last executing test programs: 10.947040172s ago: executing program 4 (id=1243): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) 10.943365754s ago: executing program 4 (id=1244): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea0485000000500000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4004090}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000000c0)}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000004008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r4, r7, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000100), &(0x7f0000000140)=r3}, 0x20) sendmsg(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 9.960549123s ago: executing program 4 (id=1245): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 9.900092843s ago: executing program 4 (id=1246): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, &(0x7f0000000300)) 8.982098231s ago: executing program 4 (id=1249): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26030203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x541b, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 7.481116769s ago: executing program 1 (id=1251): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x40) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x24000040) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) r7 = io_uring_setup(0x253d, &(0x7f0000000280)={0x0, 0x547a, 0x8, 0x0, 0x3ca}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) 6.457877339s ago: executing program 1 (id=1253): ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000d000000060000000100210008000000d60800000000"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fdatasync(0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x800448d2, &(0x7f0000000140)) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0x5411, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f00000004000000080100"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x37) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd_index=0x5, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2, 0x4}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000340)) 4.887549876s ago: executing program 1 (id=1260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4008090) 4.787083498s ago: executing program 1 (id=1261): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 4.752615589s ago: executing program 1 (id=1262): socket$nl_netfilter(0x10, 0x3, 0xc) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x5}, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000e80)={'vcan0\x00'}) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1af) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f00000000c0), 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r4, r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r3, 0x0) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000300)=0x2, 0x1ff, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000003c0)="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", 0x8a7}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.93266162s ago: executing program 2 (id=1266): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000105810380100000000000109022400010000000009040002010300000009210000000122f804090581030000040000bd6c53db51bcffcd43dbd90c9ebebece"], 0x0) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x8a, 0xd0, 0x3, [{{0x9, 0x4, 0x0, 0xf7, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2, 0x6, 0x6}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0x4, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x73, 0x2, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007b8117405c2400010000000009041f0002604e0b0009050b0208000608ff09050a021000070181efca80dbdef49703d4880596212ca967a08b2a69cb7a64ec8c8d5d7f5f9c974b83918e9c954eb65d051ba868bf8021ce22e69c5b3fe36926ff1e2f8e9f33bc1bbcf171e6df54fc77270243647a5e03d7f1b91a1884df66adc98486b2979648b8e5"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x9, 0x14, 0x2002, 0x7, "a2196bf0ae9048ced3900813726203ea0337b065c6b388e3cdf73cb18bfd1b04"}) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000002c0)={0x3, 0xe, 0x1, 0x4, "51834d6235e1a4b401bd3fc7153bbfdf0e2b35fef5c9b6b28f1862ca1289828c"}) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/29) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 3.074448122s ago: executing program 1 (id=1267): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)={0xffb7, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000080)={0x44, &(0x7f00000002c0)={0x20, 0x7, 0x4, "9af66c1a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e010203010902"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r4 = syz_usb_connect$cdc_ecm(0x9dfee419deea57a2, 0x0, 0x0, &(0x7f00000006c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x8, 0xff, 0x9, 0x28}, 0xce, &(0x7f0000000440)={0x5, 0xf, 0xce, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xfa, "3f6613b6152340c2a5d09ff58fc13de1"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x6, 0x8000}, @generic={0xab, 0x10, 0x6, "dd487e8dedbafc47bab1b0e5372e0859f80af6ef1cbc550ba6d9a90c4ff85ee8d21e4ad910331e2bd122deb784ec49f02d50bc3e95228c5eb5a91990f90bc192a5637ab737aed8242ae8e8cb3c692eeb9df3630b9a2917e4133ac96bef5ec1f18460ad81571a04a29c0042c5e7eee32205dfefdc9b4ab2a116d664780bc81439c364de55850e681680675cfc5c3a7d3dd3090b376e18fdada45f45e13bc510ed5be820e270023659"}]}, 0x6, [{0x7c, &(0x7f00000001c0)=@string={0x7c, 0x3, "a14beed4766c8475f11d6695bb120751251e62bff0adf7f3261878b0aace183f0afbee01973ff3f6100c72b7b999b59771eb8752f1312a7cfdca45fb078d7a596fd6b38b6e84618c195db2462f55feac4527d646e5e1fca6ec2f781f7b2a34df52f8f88cb7948aee59b7e95efdee928af388a8517662cd96c61d"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x422}}, {0xeb, &(0x7f00000005c0)=@string={0xeb, 0x3, "1ce62e999766b2c54559ed391704031f8556d6f3ec00b7ed2a6420a145e09744ffebcaf1e46c7a98953e0b185553c54e027df3380eb7a19e69f702bcfa4bc538ead3d644e5fbd4b2595f5279df2e9e9b9222f0a20e677bfbd6a4260ae807c287c74464acdd59391143e54969f40b2a4b5da252823af67a6b494303fe6ce353a06016cc88526d77b980d19c3b43a26bc0b20bf1038834bb7557bcda34e77f1996311c573775082be3db695ebf2e2fac5dd72e187330e39e39513081ab58980ae2da1932006fccaac42ffb49359ac881a184ab4b148659d8bbcbfd3abc959a32eebc088c850d586bed11"}}]}) syz_usb_control_io$cdc_ecm(r4, &(0x7f00000007c0)={0x14, &(0x7f0000000740)={0x0, 0x4, 0x33, {0x33, 0x9, "0fb78723d5dfaa9a731b5493ae6c76f63f2568205dfb2a7b46f3af410b5dc7d4717099a4c869624ac5da2503984cba74f6"}}, &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a00)={0x1c, &(0x7f00000008c0)={0x0, 0x18, 0xaa, "c8bbde6b9b648a0ef2be20fe9a412a8fe20d1a3c8ff62e8bcc254b8e35a00f1569aaf847e774c6bbc7e2fbd51185aa3157d72d302a4c7fedcded979042adbc0ec7801c16043e6c5196bb83f820ddcdf876c0e03ec9bd42601b86e25fd49d9d16f9f86c747e52fec739ab625617d37d84607a1d81d444b28d644e4a33f46438d3d076fac9d38810262788445a6ffe14883f96b68338c49e422592cb907565b3d12e802185dfee320883d8"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x8}}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r5, &(0x7f0000000a40)=""/138, 0x8a) syz_usb_control_io(r1, 0x0, 0x0) 3.07380135s ago: executing program 3 (id=1268): r0 = syz_io_uring_setup(0x112, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r0, 0x47f6, 0xb277, 0x0, 0x0, 0x0) msgget$private(0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) msgsnd(0x0, &(0x7f0000000480)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb}, 0x11000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 2.885080062s ago: executing program 4 (id=1270): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000000000000000) write$char_usb(r2, &(0x7f0000000000)="954807", 0x3) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) 2.88478092s ago: executing program 3 (id=1271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4008090) 2.835087489s ago: executing program 3 (id=1272): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x3c}}, 0x4010) 2.679857166s ago: executing program 3 (id=1274): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_usb_connect$uac1(0x3, 0x71, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.305997683s ago: executing program 0 (id=1278): socket$igmp(0x2, 0x3, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 2.207070785s ago: executing program 0 (id=1279): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.105872057s ago: executing program 0 (id=1280): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0x14, 0x31, 0x1}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xe}}, 0x0) getsockname$packet(r3, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x24}}, 0x0) 1.957721844s ago: executing program 0 (id=1281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00'}, 0x18) socket$netlink(0x10, 0x3, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) r4 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0x40084149, &(0x7f0000000080)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r6 = accept4$alg(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}], 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 979.103171ms ago: executing program 3 (id=1282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4008090) 941.025937ms ago: executing program 0 (id=1283): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bond\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x400, 0x0, 0x400046, r1}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 858.477078ms ago: executing program 3 (id=1284): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x2) 735.062354ms ago: executing program 0 (id=1285): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c36919790"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1}) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000440)={0x2}) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) 663.25477ms ago: executing program 2 (id=1286): r0 = io_uring_setup(0x1d7b, &(0x7f00000002c0)={0x0, 0x2466, 0x0, 0x1, 0x14b}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000000}], &(0x7f0000000100), 0x7}, 0x20) 532.018817ms ago: executing program 2 (id=1287): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) 438.942177ms ago: executing program 2 (id=1288): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x18, 0x0, &(0x7f0000000100)) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000040)='fd/4\x00') fcntl$setstatus(r4, 0x4, 0x2000) pread64(r4, &(0x7f00000002c0)=""/80, 0x50, 0x1f00) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r10) sendmsg$NLBL_CALIPSO_C_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r11, 0x125, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) 88.928019ms ago: executing program 2 (id=1289): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000340)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @nop, @md5sig={0x13, 0x12, "07baf7557ae2f9441aeb07bb3afa5ee1"}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x10001, 0xfa}, @md5sig={0x13, 0x12, "0b8d1d0947d1dc9ab1adac44397be29a"}, @timestamp={0x8, 0xa, 0xae, 0x8}]}}}}}}}, 0x0) 0s ago: executing program 2 (id=1290): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 1342.699349][T14088] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1128 (14088) [ 1342.713319][T13553] udevd[13553]: Error opening device "/dev/input/event4": No such file or directory [ 1342.738086][T14073] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1342.738240][T14073] EXT4-fs: failed to create workqueue [ 1342.762912][ T5247] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1342.773812][T13553] udevd[13553]: Unable to EVIOCGABS device "/dev/input/event4" [ 1342.782453][T13553] udevd[13553]: Unable to EVIOCGABS device "/dev/input/event4" [ 1342.790385][T13553] udevd[13553]: Unable to EVIOCGABS device "/dev/input/event4" [ 1342.790778][ T5285] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1342.798433][T13553] udevd[13553]: Unable to EVIOCGABS device "/dev/input/event4" [ 1342.815682][T13553] udevd[13553]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 1342.836764][T14073] EXT4-fs (loop0): mount failed [ 1342.846349][ T4689] udevd[4689]: worker [13553] terminated by signal 6 (Aborted) [ 1342.856048][ T4689] udevd[4689]: worker [13553] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14/event4' [ 1342.888487][ T5247] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1342.904474][T14088] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1343.002336][ T5247] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1343.013065][ T5247] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1343.022358][ T5247] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1343.030023][ T5247] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1343.116800][T14088] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1343.127738][T14088] BTRFS info (device loop1): using free-space-tree [ 1343.217866][T14098] loop0: detected capacity change from 0 to 8 [ 1343.313520][T14098] SQUASHFS error: xz decompression failed, data probably corrupt [ 1343.321912][T14098] SQUASHFS error: Failed to read block 0x108: -5 [ 1343.328348][T14098] SQUASHFS error: Unable to read metadata cache entry [106] [ 1343.335649][T14098] SQUASHFS error: Unable to read inode 0x11f [ 1343.504387][T14093] chnl_net:caif_netlink_parms(): no params data found [ 1343.748635][ T29] audit: type=1800 audit(1728898495.213:21): pid=14088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1128" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 1343.769482][ T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1343.876585][ T1178] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 1343.936664][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 1343.947337][ T25] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 1343.957116][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.980977][ T25] usb 4-1: Product: syz [ 1343.992651][ T25] usb 4-1: Manufacturer: syz [ 1344.030672][T13392] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1344.043272][ T25] usb 4-1: SerialNumber: syz [ 1344.068484][ T25] usb 4-1: config 0 descriptor?? [ 1344.097412][ T1178] usb 1-1: config 0 has an invalid interface number: 245 but max is 0 [ 1344.099788][ T25] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1344.105826][ T1178] usb 1-1: config 0 has no interface number 0 [ 1344.160271][ T1178] usb 1-1: New USB device found, idVendor=0baf, idProduct=00f5, bcdDevice=df.c2 [ 1344.177876][ T1178] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.198203][ T25] pvrusb2: ********** [ 1344.202247][ T25] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1344.222973][ T1178] usb 1-1: Product: syz [ 1344.252680][ T25] pvrusb2: Important functionality might not be entirely working. [ 1344.256955][ T1178] usb 1-1: Manufacturer: syz [ 1344.271837][T14125] loop2: detected capacity change from 0 to 1024 [ 1344.278163][ T1178] usb 1-1: SerialNumber: syz [ 1344.281034][ T25] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1344.299768][ T25] pvrusb2: ********** [ 1344.312209][ T1178] usb 1-1: config 0 descriptor?? [ 1344.368328][T14125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1344.371265][ T5342] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.893526][T14130] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1132'. [ 1344.908774][T14130] loop1: detected capacity change from 0 to 8 [ 1344.913336][T13394] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1344.942713][T14130] unable to read fragment index table [ 1344.978616][ T5342] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.990714][ T1178] usb 1-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF5) Rev (0XDFC2): Eagle I [ 1345.113684][T13401] Bluetooth: hci0: command tx timeout [ 1345.251901][ T5342] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.342253][T14093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.370062][T14093] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.396411][T14093] bridge_slave_0: entered allmulticast mode [ 1345.600754][T14093] bridge_slave_0: entered promiscuous mode [ 1345.629733][T14093] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.710763][T14093] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.820994][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1134'. [ 1346.040509][T14093] bridge_slave_1: entered allmulticast mode [ 1346.066789][T14093] bridge_slave_1: entered promiscuous mode [ 1346.134578][ T5342] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.238659][ T1178] ueagle-atm 1-1:0.245: usbatm_usb_probe: bind failed: -19! [ 1346.267625][ T1178] usb 1-1: USB disconnect, device number 12 [ 1346.406703][T12897] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1346.558790][T12897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1346.579018][T14093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1346.612722][T12897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1346.691497][T14093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1346.703696][T12897] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1346.755387][T12897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.179606][T13401] Bluetooth: hci0: command tx timeout [ 1347.407582][ T5342] bridge_slave_1: left allmulticast mode [ 1347.413339][ T5342] bridge_slave_1: left promiscuous mode [ 1347.440335][T12897] usb 2-1: config 0 descriptor?? [ 1347.450934][ T5342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.482997][ T5342] bridge_slave_0: left allmulticast mode [ 1347.506889][ T5342] bridge_slave_0: left promiscuous mode [ 1347.512834][ T5342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.392074][T14165] ceph: No mds server is up or the cluster is laggy [ 1348.594163][ T46] libceph: connect (1)[c::]:6789 error -101 [ 1348.636864][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 1348.815446][ T2037] pvrusb2: Invalid write control endpoint [ 1348.853329][ T25] usb 4-1: USB disconnect, device number 13 [ 1348.980664][ T2037] pvrusb2: Invalid write control endpoint [ 1348.987388][ T2037] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1349.079133][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1349.089360][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1349.106148][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1349.115474][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1349.124944][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1349.236726][ T2037] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1349.261318][ T2037] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1349.297949][T13401] Bluetooth: hci0: command tx timeout [ 1349.390411][ T2037] pvrusb2: Device being rendered inoperable [ 1349.483455][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1349.539544][ T2037] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1349.552784][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1349.558574][ T2037] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1349.579567][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1349.596677][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1349.615134][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1349.654861][ T2037] pvrusb2: Attached sub-driver cx25840 [ 1349.666293][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1349.669561][ T2037] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1349.694109][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1349.720488][ T2037] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1349.721511][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1349.766692][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1349.784718][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1349.802532][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1349.835783][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1349.883858][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1349.926933][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1349.935881][T14161] loop0: detected capacity change from 0 to 32768 [ 1349.943321][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1349.952034][T14163] loop2: detected capacity change from 0 to 2048 [ 1349.954458][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1349.969349][T14161] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1139 (14161) [ 1349.984675][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1349.992904][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1350.001064][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1350.011392][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1350.015838][T14163] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1350.019858][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1350.039341][T14161] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1350.047141][T14163] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1350.057106][T14161] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1350.095996][T14161] BTRFS info (device loop0): using free-space-tree [ 1350.111101][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1350.122208][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1350.145207][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1350.175428][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1350.183156][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1350.190912][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1350.198636][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1350.206643][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1350.214170][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1350.221884][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1350.229431][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1350.237167][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1350.244693][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1350.252289][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1350.260662][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1350.268930][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1350.276609][ T1178] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1350.288570][ T1178] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1350.360315][T14161] BTRFS info (device loop0): rebuilding free space tree [ 1350.444759][ T5342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1350.461112][ T5342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1350.473316][ T5342] bond0 (unregistering): Released all slaves [ 1350.503434][ T29] audit: type=1800 audit(1728898501.973:22): pid=14161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1139" name="file0" dev="loop0" ino=258 res=0 errno=0 [ 1350.525622][T14093] team0: Port device team_slave_0 added [ 1350.580545][T14093] team0: Port device team_slave_1 added [ 1350.589474][T12897] usbhid 2-1:0.0: can't add hid device: -71 [ 1350.597873][T12897] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1350.630702][T12897] usb 2-1: USB disconnect, device number 12 [ 1350.696121][T13395] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1350.814077][T13394] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 1350.821682][T14193] loop1: detected capacity change from 0 to 512 [ 1350.828977][T13394] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 1350.897054][T14193] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1350.905359][T14193] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1350.913647][T14193] System zones: 0-1, 15-15, 18-18, 34-34 [ 1350.934978][T14193] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1350.942274][T14193] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 1350.952580][T14193] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1350.967375][T14193] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1350.976236][T14193] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.1143: bad orphan inode 16 [ 1351.022985][T14193] ext4_test_bit(bit=15, block=18) = 1 [ 1351.034788][T14093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1351.069089][T14193] is_bad_inode(inode)=0 [ 1351.076612][T14093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1351.106022][T14193] NEXT_ORPHAN(inode)=0 [ 1351.118845][T14193] max_ino=32 [ 1351.122384][T14193] i_nlink=2 [ 1351.132528][T14193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1351.152727][T14093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1351.182139][T14193] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1351.201378][T14093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1351.212219][T14193] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1351.222290][T14093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1351.336602][T13401] Bluetooth: hci0: command tx timeout [ 1351.367726][T13392] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1351.369541][T14093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1352.601034][ T5283] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1352.841305][ T5283] usb 2-1: config 0 has an invalid interface number: 127 but max is 1 [ 1352.870268][ T5283] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 225 [ 1352.960776][ T5283] usb 2-1: config 0 has no interface number 1 [ 1353.152447][ T5283] usb 2-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1353.166297][ T5283] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 1353.189041][ T5283] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1353.198532][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.211517][T14093] hsr_slave_0: entered promiscuous mode [ 1353.216552][ T5283] usb 2-1: Product: syz [ 1353.229474][ T5283] usb 2-1: Manufacturer: syz [ 1353.234262][ T5283] usb 2-1: SerialNumber: syz [ 1353.289054][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1353.394960][ T5283] usb 2-1: config 0 descriptor?? [ 1353.494211][ T5283] usb-storage 2-1:0.127: USB Mass Storage device detected [ 1353.568868][T14093] hsr_slave_1: entered promiscuous mode [ 1353.775983][ T5283] usb-storage 2-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 1353.803635][T14208] loop1: detected capacity change from 0 to 1024 [ 1353.943898][ T5247] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1353.956688][ T5247] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1353.967182][ T5247] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1353.975834][T14208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1354.010932][ T5247] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1354.030961][ T5283] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1354.040466][ T5283] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1354.051712][ T5247] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1354.075589][ T5247] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1354.084120][ T5342] hsr_slave_0: left promiscuous mode [ 1354.117988][ T5342] hsr_slave_1: left promiscuous mode [ 1354.164329][ T5342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1354.190155][ T5342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1354.214003][T14242] loop3: detected capacity change from 0 to 512 [ 1354.234461][ T5342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1354.256634][ T5342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1354.272083][T14242] EXT4-fs: Ignoring removed oldalloc option [ 1354.298660][T14242] EXT4-fs: Ignoring removed oldalloc option [ 1354.306963][T14242] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1354.350488][T14242] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.1151: invalid indirect mapped block 83886080 (level 1) [ 1354.386317][ T5342] veth1_macvtap: left promiscuous mode [ 1354.392143][ T5342] veth0_macvtap: left promiscuous mode [ 1354.402283][ T5283] usb 2-1: USB disconnect, device number 13 [ 1354.412792][ T5342] veth1_vlan: left promiscuous mode [ 1354.426881][ T5342] veth0_vlan: left promiscuous mode [ 1354.431639][T14242] EXT4-fs (loop3): Remounting filesystem read-only [ 1354.448862][T14242] EXT4-fs (loop3): 1 orphan inode deleted [ 1354.467350][T13392] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1354.476870][T14242] EXT4-fs (loop3): 1 truncate cleaned up [ 1354.501074][T14242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1354.578552][T13390] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1354.940543][T14251] loop1: detected capacity change from 0 to 1024 [ 1355.157883][T14251] hfsplus: bad catalog entry used to create inode [ 1355.165233][T14251] hfsplus: failed to load root directory [ 1355.242860][T14250] loop1: detected capacity change from 0 to 8 [ 1355.400186][T14257] loop1: detected capacity change from 0 to 164 [ 1355.402433][T14255] loop3: detected capacity change from 0 to 2048 [ 1355.471763][T14258] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1355.565164][ T29] audit: type=1804 audit(1728898507.033:23): pid=14255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1155" name="/newroot/16/file0/bus" dev="loop3" ino=2097152 res=1 errno=0 [ 1355.743420][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1355.751378][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1355.783282][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1355.795460][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1355.829392][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1355.884619][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.008939][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.017094][ T25] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1356.053937][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.116648][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.149419][T13401] Bluetooth: hci2: command tx timeout [ 1356.176905][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.186798][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 1356.213681][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1356.262400][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.302006][ T25] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1356.311420][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.320024][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=15 [ 1356.328796][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.336331][ T25] usb 4-1: Product: syz [ 1356.340745][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.353041][ T25] usb 4-1: Manufacturer: syz [ 1356.358154][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.368175][ T25] usb 4-1: SerialNumber: syz [ 1356.380835][ T25] usb 4-1: config 0 descriptor?? [ 1356.390095][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.404549][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.420784][ T25] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1356.427983][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.465769][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.480292][ T25] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1356.492024][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.503627][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.508425][T13571] udevd[13571]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1356.512189][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.535020][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.545772][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.553917][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.562109][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.569906][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.578003][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.585586][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.593161][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.623383][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.631036][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.647211][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.654741][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.669102][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.676642][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.684186][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.698354][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.708181][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.715705][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.741057][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.759431][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.775727][ T5283] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1356.797186][ T5283] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1356.928077][ T5342] team0 (unregistering): Port device team_slave_1 removed [ 1357.045219][ T5342] team0 (unregistering): Port device team_slave_0 removed [ 1357.193884][ T29] audit: type=1804 audit(1728898508.663:24): pid=14255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1155" name="/newroot/16/file0/bus" dev="loop3" ino=2097152 res=1 errno=0 [ 1357.215284][ C1] vkms_vblank_simulate: vblank timer overrun [ 1357.256124][ T29] audit: type=1804 audit(1728898508.713:25): pid=14261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1155" name="/newroot/16/file0/bus" dev="loop3" ino=2097152 res=1 errno=0 [ 1357.320080][ T29] audit: type=1804 audit(1728898508.783:26): pid=14255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1155" name="/newroot/16/file0/bus" dev="loop3" ino=2097152 res=1 errno=0 [ 1357.382748][ T29] audit: type=1804 audit(1728898508.793:27): pid=14255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1155" name="/newroot/16/file0/bus" dev="loop3" ino=2097152 res=1 errno=0 [ 1357.440296][ T29] audit: type=1804 audit(1728898508.853:28): pid=14261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1155" name="/newroot/16/file0/bus" dev="loop3" ino=2097152 res=1 errno=0 [ 1358.220047][T13401] Bluetooth: hci2: command tx timeout [ 1358.695976][ T5280] usb 4-1: USB disconnect, device number 14 [ 1359.249080][ T5342] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.315577][T14230] chnl_net:caif_netlink_parms(): no params data found [ 1359.434783][T14300] loop1: detected capacity change from 0 to 164 [ 1359.451014][ T1178] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1359.465743][ T5342] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.649237][ T1178] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1359.662208][ T1178] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1359.673361][ T1178] usb 1-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 1359.684211][ T1178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.700136][ T5342] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.725046][ T1178] usb 1-1: config 0 descriptor?? [ 1359.921721][T14303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1166'. [ 1359.936145][T14303] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1360.042711][ T5342] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.099878][T14230] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.111871][T14230] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.121125][T14230] bridge_slave_0: entered allmulticast mode [ 1360.130300][T14230] bridge_slave_0: entered promiscuous mode [ 1360.150547][T14230] bridge0: port 2(bridge_slave_1) entered blocking state [ 1360.164551][T14230] bridge0: port 2(bridge_slave_1) entered disabled state [ 1360.177687][T14230] bridge_slave_1: entered allmulticast mode [ 1360.205276][T14230] bridge_slave_1: entered promiscuous mode [ 1360.226693][ T1178] usbhid 1-1:0.0: can't add hid device: -71 [ 1360.235512][ T1178] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1360.252273][ T1178] usb 1-1: USB disconnect, device number 13 [ 1360.306681][T13401] Bluetooth: hci2: command tx timeout [ 1360.338037][T14230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1360.390347][T14326] FAULT_INJECTION: forcing a failure. [ 1360.390347][T14326] name failslab, interval 1, probability 0, space 0, times 0 [ 1360.413442][T14325] loop1: detected capacity change from 0 to 8 [ 1360.465249][T14326] CPU: 0 UID: 0 PID: 14326 Comm: syz.0.1168 Not tainted 6.12.0-rc2-next-20241011-syzkaller #0 [ 1360.475559][T14326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1360.485645][T14326] Call Trace: [ 1360.488953][T14326] [ 1360.491908][T14326] dump_stack_lvl+0x241/0x360 [ 1360.496013][T14325] SQUASHFS error: xz decompression failed, data probably corrupt [ 1360.496719][T14326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1360.496753][T14326] ? __pfx__printk+0x10/0x10 [ 1360.496778][T14326] ? fs_reclaim_acquire+0x93/0x130 [ 1360.505838][T14325] SQUASHFS error: Failed to read block 0x108: -5 [ 1360.509664][T14326] ? __pfx___might_resched+0x10/0x10 [ 1360.509699][T14326] should_fail_ex+0x3b0/0x4e0 [ 1360.509730][T14326] should_failslab+0xac/0x100 [ 1360.509756][T14326] ? security_inode_alloc+0x37/0x310 [ 1360.545760][T14326] kmem_cache_alloc_noprof+0x70/0x380 [ 1360.551136][T14326] security_inode_alloc+0x37/0x310 [ 1360.556237][T14326] inode_init_always_gfp+0x988/0xcd0 [ 1360.561513][T14326] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1360.566893][T14326] alloc_inode+0x9f/0x1a0 [ 1360.571257][T14326] __sock_create+0x123/0x940 [ 1360.575874][T14326] __sys_socket+0x150/0x3c0 [ 1360.580392][T14326] ? __pfx___sys_socket+0x10/0x10 [ 1360.585434][T14326] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1360.591762][T14326] ? exc_page_fault+0x590/0x8c0 [ 1360.596628][T14326] __x64_sys_socket+0x7a/0x90 [ 1360.601322][T14326] do_syscall_64+0xf3/0x230 [ 1360.605829][T14326] ? clear_bhb_loop+0x35/0x90 [ 1360.610502][T14326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.616397][T14326] RIP: 0033:0x7f0d0c37ff17 [ 1360.620819][T14326] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1360.640428][T14326] RSP: 002b:00007f0d0d0ecfa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1360.648845][T14326] RAX: ffffffffffffffda RBX: 00007f0d0c536058 RCX: 00007f0d0c37ff17 [ 1360.656814][T14326] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1360.664778][T14326] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1360.672747][T14326] R10: 0000000020000440 R11: 0000000000000286 R12: 0000000000000001 [ 1360.680716][T14326] R13: 0000000000000000 R14: 00007f0d0c536058 R15: 00007ffea68a9558 [ 1360.688697][T14326] [ 1360.701441][T14325] SQUASHFS error: Unable to read metadata cache entry [106] [ 1360.707621][T14230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1360.786754][T14326] socket: no more sockets [ 1360.791194][T14325] SQUASHFS error: Unable to read inode 0x11f [ 1361.224644][T14230] team0: Port device team_slave_0 added [ 1361.261830][T14335] loop0: detected capacity change from 0 to 1024 [ 1361.265949][T14230] team0: Port device team_slave_1 added [ 1361.675769][T14093] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1361.849189][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.855568][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.359838][T14093] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1362.377836][T13401] Bluetooth: hci2: command tx timeout [ 1362.666613][T14093] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1363.626046][T14093] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1363.859917][ T5342] bridge_slave_1: left allmulticast mode [ 1363.865870][ T5342] bridge_slave_1: left promiscuous mode [ 1364.344285][T10436] hfsplus: found bad thread record in catalog [ 1364.351646][ T5342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.352668][T10436] hfsplus: found bad thread record in catalog [ 1364.511936][ T5342] bridge_slave_0: left allmulticast mode [ 1364.521396][ T5342] bridge_slave_0: left promiscuous mode [ 1364.549621][ T5342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.436996][ T5283] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1365.445170][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 1365.577027][ T5283] usb 1-1: device descriptor read/64, error -32 [ 1365.826917][ T5283] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1366.366628][ T5283] usb 1-1: Using ep0 maxpacket: 8 [ 1366.415336][ T5283] usb 1-1: config 16 has an invalid interface number: 120 but max is 1 [ 1366.451765][ T5283] usb 1-1: config 16 has an invalid interface number: 106 but max is 1 [ 1366.547165][ T5283] usb 1-1: config 16 has an invalid descriptor of length 146, skipping remainder of the config [ 1366.643333][ T5283] usb 1-1: config 16 has no interface number 0 [ 1366.659478][ T5283] usb 1-1: config 16 has no interface number 1 [ 1366.671393][ T5283] usb 1-1: config 16 interface 120 altsetting 128 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1366.688948][ T5283] usb 1-1: config 16 interface 120 altsetting 128 endpoint 0xF has invalid maxpacket 1120, setting to 64 [ 1366.832277][ T5283] usb 1-1: config 16 interface 120 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 1366.906329][ T5283] usb 1-1: config 16 interface 120 altsetting 128 endpoint 0xC has invalid maxpacket 39705, setting to 64 [ 1366.977773][ T5283] usb 1-1: config 16 interface 106 altsetting 91 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1366.998526][ T5283] usb 1-1: config 16 interface 120 has no altsetting 0 [ 1367.006013][ T5283] usb 1-1: config 16 interface 106 has no altsetting 0 [ 1367.050472][ T5283] usb 1-1: New USB device found, idVendor=3923, idProduct=7825, bcdDevice=f0.e1 [ 1367.063576][ T5283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.092523][ T5283] usb 1-1: Product: ẳÂíšè·«ï›™è²…샼⼪ʶä·ã™µè»¹ä²™æž¹îƒ¦î¶²ë§ƒç¢»î¼á€žéº¾ï“’ⓔᗳ풨岂㙺챵ỗ欂࿸钅䥓䦳ᠬ鵳鈔喷⣘鄔䂨䅰࿶焛佻Ø翘窀 [ 1367.245195][ T5283] usb 1-1: Manufacturer: у [ 1367.263477][ T5283] usb 1-1: SerialNumber: 誔ﱵ㢻豜밽矼é§àµ¯á•¸ç’¨ë—«â¤¬ì˜’ꥲ⻱鬳퓲ä‘㷴⿗ᔃ꼼雟쾡æ§ï‰¾ï‹€á¢‹å´¡ç¦²ç¥¼â¿à¡’棱婗Ꚃ蹯å¾ë‘¡ï™†â€î‰¢äµ‚蔿藫ꯃ庈ë®à°­æ ¼íˆ½ï½¥î«žáŸ¦îž™ç§«ä‘³ç¾‰ä¨ƒì­á½·ãᰠ৆㖌趪٘☢áŽåŽ¼å®’ⵓ䓺䴪Ⴑ씫ᔅ᠋声꓅ྟꦞ롅ãƒéŸšç¿™î«ç¢†â æˆ¸à²µæ…«é…ê‹“é±ï¿‡æ¼‘啪情虰㡗똹ீ⶘摋鲵℄ï²è†˜æ±‘଑èî¨¡á  [ 1368.275662][ T5283] plusb 1-1:16.120: probe with driver plusb failed with error -22 [ 1368.405713][ T5283] plusb 1-1:16.106: probe with driver plusb failed with error -22 [ 1368.435387][ T5283] usb 1-1: USB disconnect, device number 15 [ 1368.736584][ T29] audit: type=1326 audit(1728898520.203:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14341 comm="syz.1.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6c6f7dff9 code=0x7ffc0000 [ 1368.866800][ T29] audit: type=1326 audit(1728898520.253:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14341 comm="syz.1.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6c6f7dff9 code=0x7ffc0000 [ 1369.060649][ T29] audit: type=1326 audit(1728898520.313:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14341 comm="syz.1.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6c6f7dff9 code=0x7ffc0000 [ 1369.277520][ T29] audit: type=1326 audit(1728898520.593:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14341 comm="syz.1.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6c6f7dff9 code=0x7ffc0000 [ 1369.690984][ T29] audit: type=1326 audit(1728898520.603:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14341 comm="syz.1.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6c6f7dff9 code=0x7ffc0000 [ 1370.383928][ T5342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1370.493917][ T5342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1370.594127][ T5342] bond0 (unregistering): Released all slaves [ 1371.370336][T14230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1371.404111][T14230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1371.685170][T14230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1378.240801][ T5247] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1378.253916][ T5247] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1378.434355][ T5247] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1378.453412][ T5247] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1378.627780][ T5247] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1378.638172][ T5247] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1379.049841][T14230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1379.111444][T14230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1380.201813][T14230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1380.779421][ T5247] Bluetooth: hci4: command tx timeout [ 1382.856831][ T5247] Bluetooth: hci4: command tx timeout [ 1383.339776][T14230] hsr_slave_0: entered promiscuous mode [ 1383.384301][T14230] hsr_slave_1: entered promiscuous mode [ 1383.473479][T14230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1384.936669][ T5247] Bluetooth: hci4: command tx timeout [ 1385.127690][T14230] Cannot create hsr debugfs directory [ 1386.164451][T13401] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1386.195274][T13401] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1386.227897][ T5237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1386.242903][ T5237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1386.284600][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1386.287997][ T5237] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1386.295669][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1386.300433][ T5237] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1386.309022][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1386.376354][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1386.396012][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1386.411256][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1387.042805][T13401] Bluetooth: hci4: command tx timeout [ 1388.378134][T13401] Bluetooth: hci5: command tx timeout [ 1388.538348][T13401] Bluetooth: hci6: command tx timeout [ 1389.197038][ T5342] hsr_slave_0: left promiscuous mode [ 1389.211681][ T5342] hsr_slave_1: left promiscuous mode [ 1389.287928][ T5342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1389.323849][ T5342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1390.119092][ T5342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1390.436481][ T5342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1390.589401][T13401] Bluetooth: hci5: command tx timeout [ 1390.649574][T13401] Bluetooth: hci6: command tx timeout [ 1391.180942][ T5342] veth1_macvtap: left promiscuous mode [ 1391.205881][ T5342] veth0_macvtap: left promiscuous mode [ 1391.235587][ T5342] veth1_vlan: left promiscuous mode [ 1391.258493][ T5342] veth0_vlan: left promiscuous mode [ 1392.651850][T13401] Bluetooth: hci5: command tx timeout [ 1392.706708][T13401] Bluetooth: hci6: command tx timeout [ 1394.706596][T13401] Bluetooth: hci5: command tx timeout [ 1394.776708][T13401] Bluetooth: hci6: command tx timeout [ 1397.960928][ T5342] team0 (unregistering): Port device team_slave_1 removed [ 1398.528771][ T5342] team0 (unregistering): Port device team_slave_0 removed [ 1399.777787][T13401] Bluetooth: hci1: command 0x0406 tx timeout [ 1403.273771][T13401] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1403.319503][T13401] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1403.405033][T13401] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1403.510378][T13401] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1403.548636][T13401] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1403.606350][T13401] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1405.898645][ T54] Bluetooth: hci3: command tx timeout [ 1407.976606][ T54] Bluetooth: hci3: command tx timeout [ 1410.078010][ T54] Bluetooth: hci3: command tx timeout [ 1412.136527][ T54] Bluetooth: hci3: command tx timeout [ 1412.174975][ T5342] IPVS: stop unused estimator thread 0... [ 1419.300474][T14352] chnl_net:caif_netlink_parms(): no params data found [ 1419.391428][T13401] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1419.437492][T13401] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1419.477330][T13401] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1419.507936][T13401] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1419.556209][T13401] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1419.580369][T13401] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1419.953398][T14359] chnl_net:caif_netlink_parms(): no params data found [ 1421.353631][T14361] chnl_net:caif_netlink_parms(): no params data found [ 1421.738163][ T54] Bluetooth: hci0: command tx timeout [ 1423.262823][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.273244][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.827237][ T54] Bluetooth: hci0: command tx timeout [ 1423.942104][T14359] bridge0: port 1(bridge_slave_0) entered blocking state [ 1424.013782][T14359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.100492][T14359] bridge_slave_0: entered allmulticast mode [ 1424.227606][T14359] bridge_slave_0: entered promiscuous mode [ 1424.746385][T14359] bridge0: port 2(bridge_slave_1) entered blocking state [ 1424.758291][T14359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1424.782016][T14359] bridge_slave_1: entered allmulticast mode [ 1424.888304][T14359] bridge_slave_1: entered promiscuous mode [ 1425.896610][ T54] Bluetooth: hci0: command tx timeout [ 1427.470609][T14352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.587513][T14352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.786482][T14352] bridge_slave_0: entered allmulticast mode [ 1427.986862][ T54] Bluetooth: hci0: command tx timeout [ 1427.987729][T14352] bridge_slave_0: entered promiscuous mode [ 1429.489732][T14359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1429.584487][T14359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1429.827820][T14352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.862728][T14352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.155581][T14352] bridge_slave_1: entered allmulticast mode [ 1430.271007][T14352] bridge_slave_1: entered promiscuous mode [ 1430.538447][T14372] chnl_net:caif_netlink_parms(): no params data found [ 1432.440737][T14361] bridge0: port 1(bridge_slave_0) entered blocking state [ 1432.448786][T14361] bridge0: port 1(bridge_slave_0) entered disabled state [ 1432.471797][T14361] bridge_slave_0: entered allmulticast mode [ 1432.513870][T14361] bridge_slave_0: entered promiscuous mode [ 1433.468993][T14361] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.478656][T14361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.497195][T14361] bridge_slave_1: entered allmulticast mode [ 1433.686721][T14361] bridge_slave_1: entered promiscuous mode [ 1435.144385][T14359] team0: Port device team_slave_0 added [ 1436.620616][ T5342] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.271699][T14359] team0: Port device team_slave_1 added [ 1437.950093][T13401] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1438.006172][T13401] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1438.053474][T13401] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1438.124286][T13401] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1438.159288][T13401] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1438.163139][T14361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1438.267584][T13401] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1439.178543][ T5342] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.903391][T14361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1440.378218][ T54] Bluetooth: hci2: command tx timeout [ 1441.011659][ T5342] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.089941][T14361] team0: Port device team_slave_0 added [ 1441.098960][T14359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1441.105948][T14359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.166712][T14359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1441.342152][T14372] bridge0: port 1(bridge_slave_0) entered blocking state [ 1441.356666][T14372] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.363937][T14372] bridge_slave_0: entered allmulticast mode [ 1441.397646][T14372] bridge_slave_0: entered promiscuous mode [ 1441.475803][ T5342] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.517072][T14361] team0: Port device team_slave_1 added [ 1441.557408][T14372] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.564554][T14372] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.582974][T14372] bridge_slave_1: entered allmulticast mode [ 1441.600135][T14372] bridge_slave_1: entered promiscuous mode [ 1441.610406][T13401] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1441.623622][T13401] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1441.638648][T13401] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1441.648842][T13401] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1441.657339][T13401] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1441.664820][T13401] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1441.743059][T14361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1441.751605][T14361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.777770][T14361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1441.794337][T14361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1441.803323][T14361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.829622][T14361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1441.849501][T14389] chnl_net:caif_netlink_parms(): no params data found [ 1441.876270][T14372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1441.998131][T14372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1442.190811][T14361] hsr_slave_0: entered promiscuous mode [ 1442.207391][T14361] hsr_slave_1: entered promiscuous mode [ 1442.214834][T14361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1442.247076][T14361] Cannot create hsr debugfs directory [ 1442.457253][ T54] Bluetooth: hci2: command tx timeout [ 1442.551018][T13401] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1442.560435][ T5342] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.586866][T13401] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1442.595591][T13401] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1442.604659][T13401] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1442.614550][T13401] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1442.626545][T13401] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1442.642335][T14372] team0: Port device team_slave_0 added [ 1442.687368][T14389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1442.694469][T14389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1442.708263][T14389] bridge_slave_0: entered allmulticast mode [ 1442.714841][T14389] bridge_slave_0: entered promiscuous mode [ 1442.776268][T14372] team0: Port device team_slave_1 added [ 1442.807303][ T5342] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.826104][T14389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1442.837070][T14389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.844336][T14389] bridge_slave_1: entered allmulticast mode [ 1442.851507][T14389] bridge_slave_1: entered promiscuous mode [ 1442.904814][T14372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1442.911896][T14372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1442.940298][T14372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1442.986999][ T5342] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.005653][T14372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1443.013088][T14372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1443.045240][T14372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1443.061156][T14389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1443.144516][ T5342] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.163273][T14389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1443.211178][T14454] chnl_net:caif_netlink_parms(): no params data found [ 1443.224640][T14439] chnl_net:caif_netlink_parms(): no params data found [ 1443.249279][T14389] team0: Port device team_slave_0 added [ 1443.280869][T14389] team0: Port device team_slave_1 added [ 1443.325991][T14372] hsr_slave_0: entered promiscuous mode [ 1443.336358][T14372] hsr_slave_1: entered promiscuous mode [ 1443.343354][T14372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1443.352211][T14372] Cannot create hsr debugfs directory [ 1443.377452][T14389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1443.384440][T14389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1443.411821][T14389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1443.445952][T14389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1443.454126][T14389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1443.480526][T14389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1443.599122][T14439] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.606256][T14439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.622030][T14439] bridge_slave_0: entered allmulticast mode [ 1443.631202][T14439] bridge_slave_0: entered promiscuous mode [ 1443.712120][T14439] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.723682][T14439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.731247][T14439] bridge_slave_1: entered allmulticast mode [ 1443.739458][T14439] bridge_slave_1: entered promiscuous mode [ 1443.747123][ T54] Bluetooth: hci1: command tx timeout [ 1443.794873][T14389] hsr_slave_0: entered promiscuous mode [ 1443.801110][T14389] hsr_slave_1: entered promiscuous mode [ 1443.807504][T14389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1443.815087][T14389] Cannot create hsr debugfs directory [ 1443.821295][T14454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.829065][T14454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.836317][T14454] bridge_slave_0: entered allmulticast mode [ 1443.843254][T14454] bridge_slave_0: entered promiscuous mode [ 1443.851655][ T5342] bridge_slave_1: left allmulticast mode [ 1443.859293][ T5342] bridge_slave_1: left promiscuous mode [ 1443.864977][ T5342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.874094][ T5342] bridge_slave_0: left allmulticast mode [ 1443.880053][ T5342] bridge_slave_0: left promiscuous mode [ 1443.886190][ T5342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.904178][ T5342] bridge_slave_1: left allmulticast mode [ 1443.910683][ T5342] bridge_slave_1: left promiscuous mode [ 1443.916867][ T5342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.925341][ T5342] bridge_slave_0: left allmulticast mode [ 1443.931872][ T5342] bridge_slave_0: left promiscuous mode [ 1443.937881][ T5342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.948770][ T5342] bridge_slave_1: left allmulticast mode [ 1443.954687][ T5342] bridge_slave_1: left promiscuous mode [ 1443.961032][ T5342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.973392][ T5342] bridge_slave_0: left allmulticast mode [ 1443.981547][ T5342] bridge_slave_0: left promiscuous mode [ 1443.988313][ T5342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.537088][ T54] Bluetooth: hci2: command tx timeout [ 1444.671740][ T5342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1444.682405][ T5342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1444.696703][ T54] Bluetooth: hci4: command tx timeout [ 1444.705088][ T5342] bond0 (unregistering): Released all slaves [ 1444.897098][ T5342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1444.908383][ T5342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1444.919307][ T5342] bond0 (unregistering): Released all slaves [ 1444.931430][ T5342] bond1 (unregistering): Released all slaves [ 1445.118557][ T5342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1445.129144][ T5342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1445.142576][ T5342] bond0 (unregistering): Released all slaves [ 1445.165971][T14439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1445.198110][T14454] bridge0: port 2(bridge_slave_1) entered blocking state [ 1445.205230][T14454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.233958][T14454] bridge_slave_1: entered allmulticast mode [ 1445.245796][T14454] bridge_slave_1: entered promiscuous mode [ 1445.368181][T14439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1445.411977][ T5342] tipc: Disabling bearer [ 1445.429285][ T5342] tipc: Left network mode [ 1445.498511][T14454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1445.524567][T14477] chnl_net:caif_netlink_parms(): no params data found [ 1445.613063][T14439] team0: Port device team_slave_0 added [ 1445.624921][T14454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1445.680012][T14439] team0: Port device team_slave_1 added [ 1445.816631][ T54] Bluetooth: hci1: command tx timeout [ 1446.035508][T14454] team0: Port device team_slave_0 added [ 1446.044435][T14454] team0: Port device team_slave_1 added [ 1446.174797][T14439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1446.182986][T14439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1446.209307][T14439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1446.264495][T14477] bridge0: port 1(bridge_slave_0) entered blocking state [ 1446.272141][T14477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1446.279540][T14477] bridge_slave_0: entered allmulticast mode [ 1446.286213][T14477] bridge_slave_0: entered promiscuous mode [ 1446.317674][T14439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1446.324653][T14439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1446.352193][T14439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1446.408253][T14477] bridge0: port 2(bridge_slave_1) entered blocking state [ 1446.417696][T14477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1446.425007][T14477] bridge_slave_1: entered allmulticast mode [ 1446.446123][T14477] bridge_slave_1: entered promiscuous mode [ 1446.498383][T14454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1446.505386][T14454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1446.531990][T14454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1446.616975][ T54] Bluetooth: hci2: command tx timeout [ 1446.644885][T14439] hsr_slave_0: entered promiscuous mode [ 1446.651496][T14439] hsr_slave_1: entered promiscuous mode [ 1446.662143][T14439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1446.669932][T14439] Cannot create hsr debugfs directory [ 1446.676026][T14454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1446.686007][T14454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1446.724026][T14454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1446.740445][T14477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1446.786579][ T54] Bluetooth: hci4: command tx timeout [ 1446.792391][T14477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1446.881131][ T5342] hsr_slave_0: left promiscuous mode [ 1446.887227][ T5342] hsr_slave_1: left promiscuous mode [ 1446.897202][ T5342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1446.905012][ T5342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1446.916215][ T5342] hsr_slave_0: left promiscuous mode [ 1446.923069][ T5342] hsr_slave_1: left promiscuous mode [ 1446.936248][ T5342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1446.946030][ T5342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1446.954105][ T5342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1446.963806][ T5342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1446.976700][ T5342] hsr_slave_0: left promiscuous mode [ 1446.995323][ T5342] hsr_slave_1: left promiscuous mode [ 1447.001539][ T5342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1447.009858][ T5342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1447.034971][ T5342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1447.042827][ T5342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1447.109839][ T5342] veth1_macvtap: left promiscuous mode [ 1447.115421][ T5342] veth0_macvtap: left promiscuous mode [ 1447.121215][ T5342] veth1_vlan: left promiscuous mode [ 1447.127294][ T5342] veth0_vlan: left promiscuous mode [ 1447.137466][ T5342] veth1_macvtap: left promiscuous mode [ 1447.143029][ T5342] veth0_macvtap: left promiscuous mode [ 1447.153078][ T5342] veth1_vlan: left promiscuous mode [ 1447.164223][ T5342] veth0_vlan: left promiscuous mode [ 1447.585286][ T5342] team0 (unregistering): Port device team_slave_1 removed [ 1447.630439][ T5342] team0 (unregistering): Port device team_slave_0 removed [ 1447.896847][ T54] Bluetooth: hci1: command tx timeout [ 1448.393965][ T5342] team0 (unregistering): Port device team_slave_1 removed [ 1448.453642][ T5342] team0 (unregistering): Port device team_slave_0 removed [ 1448.859976][ T54] Bluetooth: hci4: command tx timeout [ 1449.623720][ T5342] team0 (unregistering): Port device team_slave_1 removed [ 1449.684789][ T5342] team0 (unregistering): Port device team_slave_0 removed [ 1449.976806][ T54] Bluetooth: hci1: command tx timeout [ 1450.333380][T14477] team0: Port device team_slave_0 added [ 1450.435935][T14372] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1450.449580][T14477] team0: Port device team_slave_1 added [ 1450.488676][T14454] hsr_slave_0: entered promiscuous mode [ 1450.507403][T14454] hsr_slave_1: entered promiscuous mode [ 1450.514337][T14372] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1450.543452][T14372] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1450.562918][T14477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1450.575368][T14477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1450.602458][T14477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1450.615542][T14477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1450.623078][T14477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1450.649597][T14477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1450.689933][T14372] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1450.828514][T14389] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1450.912623][T14389] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1450.938898][ T54] Bluetooth: hci4: command tx timeout [ 1450.958319][T14477] hsr_slave_0: entered promiscuous mode [ 1450.974612][T14477] hsr_slave_1: entered promiscuous mode [ 1450.981060][T14477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1450.988779][T14477] Cannot create hsr debugfs directory [ 1450.997919][T14389] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1451.111964][T14439] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.152737][T14389] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1451.282766][T14439] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.378695][T14439] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.500225][T14439] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.708825][T14372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1451.778787][T14389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1451.845545][T14372] 8021q: adding VLAN 0 to HW filter on device team0 [ 1451.865004][ T5342] IPVS: stop unused estimator thread 0... [ 1451.888127][T14439] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1451.968942][T14389] 8021q: adding VLAN 0 to HW filter on device team0 [ 1451.997078][T14439] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1452.045766][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.052914][ T5782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1452.072981][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.080149][ T5794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1452.107717][T14439] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1452.136287][T14439] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1452.151097][ T9451] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.158283][ T9451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1452.173139][ T9451] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.180269][ T9451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1452.230928][ T5342] bridge_slave_1: left allmulticast mode [ 1452.243711][ T5342] bridge_slave_1: left promiscuous mode [ 1452.250064][ T5342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.260352][ T5342] bridge_slave_0: left allmulticast mode [ 1452.266063][ T5342] bridge_slave_0: left promiscuous mode [ 1452.272002][ T5342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.282024][ T5342] bridge_slave_1: left allmulticast mode [ 1452.288881][ T5342] bridge_slave_1: left promiscuous mode [ 1452.294527][ T5342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.304305][ T5342] bridge_slave_0: left allmulticast mode [ 1452.310058][ T5342] bridge_slave_0: left promiscuous mode [ 1452.315679][ T5342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.325630][ T5342] bridge_slave_1: left allmulticast mode [ 1452.331546][ T5342] bridge_slave_1: left promiscuous mode [ 1452.337503][ T5342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.347431][ T5342] bridge_slave_0: left allmulticast mode [ 1452.353105][ T5342] bridge_slave_0: left promiscuous mode [ 1452.359709][ T5342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.372709][ T5342] bridge_slave_1: left allmulticast mode [ 1452.378743][ T5342] bridge_slave_1: left promiscuous mode [ 1452.384462][ T5342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.393873][ T5342] bridge_slave_0: left allmulticast mode [ 1452.399727][ T5342] bridge_slave_0: left promiscuous mode [ 1452.405375][ T5342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.414498][ T5342] bridge_slave_1: left allmulticast mode [ 1452.421016][ T5342] bridge_slave_1: left promiscuous mode [ 1452.427630][ T5342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.436371][ T5342] bridge_slave_0: left allmulticast mode [ 1452.443380][ T5342] bridge_slave_0: left promiscuous mode [ 1452.449887][ T5342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.100104][ T5342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1453.111938][ T5342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1453.122563][ T5342] bond0 (unregistering): Released all slaves [ 1453.136203][ T5342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1453.152789][ T5342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1453.163899][ T5342] bond0 (unregistering): Released all slaves [ 1453.330211][ T5342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1453.342873][ T5342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1453.353974][ T5342] bond0 (unregistering): Released all slaves [ 1453.364363][ T5342] bond0 (unregistering): Released all slaves [ 1453.375902][ T5342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1453.386715][ T5342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1453.400838][ T5342] bond0 (unregistering): Released all slaves [ 1454.127825][T14454] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1454.162204][T14439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1454.189398][T14454] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1454.205781][T14454] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1454.216007][T14454] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1454.230563][ T5342] hsr_slave_0: left promiscuous mode [ 1454.237856][ T5342] hsr_slave_1: left promiscuous mode [ 1454.243759][ T5342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1454.254487][ T5342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1454.262971][ T5342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1454.274353][ T5342] hsr_slave_0: left promiscuous mode [ 1454.281109][ T5342] hsr_slave_1: left promiscuous mode [ 1454.288052][ T5342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1454.295503][ T5342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1454.303619][ T5342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1454.311329][ T5342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1454.330817][ T5342] hsr_slave_0: left promiscuous mode [ 1454.339817][ T5342] hsr_slave_1: left promiscuous mode [ 1454.345739][ T5342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1454.353745][ T5342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1454.379064][ T5342] veth1_macvtap: left promiscuous mode [ 1454.384577][ T5342] veth0_macvtap: left promiscuous mode [ 1454.390244][ T5342] veth1_vlan: left promiscuous mode [ 1454.395606][ T5342] veth0_vlan: left promiscuous mode [ 1454.544783][ T5342] team0 (unregistering): Port device team_slave_1 removed [ 1454.580990][ T5342] team0 (unregistering): Port device team_slave_0 removed [ 1454.796121][ T5342] team0 (unregistering): Port device team_slave_1 removed [ 1454.833421][ T5342] team0 (unregistering): Port device team_slave_0 removed [ 1455.414750][ T5342] team0 (unregistering): Port device team_slave_1 removed [ 1455.475991][ T5342] team0 (unregistering): Port device team_slave_0 removed [ 1456.295916][ T5342] team0 (unregistering): Port device team_slave_1 removed [ 1456.329322][ T5342] team0 (unregistering): Port device team_slave_0 removed [ 1456.613584][T14389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1456.637686][T14439] 8021q: adding VLAN 0 to HW filter on device team0 [ 1456.665826][T14372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1456.784940][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.792483][ T5795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1456.823498][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.830677][ T5795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1456.873300][T14389] veth0_vlan: entered promiscuous mode [ 1457.118613][T14389] veth1_vlan: entered promiscuous mode [ 1457.160016][T14477] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1457.170044][T14477] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1457.217400][T14477] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1457.234570][T14477] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1457.340685][T14389] veth0_macvtap: entered promiscuous mode [ 1457.388643][T14372] veth0_vlan: entered promiscuous mode [ 1457.417756][T14389] veth1_macvtap: entered promiscuous mode [ 1457.451357][T14389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1457.525018][T14389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1457.575307][T14389] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.591653][T14389] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.607217][T14389] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.615964][T14389] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.653547][T14372] veth1_vlan: entered promiscuous mode [ 1457.688323][T14454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1457.801929][T14477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1457.834156][T14439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1457.858476][T14454] 8021q: adding VLAN 0 to HW filter on device team0 [ 1457.941853][T14372] veth0_macvtap: entered promiscuous mode [ 1457.981456][ T5782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1457.992126][ T5782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1458.018086][T14372] veth1_macvtap: entered promiscuous mode [ 1458.044326][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1458.051498][ T5794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1458.067412][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1458.074528][ T5794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1458.102093][T14477] 8021q: adding VLAN 0 to HW filter on device team0 [ 1458.178976][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1458.190161][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.201319][T14372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1458.211330][ T5794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1458.216177][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1458.230644][ T5794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1458.241790][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.252797][T14372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1458.269533][T14372] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.278626][T14372] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.289291][T14372] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.298821][T14372] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.325198][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 1458.332361][ T5795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1458.449290][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 1458.456485][ T5795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1458.496864][T14477] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1458.513710][T14477] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1458.582650][T14439] veth0_vlan: entered promiscuous mode [ 1458.662661][T14439] veth1_vlan: entered promiscuous mode [ 1458.898454][ T5782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1459.011893][ T5782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1459.434385][ T5795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1459.451563][T14439] veth0_macvtap: entered promiscuous mode [ 1459.466653][ T5795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1459.492749][T14439] veth1_macvtap: entered promiscuous mode [ 1459.560629][T14439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1459.593707][T14439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1459.612992][T14439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1459.623814][T14439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1459.635298][T14439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1459.673118][T14439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1459.684748][T14439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1459.696515][ T5280] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1459.716883][T14439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1459.728134][T14439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1459.739758][T14439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1459.769267][T14439] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.779303][T14439] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.788816][T14439] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.798101][T14439] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.841084][T14477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1459.861983][ T5280] usb 3-1: Using ep0 maxpacket: 8 [ 1459.874436][T14454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1459.883713][ T5280] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1459.899439][ T5280] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1459.922897][ T5280] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1459.940841][ T5280] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1459.984194][ T5280] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1459.993556][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.070581][ T5774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1460.091443][T14477] veth0_vlan: entered promiscuous mode [ 1460.101976][ T5774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1460.172211][ T5795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1460.177976][T14477] veth1_vlan: entered promiscuous mode [ 1460.196939][ T5795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1460.200720][T14454] veth0_vlan: entered promiscuous mode [ 1460.217137][ T5280] usb 3-1: GET_CAPABILITIES returned 0 [ 1460.225277][ T5280] usbtmc 3-1:16.0: can't read capabilities [ 1460.269008][T14454] veth1_vlan: entered promiscuous mode [ 1460.353311][T14477] veth0_macvtap: entered promiscuous mode [ 1460.367871][T14608] loop3: detected capacity change from 0 to 2048 [ 1460.396304][T14454] veth0_macvtap: entered promiscuous mode [ 1460.410816][T14477] veth1_macvtap: entered promiscuous mode [ 1460.423200][T14595] loop2: detected capacity change from 0 to 512 [ 1460.423953][T14608] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1460.450491][T14454] veth1_macvtap: entered promiscuous mode [ 1460.514558][T14595] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1460.514695][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1460.539039][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.549816][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1460.554866][T14595] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2842c018, mo2=0002] [ 1460.560421][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.560447][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1460.560464][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.561847][T14477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1460.604405][T14595] System zones: [ 1460.609467][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1460.624183][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.634869][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1460.639563][T14595] 0-2 [ 1460.648633][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.661514][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1460.666498][T14595] , 18-18, 34-35 [ 1460.672058][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.679171][T14477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1460.715257][T14595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1460.735136][T14454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1460.747013][T14454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.759011][T14439] UDF-fs: warning (device loop3): udf_evict_inode: Inode 1367 (mode 100000) has inode size 65228 different from extent length 65536. Filesystem need not be standards compliant. [ 1460.778222][T14454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1460.786269][T14595] EXT4-fs (loop2): shut down requested (0) [ 1460.791838][T14454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.820958][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1460.858882][T12897] usb 3-1: USB disconnect, device number 17 [ 1460.866859][T14454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1460.899819][T14454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.937989][T14454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1460.956477][T14454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.976006][T14606] loop4: detected capacity change from 0 to 40427 [ 1460.983443][T14454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1460.993204][T14477] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.009861][T14606] F2FS-fs (loop4): Unrecognized mount option "0xffffffffffffffff0x000000000000000000000000000000000000003" or missing value [ 1461.030953][T14477] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.059172][T14477] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.077004][T14477] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.111627][T14454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1461.128325][T14454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.139300][T14454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1461.150837][T14454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.162302][ T5284] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1461.172229][T14454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1461.184538][T14454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.195090][T14454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1461.206878][T14454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.218891][T14454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1461.241396][T14454] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.252168][T14454] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.261932][T14454] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.272554][T14454] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.327070][ T5284] usb 4-1: Using ep0 maxpacket: 16 [ 1461.367947][ T5284] usb 4-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=6f.9e [ 1461.384613][ T5284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.430619][ T5284] usb 4-1: Product: syz [ 1461.443851][ T5794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1461.456509][ T5794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1461.549732][ T5794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1461.593815][ T5794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1461.604067][ T5342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1461.622344][T14389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1461.628800][ T5284] usb 4-1: Manufacturer: syz [ 1461.634869][ T5342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1461.636770][ T5284] usb 4-1: SerialNumber: syz [ 1461.663675][ T5284] usb 4-1: config 0 descriptor?? [ 1461.677788][ T5284] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 1462.763709][ T5796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1463.067715][ T5796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1463.783039][T14625] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1182'. [ 1463.793621][T14625] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1182'. [ 1464.070772][T14641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.165854][T14641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.251297][T14632] loop2: detected capacity change from 0 to 512 [ 1464.295939][T14632] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1464.316556][T14632] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1464.349080][T14632] EXT4-fs (loop2): DAX unsupported by block device. [ 1465.686621][ T4674] bcm5974 4-1:0.0: could not read from device [ 1465.758988][ T4674] bcm5974 4-1:0.0: could not read from device [ 1465.781790][ T4674] bcm5974 4-1:0.0: could not read from device [ 1465.791723][ T4674] bcm5974 4-1:0.0: could not read from device [ 1465.820571][ T5284] usb 4-1: USB disconnect, device number 15 [ 1465.830093][T14655] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1188'. [ 1465.848386][T14537] bcm5974 4-1:0.0: could not read from device [ 1465.973781][T14537] udevd[14537]: Error opening device "/dev/input/event4": No such device [ 1466.030673][T14655] bridge_slave_1: left allmulticast mode [ 1466.041986][T14537] udevd[14537]: Unable to EVIOCGABS device "/dev/input/event4" [ 1466.056731][T14655] bridge_slave_1: left promiscuous mode [ 1466.063426][T14655] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.066543][T14537] udevd[14537]: Unable to EVIOCGABS device "/dev/input/event4" [ 1466.806604][T14537] udevd[14537]: Unable to EVIOCGABS device "/dev/input/event4" [ 1466.814407][T14537] udevd[14537]: Unable to EVIOCGABS device "/dev/input/event4" [ 1467.370677][T14679] random: crng reseeded on system resumption [ 1468.626076][T14699] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1468.836476][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1468.885525][T14705] syzkaller0: entered promiscuous mode [ 1468.891145][T14705] syzkaller0: entered allmulticast mode [ 1469.873398][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 1469.884671][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1469.894499][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1469.904360][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1469.924132][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1469.939226][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1469.948388][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.085983][T14708] Bluetooth: MGMT ver 1.23 [ 1471.094667][ T25] usb 5-1: GET_CAPABILITIES returned 0 [ 1471.100328][ T25] usbtmc 5-1:16.0: can't read capabilities [ 1472.025308][T14713] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1202'. [ 1472.046848][T14713] 0ªX¹¦À: renamed from caif0 [ 1472.090529][T14713] 0ªX¹¦À: entered allmulticast mode [ 1472.113264][ T25] usb 5-1: USB disconnect, device number 10 [ 1472.131646][T14713] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1472.215396][T13401] Bluetooth: hci0: Malformed LE Event: 0x1b [ 1473.180929][T13401] Bluetooth: hci0: command 0x0401 tx timeout [ 1473.355099][ T54] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 1474.017518][T14743] bridge_slave_0: left allmulticast mode [ 1474.023307][T14743] bridge_slave_0: left promiscuous mode [ 1474.030738][T14743] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.259129][T14743] bridge_slave_1: left allmulticast mode [ 1474.288210][T14743] bridge_slave_1: left promiscuous mode [ 1474.307063][T14743] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.402797][T14751] Invalid ELF header magic: != ELF [ 1475.177884][T14743] bond0: (slave bond_slave_0): Releasing backup interface [ 1475.201851][T14743] bond0: (slave bond_slave_1): Releasing backup interface [ 1475.866293][T14743] team0: Port device team_slave_0 removed [ 1475.905035][T14743] team0: Port device team_slave_1 removed [ 1475.919557][T14743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1475.962999][T14743] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1475.998097][T14743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1476.021189][T14743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1476.176595][ T5281] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1476.228214][ T5282] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1476.335694][ T5281] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1476.346688][ T5284] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1476.378350][ T5281] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1476.390415][ T5282] usb 2-1: Using ep0 maxpacket: 32 [ 1476.402024][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1476.414664][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1476.426139][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1476.436789][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 1476.457114][ T5282] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1476.470555][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1476.482299][ T5282] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1476.500286][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1476.516158][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.525585][ T5281] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1476.539545][ T5284] usb 5-1: Using ep0 maxpacket: 16 [ 1476.557462][ T5284] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1476.573006][ T5282] usb 2-1: config 0 descriptor?? [ 1476.598477][ T5284] usb 5-1: config 0 has an invalid interface number: 249 but max is 0 [ 1476.609279][ T5284] usb 5-1: config 0 has no interface number 0 [ 1476.619980][ T5281] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1476.633145][ T5284] usb 5-1: New USB device found, idVendor=0db0, idProduct=6869, bcdDevice=73.b3 [ 1476.646686][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.655094][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.663568][ T5284] usb 5-1: Product: syz [ 1476.668446][ T5281] usb 3-1: Product: syz [ 1476.672781][ T5284] usb 5-1: Manufacturer: syz [ 1476.677876][ T5281] usb 3-1: Manufacturer: syz [ 1476.682731][ T5284] usb 5-1: SerialNumber: syz [ 1476.687596][ T5281] usb 3-1: SerialNumber: syz [ 1476.708854][ T5281] usb 3-1: config 0 descriptor?? [ 1476.714092][ T5284] usb 5-1: config 0 descriptor?? [ 1476.723706][T14763] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1476.738745][ T5281] ati_remote 3-1:0.0: Initializing ati_remote hardware failed. [ 1476.751104][ T5281] ati_remote 3-1:0.0: probe with driver ati_remote failed with error -5 [ 1476.849203][T10438] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1476.957145][ T5281] usb 5-1: USB disconnect, device number 11 [ 1476.985441][T13683] usb 3-1: USB disconnect, device number 18 [ 1477.036312][ T5282] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0030/input/input17 [ 1477.049238][T10438] usb 4-1: config 0 has an invalid interface number: 145 but max is 0 [ 1477.071535][T10438] usb 4-1: config 0 has no interface number 0 [ 1477.108277][T10438] usb 4-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=3e.51 [ 1477.125561][T10438] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.135507][ T5282] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0030/input/input18 [ 1477.135668][T10438] usb 4-1: Product: syz [ 1477.159401][T10438] usb 4-1: Manufacturer: syz [ 1477.164139][T10438] usb 4-1: SerialNumber: syz [ 1477.190667][T10438] usb 4-1: config 0 descriptor?? [ 1477.238035][ T5282] kye 0003:0458:5011.0030: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 1477.356606][ T25] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1477.410588][T10438] usb 4-1: USB disconnect, device number 16 [ 1477.467588][T13683] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1477.513312][ T5280] usb 2-1: USB disconnect, device number 14 [ 1477.528371][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 1477.544737][ T25] usb 1-1: config 0 has no interfaces? [ 1477.556472][ T25] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1477.569200][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.596793][ T25] usb 1-1: config 0 descriptor?? [ 1477.626731][T13683] usb 5-1: Using ep0 maxpacket: 16 [ 1477.643056][T13683] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1477.660622][T13683] usb 5-1: config 0 has an invalid interface number: 249 but max is 0 [ 1477.671497][T13683] usb 5-1: config 0 has no interface number 0 [ 1477.681825][T13683] usb 5-1: New USB device found, idVendor=0db0, idProduct=6869, bcdDevice=73.b3 [ 1477.692398][T13683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.703032][T13683] usb 5-1: Product: syz [ 1477.707469][T13683] usb 5-1: Manufacturer: syz [ 1477.712073][T13683] usb 5-1: SerialNumber: syz [ 1477.727860][T13683] usb 5-1: config 0 descriptor?? [ 1477.814997][ T25] usb 1-1: USB disconnect, device number 16 [ 1478.197253][ T5280] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1478.219891][T13683] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1478.326616][ T5282] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1478.366537][ T5280] usb 4-1: Using ep0 maxpacket: 32 [ 1478.373488][ T5280] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1478.377378][T13683] usb 3-1: Using ep0 maxpacket: 16 [ 1478.388721][ T5280] usb 4-1: config 7 has an invalid interface number: 112 but max is 1 [ 1478.393141][T13683] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.397309][ T5280] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.418444][ T5280] usb 4-1: config 7 has no interface number 1 [ 1478.422016][T13683] usb 3-1: config 0 has no interfaces? [ 1478.424551][ T5280] usb 4-1: config 7 interface 112 has no altsetting 0 [ 1478.430175][T13683] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1478.430204][T13683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.439524][ T5280] usb 4-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=b5.bb [ 1478.454532][T13683] usb 3-1: config 0 descriptor?? [ 1478.472020][ T5280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.483273][ T5280] usb 4-1: Product: syz [ 1478.487933][ T5280] usb 4-1: Manufacturer: syz [ 1478.492639][ T5280] usb 4-1: SerialNumber: syz [ 1478.498196][ T5282] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 1478.512380][ T5282] usb 2-1: config 0 has no interface number 0 [ 1478.522178][ T5282] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1478.540003][ T5282] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1478.551938][ T5282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.563080][ T5282] usb 2-1: Product: syz [ 1478.569951][ T5282] usb 2-1: Manufacturer: syz [ 1478.574682][ T5282] usb 2-1: SerialNumber: syz [ 1478.593148][ T5282] usb 2-1: config 0 descriptor?? [ 1478.604815][ T5282] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 1478.693799][ T5283] usb 3-1: USB disconnect, device number 19 [ 1478.724763][ T5280] xr_serial 4-1:7.112: xr_serial converter detected [ 1478.739883][ T5280] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1478.746297][ T5280] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1478.767422][ T5280] usb 4-1: USB disconnect, device number 17 [ 1478.775640][ T5280] xr_serial 4-1:7.112: device disconnected [ 1478.814582][ T25] usb 2-1: USB disconnect, device number 15 [ 1478.823017][ T25] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 1479.890391][ T5280] usb 5-1: USB disconnect, device number 12 [ 1480.209996][T14807] syz.2.1229: attempt to access beyond end of device [ 1480.209996][T14807] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1480.226675][T14807] (syz.2.1229,14807,0):ocfs2_get_sector:1769 ERROR: status = -5 [ 1480.234714][T14807] (syz.2.1229,14807,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1480.244319][T14807] (syz.2.1229,14807,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1480.253467][T14807] (syz.2.1229,14807,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 1480.266843][ T5284] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1480.276688][ T5283] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1480.319087][T14812] syz.2.1229: attempt to access beyond end of device [ 1480.319087][T14812] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1480.335358][T14812] syz.2.1229: attempt to access beyond end of device [ 1480.335358][T14812] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1480.351773][T14812] Mount JFS Failure: -5 [ 1480.356216][T14812] jfs_mount failed w/return code = -5 [ 1480.507165][ T5283] usb 4-1: Using ep0 maxpacket: 8 [ 1480.530866][ T5283] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1480.537742][ T5284] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1480.561270][ T5284] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1480.576081][ T5283] usb 4-1: config 0 has no interface number 0 [ 1480.632633][ T5283] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1480.636448][ T5284] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1480.692883][ T5283] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 1480.693022][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.693115][ T5283] usb 4-1: Product: syz [ 1480.693202][ T5283] usb 4-1: Manufacturer: syz [ 1480.693292][ T5283] usb 4-1: SerialNumber: syz [ 1480.752769][ T5283] usb 4-1: config 0 descriptor?? [ 1480.774175][ T5284] usb 2-1: config 1 has no interface number 1 [ 1480.776270][ T5284] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1480.777676][ T5284] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1480.829217][ T5284] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1480.829251][ T5284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.829271][ T5284] usb 2-1: Product: syz [ 1480.829285][ T5284] usb 2-1: Manufacturer: syz [ 1480.829302][ T5284] usb 2-1: SerialNumber: syz [ 1480.971718][ T5283] i2c-cp2615 4-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 1481.093585][ T5284] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1481.170737][ T5283] usb 4-1: USB disconnect, device number 18 [ 1481.198199][ T5284] usb 2-1: MIDIStreaming interface descriptor not found [ 1481.314902][ T5284] usb 2-1: USB disconnect, device number 16 [ 1481.388791][T14643] udevd[14643]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1482.383271][ T5280] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1482.706777][ T5280] usb 3-1: Using ep0 maxpacket: 16 [ 1482.721462][ T5280] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1482.803856][ T5280] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 1483.355905][ T5280] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1483.406498][ T5280] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1483.464930][T14809] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1232'. [ 1483.490805][ T5280] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1483.506100][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1483.538563][ T5280] usb 3-1: SerialNumber: syz [ 1483.591129][T14820] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1483.602837][T14820] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1483.622060][ T5280] hub 3-1:1.0: bad descriptor, ignoring hub [ 1483.634673][ T5280] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1483.696505][T13683] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 1483.834450][T14820] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1483.850938][T14820] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1483.877960][T13683] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.890106][T13683] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1483.926468][T13683] usb 2-1: New USB device found, idVendor=01ac, idProduct=0000, bcdDevice= 1.00 [ 1483.935567][T13683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.959098][T13683] usb 2-1: config 0 descriptor?? [ 1483.966649][ T5283] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1483.968588][T13683] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1484.036568][ T5282] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1484.155368][ T5283] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1484.173786][T14844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1484.183542][T14844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.194413][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1484.214524][T13683] usb 2-1: USB disconnect, device number 17 [ 1484.242039][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1484.265107][ T5282] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 1484.280676][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.303075][ T5282] usb 4-1: config 0 descriptor?? [ 1484.373121][ T5283] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1484.384112][ T5283] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1484.393195][ T5283] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1484.425071][ T5280] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1484.454453][ T5283] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1484.473128][ T5283] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1484.482122][ T5283] usb 1-1: Product: syz [ 1484.486434][ T5283] usb 1-1: Manufacturer: syz [ 1485.023898][ T5283] cdc_wdm 1-1:1.0: skipping garbage [ 1485.029221][ T5283] cdc_wdm 1-1:1.0: skipping garbage [ 1485.034474][ T5283] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1485.047005][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.053340][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.196685][T13683] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1485.210087][T10438] usb 1-1: USB disconnect, device number 17 [ 1485.221290][ T5282] logitech-djreceiver 0003:046D:C534.0031: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.3-1/input0 [ 1485.355053][T14820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1485.370239][T13683] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1485.381443][T14820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1485.393126][T13683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1485.404921][T13683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1485.412955][T10438] usb 4-1: USB disconnect, device number 19 [ 1485.419609][T13683] usb 2-1: New USB device found, idVendor=0499, idProduct=51e2, bcdDevice= 9.0f [ 1485.460011][T13683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.471933][T13683] usb 2-1: Product: syz [ 1485.476194][T13683] usb 2-1: Manufacturer: syz [ 1485.481255][T13683] usb 2-1: SerialNumber: syz [ 1485.497450][T13683] usb 2-1: config 0 descriptor?? [ 1485.547723][ T5282] usb 3-1: USB disconnect, device number 20 [ 1485.556063][ T5282] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 1485.666576][ T5283] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1485.748279][T13683] usb 2-1: USB disconnect, device number 18 [ 1485.749338][T14554] udevd[14554]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1485.862842][ T5283] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1485.871583][ T5283] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1485.882493][ T5283] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1485.892836][ T5283] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1485.913828][ T5283] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1485.924290][ T5283] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1485.943654][ T5283] usb 1-1: Product: syz [ 1485.948572][ T5283] usb 1-1: Manufacturer: syz [ 1485.969613][ T5283] cdc_wdm 1-1:1.0: skipping garbage [ 1485.983277][ T5283] cdc_wdm 1-1:1.0: skipping garbage [ 1486.006559][ T5283] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1486.326576][T13683] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1486.326636][ T5283] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1486.346575][ T5282] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1486.479819][T13683] usb 3-1: Using ep0 maxpacket: 32 [ 1486.486475][ T5283] usb 4-1: Using ep0 maxpacket: 8 [ 1486.491902][T13683] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1486.493455][ T5283] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1486.502221][ T5282] usb 5-1: Using ep0 maxpacket: 32 [ 1486.511640][ T46] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 1486.525389][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.527531][T13683] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1486.543580][T13683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.546003][ T5283] usb 4-1: config 0 descriptor?? [ 1486.552086][T13683] usb 3-1: Product: syz [ 1486.552107][T13683] usb 3-1: Manufacturer: syz [ 1486.552124][T13683] usb 3-1: SerialNumber: syz [ 1486.555662][T13683] usb 3-1: config 0 descriptor?? [ 1486.587411][T13683] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1486.593834][ T5282] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1486.603076][ T5282] usb 5-1: New USB device strings: Mfr=3, Product=2, SerialNumber=3 [ 1486.611213][ T5282] usb 5-1: Product: syz [ 1486.615406][ T5282] usb 5-1: Manufacturer: syz [ 1486.621336][ T5282] usb 5-1: SerialNumber: syz [ 1486.635445][ T5282] usb 5-1: config 0 descriptor?? [ 1486.643527][ T5282] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1486.678437][ T46] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1486.687231][ T46] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1486.695485][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1486.708065][ T46] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1486.719237][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1486.730987][T14845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1486.742254][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1486.756274][T14845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1486.762165][ T46] usb 2-1: string descriptor 0 read error: -22 [ 1486.770804][ T46] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1486.780007][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.793602][T13683] gspca_sunplus: reg_r err -32 [ 1486.800774][ T46] usb 2-1: config 0 descriptor?? [ 1486.809321][T14896] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1486.821027][ T46] hub 2-1:0.0: bad descriptor, ignoring hub [ 1486.827555][ T46] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1486.838966][ T46] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input19 [ 1486.903768][ C0] usb_acecad 2-1:0.0: can't resubmit intr, dummy_hcd.1-1/input0, status -1 [ 1486.927678][ C1] usb_acecad 2-1:0.0: can't resubmit intr, dummy_hcd.1-1/input0, status -1 [ 1486.978566][T14845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1486.989487][T14845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1487.053102][ T46] usb 2-1: USB disconnect, device number 19 [ 1487.777091][T13683] sunplus 3-1:0.0: probe with driver sunplus failed with error -32 [ 1488.167648][T10438] usb 1-1: USB disconnect, device number 18 [ 1489.113793][ T46] usb 3-1: USB disconnect, device number 21 [ 1489.119883][T10438] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1489.212002][ T5283] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1489.223658][ T5283] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading RX_CTL register: ffffffc3 [ 1489.307031][T10438] usb 1-1: Using ep0 maxpacket: 8 [ 1489.324849][T10438] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 1489.342996][T10438] usb 1-1: config 0 has no interface number 0 [ 1489.357456][T10438] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1489.377631][T10438] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1489.396441][T10438] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 108, changing to 10 [ 1489.412524][T10438] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 8949, setting to 1024 [ 1489.429711][ T5283] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1489.446610][T10438] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1489.460525][ T5283] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading Medium Status register: ffffffe0 [ 1489.483253][T10438] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1489.506718][T10438] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.526518][T10438] usb 1-1: Product: syz [ 1489.530798][T10438] usb 1-1: Manufacturer: syz [ 1489.539612][T10438] usb 1-1: SerialNumber: syz [ 1489.547667][T10438] usb 1-1: config 0 descriptor?? [ 1489.708670][ T5283] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1489.778536][T10438] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 1490.010706][T14915] iowarrior 1-1:0.186: ioctl 'IOW_WRITE' is not supported for product=0x1505. [ 1490.035960][T10438] usb 1-1: USB disconnect, device number 19 [ 1490.147279][ T5283] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 1490.174710][ T5283] asix 4-1:0.0 (unnamed net_device) (uninitialized): Could not register MDIO bus (err -5) [ 1490.192850][ T5283] asix 4-1:0.0: probe with driver asix failed with error -5 [ 1490.212157][ T5283] usb 4-1: USB disconnect, device number 20 [ 1490.640802][T14936] overlayfs: missing 'lowerdir' [ 1490.814761][T14937] Unsupported ieee802154 address type: 0 [ 1491.938591][ T5282] gspca_stk1135: reg_w 0x300 err -110 [ 1491.945052][ T5282] gspca_stk1135: serial bus timeout: status=0x00 [ 1491.951492][ T5282] gspca_stk1135: Sensor write failed [ 1491.957005][ T5282] gspca_stk1135: serial bus timeout: status=0x00 [ 1491.963348][ T5282] gspca_stk1135: Sensor write failed [ 1491.968740][ T5282] gspca_stk1135: serial bus timeout: status=0x00 [ 1491.975970][ T5282] gspca_stk1135: Sensor read failed [ 1491.981520][ T5282] gspca_stk1135: serial bus timeout: status=0x00 [ 1491.989336][ T5282] gspca_stk1135: Sensor read failed [ 1491.994574][ T5282] gspca_stk1135: Detected sensor type unknown (0x0) [ 1492.001313][ T5282] gspca_stk1135: serial bus timeout: status=0x00 [ 1492.007723][ T5282] gspca_stk1135: Sensor read failed [ 1492.012952][ T5282] gspca_stk1135: serial bus timeout: status=0x00 [ 1492.019404][ T5282] gspca_stk1135: Sensor read failed [ 1492.024636][ T5282] gspca_stk1135: serial bus timeout: status=0x00 [ 1492.031042][ T5282] gspca_stk1135: Sensor write failed [ 1492.036626][ T5282] gspca_stk1135: serial bus timeout: status=0x00 [ 1492.042976][ T5282] gspca_stk1135: Sensor write failed [ 1492.048494][ T5282] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110 [ 1492.125531][ T5280] usb 5-1: USB disconnect, device number 13 [ 1492.276574][T10438] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1492.359897][ T5283] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1492.381257][T14972] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1273'. [ 1492.393086][T14972] nbd: must specify a device to reconfigure [ 1492.466124][T10438] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1492.478201][T10438] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1492.491138][T10438] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1492.501689][T10438] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.522204][T10438] usb 3-1: config 0 descriptor?? [ 1492.527299][ T5283] usb 2-1: Using ep0 maxpacket: 32 [ 1492.546844][ T5280] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1492.556283][ T5283] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1492.577600][ T5283] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1492.588072][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1492.598312][ T5283] usb 2-1: Product: syz [ 1492.602544][ T5283] usb 2-1: Manufacturer: syz [ 1492.607657][ T5283] usb 2-1: SerialNumber: syz [ 1492.632076][ T5283] usb 2-1: config 0 descriptor?? [ 1492.646817][T14954] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1492.676610][ T5282] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1492.718485][T14980] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1277'. [ 1492.728195][ T5280] usb 5-1: Using ep0 maxpacket: 32 [ 1492.737785][ T5280] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1492.746038][ T5280] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1492.759413][ T5280] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1492.783766][ T5280] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1492.809996][ T5280] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1492.819803][ T5280] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1492.835727][ T5280] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1492.842227][ T5282] usb 4-1: Using ep0 maxpacket: 32 [ 1492.844923][ T5280] usb 5-1: Product: syz [ 1492.858493][ T5280] usb 5-1: Manufacturer: syz [ 1492.863169][ T5280] usb 5-1: SerialNumber: syz [ 1492.880667][ T5282] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1492.889113][ T5280] usb 5-1: config 0 descriptor?? [ 1492.908519][ T5282] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1492.914287][ T5283] usb 2-1: USB disconnect, device number 20 [ 1492.922477][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1492.927475][ T5280] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1492.941487][ T5282] usb 4-1: Product: syz [ 1492.957000][ T5282] usb 4-1: Manufacturer: syz [ 1492.961640][ T5282] usb 4-1: SerialNumber: syz [ 1492.984761][ T5280] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1492.990842][ T5282] usb 4-1: config 0 descriptor?? [ 1493.014826][T10438] keytouch 0003:0926:3333.0032: fixing up Keytouch IEC report descriptor [ 1493.025106][T14974] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1493.054782][T10438] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0032/input/input20 [ 1493.208044][T14950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1493.227081][T10438] keytouch 0003:0926:3333.0032: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1493.248008][T14950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1493.262309][ T5280] usb 5-1: USB disconnect, device number 14 [ 1493.294349][T14950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1493.308581][T14974] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -19 [ 1493.341793][ T5282] usb 4-1: USB disconnect, device number 21 [ 1493.417011][T14950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1493.594477][T14950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1493.666200][T14950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1493.748325][T14950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1493.794826][T14950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.128918][ T5280] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1494.137076][T10438] usb 3-1: USB disconnect, device number 22 [ 1494.254401][ T9451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.276666][ T5283] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1494.447039][ T5283] usb 2-1: Using ep0 maxpacket: 32 [ 1494.458155][ T5283] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1494.468717][ T5280] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1494.481419][ T5283] usb 2-1: string descriptor 0 read error: -22 [ 1494.487773][ T46] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1494.497144][ T5283] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1494.506607][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1494.518338][ T5283] usb 2-1: config 0 descriptor?? [ 1494.526982][T14954] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1494.616711][ T1178] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1494.630600][ T5280] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1494.641152][ T5280] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1494.653392][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 1494.658850][ T5280] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1494.673388][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1494.685358][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1494.695501][ T5280] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1494.709374][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1494.722416][ T5280] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1494.729277][ T46] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1494.754233][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.763311][T14954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1494.775155][ T5280] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1494.786148][ T5280] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1494.796739][ T46] usb 4-1: config 0 descriptor?? [ 1494.802151][ T5280] usb 5-1: Product: syz [ 1494.809132][ T5280] usb 5-1: Manufacturer: syz [ 1494.814176][T14954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.816141][ T1178] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1494.826227][T14954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1494.843042][ T5280] usb 5-1: SerialNumber: syz [ 1494.851686][ T5280] usb 5-1: config 0 descriptor?? [ 1494.860687][T14954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.872114][ T5280] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1494.882556][ T1178] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1494.895052][ T1178] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1494.895423][ T5280] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 1494.911960][ T1178] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1494.930534][T14954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1494.932958][ T1178] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1494.990769][ T1178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.996881][T14954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1495.023968][ T1178] usb 1-1: config 0 descriptor?? [ 1495.048426][T14954] [ 1495.050796][T14954] ====================================================== [ 1495.057823][T14954] WARNING: possible circular locking dependency detected [ 1495.064856][T14954] 6.12.0-rc2-next-20241011-syzkaller #0 Not tainted [ 1495.071459][T14954] ------------------------------------------------------ [ 1495.078492][T14954] syz.1.1267/14954 is trying to acquire lock: [ 1495.084574][T14954] ffffffff8f69c328 (chaoskey_list_lock){+.+.}-{3:3}, at: chaoskey_open+0xb8/0x210 [ 1495.093844][T14954] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1495.093844][T14954] but task is already holding lock: [ 1495.101233][T14954] ffffffff8f5b2730 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 1495.109645][T14954] [ 1495.109645][T14954] which lock already depends on the new lock. [ 1495.109645][T14954] [ 1495.120060][T14954] [ 1495.120060][T14954] the existing dependency chain (in reverse order) is: [ 1495.129119][T14954] [ 1495.129119][T14954] -> #1 (minor_rwsem#2){++++}-{3:3}: [ 1495.136670][T14954] lock_acquire+0x1ed/0x550 [ 1495.141726][T14954] down_write+0x99/0x220 [ 1495.146519][T14954] usb_deregister_dev+0x88/0x210 [ 1495.152023][T14954] chaoskey_disconnect+0xc1/0x270 [ 1495.157600][T14954] usb_unbind_interface+0x25e/0x940 [ 1495.163353][T14954] device_release_driver_internal+0x503/0x7c0 [ 1495.169993][T14954] bus_remove_device+0x34f/0x420 [ 1495.175485][T14954] device_del+0x57a/0x9b0 [ 1495.180360][T14954] usb_disable_device+0x3bf/0x850 [ 1495.185939][T14954] usb_disconnect+0x340/0x950 [ 1495.191166][T14954] hub_event+0x1ebc/0x5150 [ 1495.196118][T14954] process_scheduled_works+0xa63/0x1850 [ 1495.202207][T14954] worker_thread+0x870/0xd30 [ 1495.207359][T14954] kthread+0x2f0/0x390 [ 1495.211995][T14954] ret_from_fork+0x4b/0x80 [ 1495.216951][T14954] ret_from_fork_asm+0x1a/0x30 [ 1495.222264][T14954] [ 1495.222264][T14954] -> #0 (chaoskey_list_lock){+.+.}-{3:3}: [ 1495.224548][ T5280] usb 5-1: USB disconnect, device number 15 [ 1495.230267][T14954] validate_chain+0x18ef/0x5920 [ 1495.230295][T14954] __lock_acquire+0x1384/0x2050 [ 1495.230311][T14954] lock_acquire+0x1ed/0x550 [ 1495.230327][T14954] __mutex_lock+0x136/0xd70 [ 1495.256975][T14954] chaoskey_open+0xb8/0x210 [ 1495.262028][T14954] usb_open+0x14b/0x1d0 [ 1495.266723][T14954] chrdev_open+0x521/0x600 [ 1495.271675][T14954] do_dentry_open+0x978/0x1460 [ 1495.277155][T14954] vfs_open+0x3e/0x330 [ 1495.281763][T14954] path_openat+0x2c84/0x3590 [ 1495.286897][T14954] do_filp_open+0x235/0x490 [ 1495.291944][T14954] do_sys_openat2+0x13e/0x1d0 [ 1495.297174][T14954] __x64_sys_openat+0x247/0x2a0 [ 1495.302576][T14954] do_syscall_64+0xf3/0x230 [ 1495.307627][T14954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.314073][T14954] [ 1495.314073][T14954] other info that might help us debug this: [ 1495.314073][T14954] [ 1495.324321][T14954] Possible unsafe locking scenario: [ 1495.324321][T14954] [ 1495.331793][T14954] CPU0 CPU1 [ 1495.337171][T14954] ---- ---- [ 1495.342549][T14954] rlock(minor_rwsem#2); [ 1495.346923][T14954] lock(chaoskey_list_lock); [ 1495.354143][T14954] lock(minor_rwsem#2); [ 1495.360938][T14954] lock(chaoskey_list_lock); [ 1495.365616][T14954] [ 1495.365616][T14954] *** DEADLOCK *** [ 1495.365616][T14954] [ 1495.373846][T14954] 1 lock held by syz.1.1267/14954: [ 1495.378952][T14954] #0: ffffffff8f5b2730 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 1495.387761][T14954] [ 1495.387761][T14954] stack backtrace: [ 1495.393653][T14954] CPU: 0 UID: 0 PID: 14954 Comm: syz.1.1267 Not tainted 6.12.0-rc2-next-20241011-syzkaller #0 [ 1495.403901][T14954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1495.413960][T14954] Call Trace: [ 1495.417239][T14954] [ 1495.420166][T14954] dump_stack_lvl+0x241/0x360 [ 1495.424849][T14954] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1495.430071][T14954] ? __pfx__printk+0x10/0x10 [ 1495.434667][T14954] print_circular_bug+0x13a/0x1b0 [ 1495.439696][T14954] check_noncircular+0x36a/0x4a0 [ 1495.444625][T14954] ? __pfx_check_noncircular+0x10/0x10 [ 1495.450074][T14954] ? lockdep_lock+0x123/0x2b0 [ 1495.454753][T14954] ? validate_chain+0x11e/0x5920 [ 1495.459964][T14954] ? validate_chain+0x11e/0x5920 [ 1495.464946][T14954] validate_chain+0x18ef/0x5920 [ 1495.469887][T14954] ? __pfx_validate_chain+0x10/0x10 [ 1495.475105][T14954] ? __kernel_text_address+0xd/0x40 [ 1495.480309][T14954] ? unwind_get_return_address+0x4d/0x90 [ 1495.485960][T14954] ? __pfx_validate_chain+0x10/0x10 [ 1495.491147][T14954] ? mark_lock+0x9a/0x360 [ 1495.495460][T14954] ? __lock_acquire+0x1384/0x2050 [ 1495.500479][T14954] ? mark_lock+0x9a/0x360 [ 1495.504798][T14954] ? __lock_acquire+0x1384/0x2050 [ 1495.509811][T14954] ? mark_lock+0x9a/0x360 [ 1495.514131][T14954] __lock_acquire+0x1384/0x2050 [ 1495.518981][T14954] lock_acquire+0x1ed/0x550 [ 1495.523475][T14954] ? chaoskey_open+0xb8/0x210 [ 1495.529752][T14954] ? __pfx_lock_acquire+0x10/0x10 [ 1495.535141][T14954] ? __pfx___might_resched+0x10/0x10 [ 1495.540470][T14954] ? klist_dec_and_del+0x154/0x3f0 [ 1495.545602][T14954] ? _raw_spin_unlock+0x28/0x50 [ 1495.550469][T14954] __mutex_lock+0x136/0xd70 [ 1495.554981][T14954] ? chaoskey_open+0xb8/0x210 [ 1495.559674][T14954] ? kobject_put+0x446/0x480 [ 1495.564288][T14954] ? chaoskey_open+0xb8/0x210 [ 1495.568974][T14954] ? __pfx___mutex_lock+0x10/0x10 [ 1495.574012][T14954] ? usb_find_interface+0xf7/0x160 [ 1495.579151][T14954] ? __pfx_usb_find_interface+0x10/0x10 [ 1495.584704][T14954] ? __pfx_lock_release+0x10/0x10 [ 1495.589729][T14954] ? do_raw_spin_lock+0x14f/0x370 [ 1495.594756][T14954] chaoskey_open+0xb8/0x210 [ 1495.599261][T14954] ? __pfx_chaoskey_open+0x10/0x10 [ 1495.604387][T14954] usb_open+0x14b/0x1d0 [ 1495.608548][T14954] chrdev_open+0x521/0x600 [ 1495.612991][T14954] ? __pfx_apparmor_file_open+0x10/0x10 [ 1495.618551][T14954] ? __pfx_chrdev_open+0x10/0x10 [ 1495.623489][T14954] ? security_file_open+0x513/0x990 [ 1495.628696][T14954] ? __pfx_chrdev_open+0x10/0x10 [ 1495.633642][T14954] do_dentry_open+0x978/0x1460 [ 1495.638405][T14954] vfs_open+0x3e/0x330 [ 1495.642473][T14954] path_openat+0x2c84/0x3590 [ 1495.647129][T14954] ? __pfx_path_openat+0x10/0x10 [ 1495.652079][T14954] do_filp_open+0x235/0x490 [ 1495.656591][T14954] ? __pfx_do_filp_open+0x10/0x10 [ 1495.661635][T14954] ? do_raw_spin_lock+0x14f/0x370 [ 1495.666689][T14954] ? alloc_fd+0x61a/0x690 [ 1495.671061][T14954] do_sys_openat2+0x13e/0x1d0 [ 1495.675776][T14954] ? __pfx_do_sys_openat2+0x10/0x10 [ 1495.680978][T14954] __x64_sys_openat+0x247/0x2a0 [ 1495.685850][T14954] ? __pfx___x64_sys_openat+0x10/0x10 [ 1495.691237][T14954] ? do_syscall_64+0x100/0x230 [ 1495.696020][T14954] ? do_syscall_64+0xb6/0x230 [ 1495.700703][T14954] do_syscall_64+0xf3/0x230 [ 1495.705220][T14954] ? clear_bhb_loop+0x35/0x90 [ 1495.709905][T14954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.715815][T14954] RIP: 0033:0x7f3dbb77c990 [ 1495.720241][T14954] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 1495.739839][T14954] RSP: 002b:00007f3dbc4c2b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1495.748264][T14954] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f3dbb77c990 [ 1495.756232][T14954] RDX: 0000000000000002 RSI: 00007f3dbc4c2c10 RDI: 00000000ffffff9c [ 1495.764219][T14954] RBP: 00007f3dbc4c2c10 R08: 0000000000000000 R09: 00007f3dbc4c2987 [ 1495.772196][T14954] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1495.780164][T14954] R13: 0000000000000000 R14: 00007f3dbb935f80 R15: 00007fff1c281458 [ 1495.788137][T14954] [ 1495.806500][ T5280] ldusb 5-1:0.0: LD USB Device #1 now disconnected [ 1496.192694][ T1178] usb 1-1: can't set config #0, error -71 [ 1496.218010][ T1178] usb 1-1: USB disconnect, device number 20 [ 1496.303195][ T5796] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1496.428708][ T46] usbhid 4-1:0.0: can't add hid device: -71 [ 1496.434709][ T46] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1496.461326][ T5796] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1496.493854][ T46] usb 4-1: USB disconnect, device number 22 [ 1496.551829][ T5796] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1496.602281][ T5796] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1496.669984][ T5796] bridge_slave_1: left allmulticast mode [ 1496.675658][ T5796] bridge_slave_1: left promiscuous mode [ 1496.681962][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1496.690938][ T5796] bridge_slave_0: left allmulticast mode [ 1496.697225][ T5796] bridge_slave_0: left promiscuous mode [ 1496.702866][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.802137][ T5796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1496.812317][ T5796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1496.823108][ T5796] bond0 (unregistering): Released all slaves [ 1497.046265][ T5796] hsr_slave_0: left promiscuous mode [ 1497.052724][ T5796] hsr_slave_1: left promiscuous mode [ 1497.062042][ T5796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1497.069796][ T5796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1497.077735][ T5796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1497.085356][ T5796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1497.097619][ T5796] veth1_macvtap: left promiscuous mode [ 1497.103152][ T5796] veth0_macvtap: left promiscuous mode [ 1497.110682][ T5796] veth1_vlan: left promiscuous mode [ 1497.116018][ T5796] veth0_vlan: left promiscuous mode [ 1497.295044][ T5796] team0 (unregistering): Port device team_slave_1 removed [ 1497.329805][ T5796] team0 (unregistering): Port device team_slave_0 removed [ 1497.806723][ T5796] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.852919][ T5796] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.920068][ T5796] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.983422][ T5796] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.068166][ T5796] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.152317][ T5796] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.229722][ T5796] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.318313][ T5796] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.413823][ T5796] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.459259][ T5796] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.512861][ T5796] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.555536][ T5796] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.655132][ T5796] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.728163][ T5796] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.770837][ T5796] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.865431][ T5796] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.956214][ T5796] bridge_slave_0: left allmulticast mode [ 1498.972972][ T5796] bridge_slave_0: left promiscuous mode [ 1498.980143][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.989392][ T5796] bridge_slave_1: left allmulticast mode [ 1498.995064][ T5796] bridge_slave_1: left promiscuous mode [ 1499.001155][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.010786][ T5796] bridge_slave_0: left allmulticast mode [ 1499.019674][ T5796] bridge_slave_0: left promiscuous mode [ 1499.025368][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.034718][ T5796] bridge_slave_1: left allmulticast mode [ 1499.041501][ T5796] bridge_slave_1: left promiscuous mode [ 1499.047628][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.058376][ T5796] bridge_slave_0: left allmulticast mode [ 1499.064042][ T5796] bridge_slave_0: left promiscuous mode [ 1499.070923][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.453328][ T5796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1499.463405][ T5796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1499.473416][ T5796] bond0 (unregistering): Released all slaves [ 1499.485024][ T5796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1499.495910][ T5796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1499.506458][ T5796] bond0 (unregistering): Released all slaves [ 1499.519495][ T5796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1499.529350][ T5796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1499.539236][ T5796] bond0 (unregistering): Released all slaves [ 1499.689334][ T5796] bond0 (unregistering): Released all slaves [ 1500.239286][ T5796] hsr_slave_0: left promiscuous mode [ 1500.245119][ T5796] hsr_slave_1: left promiscuous mode [ 1500.252253][ T5796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1500.261811][ T5796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1500.270895][ T5796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1500.278920][ T5796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1500.290730][ T5796] hsr_slave_0: left promiscuous mode [ 1500.297928][ T5796] hsr_slave_1: left promiscuous mode [ 1500.312240][ T5796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1500.320977][ T5796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1500.328677][ T5796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1500.336070][ T5796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1500.345795][ T5796] hsr_slave_0: left promiscuous mode [ 1500.352290][ T5796] hsr_slave_1: left promiscuous mode [ 1500.358305][ T5796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1500.365715][ T5796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1500.373499][ T5796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1500.382633][ T5796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1500.392055][ T5796] hsr_slave_0: left promiscuous mode [ 1500.398158][ T5796] hsr_slave_1: left promiscuous mode [ 1500.407606][ T5796] veth1_macvtap: left promiscuous mode [ 1500.413139][ T5796] veth0_macvtap: left promiscuous mode [ 1500.418867][ T5796] veth1_vlan: left promiscuous mode [ 1500.424099][ T5796] veth0_vlan: left promiscuous mode [ 1500.430091][ T5796] veth1_macvtap: left promiscuous mode [ 1500.435563][ T5796] veth0_macvtap: left promiscuous mode [ 1500.441504][ T5796] veth1_vlan: left promiscuous mode [ 1500.446884][ T5796] veth0_vlan: left promiscuous mode [ 1500.452668][ T5796] veth1_macvtap: left promiscuous mode [ 1500.458279][ T5796] veth0_macvtap: left promiscuous mode [ 1500.463787][ T5796] veth1_vlan: left promiscuous mode [ 1500.469255][ T5796] veth0_vlan: left promiscuous mode [ 1500.475036][ T5796] veth1_macvtap: left promiscuous mode [ 1500.480592][ T5796] veth0_macvtap: left promiscuous mode [ 1500.486270][ T5796] veth1_vlan: left promiscuous mode [ 1500.491807][ T5796] veth0_vlan: left promiscuous mode [ 1500.725056][ T5796] team0 (unregistering): Port device team_slave_1 removed [ 1500.756256][ T5796] team0 (unregistering): Port device team_slave_0 removed [ 1500.941360][ T5796] team0 (unregistering): Port device team_slave_1 removed [ 1500.972135][ T5796] team0 (unregistering): Port device team_slave_0 removed [ 1501.099358][ T5796] team0 (unregistering): Port device team_slave_1 removed [ 1501.133522][ T5796] team0 (unregistering): Port device team_slave_0 removed