T5883] usb 4-1: config 0 descriptor?? [ 849.839460][ T5883] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 850.043324][ T5588] usb 4-1: USB disconnect, device number 22 [ 851.434274][ T821] IPVS: starting estimator thread 0... [ 852.190073][ T37] audit: type=1800 audit(1785039704.614:4): pid=11299 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1295" name="host_addr" dev="configfs" ino=27993 res=0 errno=0 [ 852.190653][T11294] IPVS: using max 8 ests per chain, 19200 per kthread [ 852.450170][T11302] efs: cannot read volume header [ 856.026722][T11340] netlink: 'syz.2.1310': attribute type 11 has an invalid length. [ 856.085966][ T5738] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 856.125922][ T5720] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 856.256110][ T5738] usb 4-1: Using ep0 maxpacket: 32 [ 856.258341][ T5738] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.258367][ T5738] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.258400][ T5738] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 856.258421][ T5738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.263622][ T5738] usb 4-1: config 0 descriptor?? [ 856.268443][ T5738] hub 4-1:0.0: USB hub found [ 856.283588][ T5720] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 856.283611][ T5720] usb 6-1: config 0 has no interface number 0 [ 856.283649][ T5720] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 856.283726][ T5720] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 856.283748][ T5720] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 856.286037][ T5720] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 856.286059][ T5720] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 856.286075][ T5720] usb 6-1: Product: syz [ 856.286087][ T5720] usb 6-1: SerialNumber: syz [ 856.295034][ T5720] usb 6-1: config 0 descriptor?? [ 856.308395][ T5720] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 856.474186][ T5738] hub 4-1:0.0: 1 port detected [ 856.533923][ T5720] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input39 [ 856.642013][ T5720] ------------[ cut here ]------------ [ 856.642028][ T5720] URB ffff888036eca600 submitted while active [ 856.642053][ T5720] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: kworker/0:4/5720 [ 856.642249][ T5720] Modules linked in: [ 856.642274][ T5720] CPU: 0 UID: 0 PID: 5720 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 856.642336][ T5720] Tainted: [L]=SOFTLOCKUP [ 856.642342][ T5720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 856.642357][ T5720] Workqueue: usb_hub_wq hub_event [ 856.642386][ T5720] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 856.642443][ T5720] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 5e 56 fb 49 83 3e 00 74 40 e8 ae ed ec fa 48 8d 3d c7 83 e3 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 93 ed ec fa eb 05 e8 8c ed [ 856.642461][ T5720] RSP: 0018:ffffc90005cc6bf8 EFLAGS: 00010283 [ 856.642503][ T5720] RAX: ffffffff86d8dae2 RBX: ffff888036eca600 RCX: 0000000000100000 [ 856.642517][ T5720] RDX: ffffc9001a378000 RSI: ffff888036eca600 RDI: ffffffff8fbc5eb0 [ 856.642538][ T5720] RBP: dffffc0000000000 R08: ffffffff8faf9337 R09: 1ffffffff1f5f266 [ 856.642552][ T5720] R10: dffffc0000000000 R11: fffffbfff1f5f267 R12: 1ffff110072cb10a [ 856.642588][ T5720] R13: ffff888039658848 R14: ffff888036eca608 R15: 0000000000000cc0 [ 856.642604][ T5720] FS: 0000000000000000(0000) GS:ffff888125c42000(0000) knlGS:0000000000000000 [ 856.642621][ T5720] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 856.642632][ T5720] CR2: 00007ff2bc527658 CR3: 000000002ab2c000 CR4: 00000000003526f0 [ 856.642648][ T5720] Call Trace: [ 856.642666][ T5720] [ 856.642735][ T5720] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 856.642907][ T5720] ? mutex_lock_nested+0x152/0x1d0 [ 856.642933][ T5720] ? cm109_input_open+0x97/0x460 [ 856.643015][ T5720] cm109_input_open+0x1fb/0x460 [ 856.643054][ T5720] input_open_device+0x1f9/0x3b0 [ 856.643151][ T5720] kbd_connect+0xf6/0x150 [ 856.643231][ T5720] input_register_device+0xd08/0x1150 [ 856.643263][ T5720] cm109_usb_probe+0x11e4/0x16f0 [ 856.643313][ T5720] usb_probe_interface+0x653/0xc60 [ 856.643368][ T5720] ? __pfx_usb_probe_interface+0x10/0x10 [ 856.643383][ T5720] really_probe+0x254/0xae0 [ 856.643452][ T5720] __driver_probe_device+0x1e8/0x360 [ 856.643479][ T5720] driver_probe_device+0x4f/0x240 [ 856.643508][ T5720] __device_attach_driver+0x270/0x410 [ 856.643536][ T5720] bus_for_each_drv+0x25b/0x2f0 [ 856.643558][ T5720] ? __pfx___device_attach_driver+0x10/0x10 [ 856.643585][ T5720] ? __pfx_bus_for_each_drv+0x10/0x10 [ 856.643605][ T5720] ? rt_spin_unlock+0x163/0x200 [ 856.643643][ T5720] __device_attach+0x2c7/0x450 [ 856.643668][ T5720] ? rt_spin_unlock+0x157/0x200 [ 856.643698][ T5720] ? __pfx___device_attach+0x10/0x10 [ 856.643733][ T5720] device_initial_probe+0xa1/0xd0 [ 856.643761][ T5720] bus_probe_device+0x12d/0x220 [ 856.643788][ T5720] device_add+0x7d7/0xb80 [ 856.643859][ T5720] usb_set_configuration+0x1ad8/0x2180 [ 856.643906][ T5720] usb_generic_driver_probe+0x8d/0x150 [ 856.643963][ T5720] usb_probe_device+0x1c3/0x3b0 [ 856.643988][ T5720] ? __pfx_usb_probe_device+0x10/0x10 [ 856.644008][ T5720] really_probe+0x254/0xae0 [ 856.644048][ T5720] __driver_probe_device+0x1e8/0x360 [ 856.644077][ T5720] driver_probe_device+0x4f/0x240 [ 856.644107][ T5720] __device_attach_driver+0x270/0x410 [ 856.644140][ T5720] bus_for_each_drv+0x25b/0x2f0 [ 856.644162][ T5720] ? __pfx___device_attach_driver+0x10/0x10 [ 856.644189][ T5720] ? __pfx_bus_for_each_drv+0x10/0x10 [ 856.644207][ T5720] ? rt_spin_unlock+0x163/0x200 [ 856.644244][ T5720] __device_attach+0x2c7/0x450 [ 856.644270][ T5720] ? __pfx___device_attach+0x10/0x10 [ 856.644309][ T5720] device_initial_probe+0xa1/0xd0 [ 856.644335][ T5720] bus_probe_device+0x12d/0x220 [ 856.644355][ T5720] device_add+0x7d7/0xb80 [ 856.644382][ T5720] usb_new_device+0x98d/0x1610 [ 856.644436][ T5720] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 856.644465][ T5720] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 856.644489][ T5720] ? __pfx_usb_new_device+0x10/0x10 [ 856.644524][ T5720] hub_event+0x28cf/0x4cf0 [ 856.644591][ T5720] ? __pfx_hub_event+0x10/0x10 [ 856.644613][ T5720] ? process_scheduled_works+0xa20/0x14e0 [ 856.644747][ T5720] ? rcu_is_watching+0x15/0xb0 [ 856.644832][ T5720] ? process_scheduled_works+0xa20/0x14e0 [ 856.644854][ T5720] process_scheduled_works+0xa8e/0x14e0 [ 856.644901][ T5720] ? __pfx_process_scheduled_works+0x10/0x10 [ 856.644928][ T5720] ? assign_work+0x3cf/0x5d0 [ 856.644957][ T5720] worker_thread+0xa47/0xfb0 [ 856.645006][ T5720] kthread+0x388/0x470 [ 856.645074][ T5720] ? __pfx_worker_thread+0x10/0x10 [ 856.645095][ T5720] ? __pfx_kthread+0x10/0x10 [ 856.645124][ T5720] ret_from_fork+0x514/0xb70 [ 856.645208][ T5720] ? __pfx_ret_from_fork+0x10/0x10 [ 856.645235][ T5720] ? __switch_to+0xc89/0x1420 [ 856.645311][ T5720] ? __pfx_kthread+0x10/0x10 [ 856.645342][ T5720] ret_from_fork_asm+0x1a/0x30 [ 856.645428][ T5720] [ 856.645439][ T5720] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 856.645458][ T5720] CPU: 0 UID: 0 PID: 5720 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 856.645483][ T5720] Tainted: [L]=SOFTLOCKUP [ 856.645490][ T5720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 856.645502][ T5720] Workqueue: usb_hub_wq hub_event [ 856.645521][ T5720] Call Trace: [ 856.645529][ T5720] [ 856.645537][ T5720] vpanic+0x56c/0xa60 [ 856.645568][ T5720] ? __pfx__printk+0x10/0x10 [ 856.645591][ T5720] ? __pfx_vpanic+0x10/0x10 [ 856.645608][ T5720] ? is_bpf_text_address+0x292/0x2b0 [ 856.645694][ T5720] ? is_bpf_text_address+0x26/0x2b0 [ 856.645724][ T5720] panic+0xc5/0xd0 [ 856.645745][ T5720] ? __pfx_panic+0x10/0x10 [ 856.645772][ T5720] ? ret_from_fork_asm+0x1a/0x30 [ 856.645799][ T5720] __warn+0x315/0x4c0 [ 856.645817][ T5720] ? usb_submit_urb+0x79/0x18b0 [ 856.645848][ T5720] ? usb_submit_urb+0x79/0x18b0 [ 856.645871][ T5720] __report_bug+0x276/0x570 [ 856.645955][ T5720] ? usb_submit_urb+0x79/0x18b0 [ 856.645984][ T5720] ? __pfx___report_bug+0x10/0x10 [ 856.646023][ T5720] report_bug_entry+0x19a/0x290 [ 856.646055][ T5720] ? usb_submit_urb+0x7c/0x18b0 [ 856.646078][ T5720] ? usb_submit_urb+0x81/0x18b0 [ 856.646103][ T5720] handle_bug+0xce/0x200 [ 856.646183][ T5720] exc_invalid_op+0x1a/0x50 [ 856.646210][ T5720] asm_exc_invalid_op+0x1a/0x20 [ 856.646241][ T5720] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 856.646266][ T5720] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 5e 56 fb 49 83 3e 00 74 40 e8 ae ed ec fa 48 8d 3d c7 83 e3 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 93 ed ec fa eb 05 e8 8c ed [ 856.646282][ T5720] RSP: 0018:ffffc90005cc6bf8 EFLAGS: 00010283 [ 856.646298][ T5720] RAX: ffffffff86d8dae2 RBX: ffff888036eca600 RCX: 0000000000100000 [ 856.646312][ T5720] RDX: ffffc9001a378000 RSI: ffff888036eca600 RDI: ffffffff8fbc5eb0 [ 856.646327][ T5720] RBP: dffffc0000000000 R08: ffffffff8faf9337 R09: 1ffffffff1f5f266 [ 856.646342][ T5720] R10: dffffc0000000000 R11: fffffbfff1f5f267 R12: 1ffff110072cb10a [ 856.646358][ T5720] R13: ffff888039658848 R14: ffff888036eca608 R15: 0000000000000cc0 [ 856.646379][ T5720] ? usb_submit_urb+0x72/0x18b0 [ 856.646409][ T5720] ? usb_submit_urb+0x72/0x18b0 [ 856.646435][ T5720] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 856.646458][ T5720] ? mutex_lock_nested+0x152/0x1d0 [ 856.646485][ T5720] ? cm109_input_open+0x97/0x460 [ 856.646518][ T5720] cm109_input_open+0x1fb/0x460 [ 856.646551][ T5720] input_open_device+0x1f9/0x3b0 [ 856.646582][ T5720] kbd_connect+0xf6/0x150 [ 856.646611][ T5720] input_register_device+0xd08/0x1150 [ 856.646647][ T5720] cm109_usb_probe+0x11e4/0x16f0 [ 856.646697][ T5720] usb_probe_interface+0x653/0xc60 [ 856.646729][ T5720] ? __pfx_usb_probe_interface+0x10/0x10 [ 856.646749][ T5720] really_probe+0x254/0xae0 [ 856.646781][ T5720] __driver_probe_device+0x1e8/0x360 [ 856.646810][ T5720] driver_probe_device+0x4f/0x240 [ 856.646839][ T5720] __device_attach_driver+0x270/0x410 [ 856.646870][ T5720] bus_for_each_drv+0x25b/0x2f0 [ 856.646890][ T5720] ? __pfx___device_attach_driver+0x10/0x10 [ 856.646917][ T5720] ? __pfx_bus_for_each_drv+0x10/0x10 [ 856.646937][ T5720] ? rt_spin_unlock+0x163/0x200 [ 856.646971][ T5720] __device_attach+0x2c7/0x450 [ 856.646994][ T5720] ? rt_spin_unlock+0x157/0x200 [ 856.647022][ T5720] ? __pfx___device_attach+0x10/0x10 [ 856.647067][ T5720] device_initial_probe+0xa1/0xd0 [ 856.647093][ T5720] bus_probe_device+0x12d/0x220 [ 856.647115][ T5720] device_add+0x7d7/0xb80 [ 856.647140][ T5720] usb_set_configuration+0x1ad8/0x2180 [ 856.647184][ T5720] usb_generic_driver_probe+0x8d/0x150 [ 856.647210][ T5720] usb_probe_device+0x1c3/0x3b0 [ 856.647234][ T5720] ? __pfx_usb_probe_device+0x10/0x10 [ 856.647252][ T5720] really_probe+0x254/0xae0 [ 856.647280][ T5720] __driver_probe_device+0x1e8/0x360 [ 856.647308][ T5720] driver_probe_device+0x4f/0x240 [ 856.647339][ T5720] __device_attach_driver+0x270/0x410 [ 856.647371][ T5720] bus_for_each_drv+0x25b/0x2f0 [ 856.647393][ T5720] ? __pfx___device_attach_driver+0x10/0x10 [ 856.647419][ T5720] ? __pfx_bus_for_each_drv+0x10/0x10 [ 856.647440][ T5720] ? rt_spin_unlock+0x163/0x200 [ 856.647477][ T5720] __device_attach+0x2c7/0x450 [ 856.647506][ T5720] ? __pfx___device_attach+0x10/0x10 [ 856.647562][ T5720] device_initial_probe+0xa1/0xd0 [ 856.647587][ T5720] bus_probe_device+0x12d/0x220 [ 856.647609][ T5720] device_add+0x7d7/0xb80 [ 856.647636][ T5720] usb_new_device+0x98d/0x1610 [ 856.647665][ T5720] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 856.647692][ T5720] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 856.647721][ T5720] ? __pfx_usb_new_device+0x10/0x10 [ 856.647758][ T5720] hub_event+0x28cf/0x4cf0 [ 856.647823][ T5720] ? __pfx_hub_event+0x10/0x10 [ 856.647842][ T5720] ? process_scheduled_works+0xa20/0x14e0 [ 856.647872][ T5720] ? rcu_is_watching+0x15/0xb0 [ 856.647902][ T5720] ? process_scheduled_works+0xa20/0x14e0 [ 856.647927][ T5720] process_scheduled_works+0xa8e/0x14e0 [ 856.647972][ T5720] ? __pfx_process_scheduled_works+0x10/0x10 [ 856.647999][ T5720] ? assign_work+0x3cf/0x5d0 [ 856.648026][ T5720] worker_thread+0xa47/0xfb0 [ 856.648086][ T5720] kthread+0x388/0x470 [ 856.648112][ T5720] ? __pfx_worker_thread+0x10/0x10 [ 856.648132][ T5720] ? __pfx_kthread+0x10/0x10 [ 856.648158][ T5720] ret_from_fork+0x514/0xb70 [ 856.648192][ T5720] ? __pfx_ret_from_fork+0x10/0x10 [ 856.648222][ T5720] ? __switch_to+0xc89/0x1420 [ 856.648252][ T5720] ? __pfx_kthread+0x10/0x10 [ 856.648282][ T5720] ret_from_fork_asm+0x1a/0x30 [ 856.648319][ T5720] [ 856.650024][ T5720] Kernel Offset: disabled