last executing test programs: 3m45.422498732s ago: executing program 3 (id=1348): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x20, 0x0, &(0x7f0000000200)=0xfffffffffffffce0) 3m44.66629247s ago: executing program 3 (id=1349): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x1c0002, 0x0) write$vga_arbiter(r7, &(0x7f0000000180)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="6465636f646573206e6f6e650016ebd79f667a37426fe5de48d72003dd693ca31d610e5148d90cf3233a8fb1ba483209b043807e441711901ac57596aaf0270db3d2ab0cbc36"], 0xd) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="c951e3d10736120000072194"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r6, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) 3m42.380712562s ago: executing program 3 (id=1352): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4040) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002100)}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c000280080001407f"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 3m41.98463177s ago: executing program 3 (id=1355): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x9593, 0x10000, 0x1, 0x31f}, &(0x7f0000000040), &(0x7f0000000480)) eventfd(0x9) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, 0x0, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r5, 0x80685600, 0x0) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r7 = add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r7) keyctl$read(0xb, r7, 0x0, 0x0) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000a00)="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", 0x7f0, r7) 3m38.832376218s ago: executing program 3 (id=1357): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x18) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x84200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) 3m37.746492542s ago: executing program 3 (id=1363): select(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x9) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20001091}, 0x40) 3m22.542669435s ago: executing program 32 (id=1363): select(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x9) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20001091}, 0x40) 13.972221449s ago: executing program 4 (id=1743): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x2, 0x8, 0xfffa}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x2, 0xffffffff, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0x7, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x1, 0x4, 0x4, 0x7, 0x7ff, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0xffffffff, 0x7, 0x5, 0x3f, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x4, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000, 0x2008004, 0x6, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x3, 0x7fff, 0x6, 0x400, 0x401, 0x200006, 0x9, 0xff, 0x5, 0x1000005, 0x5f2e, 0x2d, 0x4e6, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x5, 0xfffffff9, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x4, 0x3, 0x8000, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x8000, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x8000086, 0x2, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800003, 0x200, 0x4000080, 0x3, 0x8000004, 0x2950bfaf, 0xffd, 0xa2, 0x7, 0xa9, 0x4005, 0x7, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xa, 0x0, 0x5, 0x8000, 0x120000, 0xf55, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa61d, 0x2, 0x1, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0x0, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x7, 0x9602, 0x0, 0xaf, 0x5e, 0x6, 0x8, 0x2, 0x5, 0x7, 0x30b1d696, 0x0, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x201, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 12.252324927s ago: executing program 2 (id=1747): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x1010, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000540)={r1, @in={{0x2, 0x4e22, @empty}}, 0x1ff, 0xe}, &(0x7f0000000300)=0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x310) 10.978471242s ago: executing program 0 (id=1749): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000085"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, 0x0, 0x0, 0x0, 0x200000000}) 10.815397892s ago: executing program 2 (id=1750): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='thermal_zone_trip\x00'}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3e, 0xd1, 0x14, 0x10, 0x16ca, 0x1502, 0x5c1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf9, 0x2, 0x0, 0xd2, 0x2c, 0xa3}}]}}]}}, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x3, 0xffffffffffffffff, 0x3, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) fcntl$setflags(r3, 0x2, 0x1) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) close(0xffffffffffffffff) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x4f28, 0x200, 0x7cc1, 0x3ff, 0x2, 0x6dc3, 0xfff, 0x1838, 0x5, 0x3f9, 0x802, 0xc42, 0x1, 0x3, 0x9, 0xe1cb, 0x5, 0x3, 0x400000, 0x395, 0x8000008c, 0xfffffffe, 0x9, 0xfffffff5, 0x1, 0x3, 0xab99, 0x2, 0x7, 0x2, 0xff]}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 9.4684605s ago: executing program 0 (id=1751): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000540)={0x20, 0x16, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0}) 6.136200223s ago: executing program 4 (id=1755): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) 4.953789197s ago: executing program 2 (id=1756): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x7fff, 0x7c400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000180)=['-[\'\x00'], 0x4}) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x2) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x20000000, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0xffffff8c}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) fchdir(0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) writev(0xffffffffffffffff, &(0x7f000000a100)=[{0x0}], 0x1) 4.940960206s ago: executing program 0 (id=1757): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1ab1a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, 0x0, 0x118) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084503, &(0x7f0000ffcffc)=0xfffffffc) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) 4.908198189s ago: executing program 4 (id=1758): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r1}, &(0x7f0000002480), &(0x7f00000024c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000180), 0x0}, 0x20) 4.905116622s ago: executing program 1 (id=1759): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) 4.686823101s ago: executing program 4 (id=1760): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, 0x0, 0x0, 0x0, 0x200000000}) 4.591405164s ago: executing program 4 (id=1761): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='htcp', 0x4) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x8, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) syz_usb_connect(0x0, 0x333, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000de3f50205e0457d37ca701020301090221"], 0x0) shutdown(r0, 0x1) 4.36692664s ago: executing program 1 (id=1762): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}], 0x3}, 0x2000000}], 0x1, 0x101, 0x0) 3.387170345s ago: executing program 2 (id=1763): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c0007800800064000000401110003"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c000280080001407f"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 3.375377288s ago: executing program 1 (id=1764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x2, 0x8, 0xfffa}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x2, 0xffffffff, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0x7, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x1, 0x4, 0x4, 0x7, 0x7ff, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0xffffffff, 0x7, 0x5, 0x3f, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x4, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000, 0x2008004, 0x6, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x3, 0x7fff, 0x6, 0x400, 0x401, 0x200006, 0x9, 0xff, 0x5, 0x1000005, 0x5f2e, 0x2d, 0x4e6, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x5, 0xfffffff9, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x4, 0x3, 0x8000, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x8000, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x8000086, 0x2, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800003, 0x200, 0x4000080, 0x3, 0x8000004, 0x2950bfaf, 0xffd, 0xa2, 0x7, 0xa9, 0x4005, 0x7, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xa, 0x0, 0x5, 0x8000, 0x120000, 0xf55, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa61d, 0x2, 0x1, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0x0, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x7, 0x9602, 0x0, 0xaf, 0x5e, 0x6, 0x8, 0x2, 0x5, 0x7, 0x30b1d696, 0x0, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x201, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.920966651s ago: executing program 2 (id=1765): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$packet(0x11, 0x2, 0x300) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) 2.790819677s ago: executing program 4 (id=1766): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000540)={0x20, 0x16, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0}) 1.110040233s ago: executing program 2 (id=1767): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='thermal_zone_trip\x00'}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3e, 0xd1, 0x14, 0x10, 0x16ca, 0x1502, 0x5c1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf9, 0x2, 0x0, 0xd2, 0x2c, 0xa3}}]}}]}}, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x3, 0xffffffffffffffff, 0x3, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) 1.071261571s ago: executing program 1 (id=1768): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) 984.970612ms ago: executing program 0 (id=1769): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r1}, &(0x7f0000002480), &(0x7f00000024c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000180), 0x0}, 0x20) 922.421921ms ago: executing program 1 (id=1770): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x1, 0x170bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xc, 0x0, 0x0, 0xffff}, {0x8, 0x1d, 0x0, 0x0, 0x401}]}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 774.178684ms ago: executing program 0 (id=1771): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="b9ff03006044238cb89e14f088a81bff88a800008100630677fbac141442e934a0a662079f4b4dfe87e5feca6aab845013f288a81a3908020b098da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) 274.778181ms ago: executing program 0 (id=1772): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xf, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f7706"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000500)=@multiplanar_overlay={0x2, 0x6, 0x4, 0x400, 0x2c2, {}, {0x3, 0x2, 0xd5, 0x80, 0x3, 0x8, "c61f3a28"}, 0xfffffffe, 0x3, {0x0}, 0x8}) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)={0x1f8, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4af3}]}, @TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x29, 0x3, "81785f9162a45cded4d9a9629dfcbde28395484c3edcc369ba9b5a30c09877030b7cf52c12"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "83f85319573575671a99f4ac5d1c8f01059bc908d8"}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1fa4c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d9a}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa4f7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb20}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7cca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8a}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c080) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280), 0x0) r3 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000680)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffc, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 0s ago: executing program 1 (id=1773): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='thermal_zone_trip\x00'}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3e, 0xd1, 0x14, 0x10, 0x16ca, 0x1502, 0x5c1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf9, 0x2, 0x0, 0xd2, 0x2c, 0xa3}}]}}]}}, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x3, 0xffffffffffffffff, 0x3, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) fcntl$setflags(r3, 0x2, 0x1) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) close(0xffffffffffffffff) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x4f28, 0x200, 0x7cc1, 0x3ff, 0x2, 0x6dc3, 0xfff, 0x1838, 0x5, 0x3f9, 0x802, 0xc42, 0x1, 0x3, 0x9, 0xe1cb, 0x5, 0x3, 0x400000, 0x395, 0x8000008c, 0xfffffffe, 0x9, 0xfffffff5, 0x1, 0x3, 0xab99, 0x2, 0x7, 0x2, 0xff]}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): with an up link [ 417.560929][ T7977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.879163][ T5896] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 417.899898][ T5896] usb 1-1: device descriptor read/8, error -71 [ 417.908510][ T7973] team0: Port device team_slave_0 added [ 418.081364][ T7977] team0: Port device team_slave_0 added [ 418.084775][ T7973] team0: Port device team_slave_1 added [ 418.107888][ T7977] team0: Port device team_slave_1 added [ 418.158814][ T5896] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 418.179581][ T5896] usb 1-1: device descriptor read/8, error -71 [ 418.289301][ T5896] usb usb1-port1: unable to enumerate USB device [ 418.317945][ T8127] binder: 8126:8127 ioctl 4018620d 0 returned -22 [ 418.339332][ T6026] hsr_slave_0: left promiscuous mode [ 418.389538][ T6026] hsr_slave_1: left promiscuous mode [ 418.392284][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.414296][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.598963][ T6026] hsr_slave_0: left promiscuous mode [ 418.638802][ T6026] hsr_slave_1: left promiscuous mode [ 418.640176][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.666582][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.819136][ T6026] hsr_slave_0: left promiscuous mode [ 418.839225][ T6026] hsr_slave_1: left promiscuous mode [ 418.840076][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.889784][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.386229][ T8135] autofs: Bad value for 'fd' [ 419.512140][ T8137] block nbd1: shutting down sockets [ 419.606980][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.536'. [ 421.319452][ T6026] team0 (unregistering): Port device team_slave_1 removed [ 421.559738][ T6026] team0 (unregistering): Port device team_slave_0 removed [ 424.621761][ T6026] team0 (unregistering): Port device team_slave_1 removed [ 424.759804][ T6026] team0 (unregistering): Port device team_slave_0 removed [ 425.919623][ T6026] team0 (unregistering): Port device team_slave_1 removed [ 426.079712][ T6026] team0 (unregistering): Port device team_slave_0 removed [ 426.979555][ T7973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.979576][ T7973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.979607][ T7973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.995980][ T7977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.995997][ T7977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.996023][ T7977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.001383][ T7973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.001399][ T7973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.001432][ T7973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.029884][ T7977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.029902][ T7977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.029928][ T7977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.433582][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.543'. [ 429.218212][ T7973] hsr_slave_0: entered promiscuous mode [ 429.251972][ T7973] hsr_slave_1: entered promiscuous mode [ 429.334918][ T7977] hsr_slave_0: entered promiscuous mode [ 429.336606][ T7977] hsr_slave_1: entered promiscuous mode [ 429.337760][ T7977] debugfs: 'hsr0' already exists in 'hsr' [ 429.337788][ T7977] Cannot create hsr debugfs directory [ 429.856678][ T8187] veth0: entered promiscuous mode [ 430.099096][ T8185] veth0: left promiscuous mode [ 430.948820][ T5949] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 431.109197][ T5949] usb 1-1: Using ep0 maxpacket: 16 [ 431.111366][ T5949] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 431.111386][ T5949] usb 1-1: config 0 has no interface number 0 [ 431.114391][ T5949] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 431.114411][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.114423][ T5949] usb 1-1: Product: syz [ 431.114432][ T5949] usb 1-1: Manufacturer: syz [ 431.114441][ T5949] usb 1-1: SerialNumber: syz [ 431.139280][ T5949] usb 1-1: config 0 descriptor?? [ 431.184293][ T5949] hub 1-1:0.132: bad descriptor, ignoring hub [ 431.184322][ T5949] hub 1-1:0.132: probe with driver hub failed with error -5 [ 431.188195][ T5949] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input8 [ 431.428376][ T7898] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 431.541805][ T7898] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 431.636002][ T7898] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 431.744029][ T7898] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 434.286302][ T7898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.420824][ T7898] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.037796][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.051514][ T3517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.126373][ T8256] netlink: 40 bytes leftover after parsing attributes in process `syz.0.565'. [ 435.542231][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.552724][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.123959][ T1232] usb 1-1: USB disconnect, device number 27 [ 437.109184][ T6026] bridge_slave_1: left allmulticast mode [ 437.109219][ T6026] bridge_slave_1: left promiscuous mode [ 437.109528][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.282830][ T6026] bridge_slave_0: left allmulticast mode [ 437.282866][ T6026] bridge_slave_0: left promiscuous mode [ 437.283174][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.369871][ T6026] bridge_slave_1: left allmulticast mode [ 437.369908][ T6026] bridge_slave_1: left promiscuous mode [ 437.370218][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.463070][ T6026] bridge_slave_0: left allmulticast mode [ 437.463106][ T6026] bridge_slave_0: left promiscuous mode [ 437.463408][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.562268][ T6026] bridge_slave_1: left allmulticast mode [ 437.562305][ T6026] bridge_slave_1: left promiscuous mode [ 437.562591][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.642053][ T6026] bridge_slave_0: left allmulticast mode [ 437.642152][ T6026] bridge_slave_0: left promiscuous mode [ 437.642706][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.150124][ T6026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.269721][ T6026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.352018][ T6026] bond0 (unregistering): Released all slaves [ 438.639751][ T6026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.759944][ T6026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.854141][ T6026] bond0 (unregistering): Released all slaves [ 439.199611][ T6026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.329774][ T6026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.422025][ T6026] bond0 (unregistering): Released all slaves [ 440.240677][ T6026] hsr_slave_0: left promiscuous mode [ 440.325912][ T6026] hsr_slave_1: left promiscuous mode [ 440.327053][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.350430][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.514802][ T6026] hsr_slave_0: left promiscuous mode [ 440.567630][ T6026] hsr_slave_1: left promiscuous mode [ 440.568943][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.593402][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.691165][ T6026] hsr_slave_0: left promiscuous mode [ 440.710039][ T6026] hsr_slave_1: left promiscuous mode [ 440.711135][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.750539][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.788771][ T5887] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 440.943659][ T5887] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 440.943696][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.943719][ T5887] usb 1-1: Product: syz [ 440.943736][ T5887] usb 1-1: Manufacturer: syz [ 440.943752][ T5887] usb 1-1: SerialNumber: syz [ 440.991465][ T5887] usb 1-1: config 0 descriptor?? [ 441.208824][ T5887] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 441.412428][ T6026] team0 (unregistering): Port device team_slave_1 removed [ 441.646429][ T6026] team0 (unregistering): Port device team_slave_0 removed [ 442.438261][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 442.438791][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 442.441585][ T5887] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 442.476312][ T5887] usb 1-1: USB disconnect, device number 28 [ 443.484474][ T8475] Bluetooth: MGMT ver 1.23 [ 443.789703][ T6026] team0 (unregistering): Port device team_slave_1 removed [ 444.026578][ T6026] team0 (unregistering): Port device team_slave_0 removed [ 445.587621][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.587708][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.049691][ T6026] team0 (unregistering): Port device team_slave_1 removed [ 446.229859][ T6026] team0 (unregistering): Port device team_slave_0 removed [ 446.448851][ T5887] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 446.618901][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 446.636994][ T5887] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 446.637027][ T5887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.637050][ T5887] usb 1-1: config 0 has no interface number 0 [ 446.637105][ T5887] usb 1-1: config 0 interface 55 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 446.637153][ T5887] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 446.637179][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.681277][ T5887] usb 1-1: config 0 descriptor?? [ 446.692092][ T5887] ldusb 1-1:0.55: Interrupt in endpoint not found [ 446.923503][ T5887] usb 1-1: USB disconnect, device number 29 [ 447.374404][ T7973] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 447.429690][ T7973] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 447.511621][ T7973] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 447.926602][ T7973] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 448.781438][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 448.825727][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 448.856120][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 448.883625][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 448.914204][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 449.277805][ T7977] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 449.410496][ T7977] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 449.508210][ T7977] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 449.624564][ T7977] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 450.828145][ T7973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.948089][ T5812] Bluetooth: hci0: command tx timeout [ 450.990602][ T8594] chnl_net:caif_netlink_parms(): no params data found [ 451.200346][ T7973] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.425119][ T1412] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.425485][ T1412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.264053][ T8594] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.264345][ T8594] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.264608][ T8594] bridge_slave_0: entered allmulticast mode [ 452.280719][ T8594] bridge_slave_0: entered promiscuous mode [ 452.309503][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.309675][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.580188][ T8594] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.580346][ T8594] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.580599][ T8594] bridge_slave_1: entered allmulticast mode [ 452.583913][ T8594] bridge_slave_1: entered promiscuous mode [ 453.008987][ T5812] Bluetooth: hci0: command tx timeout [ 453.112142][ T8594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.120699][ T8594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.170358][ T7977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.088749][ T5812] Bluetooth: hci0: command tx timeout [ 455.168040][ T8594] team0: Port device team_slave_0 added [ 455.230055][ T8594] team0: Port device team_slave_1 added [ 456.868128][ T8594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.868150][ T8594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.868182][ T8594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.171935][ T5812] Bluetooth: hci0: command tx timeout [ 457.592933][ T8594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.592954][ T8594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.592985][ T8594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.257803][ T8594] hsr_slave_0: entered promiscuous mode [ 458.290054][ T8594] hsr_slave_1: entered promiscuous mode [ 458.294107][ T8594] debugfs: 'hsr0' already exists in 'hsr' [ 458.294138][ T8594] Cannot create hsr debugfs directory [ 460.966040][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 460.977509][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 460.982953][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 460.989998][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 460.990984][ T5816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 461.262299][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 461.265472][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 461.272849][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 461.274446][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 461.275382][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 462.489012][ T6026] bridge_slave_1: left allmulticast mode [ 462.489047][ T6026] bridge_slave_1: left promiscuous mode [ 462.489238][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.567390][ T6026] bridge_slave_0: left allmulticast mode [ 462.567414][ T6026] bridge_slave_0: left promiscuous mode [ 462.567583][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.728751][ T5896] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 462.911403][ T5896] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.911470][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 462.911503][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 462.911527][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 462.913012][ T5896] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 462.913042][ T5896] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 462.913062][ T5896] usb 1-1: Manufacturer: syz [ 462.997358][ T5896] usb 1-1: config 0 descriptor?? [ 463.088889][ T5816] Bluetooth: hci1: command tx timeout [ 463.299160][ T5896] rc_core: IR keymap rc-hauppauge not found [ 463.299186][ T5896] Registered IR keymap rc-empty [ 463.299754][ T5896] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 463.327645][ T5896] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 463.329182][ T5816] Bluetooth: hci2: command tx timeout [ 463.373346][ T5896] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 463.395347][ T5896] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 463.415938][ T5896] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 463.473086][ T5896] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 463.495999][ T5896] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 463.510087][ T5896] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 463.528824][ T5896] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 463.569278][ T5896] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 463.589067][ T5896] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 463.611365][ T5896] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 463.644847][ T5896] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 463.660263][ T5896] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 463.745745][ T5896] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 463.745777][ T5896] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 463.758254][ T5896] usb 1-1: USB disconnect, device number 30 [ 465.089683][ T6026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.168818][ T5812] Bluetooth: hci1: command tx timeout [ 465.177113][ T6026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.223865][ T6026] bond0 (unregistering): Released all slaves [ 465.224631][ T5816] block nbd0: Receive control failed (result -32) [ 465.228005][ T8872] block nbd0: shutting down sockets [ 465.410844][ T5816] Bluetooth: hci2: command tx timeout [ 467.209025][ T6026] hsr_slave_0: left promiscuous mode [ 467.468396][ T5816] Bluetooth: hci1: command tx timeout [ 467.492415][ T5816] Bluetooth: hci2: command tx timeout [ 468.196909][ T6026] hsr_slave_1: left promiscuous mode [ 468.210614][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.445185][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.500945][ T5816] Bluetooth: hci1: command tx timeout [ 469.587233][ T5816] Bluetooth: hci2: command tx timeout [ 470.375480][ T6026] team0 (unregistering): Port device team_slave_1 removed [ 471.062032][ T6026] team0 (unregistering): Port device team_slave_0 removed [ 472.099586][ T9029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.882'. [ 472.099612][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.882'. [ 472.099627][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.882'. [ 472.099697][ T9029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.882'. [ 475.496987][ T8786] chnl_net:caif_netlink_parms(): no params data found [ 475.516981][ T8792] chnl_net:caif_netlink_parms(): no params data found [ 477.011516][ T8786] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.011757][ T8786] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.011993][ T8786] bridge_slave_0: entered allmulticast mode [ 477.015197][ T8786] bridge_slave_0: entered promiscuous mode [ 477.055715][ T8792] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.055882][ T8792] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.056125][ T8792] bridge_slave_0: entered allmulticast mode [ 477.076193][ T8792] bridge_slave_0: entered promiscuous mode [ 477.146940][ T8786] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.147100][ T8786] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.147374][ T8786] bridge_slave_1: entered allmulticast mode [ 477.176596][ T8786] bridge_slave_1: entered promiscuous mode [ 477.189039][ T8792] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.189217][ T8792] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.189496][ T8792] bridge_slave_1: entered allmulticast mode [ 477.192508][ T8792] bridge_slave_1: entered promiscuous mode [ 479.189351][ T6347] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 479.346121][ T8786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.348459][ T6347] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 479.350078][ T6347] usb 1-1: config 0 has no interface number 0 [ 479.352823][ T6347] usb 1-1: New USB device found, idVendor=203e, idProduct=8888, bcdDevice=a8.71 [ 479.352854][ T6347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.352873][ T6347] usb 1-1: Product: syz [ 479.352887][ T6347] usb 1-1: Manufacturer: syz [ 479.352901][ T6347] usb 1-1: SerialNumber: syz [ 479.385059][ T6347] usb 1-1: config 0 descriptor?? [ 479.457993][ T8792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.468253][ T8786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.485582][ T8792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.953488][ T8594] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 480.190192][ T8594] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 480.581198][ T8786] team0: Port device team_slave_0 added [ 480.582571][ T8594] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 480.627920][ T8792] team0: Port device team_slave_0 added [ 480.630382][ T8786] team0: Port device team_slave_1 added [ 481.041078][ T8594] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 481.086430][ T8792] team0: Port device team_slave_1 added [ 481.480583][ T8786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.480597][ T8786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.480615][ T8786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.644014][ T8786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.644031][ T8786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.644049][ T8786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.708041][ T8792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.708055][ T8792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.708072][ T8792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.768568][ T8792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.768675][ T8792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.768696][ T8792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.042248][ T8786] hsr_slave_0: entered promiscuous mode [ 482.043438][ T8786] hsr_slave_1: entered promiscuous mode [ 482.044287][ T8786] debugfs: 'hsr0' already exists in 'hsr' [ 482.044305][ T8786] Cannot create hsr debugfs directory [ 482.404441][ T1232] usb 1-1: USB disconnect, device number 31 [ 482.523723][ T8792] hsr_slave_0: entered promiscuous mode [ 482.525413][ T8792] hsr_slave_1: entered promiscuous mode [ 482.526584][ T8792] debugfs: 'hsr0' already exists in 'hsr' [ 482.526612][ T8792] Cannot create hsr debugfs directory [ 486.159221][ T5806] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 486.164900][ T8594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.200708][ T8594] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.244484][ T1412] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.244739][ T1412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.256337][ T1412] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.256495][ T1412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.308876][ T5806] usb 1-1: Using ep0 maxpacket: 32 [ 486.311623][ T5806] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 486.311654][ T5806] usb 1-1: config 0 has no interface number 0 [ 486.312376][ T5806] usb 1-1: config 0 interface 184 has no altsetting 0 [ 486.318902][ T5806] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 486.318935][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.318956][ T5806] usb 1-1: Product: syz [ 486.318972][ T5806] usb 1-1: Manufacturer: syz [ 486.318988][ T5806] usb 1-1: SerialNumber: syz [ 486.344680][ T5806] usb 1-1: config 0 descriptor?? [ 486.382736][ T5806] smsc75xx v1.0.0 [ 486.978897][ T5806] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 486.978934][ T5806] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 486.978954][ T5806] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 486.979299][ T5806] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 487.001411][ T5806] usb 1-1: USB disconnect, device number 32 [ 487.467525][ T6026] bridge_slave_1: left allmulticast mode [ 487.467558][ T6026] bridge_slave_1: left promiscuous mode [ 487.467840][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.571377][ T6026] bridge_slave_0: left allmulticast mode [ 487.571413][ T6026] bridge_slave_0: left promiscuous mode [ 487.582712][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.673877][ T6026] bridge_slave_1: left allmulticast mode [ 487.673912][ T6026] bridge_slave_1: left promiscuous mode [ 487.674188][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.760535][ T6026] bridge_slave_0: left allmulticast mode [ 487.760572][ T6026] bridge_slave_0: left promiscuous mode [ 487.760864][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.350549][ T6026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.413767][ T6026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.468971][ T6026] bond0 (unregistering): Released all slaves [ 491.698896][ T5806] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 491.904602][ T5806] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.904660][ T5806] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 491.909136][ T5806] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 491.909167][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.909188][ T5806] usb 1-1: Product: syz [ 491.909202][ T5806] usb 1-1: Manufacturer: syz [ 491.909217][ T5806] usb 1-1: SerialNumber: syz [ 491.979218][ T5806] cdc_mbim 1-1:1.0: skipping garbage [ 492.180382][ T9479] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 492.816615][ T9479] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 492.817097][ T5806] cdc_mbim 1-1:1.0: setting rx_max = 16384 [ 493.018347][ T5806] cdc_mbim 1-1:1.0: setting tx_max = 60 [ 493.063819][ T5806] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 493.126727][ T5806] wwan wwan0: port wwan0mbim0 attached [ 493.472452][ T6026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.570550][ T6026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.652124][ T6026] bond0 (unregistering): Released all slaves [ 493.880577][ T5806] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, ba:d4:f1:f2:42:6b [ 493.933570][ T5806] usb 1-1: USB disconnect, device number 33 [ 493.951174][ T5806] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 494.980425][ T5806] wwan wwan0: port wwan0mbim0 disconnected [ 495.058804][ T6026] hsr_slave_0: left promiscuous mode [ 495.220691][ T6026] hsr_slave_1: left promiscuous mode [ 495.222441][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.324715][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.526529][ T6026] hsr_slave_0: left promiscuous mode [ 495.542269][ T6026] hsr_slave_1: left promiscuous mode [ 495.543550][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.590559][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.522994][ T6026] team0 (unregistering): Port device team_slave_1 removed [ 497.830185][ T6026] team0 (unregistering): Port device team_slave_0 removed [ 501.229970][ T6026] team0 (unregistering): Port device team_slave_1 removed [ 501.409325][ T6026] team0 (unregistering): Port device team_slave_0 removed [ 502.690424][ T8594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.009290][ T8594] veth0_vlan: entered promiscuous mode [ 503.028115][ T8594] veth1_vlan: entered promiscuous mode [ 503.221633][ T8594] veth0_macvtap: entered promiscuous mode [ 503.246325][ T8594] veth1_macvtap: entered promiscuous mode [ 503.374565][ T8594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.641928][ T8594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.723841][ T170] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.724885][ T170] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.726170][ T170] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.726226][ T170] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.087962][ T6055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.087990][ T6055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.273447][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.273474][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.862943][ T8786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 505.910241][ T8786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 505.994251][ T8786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 506.363630][ T8786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 506.523788][ T9889] bridge_slave_0: left allmulticast mode [ 506.523823][ T9889] bridge_slave_0: left promiscuous mode [ 506.524127][ T9889] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.699006][ T9889] bridge_slave_1: left allmulticast mode [ 506.699040][ T9889] bridge_slave_1: left promiscuous mode [ 506.699441][ T9889] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.832460][ T9889] bond0: (slave bond_slave_0): Releasing backup interface [ 506.940531][ T9889] bond0: (slave bond_slave_1): Releasing backup interface [ 507.014066][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.014149][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.089867][ T9889] team0: Port device team_slave_0 removed [ 507.138958][ T9889] team0: Port device team_slave_1 removed [ 507.140232][ T9889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.140261][ T9889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.203486][ T9889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.203522][ T9889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.254692][ T9889] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 507.562443][ T8792] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 507.606949][ T8792] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 507.658223][ T8792] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 507.703051][ T8792] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 508.047491][ T8786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.118058][ T8786] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.147756][ T6055] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.148174][ T6055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.167150][ T6055] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.167395][ T6055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.245464][ T8792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.457913][ T8792] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.526456][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.526719][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.766601][ T6055] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.766723][ T6055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.352192][ T5896] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 509.538769][ T5896] usb 1-1: Using ep0 maxpacket: 32 [ 509.541406][ T5896] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.541437][ T5896] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 509.544608][ T5896] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 509.544638][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.544660][ T5896] usb 1-1: Product: syz [ 509.544676][ T5896] usb 1-1: Manufacturer: syz [ 509.544691][ T5896] usb 1-1: SerialNumber: syz [ 509.620793][ T5896] usb 1-1: config 0 descriptor?? [ 509.762025][ T8786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.998011][ T8786] veth0_vlan: entered promiscuous mode [ 510.062184][ T8786] veth1_vlan: entered promiscuous mode [ 510.145249][ T8792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.275495][ T8786] veth0_macvtap: entered promiscuous mode [ 510.287726][ T8786] veth1_macvtap: entered promiscuous mode [ 510.381817][ T9972] bridge_slave_0: left allmulticast mode [ 510.381851][ T9972] bridge_slave_0: left promiscuous mode [ 510.382169][ T9972] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.474439][ T9972] bridge_slave_1: left allmulticast mode [ 510.474474][ T9972] bridge_slave_1: left promiscuous mode [ 510.474868][ T9972] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.609764][ T9972] bond0: (slave bond_slave_0): Releasing backup interface [ 510.699789][ T9972] bond0: (slave bond_slave_1): Releasing backup interface [ 510.772675][ T9972] team0: Port device team_slave_0 removed [ 510.812649][ T9972] team0: Port device team_slave_1 removed [ 510.815168][ T9972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.815200][ T9972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.872654][ T9972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.872688][ T9972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.912398][ T9972] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 511.008537][ T8786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.046115][ T8786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.077267][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.077740][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.104261][ T6026] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.105047][ T6026] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.629236][ T6055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.629261][ T6055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.755638][ T8792] veth0_vlan: entered promiscuous mode [ 511.794499][ T3517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.794521][ T3517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.833131][T10017] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 511.849498][ T8792] veth1_vlan: entered promiscuous mode [ 512.197390][ T5956] usb 1-1: USB disconnect, device number 34 [ 512.303948][ T8792] veth0_macvtap: entered promiscuous mode [ 512.543498][ T8792] veth1_macvtap: entered promiscuous mode [ 512.634328][ T8792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.653775][ T8792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.823493][ T3517] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.841564][ T3517] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.866415][ T3517] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.887658][ T3517] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.715824][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.715852][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.833252][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.833278][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.148863][ T6347] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 517.371014][ T6347] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 517.371085][ T6347] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 517.371115][ T6347] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 517.371143][ T6347] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 517.371171][ T6347] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 517.372461][ T6347] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 517.372520][ T6347] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 517.372549][ T6347] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 517.372577][ T6347] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 517.372606][ T6347] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 517.373911][ T6347] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 517.373972][ T6347] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 517.374001][ T6347] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 517.374028][ T6347] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 517.374056][ T6347] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 518.030854][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 518.036306][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 518.081221][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 518.117414][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 518.144440][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 518.891919][T10094] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 518.927779][T10078] syzkaller0: entered promiscuous mode [ 518.927811][T10078] syzkaller0: entered allmulticast mode [ 519.960784][ T6347] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 519.960821][ T6347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.979254][ T6347] usb 4-1: can't set config #168, error -71 [ 519.981880][ T6347] usb 4-1: USB disconnect, device number 17 [ 520.173429][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1309'. [ 520.175516][ T6055] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.605595][ T5816] Bluetooth: hci4: command tx timeout [ 520.993565][T10101] syz_tun: entered allmulticast mode [ 521.142235][T10104] syz_tun (unregistering): left allmulticast mode [ 522.608871][ T5816] Bluetooth: hci4: command tx timeout [ 522.827396][ T6055] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.367989][ T6055] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.463200][T10156] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 524.659626][T10144] block nbd2: shutting down sockets [ 524.689292][ T5816] Bluetooth: hci4: command tx timeout [ 524.825867][T10074] chnl_net:caif_netlink_parms(): no params data found [ 525.735222][ T6055] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.943003][ T5816] Bluetooth: hci4: command tx timeout [ 527.391029][T10074] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.391314][T10074] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.391529][T10074] bridge_slave_0: entered allmulticast mode [ 527.408528][T10074] bridge_slave_0: entered promiscuous mode [ 527.426876][T10074] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.460066][T10074] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.460255][T10074] bridge_slave_1: entered allmulticast mode [ 527.469961][T10074] bridge_slave_1: entered promiscuous mode [ 528.397038][T10074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.354936][T10074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.976432][T10074] team0: Port device team_slave_0 added [ 529.990066][T10074] team0: Port device team_slave_1 added [ 530.461325][ T6055] bridge_slave_1: left allmulticast mode [ 530.461355][ T6055] bridge_slave_1: left promiscuous mode [ 530.461585][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.520572][ T6055] bridge_slave_0: left allmulticast mode [ 530.520608][ T6055] bridge_slave_0: left promiscuous mode [ 530.520900][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.683874][ T5816] block nbd3: Receive control failed (result -32) [ 530.686286][T10196] block nbd3: shutting down sockets [ 531.875596][T10211] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 537.221259][ T5812] block nbd3: Receive control failed (result -32) [ 537.265951][T10240] block nbd3: shutting down sockets [ 537.917917][T10249] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 538.266212][T10250] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1347'. [ 539.232419][T10257] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 539.872613][ T6055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.942492][ T6055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.983143][ T6055] bond0 (unregistering): Released all slaves [ 540.295360][T10074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.295383][T10074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.295414][T10074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.192962][T10074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.192983][T10074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.193013][T10074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.951859][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.278931][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.641650][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.829487][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.916929][T10291] fuse: Bad value for 'fd' [ 545.608958][ T5812] block nbd3: Receive control failed (result -32) [ 545.622716][T10287] block nbd3: shutting down sockets [ 545.916804][T10074] hsr_slave_0: entered promiscuous mode [ 545.925028][T10074] hsr_slave_1: entered promiscuous mode [ 546.176894][T10314] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 546.271237][ C1] vkms_vblank_simulate: vblank timer overrun [ 547.497985][ C1] vkms_vblank_simulate: vblank timer overrun [ 547.735224][ C1] vkms_vblank_simulate: vblank timer overrun [ 548.324517][ T6055] hsr_slave_0: left promiscuous mode [ 548.439457][ T6055] hsr_slave_1: left promiscuous mode [ 548.445722][ T6055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.445745][ T6055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.515171][ T6055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.515203][ T6055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.955429][ T6055] veth1_macvtap: left promiscuous mode [ 548.955524][ T6055] veth0_macvtap: left promiscuous mode [ 549.018794][ T1232] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 549.170980][ T1232] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 549.171051][ T1232] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 549.171082][ T1232] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 549.171107][ T1232] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 549.171136][ T1232] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 549.173187][ T1232] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 549.173250][ T1232] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 549.173280][ T1232] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 549.173308][ T1232] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 549.173337][ T1232] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 549.175523][ T1232] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 549.175585][ T1232] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 549.175615][ T1232] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 549.175644][ T1232] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 549.175682][ T1232] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 549.229772][ T1232] usb 3-1: string descriptor 0 read error: -22 [ 549.229939][ T1232] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 549.229961][ T1232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.425883][ T1232] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 552.358667][ T1232] usb 3-1: USB disconnect, device number 9 [ 552.596644][T10343] fuse: Bad value for 'fd' [ 555.235004][T10352] block nbd0: shutting down sockets [ 555.601613][T10362] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 557.739936][ T6055] team0 (unregistering): Port device team_slave_1 removed [ 558.371060][ T6055] team0 (unregistering): Port device team_slave_0 removed [ 559.734820][T10388] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 560.443719][ C1] vkms_vblank_simulate: vblank timer overrun [ 560.516399][ C1] vkms_vblank_simulate: vblank timer overrun [ 560.609741][ C1] vkms_vblank_simulate: vblank timer overrun [ 560.938669][ C1] vkms_vblank_simulate: vblank timer overrun [ 561.386807][ C1] vkms_vblank_simulate: vblank timer overrun [ 561.540009][ C1] vkms_vblank_simulate: vblank timer overrun [ 561.664459][ T5816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 561.691681][ T5816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 561.694599][ T5816] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 561.724309][ T5816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 561.726755][ T5816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 561.758591][ C1] vkms_vblank_simulate: vblank timer overrun [ 561.893074][ C1] vkms_vblank_simulate: vblank timer overrun [ 562.070811][ C1] vkms_vblank_simulate: vblank timer overrun [ 562.086461][ T5949] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 562.275594][ T5949] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 562.275624][ T5949] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 562.275650][ T5949] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 562.275684][ T5949] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 562.275699][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.331154][T10406] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 562.567807][T10404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.573563][T10404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.588520][ T5949] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 562.597879][ T5949] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input10 [ 562.874925][ C1] vkms_vblank_simulate: vblank timer overrun [ 563.113225][ C1] vkms_vblank_simulate: vblank timer overrun [ 563.266068][ T5949] usb 3-1: USB disconnect, device number 10 [ 563.266158][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 563.293135][ C1] vkms_vblank_simulate: vblank timer overrun [ 563.623495][ C1] vkms_vblank_simulate: vblank timer overrun [ 563.796995][ C1] vkms_vblank_simulate: vblank timer overrun [ 563.963059][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.258179][ T5812] Bluetooth: hci5: command tx timeout [ 564.519853][ C1] vkms_vblank_simulate: vblank timer overrun [ 566.668724][ T5812] Bluetooth: hci5: command tx timeout [ 568.577412][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.577495][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.690672][ T5812] Bluetooth: hci5: command tx timeout [ 568.861647][T10441] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 571.088773][ T5812] Bluetooth: hci5: command tx timeout [ 571.742266][T10462] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 572.788736][ T1232] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 572.938774][ T1232] usb 1-1: Using ep0 maxpacket: 32 [ 572.943853][ T1232] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 572.944164][ T1232] usb 1-1: config 0 has no interface number 0 [ 572.944223][ T1232] usb 1-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 572.944249][ T1232] usb 1-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 572.944275][ T1232] usb 1-1: config 0 interface 184 has no altsetting 0 [ 572.947581][ T1232] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 572.947615][ T1232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.947637][ T1232] usb 1-1: Product: syz [ 572.947652][ T1232] usb 1-1: Manufacturer: syz [ 572.947668][ T1232] usb 1-1: SerialNumber: syz [ 573.064477][ T1232] usb 1-1: config 0 descriptor?? [ 573.078599][ T1232] smsc75xx v1.0.0 [ 573.078620][ T1232] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 573.078926][ T1232] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 575.465128][ T6055] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.634505][ T1232] usb 1-1: USB disconnect, device number 35 [ 577.052634][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 577.083561][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 577.102591][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 577.109913][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 577.110776][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 578.085523][T10506] bridge_slave_0: left allmulticast mode [ 578.085558][T10506] bridge_slave_0: left promiscuous mode [ 578.085858][T10506] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.290840][T10506] bridge_slave_1: left allmulticast mode [ 578.290865][T10506] bridge_slave_1: left promiscuous mode [ 578.291016][T10506] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.450918][T10506] bond0: (slave bond_slave_0): Releasing backup interface [ 578.510229][T10506] bond0: (slave bond_slave_1): Releasing backup interface [ 578.614582][T10506] team0: Port device team_slave_0 removed [ 578.662817][T10506] team0: Port device team_slave_1 removed [ 578.664580][T10506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.664610][T10506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.694861][T10506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.694894][T10506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.744822][T10506] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 578.831674][T10518] bridge_slave_0: left allmulticast mode [ 578.831708][T10518] bridge_slave_0: left promiscuous mode [ 578.831978][T10518] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.922281][T10518] bridge_slave_1: left allmulticast mode [ 578.922312][T10518] bridge_slave_1: left promiscuous mode [ 578.923046][T10518] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.041654][T10518] bond0: (slave bond_slave_0): Releasing backup interface [ 579.559508][T10518] bond0: (slave bond_slave_1): Releasing backup interface [ 579.667939][T10518] team0: Port device team_slave_0 removed [ 579.713045][T10518] team0: Port device team_slave_1 removed [ 579.714400][T10518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.714430][T10518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.742758][T10518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.742780][T10518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.808843][ T5816] Bluetooth: hci0: command tx timeout [ 580.081892][T10518] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 581.653819][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.714210][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.792562][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.873405][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.925813][ T5816] Bluetooth: hci0: command tx timeout [ 582.419041][ C1] vkms_vblank_simulate: vblank timer overrun [ 582.686145][ C1] vkms_vblank_simulate: vblank timer overrun [ 582.811962][ T6055] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.908215][T10403] chnl_net:caif_netlink_parms(): no params data found [ 583.669532][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.946781][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.974113][ T5816] Bluetooth: hci0: command tx timeout [ 584.203893][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.539074][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.615135][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.768257][ T6055] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.010643][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.810966][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.866583][T10576] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 586.059018][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.121453][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 586.130083][T10586] Bluetooth: hci1: command 0x0406 tx timeout [ 586.130123][T10586] Bluetooth: hci0: command tx timeout [ 587.162060][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.586086][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.707653][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.743599][ T6055] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.109685][ C1] vkms_vblank_simulate: vblank timer overrun [ 590.291729][ C1] vkms_vblank_simulate: vblank timer overrun [ 590.371082][T10403] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.379032][T10403] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.379318][T10403] bridge_slave_0: entered allmulticast mode [ 590.384086][T10403] bridge_slave_0: entered promiscuous mode [ 590.566641][ C1] vkms_vblank_simulate: vblank timer overrun [ 590.611276][T10403] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.611436][T10403] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.611810][T10403] bridge_slave_1: entered allmulticast mode [ 590.676284][T10403] bridge_slave_1: entered promiscuous mode [ 590.711832][ C1] vkms_vblank_simulate: vblank timer overrun [ 590.815455][ C1] vkms_vblank_simulate: vblank timer overrun [ 591.311518][T10618] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 591.612332][T10403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.899956][T10403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.950607][T10403] team0: Port device team_slave_0 added [ 593.100733][T10403] team0: Port device team_slave_1 added [ 593.183641][T10639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1447'. [ 593.183666][T10639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1447'. [ 593.183681][T10639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1447'. [ 593.183743][T10639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1447'. [ 593.737128][T10403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.737149][T10403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.737181][T10403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.761333][T10403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.761352][T10403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.761387][T10403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.089951][T10664] fuse: Bad value for 'fd' [ 596.409297][T10668] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1456'. [ 596.409324][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1456'. [ 596.409339][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1456'. [ 596.409395][T10668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1456'. [ 598.869200][ T6055] bond0 (unregistering): Released all slaves [ 599.046728][T10661] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 599.643488][ T6029] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 600.032513][ T6029] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 600.032549][ T6029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.032571][ T6029] usb 3-1: Product: syz [ 600.032587][ T6029] usb 3-1: Manufacturer: syz [ 600.032602][ T6029] usb 3-1: SerialNumber: syz [ 600.073121][ T6029] usb 3-1: config 0 descriptor?? [ 600.189861][T10693] sd 0:0:1:0: device reset [ 601.093169][ T6029] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 601.286612][ T6029] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 602.430857][T10403] hsr_slave_0: entered promiscuous mode [ 602.521436][T10403] hsr_slave_1: entered promiscuous mode [ 602.528778][T10403] debugfs: 'hsr0' already exists in 'hsr' [ 602.528810][T10403] Cannot create hsr debugfs directory [ 602.529446][T10522] chnl_net:caif_netlink_parms(): no params data found [ 602.586810][T10052] usb 3-1: USB disconnect, device number 11 [ 605.971967][ T37] kauditd_printk_skb: 30 callbacks suppressed [ 605.972027][ T37] audit: type=1326 audit(1764755290.631:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10721 comm="syz.0.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69b6ef749 code=0x7ffc0000 [ 605.974913][ T37] audit: type=1326 audit(1764755290.631:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10721 comm="syz.0.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69b6ef749 code=0x7ffc0000 [ 605.975246][ T37] audit: type=1326 audit(1764755290.641:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10721 comm="syz.0.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff69b6ef749 code=0x7ffc0000 [ 606.119285][T10729] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 607.101722][ T6055] hsr_slave_0: left promiscuous mode [ 607.146654][ T6055] hsr_slave_1: left promiscuous mode [ 607.370894][ T6055] veth1_macvtap: left promiscuous mode [ 607.371043][ T6055] veth0_macvtap: left promiscuous mode [ 607.371374][ T6055] veth1_vlan: left promiscuous mode [ 607.371631][ T6055] veth0_vlan: left promiscuous mode [ 612.167295][T10776] ./file0: Can't lookup blockdev [ 612.540689][ T37] audit: type=1326 audit(1764755296.871:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10769 comm="syz.4.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51ed3f749 code=0x7ffc0000 [ 612.541390][ T37] audit: type=1326 audit(1764755296.881:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10769 comm="syz.4.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51ed3f749 code=0x7ffc0000 [ 612.541844][ T37] audit: type=1326 audit(1764755297.261:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10769 comm="syz.4.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa51ed3f749 code=0x7ffc0000 [ 612.544545][ T37] audit: type=1326 audit(1764755297.281:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10769 comm="syz.4.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51ed3f749 code=0x7ffc0000 [ 612.545653][ T37] audit: type=1326 audit(1764755297.281:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10769 comm="syz.4.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51ed3f749 code=0x7ffc0000 [ 621.755357][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 621.772311][ T5816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 621.773600][ T5816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 621.774842][ T5816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 621.775642][ T5816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 622.569502][T10522] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.569748][T10522] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.570000][T10522] bridge_slave_0: entered allmulticast mode [ 622.573236][T10522] bridge_slave_0: entered promiscuous mode [ 622.601380][T10522] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.601522][T10522] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.601758][T10522] bridge_slave_1: entered allmulticast mode [ 622.604527][T10522] bridge_slave_1: entered promiscuous mode [ 623.637632][T10522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.889258][ T5812] Bluetooth: hci4: command tx timeout [ 624.022692][T10522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.793694][ C1] vkms_vblank_simulate: vblank timer overrun [ 625.822863][ C1] vkms_vblank_simulate: vblank timer overrun [ 625.937831][ C1] vkms_vblank_simulate: vblank timer overrun [ 625.968636][ T5812] Bluetooth: hci4: command tx timeout [ 626.155550][ C1] vkms_vblank_simulate: vblank timer overrun [ 626.179541][T10522] team0: Port device team_slave_0 added [ 626.183762][ T37] audit: type=1326 audit(1764755311.271:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10865 comm="syz.0.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69b6ef749 code=0x7ffc0000 [ 626.183827][ T37] audit: type=1326 audit(1764755311.271:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10865 comm="syz.0.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69b6ef749 code=0x7ffc0000 [ 626.183880][ T37] audit: type=1326 audit(1764755311.271:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10865 comm="syz.0.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff69b6ef749 code=0x7ffc0000 [ 626.245185][ C1] vkms_vblank_simulate: vblank timer overrun [ 626.259636][T10522] team0: Port device team_slave_1 added [ 626.275327][ C1] vkms_vblank_simulate: vblank timer overrun [ 626.844912][T10522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.844934][T10522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.844964][T10522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.858763][ T6346] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 626.943917][T10522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.943940][T10522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.943973][T10522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.031179][ T6346] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 627.031219][ T6346] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 627.031249][ T6346] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 627.031296][ T6346] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 627.031323][ T6346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.162319][T10888] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 627.727553][ C1] vkms_vblank_simulate: vblank timer overrun [ 627.963609][ T6346] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 627.967782][ T6346] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input11 [ 628.243535][ C1] vkms_vblank_simulate: vblank timer overrun [ 628.244402][ T5812] Bluetooth: hci4: command tx timeout [ 628.793300][ C1] vkms_vblank_simulate: vblank timer overrun [ 629.244563][ C1] vkms_vblank_simulate: vblank timer overrun [ 629.647464][ T6346] usb 3-1: USB disconnect, device number 12 [ 629.721998][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 629.807578][T10522] hsr_slave_0: entered promiscuous mode [ 629.905200][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.905285][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.984463][ C1] vkms_vblank_simulate: vblank timer overrun [ 630.003909][T10522] hsr_slave_1: entered promiscuous mode [ 630.005039][T10522] debugfs: 'hsr0' already exists in 'hsr' [ 630.005066][T10522] Cannot create hsr debugfs directory [ 630.102628][T10859] udevd[10859]: setting mode of /dev/input/mouse1 to 020660 failed: No such file or directory [ 630.102839][T10859] udevd[10859]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 630.491992][ C1] vkms_vblank_simulate: vblank timer overrun [ 630.494641][ T5812] Bluetooth: hci4: command tx timeout [ 633.290126][ T6055] bridge_slave_1: left allmulticast mode [ 633.290160][ T6055] bridge_slave_1: left promiscuous mode [ 633.290439][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.404451][ T6055] bridge_slave_0: left allmulticast mode [ 633.404485][ T6055] bridge_slave_0: left promiscuous mode [ 633.404797][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.521934][ T6055] bridge_slave_1: left allmulticast mode [ 633.521971][ T6055] bridge_slave_1: left promiscuous mode [ 633.522249][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.893648][ T6055] bridge_slave_0: left allmulticast mode [ 633.893679][ T6055] bridge_slave_0: left promiscuous mode [ 633.893925][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.890359][ T37] audit: type=1326 audit(1764755319.291:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10953 comm="syz.0.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69b6ef749 code=0x7ffc0000 [ 634.890438][ T37] audit: type=1326 audit(1764755319.301:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10953 comm="syz.0.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69b6ef749 code=0x7ffc0000 [ 634.890487][ T37] audit: type=1326 audit(1764755319.301:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10953 comm="syz.0.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff69b6ef749 code=0x7ffc0000 [ 635.087983][T10963] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 637.172509][ T6055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 637.536199][ T5816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 637.549123][ T6055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 637.550889][ T5816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 637.552378][ T5816] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 637.553573][ T5816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 637.554787][ T5816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 637.780977][ T6055] bond0 (unregistering): Released all slaves [ 638.652902][ T6055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.891228][ T6055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.878921][ T6055] bond0 (unregistering): Released all slaves [ 640.530350][ T5816] Bluetooth: hci5: command tx timeout [ 640.732533][T10821] chnl_net:caif_netlink_parms(): no params data found [ 644.861136][ T5816] Bluetooth: hci5: command tx timeout [ 644.972743][ T6055] hsr_slave_0: left promiscuous mode [ 645.018649][ T6055] hsr_slave_1: left promiscuous mode [ 645.183139][ T6055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.287901][ T6055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.588738][ T6055] hsr_slave_0: left promiscuous mode [ 645.628732][ T6055] hsr_slave_1: left promiscuous mode [ 645.629902][ T6055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.660657][ T6055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.929227][ T5812] Bluetooth: hci5: command tx timeout [ 647.626192][ T6055] team0 (unregistering): Port device team_slave_1 removed [ 648.829646][ T6055] team0 (unregistering): Port device team_slave_0 removed [ 649.009058][ T5812] Bluetooth: hci5: command tx timeout [ 654.379476][ T6055] team0 (unregistering): Port device team_slave_1 removed [ 655.460022][ T6055] team0 (unregistering): Port device team_slave_0 removed [ 658.305327][T11132] sd 0:0:1:0: device reset [ 661.313193][T11151] tipc: Started in network mode [ 661.314906][T11151] tipc: Node identity 0ec3488771c2, cluster identity 4711 [ 661.315647][T11151] tipc: Enabled bearer , priority 0 [ 662.705340][T11148] tipc: Resetting bearer [ 662.959457][T11146] tipc: Disabling bearer [ 663.079053][T10821] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.079198][T10821] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.079375][T10821] bridge_slave_0: entered allmulticast mode [ 663.081342][T10821] bridge_slave_0: entered promiscuous mode [ 663.087720][T10223] tipc: Node number set to 2130790535 [ 663.114111][T10821] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.114264][T10821] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.114502][T10821] bridge_slave_1: entered allmulticast mode [ 663.117617][T10821] bridge_slave_1: entered promiscuous mode [ 664.905823][T11188] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1575'. [ 667.356035][T10821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.427014][T10821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.848709][ T6346] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 670.004434][ T6346] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 670.004467][ T6346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.004480][ T6346] usb 5-1: Product: syz [ 670.004489][ T6346] usb 5-1: Manufacturer: syz [ 670.004498][ T6346] usb 5-1: SerialNumber: syz [ 670.013102][ T6346] usb 5-1: config 0 descriptor?? [ 670.231946][ T6346] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 670.283744][T10821] team0: Port device team_slave_0 added [ 670.346468][T10821] team0: Port device team_slave_1 added [ 670.375736][T10984] chnl_net:caif_netlink_parms(): no params data found [ 672.082813][T10821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.082834][T10821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.082864][T10821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.991101][T10821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.991133][T10821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.991163][T10821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.274774][ T6346] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 673.285827][ T6346] usb 5-1: USB disconnect, device number 5 [ 674.069883][ T5812] Bluetooth: hci2: connection err: -111 [ 674.071301][ T5812] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 674.072290][ T5812] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 675.110011][ T6055] bridge_slave_1: left allmulticast mode [ 675.110044][ T6055] bridge_slave_1: left promiscuous mode [ 675.110358][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.180055][ T6055] bridge_slave_0: left allmulticast mode [ 675.180080][ T6055] bridge_slave_0: left promiscuous mode [ 675.180288][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.599965][ T6055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.628799][ T6029] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 675.675289][ T6055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.753215][ T6055] bond0 (unregistering): Released all slaves [ 675.798637][ T6029] usb 1-1: Using ep0 maxpacket: 8 [ 675.831366][ T6029] usb 1-1: config 162 has an invalid interface number: 79 but max is 1 [ 675.831399][ T6029] usb 1-1: config 162 has an invalid descriptor of length 183, skipping remainder of the config [ 675.831420][ T6029] usb 1-1: config 162 has 1 interface, different from the descriptor's value: 2 [ 675.831453][ T6029] usb 1-1: config 162 has no interface number 0 [ 675.831511][ T6029] usb 1-1: config 162 interface 79 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 675.831542][ T6029] usb 1-1: config 162 interface 79 has no altsetting 0 [ 675.834999][ T6029] usb 1-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 675.835032][ T6029] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.835053][ T6029] usb 1-1: Product: syz [ 675.835069][ T6029] usb 1-1: Manufacturer: syz [ 675.835085][ T6029] usb 1-1: SerialNumber: syz [ 676.050478][T10984] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.050756][T10984] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.051143][T10984] bridge_slave_0: entered allmulticast mode [ 676.082523][T10984] bridge_slave_0: entered promiscuous mode [ 676.672760][T10821] hsr_slave_0: entered promiscuous mode [ 676.740111][T10821] hsr_slave_1: entered promiscuous mode [ 676.955666][T10984] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.955822][T10984] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.956089][T10984] bridge_slave_1: entered allmulticast mode [ 676.971999][T10984] bridge_slave_1: entered promiscuous mode [ 677.026476][ T6029] pl2303 1-1:162.79: required endpoints missing [ 677.050645][ T6029] usb 1-1: USB disconnect, device number 36 [ 677.764068][ T5812] Bluetooth: hci1: connection err: -111 [ 677.764219][ T5812] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 677.766418][ T5812] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 677.796131][T10984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.872898][ C0] vkms_vblank_simulate: vblank timer overrun [ 678.927614][ T5812] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 678.927944][ T5812] Bluetooth: hci2: Injecting HCI hardware error event [ 678.931517][ T5816] Bluetooth: hci2: hardware error 0x00 [ 679.049816][ C0] vkms_vblank_simulate: vblank timer overrun [ 679.119241][ T6055] hsr_slave_0: left promiscuous mode [ 679.586894][ C0] vkms_vblank_simulate: vblank timer overrun [ 679.605188][ T6055] hsr_slave_1: left promiscuous mode [ 679.616486][ T6055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.527600][ C0] vkms_vblank_simulate: vblank timer overrun [ 680.828081][ T6055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.279360][T10117] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 681.598794][T10117] usb 3-1: Using ep0 maxpacket: 8 [ 681.603128][T10117] usb 3-1: config 162 has an invalid interface number: 79 but max is 1 [ 681.603160][T10117] usb 3-1: config 162 has an invalid descriptor of length 183, skipping remainder of the config [ 681.603181][T10117] usb 3-1: config 162 has 1 interface, different from the descriptor's value: 2 [ 681.603204][T10117] usb 3-1: config 162 has no interface number 0 [ 681.603264][T10117] usb 3-1: config 162 interface 79 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 681.603296][T10117] usb 3-1: config 162 interface 79 has no altsetting 0 [ 681.606741][T10117] usb 3-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 681.606775][T10117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.606798][T10117] usb 3-1: Product: syz [ 681.606813][T10117] usb 3-1: Manufacturer: syz [ 681.606828][T10117] usb 3-1: SerialNumber: syz [ 681.782944][ T6055] team0 (unregistering): Port device team_slave_1 removed [ 681.810712][ T5812] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 681.814334][ T5812] Bluetooth: hci1: Injecting HCI hardware error event [ 681.818095][ T5817] Bluetooth: hci1: hardware error 0x00 [ 682.138783][ C0] vkms_vblank_simulate: vblank timer overrun [ 682.304046][ C0] vkms_vblank_simulate: vblank timer overrun [ 682.409966][ T6055] team0 (unregistering): Port device team_slave_0 removed [ 682.495260][ C0] vkms_vblank_simulate: vblank timer overrun [ 682.611424][ T5816] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 682.987932][ C0] vkms_vblank_simulate: vblank timer overrun [ 683.030944][ C0] vkms_vblank_simulate: vblank timer overrun [ 683.364070][ C0] vkms_vblank_simulate: vblank timer overrun [ 683.539312][ C0] vkms_vblank_simulate: vblank timer overrun [ 683.604212][ C0] vkms_vblank_simulate: vblank timer overrun [ 683.660604][ C0] vkms_vblank_simulate: vblank timer overrun [ 683.744103][ C0] vkms_vblank_simulate: vblank timer overrun [ 683.810916][ C0] vkms_vblank_simulate: vblank timer overrun [ 683.847705][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 683.862562][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 683.865512][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 683.867063][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 683.892709][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 683.944622][ C0] vkms_vblank_simulate: vblank timer overrun [ 684.128899][ T5817] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 684.202735][ C0] vkms_vblank_simulate: vblank timer overrun [ 684.260338][T10984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.413250][ C0] vkms_vblank_simulate: vblank timer overrun [ 684.988965][ C0] vkms_vblank_simulate: vblank timer overrun [ 685.321991][ C0] vkms_vblank_simulate: vblank timer overrun [ 685.571547][T10117] pl2303 3-1:162.79: required endpoints missing [ 685.589188][T10117] usb 3-1: USB disconnect, device number 13 [ 685.682270][ C0] vkms_vblank_simulate: vblank timer overrun [ 686.133469][ T5817] Bluetooth: hci0: command tx timeout [ 687.173453][T10984] team0: Port device team_slave_0 added [ 687.177626][T10984] team0: Port device team_slave_1 added [ 687.272613][ C0] vkms_vblank_simulate: vblank timer overrun [ 687.688209][ C0] vkms_vblank_simulate: vblank timer overrun [ 688.366619][ C0] vkms_vblank_simulate: vblank timer overrun [ 688.396216][ T5817] Bluetooth: hci0: command tx timeout [ 688.442105][ C0] vkms_vblank_simulate: vblank timer overrun [ 688.902067][ C0] vkms_vblank_simulate: vblank timer overrun [ 689.042706][T11375] sd 0:0:1:0: device reset [ 689.682937][ C0] vkms_vblank_simulate: vblank timer overrun [ 690.011907][ C0] vkms_vblank_simulate: vblank timer overrun [ 690.043325][ C0] vkms_vblank_simulate: vblank timer overrun [ 690.239340][ C0] vkms_vblank_simulate: vblank timer overrun [ 690.325411][ C0] vkms_vblank_simulate: vblank timer overrun [ 690.485250][ T5817] Bluetooth: hci0: command tx timeout [ 690.494375][ C0] vkms_vblank_simulate: vblank timer overrun [ 690.782104][ C0] vkms_vblank_simulate: vblank timer overrun [ 691.138700][ T1232] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 691.195437][ C0] vkms_vblank_simulate: vblank timer overrun [ 691.253186][T10984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.253207][T10984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.253237][T10984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.279852][T10984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.279870][T10984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.279898][T10984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.288676][ T1232] usb 3-1: Using ep0 maxpacket: 8 [ 691.317946][ T1232] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 691.317981][ T1232] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.318002][ T1232] usb 3-1: config 0 has no interface number 0 [ 691.318067][ T1232] usb 3-1: config 0 interface 55 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 691.318117][ T1232] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 691.318142][ T1232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.339385][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.339459][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.430518][ T1232] usb 3-1: config 0 descriptor?? [ 691.446425][ T1232] ldusb 3-1:0.55: Interrupt in endpoint not found [ 691.497109][ C0] vkms_vblank_simulate: vblank timer overrun [ 691.595456][ C0] vkms_vblank_simulate: vblank timer overrun [ 691.645350][ T5949] usb 3-1: USB disconnect, device number 14 [ 692.049925][T10984] hsr_slave_0: entered promiscuous mode [ 692.064596][T10984] hsr_slave_1: entered promiscuous mode [ 692.068213][T10984] debugfs: 'hsr0' already exists in 'hsr' [ 692.068244][T10984] Cannot create hsr debugfs directory [ 692.411166][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.613300][ T5817] Bluetooth: hci0: command tx timeout [ 693.628640][ C0] vkms_vblank_simulate: vblank timer overrun [ 694.609023][ C0] vkms_vblank_simulate: vblank timer overrun [ 695.099762][ C0] vkms_vblank_simulate: vblank timer overrun [ 698.153844][T11432] lo speed is unknown, defaulting to 1000 [ 698.154102][T11432] lo speed is unknown, defaulting to 1000 [ 698.158965][T11432] lo speed is unknown, defaulting to 1000 [ 698.169568][T11432] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 698.186475][T11432] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 698.228237][T11432] lo speed is unknown, defaulting to 1000 [ 698.232899][T11432] lo speed is unknown, defaulting to 1000 [ 698.236723][T11432] lo speed is unknown, defaulting to 1000 [ 698.240373][T11432] lo speed is unknown, defaulting to 1000 [ 698.244116][T11432] lo speed is unknown, defaulting to 1000 [ 698.247546][T11432] lo speed is unknown, defaulting to 1000 [ 698.251103][T11432] lo speed is unknown, defaulting to 1000 [ 699.834840][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 699.848387][ T5816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 699.858769][ T5816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 699.860265][ T5816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 699.861920][ T5816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 700.012709][ T6055] bridge_slave_1: left allmulticast mode [ 700.012746][ T6055] bridge_slave_1: left promiscuous mode [ 700.013048][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.098654][T10117] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 700.152308][ T6055] bridge_slave_0: left allmulticast mode [ 700.152342][ T6055] bridge_slave_0: left promiscuous mode [ 700.152638][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.258624][T10117] usb 5-1: Using ep0 maxpacket: 8 [ 700.261230][T10117] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 700.261260][T10117] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.261281][T10117] usb 5-1: config 0 has no interface number 0 [ 700.261333][T10117] usb 5-1: config 0 interface 55 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 700.261380][T10117] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 700.261407][T10117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.463199][T10117] usb 5-1: config 0 descriptor?? [ 700.938321][T10117] ldusb 5-1:0.55: Interrupt in endpoint not found [ 701.009028][T10117] usb 5-1: USB disconnect, device number 6 [ 701.895971][ T5817] Bluetooth: hci4: command tx timeout [ 702.760056][ T6055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.837186][T11488] vcan0: tx drop: invalid da for name 0x00000000000000f0 [ 703.458015][ T6055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.340390][ T5817] Bluetooth: hci4: command tx timeout [ 704.352028][ T6055] bond0 (unregistering): Released all slaves [ 706.269401][T11343] chnl_net:caif_netlink_parms(): no params data found [ 706.368761][ T5817] Bluetooth: hci4: command tx timeout [ 706.395112][ T6055] hsr_slave_0: left promiscuous mode [ 706.433305][ T6055] hsr_slave_1: left promiscuous mode [ 706.434448][ T6055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.466987][ T6055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.498734][T10333] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 706.648633][T10333] usb 1-1: Using ep0 maxpacket: 8 [ 706.654465][T10333] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 706.654497][T10333] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.654519][T10333] usb 1-1: config 0 has no interface number 0 [ 706.654572][T10333] usb 1-1: config 0 interface 55 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 706.654620][T10333] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 706.654646][T10333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.777047][T10333] usb 1-1: config 0 descriptor?? [ 706.792411][T10333] ldusb 1-1:0.55: Interrupt in endpoint not found [ 707.069027][T10333] usb 1-1: USB disconnect, device number 37 [ 707.075299][T11526] 9pnet_fd: Insufficient options for proto=fd [ 707.508680][T10333] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 707.678706][T10333] usb 3-1: Using ep0 maxpacket: 16 [ 707.686582][T10333] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 707.686604][T10333] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.686617][T10333] usb 3-1: config 0 has no interface number 0 [ 707.696028][T10333] usb 3-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 707.696059][T10333] usb 3-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 707.696086][T10333] usb 3-1: config 0 interface 41 has no altsetting 0 [ 707.696732][ T6055] team0 (unregistering): Port device team_slave_1 removed [ 707.706080][T10333] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 707.706110][T10333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.706140][T10333] usb 3-1: Product: syz [ 707.706154][T10333] usb 3-1: Manufacturer: syz [ 707.706168][T10333] usb 3-1: SerialNumber: syz [ 707.726912][T10333] usb 3-1: config 0 descriptor?? [ 707.782034][T10333] dm9601 3-1:0.41: probe with driver dm9601 failed with error -22 [ 707.783699][T10333] sr9700 3-1:0.41: probe with driver sr9700 failed with error -22 [ 708.109346][ T6055] team0 (unregistering): Port device team_slave_0 removed [ 708.504945][ T5817] Bluetooth: hci4: command tx timeout [ 711.022407][T10333] usb 3-1: USB disconnect, device number 15 [ 711.320930][T11462] lo speed is unknown, defaulting to 1000 [ 711.464868][ T6029] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 711.594187][T10333] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 711.624554][ T6029] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 711.625265][ T6029] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.625292][ T6029] usb 1-1: Product: syz [ 711.625308][ T6029] usb 1-1: Manufacturer: syz [ 711.625324][ T6029] usb 1-1: SerialNumber: syz [ 711.633260][ T6029] usb 1-1: config 0 descriptor?? [ 711.753707][T10333] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 711.810176][T10333] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 711.810270][T10333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.851627][T10333] usb 3-1: config 0 descriptor?? [ 711.906277][ T6029] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 712.110721][T10333] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 712.111304][T10333] [drm:udl_init] *ERROR* Selecting channel failed [ 712.709501][T10333] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 712.709522][T10333] [drm] Initialized udl on minor 2 [ 712.724650][T10333] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 712.725269][T10333] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 712.728230][ T5887] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 712.751832][ T5887] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 712.752148][ T5887] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 712.947380][T11343] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.960445][T11343] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.960901][T11343] bridge_slave_0: entered allmulticast mode [ 713.243380][T11343] bridge_slave_0: entered promiscuous mode [ 713.339122][T11343] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.339285][T11343] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.340919][T11343] bridge_slave_1: entered allmulticast mode [ 713.347253][T11343] bridge_slave_1: entered promiscuous mode [ 713.540547][T10333] usb 3-1: USB disconnect, device number 16 [ 713.589772][ T6029] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 713.682431][ T6029] usb 1-1: USB disconnect, device number 38 [ 713.927119][T11343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.986736][T11343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.540247][T11343] team0: Port device team_slave_0 added [ 715.083375][T11343] team0: Port device team_slave_1 added [ 715.588476][ T6055] bridge_slave_1: left allmulticast mode [ 715.590732][ T6055] bridge_slave_1: left promiscuous mode [ 715.591047][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.670526][ T6055] bridge_slave_0: left allmulticast mode [ 715.670563][ T6055] bridge_slave_0: left promiscuous mode [ 715.670945][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.858834][ T5806] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 716.048618][ T5806] usb 5-1: Using ep0 maxpacket: 32 [ 716.051228][ T5806] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.051256][ T5806] usb 5-1: config 0 has no interfaces? [ 716.054595][ T5806] usb 5-1: New USB device found, idVendor=045e, idProduct=d357, bcdDevice=a7.7c [ 716.054626][ T5806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.054649][ T5806] usb 5-1: Product: syz [ 716.054665][ T5806] usb 5-1: Manufacturer: syz [ 716.054681][ T5806] usb 5-1: SerialNumber: syz [ 716.062280][ T5806] usb 5-1: config 0 descriptor?? [ 716.258720][ T5806] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 716.272676][ T6347] usb 5-1: USB disconnect, device number 7 [ 716.292909][ T6055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 716.389842][ T6055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 716.408623][ T5806] usb 1-1: Using ep0 maxpacket: 16 [ 716.416755][ T5806] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 716.416787][ T5806] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.416816][ T5806] usb 1-1: config 0 has no interface number 0 [ 716.416868][ T5806] usb 1-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 716.416891][ T5806] usb 1-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 716.416920][ T5806] usb 1-1: config 0 interface 41 has no altsetting 0 [ 716.424578][ T5806] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 716.424609][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.424630][ T5806] usb 1-1: Product: syz [ 716.424644][ T5806] usb 1-1: Manufacturer: syz [ 716.424658][ T5806] usb 1-1: SerialNumber: syz [ 716.445165][ T5806] usb 1-1: config 0 descriptor?? [ 716.459819][ T5806] dm9601 1-1:0.41: probe with driver dm9601 failed with error -22 [ 716.461203][ T5806] sr9700 1-1:0.41: probe with driver sr9700 failed with error -22 [ 716.561312][ T6055] bond0 (unregistering): Released all slaves [ 716.629823][T11343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.629837][T11343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.629855][T11343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.633406][T11343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.633418][T11343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.633436][T11343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.686714][T11462] chnl_net:caif_netlink_parms(): no params data found [ 716.982170][T11602] program syz.4.1685 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 717.069188][T11343] hsr_slave_0: entered promiscuous mode [ 717.070204][T11343] hsr_slave_1: entered promiscuous mode [ 717.715306][ T6055] hsr_slave_0: left promiscuous mode [ 717.772546][ T6055] hsr_slave_1: left promiscuous mode [ 717.773803][ T6055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.004215][ T6055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.726887][T10223] usb 1-1: USB disconnect, device number 39 [ 719.944462][ T6347] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 720.098879][ T6346] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 720.099048][ T6347] usb 3-1: Using ep0 maxpacket: 8 [ 720.101276][ T6347] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 720.101305][ T6347] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.101327][ T6347] usb 3-1: config 0 has no interface number 0 [ 720.101378][ T6347] usb 3-1: config 0 interface 55 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 720.101425][ T6347] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 720.101441][ T6347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.105910][ T6347] usb 3-1: config 0 descriptor?? [ 720.121932][ T6347] ldusb 3-1:0.55: Interrupt in endpoint not found [ 720.269024][ T6346] usb 5-1: Using ep0 maxpacket: 8 [ 720.272037][ T6346] usb 5-1: config 162 has an invalid interface number: 79 but max is 1 [ 720.272070][ T6346] usb 5-1: config 162 has an invalid descriptor of length 129, skipping remainder of the config [ 720.272093][ T6346] usb 5-1: config 162 has 1 interface, different from the descriptor's value: 2 [ 720.272114][ T6346] usb 5-1: config 162 has no interface number 0 [ 720.272150][ T6346] usb 5-1: config 162 interface 79 has no altsetting 0 [ 720.274793][ T6346] usb 5-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 720.274823][ T6346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.274845][ T6346] usb 5-1: Product: syz [ 720.274861][ T6346] usb 5-1: Manufacturer: syz [ 720.274877][ T6346] usb 5-1: SerialNumber: syz [ 720.383370][ T6029] usb 3-1: USB disconnect, device number 17 [ 720.499579][ T6055] team0 (unregistering): Port device team_slave_1 removed [ 720.670238][ T6055] team0 (unregistering): Port device team_slave_0 removed [ 721.270566][T11641] program syz.2.1694 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 721.593273][ T6346] pl2303 5-1:162.79: required endpoints missing [ 721.602594][ T6346] usb 5-1: USB disconnect, device number 8 [ 721.608772][ T6347] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 721.635139][T11625] udevd[11625]: setting mode of /dev/bus/usb/005/008 to 020664 failed: No such file or directory [ 721.635269][T11625] udevd[11625]: setting owner of /dev/bus/usb/005/008 to uid=0, gid=0 failed: No such file or directory [ 721.758673][ T6347] usb 3-1: Using ep0 maxpacket: 32 [ 721.760685][ T6347] usb 3-1: config 0 interface 0 has no altsetting 0 [ 721.760730][ T6347] usb 3-1: New USB device found, idVendor=04b3, idProduct=3105, bcdDevice= 0.00 [ 721.760753][ T6347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.769474][ T6347] usb 3-1: config 0 descriptor?? [ 722.227042][ T6347] lenovo 0003:04B3:3105.0005: unknown main item tag 0x0 [ 722.227083][ T6347] lenovo 0003:04B3:3105.0005: unknown main item tag 0x0 [ 722.227111][ T6347] lenovo 0003:04B3:3105.0005: unknown main item tag 0x0 [ 722.227137][ T6347] lenovo 0003:04B3:3105.0005: unknown main item tag 0x0 [ 722.227164][ T6347] lenovo 0003:04B3:3105.0005: unknown main item tag 0x0 [ 722.272263][ T6347] lenovo 0003:04B3:3105.0005: hidraw0: USB HID v0.06 Device [HID 04b3:3105] on usb-dummy_hcd.2-1/input0 [ 722.357234][T11462] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.357468][T11462] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.357718][T11462] bridge_slave_0: entered allmulticast mode [ 722.381554][T11462] bridge_slave_0: entered promiscuous mode [ 722.475952][ T6347] usb 3-1: USB disconnect, device number 18 [ 722.539942][T11462] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.540094][T11462] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.540326][T11462] bridge_slave_1: entered allmulticast mode [ 722.571801][T11462] bridge_slave_1: entered promiscuous mode [ 722.757771][T11646] fuse: Bad value for 'fd' [ 724.468693][T10223] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 724.474692][T11462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.619409][T10223] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 724.628865][T10223] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 724.628896][T10223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.665484][T10223] usb 3-1: config 0 descriptor?? [ 724.756627][T11462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.932011][T10223] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 724.932536][T10223] [drm:udl_init] *ERROR* Selecting channel failed [ 724.976368][T10223] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 724.976399][T10223] [drm] Initialized udl on minor 2 [ 724.999962][T10223] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 725.001150][T10223] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 725.002303][ T5806] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 725.003113][ T5806] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 725.003229][ T5806] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 725.041405][T10223] usb 3-1: USB disconnect, device number 19 [ 725.168644][ T5887] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 725.232071][ T5806] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 725.318630][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 725.323663][ T5887] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 725.323683][ T5887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.323699][ T5887] usb 1-1: config 0 has no interface number 0 [ 725.323732][ T5887] usb 1-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 725.323745][ T5887] usb 1-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 725.323762][ T5887] usb 1-1: config 0 interface 41 has no altsetting 0 [ 725.389926][ T5887] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 725.389961][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.389983][ T5887] usb 1-1: Product: syz [ 725.390000][ T5887] usb 1-1: Manufacturer: syz [ 725.390015][ T5887] usb 1-1: SerialNumber: syz [ 725.396774][ T5887] usb 1-1: config 0 descriptor?? [ 725.398739][ T5806] usb 5-1: Using ep0 maxpacket: 8 [ 725.401216][ T5806] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 725.401242][ T5806] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.401260][ T5806] usb 5-1: config 0 has no interface number 0 [ 725.401305][ T5806] usb 5-1: config 0 interface 55 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 725.401347][ T5806] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 725.401370][ T5806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.536943][ T5887] dm9601 1-1:0.41: probe with driver dm9601 failed with error -22 [ 725.538405][ T5887] sr9700 1-1:0.41: probe with driver sr9700 failed with error -22 [ 725.562257][ T5806] usb 5-1: config 0 descriptor?? [ 725.579026][ T5806] ldusb 5-1:0.55: Interrupt in endpoint not found [ 726.109276][T11462] team0: Port device team_slave_0 added [ 726.121621][ T5806] usb 5-1: USB disconnect, device number 9 [ 726.174210][T11462] team0: Port device team_slave_1 added [ 726.428730][ T5806] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 726.429301][T11462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.429317][T11462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.429344][T11462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.437312][T11462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.437330][T11462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.437361][T11462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.581281][ T5806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.581339][ T5806] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 726.581365][ T5806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.607393][ T5806] usb 3-1: config 0 descriptor?? [ 726.826083][T11462] hsr_slave_0: entered promiscuous mode [ 726.827738][T11462] hsr_slave_1: entered promiscuous mode [ 726.840759][T11462] debugfs: 'hsr0' already exists in 'hsr' [ 726.840792][T11462] Cannot create hsr debugfs directory [ 727.036207][T11707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.036861][T11707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.142126][T11708] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 727.369350][ T5806] usbhid 3-1:0.0: can't add hid device: -71 [ 727.369499][ T5806] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 727.387531][ T5806] usb 3-1: USB disconnect, device number 20 [ 727.396399][T10051] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 727.658617][T10051] usb 5-1: Using ep0 maxpacket: 8 [ 727.660682][T10051] usb 5-1: config 162 has an invalid interface number: 79 but max is 1 [ 727.660713][T10051] usb 5-1: config 162 has an invalid descriptor of length 129, skipping remainder of the config [ 727.660735][T10051] usb 5-1: config 162 has 1 interface, different from the descriptor's value: 2 [ 727.660758][T10051] usb 5-1: config 162 has no interface number 0 [ 727.660783][T10051] usb 5-1: config 162 interface 79 has no altsetting 0 [ 727.663620][T10051] usb 5-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 727.663650][T10051] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.663672][T10051] usb 5-1: Product: syz [ 727.663688][T10051] usb 5-1: Manufacturer: syz [ 727.663704][T10051] usb 5-1: SerialNumber: syz [ 727.676551][T11343] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 727.904545][ T6347] usb 1-1: USB disconnect, device number 40 [ 728.020659][T11343] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 728.139371][T10051] pl2303 5-1:162.79: required endpoints missing [ 728.147744][T10051] usb 5-1: USB disconnect, device number 10 [ 728.224839][T11343] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 728.348689][T11343] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 729.043207][T11723] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 731.479825][ T1232] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 732.489597][ T1232] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 732.529038][ T1232] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 732.529075][ T1232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.620606][ T1232] usb 5-1: config 0 descriptor?? [ 732.845436][ T1232] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 732.846040][ T1232] [drm:udl_init] *ERROR* Selecting channel failed [ 732.910638][ T1232] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 732.910669][ T1232] [drm] Initialized udl on minor 2 [ 732.953914][ T1232] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 732.954142][ T1232] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 732.954864][T10052] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 732.956085][T10052] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 732.956202][T10052] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 733.004450][ T1232] usb 5-1: USB disconnect, device number 11 [ 733.093695][T11462] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 733.194431][T11462] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 733.272102][T11343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.272782][T11462] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 733.419793][T11462] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 733.556540][T11343] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.594862][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.629151][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.666616][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.667365][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.868853][ T6347] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 733.878727][T10051] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 734.013407][T11462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.019272][ T6347] usb 5-1: Using ep0 maxpacket: 16 [ 734.029433][T10051] usb 3-1: Using ep0 maxpacket: 8 [ 734.041879][ T6347] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 734.041911][ T6347] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.041933][ T6347] usb 5-1: config 0 has no interface number 0 [ 734.041988][ T6347] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 734.042013][ T6347] usb 5-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 734.042042][ T6347] usb 5-1: config 0 interface 41 has no altsetting 0 [ 734.046444][ T6347] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 734.046537][ T6347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.046568][ T6347] usb 5-1: Product: syz [ 734.046585][ T6347] usb 5-1: Manufacturer: syz [ 734.046601][ T6347] usb 5-1: SerialNumber: syz [ 734.066189][T10051] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 734.066218][T10051] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.066237][T10051] usb 3-1: config 0 has no interface number 0 [ 734.066283][T10051] usb 3-1: config 0 interface 55 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 734.066327][T10051] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 734.066349][T10051] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.096144][T10051] usb 3-1: config 0 descriptor?? [ 734.106080][ T6347] usb 5-1: config 0 descriptor?? [ 734.113833][T11761] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 734.131734][ T6347] dm9601 5-1:0.41: probe with driver dm9601 failed with error -22 [ 734.132945][ T6347] sr9700 5-1:0.41: probe with driver sr9700 failed with error -22 [ 734.179747][T10051] ldusb 3-1:0.55: Interrupt in endpoint not found [ 734.307671][T11462] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.368462][ T5887] usb 3-1: USB disconnect, device number 21 [ 734.433100][ T6055] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.443949][ T6055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.527361][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.527539][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.873600][T11343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.464209][T11462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.701051][T11462] veth0_vlan: entered promiscuous mode [ 735.742500][T11462] veth1_vlan: entered promiscuous mode [ 736.788762][T10051] usb 5-1: USB disconnect, device number 12 [ 736.952388][T11462] veth0_macvtap: entered promiscuous mode [ 738.489726][T11462] veth1_macvtap: entered promiscuous mode [ 738.527680][T11343] veth0_vlan: entered promiscuous mode [ 738.633514][T11343] veth1_vlan: entered promiscuous mode [ 738.747721][T11462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.817052][T11462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.869740][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.895730][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.912944][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.913002][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.982033][T11343] veth0_macvtap: entered promiscuous mode [ 739.005939][T11343] veth1_macvtap: entered promiscuous mode [ 739.048260][T11343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.102880][T11343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.235171][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.270483][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.408294][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.411175][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.060383][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.060407][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.261777][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.261804][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.455031][T11838] 9pnet_fd: Insufficient options for proto=fd [ 741.455517][T10075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.455539][T10075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.482241][T10075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.482265][T10075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.049356][T11851] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1732'. [ 743.653759][T11849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 747.862102][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 747.893418][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 747.930136][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 749.078997][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 749.180168][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 749.455478][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1742'. [ 750.841097][T11877] lo speed is unknown, defaulting to 1000 [ 751.258801][ T5816] Bluetooth: hci0: command tx timeout [ 752.783265][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.783353][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.169228][T11917] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 753.994915][ T5816] Bluetooth: hci0: command tx timeout [ 754.001203][T10223] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 754.218654][T10223] usb 3-1: Using ep0 maxpacket: 16 [ 754.233438][T10223] usb 3-1: config 0 has an invalid interface number: 249 but max is 0 [ 754.233471][T10223] usb 3-1: config 0 has no interface number 0 [ 754.233505][T10223] usb 3-1: config 0 interface 249 has no altsetting 0 [ 754.240562][T10223] usb 3-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice= 5.c1 [ 754.240597][T10223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.240626][T10223] usb 3-1: Product: syz [ 754.240641][T10223] usb 3-1: Manufacturer: syz [ 754.240655][T10223] usb 3-1: SerialNumber: syz [ 754.297564][T10223] usb 3-1: config 0 descriptor?? [ 754.418641][T10052] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 754.578261][T10052] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 754.578306][T10052] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.578328][T10052] usb 1-1: Product: syz [ 754.578344][T10052] usb 1-1: Manufacturer: syz [ 754.578360][T10052] usb 1-1: SerialNumber: syz [ 754.890327][T10052] usb 1-1: config 0 descriptor?? [ 754.925099][ T1009] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.928826][ C0] vkms_vblank_simulate: vblank timer overrun [ 755.075817][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.010422][T10052] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 756.067548][ T5816] Bluetooth: hci0: command tx timeout [ 756.222117][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.991127][ T5896] usb 3-1: USB disconnect, device number 22 [ 757.049018][ C0] vkms_vblank_simulate: vblank timer overrun [ 757.148376][T11930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1753'. [ 757.191300][ T1009] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.969947][ C0] vkms_vblank_simulate: vblank timer overrun [ 758.241070][ C0] vkms_vblank_simulate: vblank timer overrun [ 758.375650][ T5816] Bluetooth: hci0: command tx timeout [ 758.381587][T10052] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 758.412902][ T6029] usb 1-1: USB disconnect, device number 41 [ 758.569044][ C0] vkms_vblank_simulate: vblank timer overrun [ 758.849396][T11949] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 759.088422][ T1009] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.198623][ T6029] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 759.748686][ T6029] usb 5-1: Using ep0 maxpacket: 32 [ 759.753053][ T6029] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.753085][ T6029] usb 5-1: config 0 has no interfaces? [ 759.781991][ T6029] usb 5-1: New USB device found, idVendor=045e, idProduct=d357, bcdDevice=a7.7c [ 759.782026][ T6029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.782048][ T6029] usb 5-1: Product: syz [ 759.782064][ T6029] usb 5-1: Manufacturer: syz [ 759.782080][ T6029] usb 5-1: SerialNumber: syz [ 759.854070][ T6029] usb 5-1: config 0 descriptor?? [ 760.073985][ T1009] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.098419][ T5949] usb 5-1: USB disconnect, device number 13 [ 760.140243][T11877] chnl_net:caif_netlink_parms(): no params data found [ 760.213544][T11964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1763'. [ 762.418662][ T5887] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 762.562678][T11877] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.562917][T11877] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.563163][T11877] bridge_slave_0: entered allmulticast mode [ 762.569373][T11877] bridge_slave_0: entered promiscuous mode [ 762.612657][ T5887] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 762.612693][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.612716][ T5887] usb 5-1: Product: syz [ 762.612731][ T5887] usb 5-1: Manufacturer: syz [ 762.612747][ T5887] usb 5-1: SerialNumber: syz [ 762.662047][ T5887] usb 5-1: config 0 descriptor?? [ 762.757910][T11877] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.758059][T11877] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.758288][T11877] bridge_slave_1: entered allmulticast mode [ 762.759367][T10223] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 762.790626][T11877] bridge_slave_1: entered promiscuous mode [ 762.870786][ T5887] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 762.910720][T10223] usb 3-1: Using ep0 maxpacket: 16 [ 762.913894][T10223] usb 3-1: config 0 has an invalid interface number: 249 but max is 0 [ 762.913924][T10223] usb 3-1: config 0 has no interface number 0 [ 762.913962][T10223] usb 3-1: config 0 interface 249 has no altsetting 0 [ 762.917798][T10223] usb 3-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice= 5.c1 [ 762.917839][T10223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.917863][T10223] usb 3-1: Product: syz [ 762.917879][T10223] usb 3-1: Manufacturer: syz [ 762.917895][T10223] usb 3-1: SerialNumber: syz [ 762.937903][T10223] usb 3-1: config 0 descriptor?? [ 763.676421][T11994] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI [ 763.676460][T11994] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 763.676483][T11994] CPU: 0 UID: 0 PID: 11994 Comm: syz.2.1767 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 763.676509][T11994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 763.676524][T11994] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 763.676556][T11994] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 f9 fd ed f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 d8 fd ed f9 4d 8b 24 24 48 83 c3 [ 763.676578][T11994] RSP: 0018:ffffc90004377a40 EFLAGS: 00010206 [ 763.676600][T11994] RAX: 0000000000000005 RBX: ffff8880652e9d80 RCX: 0000000000080000 [ 763.676616][T11994] RDX: ffffc9001671b000 RSI: 0000000000000961 RDI: 0000000000000962 [ 763.676632][T11994] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 763.676647][T11994] R10: dffffc0000000000 R11: ffffffff88334340 R12: 0000000000000028 [ 763.676663][T11994] R13: dffffc0000000000 R14: ffff88814d18c000 R15: dffffc0000000000 [ 763.676682][T11994] FS: 00007f254f4096c0(0000) GS:ffff888126d83000(0000) knlGS:0000000000000000 [ 763.676702][T11994] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 763.676719][T11994] CR2: 0000000000000000 CR3: 0000000054a46000 CR4: 00000000003526f0 [ 763.676739][T11994] Call Trace: [ 763.676748][T11994] [ 763.676761][T11994] pcl818_detach+0x66/0xd0 [ 763.676783][T11994] comedi_device_detach_locked+0x178/0x750 [ 763.676820][T11994] comedi_unlocked_ioctl+0xce4/0x1020 [ 763.676847][T11994] ? kasan_quarantine_put+0xdd/0x220 [ 763.676883][T11994] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 763.676916][T11994] ? smack_log+0xef/0x3f0 [ 763.676943][T11994] ? __pfx_smack_log+0x10/0x10 [ 763.676968][T11994] ? smk_access+0x14c/0x4e0 [ 763.676996][T11994] ? smk_tskacc+0x2fc/0x370 [ 763.677021][T11994] ? smack_file_ioctl+0x24d/0x340 [ 763.677050][T11994] ? __pfx_smack_file_ioctl+0x10/0x10 [ 763.677084][T11994] ? __fget_files+0x3a6/0x420 [ 763.677108][T11994] ? __fget_files+0x2a/0x420 [ 763.677133][T11994] ? bpf_lsm_file_ioctl+0x9/0x20 [ 763.677158][T11994] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 763.677185][T11994] __se_sys_ioctl+0xff/0x170 [ 763.677215][T11994] do_syscall_64+0xfa/0xf80 [ 763.677243][T11994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.677267][T11994] ? clear_bhb_loop+0x60/0xb0 [ 763.677292][T11994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.677314][T11994] RIP: 0033:0x7f255160f749 [ 763.677333][T11994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 763.677353][T11994] RSP: 002b:00007f254f409038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 763.677375][T11994] RAX: ffffffffffffffda RBX: 00007f2551866270 RCX: 00007f255160f749 [ 763.677391][T11994] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000007 [ 763.677405][T11994] RBP: 00007f2551693f91 R08: 0000000000000000 R09: 0000000000000000 [ 763.677420][T11994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 763.677436][T11994] R13: 00007f2551866308 R14: 00007f2551866270 R15: 00007fff6d931b58 [ 763.677468][T11994] [ 763.677476][T11994] Modules linked in: [ 763.677494][T11994] ---[ end trace 0000000000000000 ]--- [ 763.677525][T11994] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 763.677567][T11994] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 f9 fd ed f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 d8 fd ed f9 4d 8b 24 24 48 83 c3 [ 763.677603][T11994] RSP: 0018:ffffc90004377a40 EFLAGS: 00010206 [ 763.677657][T11994] RAX: 0000000000000005 RBX: ffff8880652e9d80 RCX: 0000000000080000 [ 763.677690][T11994] RDX: ffffc9001671b000 RSI: 0000000000000961 RDI: 0000000000000962 [ 763.677722][T11994] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 763.677754][T11994] R10: dffffc0000000000 R11: ffffffff88334340 R12: 0000000000000028 [ 763.677787][T11994] R13: dffffc0000000000 R14: ffff88814d18c000 R15: dffffc0000000000 [ 763.677822][T11994] FS: 00007f254f4096c0(0000) GS:ffff888126d83000(0000) knlGS:0000000000000000 [ 763.677859][T11994] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 763.677892][T11994] CR2: 0000000000000000 CR3: 0000000054a46000 CR4: 00000000003526f0 [ 763.677949][T11994] Kernel panic - not syncing: Fatal exception [ 763.678143][T11994] Kernel Offset: disabled