last executing test programs: 5m59.561297686s ago: executing program 4 (id=26): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) 5m58.912177726s ago: executing program 4 (id=28): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) listen(0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c000440000000000000000714000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 5m58.181490637s ago: executing program 4 (id=30): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 5m57.88030825s ago: executing program 4 (id=32): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40046302, {0x1, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5m55.485864833s ago: executing program 4 (id=36): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000000ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0xb, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000400)={0x8, 0x80000001, 0x4, {0x1, @pix={0xd67, 0x0, 0x34343459, 0x3, 0x8, 0x1, 0x8, 0xb1, 0x0, 0x6, 0x1, 0x8f434b8c187c1541}}, 0x7}) 5m54.588872989s ago: executing program 4 (id=39): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000040)=0x67, 0x4) 5m39.356361513s ago: executing program 32 (id=39): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000040)=0x67, 0x4) 5m30.384212014s ago: executing program 5 (id=50): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$pppl2tp(0x18, 0x1, 0x1) pipe(0x0) sched_setaffinity(0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)=0x40) close_range(r0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pwrite64(r2, &(0x7f0000000800)='[', 0x1, 0x7) write$char_usb(r2, &(0x7f0000000100)="c6", 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 22.585838702s ago: executing program 0 (id=601): shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0xf1, 0x18, 0x80, 0x40, 0x93a, 0x2600, 0x1a06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x80, 0x2f, "", [{{0x9, 0x4, 0xc0, 0x0, 0x0, 0xfa, 0x4b, 0xb3, 0x2c}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 20.094095955s ago: executing program 0 (id=607): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e22, @multicast1}}}, 0x88) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 9.68536464s ago: executing program 3 (id=624): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xb, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'comedi_test\x00', [0x80008004, 0x5, 0x23, 0x401, 0x1, 0x0, 0x10001, 0x1000008, 0x2, 0x3ff, 0x9, 0x3ff, 0x9, 0xe, 0x6, 0x8001, 0x3, 0x4, 0x0, 0x392, 0x80000088, 0x3, 0xa, 0xfffffff6, 0x200000a, 0x4, 0x0, 0x0, 0x4, 0x181, 0x4]}) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x80000, 0x0, 0x0, 0x1, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 9.654881929s ago: executing program 1 (id=625): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x70) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0xfffffffe, 0x3c8098e1, 0x401, 0xfffc, 0x101, 0x0, 0x0, 0x0, 0x10, 0x9}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x20) lseek(r2, 0x6, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x24) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@volatile}], [], 0x2c}) 8.880930934s ago: executing program 3 (id=626): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x5, 0x3, 0x0, 0x8001, 0x10, "f3f0a0e7c6f3a0153af5e3c9309af36ca76c3d"}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x759, 0x7, 0x7d, 0x7, 0x8000, 0x4, 0x2}, 0x0, &(0x7f0000000080)={0x3fc, 0x6, 0xffffffffffffffff, 0x2000000000000003, 0x6, 0xf, 0x80000006}, 0x0, 0x0) 8.743247195s ago: executing program 1 (id=627): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000200)={0x0, &(0x7f00000000c0)=[{}], r2, 0x0, '\x00', 0x300, 0x1}) 8.649625672s ago: executing program 3 (id=628): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x400000009) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000093c0)={0x2020}, 0x2020) 7.864450707s ago: executing program 2 (id=630): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000006940)=ANY=[@ANYBLOB="e0000000130001002b", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="04000b0004000180bcb493de0bb58fd75bdc5e7c53ed39d06fd043db86af6933d71e30cab89da1cd72deb5178a8576e69b2ff911b2fc9aec9a3e2c48ddc884448fd51602af338a3185dcc3b9743391b1e5189f75c863271e1bf36c11da94a91a9711f9fd7b51"], 0xe0}], 0x1, 0x0, 0x0, 0x20008020}, 0x8880) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000140a010200000000000000000a0000090c0006400000000000000003140000001100010000000001000000000100000a47766f08523249cb540183d8bb6ebda90a5d1bc2e7f948d93655e8c57e7d51870195c028329c4c59aabd1f5ff3839d631746d8922cde1ad593351235600e2ef33a66ab0353d19825be44937bcb3d9f4b075d4c0aadf9e5c5517b18369008a9ab22161391c23ea5938e7e4acd3bdac5"], 0x48}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0xc0109207, &(0x7f0000000180)) socket(0x2, 0x80805, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 7.852790258s ago: executing program 1 (id=631): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x2380, 0x10e) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x8000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x240040d4) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0x1, 0x20002f9}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0x6}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.435014152s ago: executing program 1 (id=632): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b8920000000109029009"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) readv(r0, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1) 6.77742484s ago: executing program 2 (id=633): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) 6.521029463s ago: executing program 2 (id=634): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x13, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033bbd6a52a4be"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000000040)='7', 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 6.441094675s ago: executing program 0 (id=635): r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockopt(0xffffffffffffffff, 0xac, 0x10001, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, 0x0, &(0x7f0000000040)) bind$tipc(r0, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x3}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) semctl$GETPID(0x0, 0x710a46238146441f, 0xb, 0x0) sendmsg$tipc(r4, 0x0, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000000)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r6, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(r6) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000280012800b00010067656e657665000018000280140007002001000000000400000000000000000008000a005b5e8a60437c4aa3a0ee84df57f1d2f267a0ddbd4a1ea88047f9ab5dd295c374ac88b3dc99971c3f73adbba80cbead71579a48046230f70243afcb8b2c5aef3e53108dad00730cf9c8d38924d07442b02350ab9089e7436b5e9d17875de0ad7ce2232b3b818f3c40", @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 4.986329755s ago: executing program 0 (id=636): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xb, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'comedi_test\x00', [0x80008004, 0x5, 0x23, 0x401, 0x1, 0x0, 0x10001, 0x1000008, 0x2, 0x3ff, 0x9, 0x3ff, 0x9, 0xe, 0x6, 0x8001, 0x3, 0x4, 0x0, 0x392, 0x80000088, 0x3, 0xa, 0xfffffff6, 0x200000a, 0x4, 0x0, 0x0, 0x4, 0x181, 0x4]}) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x80000, 0x0, 0x0, 0x1, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.093208959s ago: executing program 1 (id=637): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x70) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0xfffffffe, 0x3c8098e1, 0x401, 0xfffc, 0x101, 0x0, 0x0, 0x0, 0x10, 0x9}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x20) lseek(r2, 0x6, 0x4) mkdirat(0xffffffffffffffff, 0x0, 0x24) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@volatile}], [], 0x2c}) 4.023888143s ago: executing program 0 (id=638): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xc, @local, 0x10}, r5}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4f24, 0x40000, @local}, {0x2, 0xfff9, 0xc60, @empty, 0x100}, r5, 0x9dff7ffc}}, 0x48) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 3.473043032s ago: executing program 1 (id=639): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000004200)=[{{0x0, 0x0, 0x0}, 0xa7a}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/current\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(r3, 0x0, 0x20000000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) r5 = socket$kcm(0x23, 0x5, 0x0) listen(r5, 0x800) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, r7) write$tun(r8, 0x0, 0x3db) accept4(r5, 0x0, 0x0, 0x80000) unshare(0x22060600) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) readv(r2, &(0x7f0000001440)=[{0x0}, {0x0}], 0x2) 2.746241491s ago: executing program 2 (id=640): add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) socket$inet(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0x22, 0x6, 0x9) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_create_resource$binfmt(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x132) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x1, 0xc8, "3b1751", "9a3e67", "593f1c", '\x00', 0x7, 0x1, 0x5, 0x3, 0x9, 0x47, 0x4, 0x4, 0xffff, 0x9}}}}, 0x20) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) 1.800378332s ago: executing program 3 (id=641): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000200)={0x0, &(0x7f00000000c0)=[{}], r2, 0x0, '\x00', 0x300, 0x1}) 1.272152547s ago: executing program 0 (id=642): syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000002030144b4740000102030109022e00010118100409040000020103000609058e0b20000fd702052501012709058c0200"], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.270057134s ago: executing program 2 (id=643): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000006940)=ANY=[@ANYBLOB="e0000000130001002b", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="04000b0004000180bcb493de0bb58fd75bdc5e7c53ed39d06fd043db86af6933d71e30cab89da1cd72deb5178a8576e69b2ff911b2fc9aec9a3e2c48ddc884448fd51602af338a3185dcc3b9743391b1e5189f75c863271e1bf36c11da94a91a9711f9fd7b51"], 0xe0}], 0x1, 0x0, 0x0, 0x20008020}, 0x8880) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000140a010200000000000000000a0000090c0006400000000000000003140000001100010000000001000000000100000a47766f08523249cb540183d8bb6ebda90a5d1bc2e7f948d93655e8c57e7d51870195c028329c4c59aabd1f5ff3839d631746d8922cde1ad593351235600e2ef33a66ab0353d19825be44937bcb3d9f4b075d4c0aadf9e5c5517b18369008a9ab22161391c23ea5938e7e4acd3bdac5"], 0x48}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0xc0109207, &(0x7f0000000180)) socket(0x2, 0x80805, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 1.163675872s ago: executing program 3 (id=644): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) 1.072671281s ago: executing program 3 (id=645): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e22, @multicast1}}}, 0x88) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 0s ago: executing program 2 (id=646): r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockopt(0xffffffffffffffff, 0xac, 0x10001, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, 0x0, &(0x7f0000000040)) bind$tipc(r0, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x3}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) semctl$GETPID(0x0, 0x710a46238146441f, 0xb, 0x0) sendmsg$tipc(r4, 0x0, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000000)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r6, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(r6) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000280012800b00010067656e657665000018000280140007002001000000000400000000000000000008000a005b5e8a60437c4aa3a0ee84df57f1d2f267a0ddbd4a1ea88047f9ab5dd295c374ac88b3dc99971c3f73adbba80cbead71579a48046230f70243afcb8b2c5aef3e53108dad00730cf9c8d38924d07442b02350ab9089e7436b5e9d17875de0ad7ce2232b3b818f3c4092f1a9ea81a58db7c20f459bcb8222964fb88d4ebda71d6ecd86", @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts. [ 87.439322][ T1665] cfg80211: failed to load regulatory.db [ 87.610137][ T5808] cgroup: Unknown subsys name 'net' [ 87.849652][ T5808] cgroup: Unknown subsys name 'cpuset' [ 87.905098][ T5808] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.896717][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.152137][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.180429][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.192120][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.192940][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.194126][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.201138][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.215265][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.237754][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.247033][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.250117][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.251638][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.305238][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.322403][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.361702][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.362839][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.391582][ T5141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.407884][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.413738][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.424836][ T5141] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.428679][ T5141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.430745][ T5141] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.431982][ T5141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.433295][ T5141] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.479588][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.487297][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.622324][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 95.728062][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 95.852900][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 95.863990][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 95.943249][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 96.176790][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.178422][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.178851][ T5821] bridge_slave_0: entered allmulticast mode [ 96.181196][ T5821] bridge_slave_0: entered promiscuous mode [ 96.268917][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.269126][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.269361][ T5821] bridge_slave_1: entered allmulticast mode [ 96.272640][ T5821] bridge_slave_1: entered promiscuous mode [ 96.277486][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.277892][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.278162][ T5822] bridge_slave_0: entered allmulticast mode [ 96.282015][ T5822] bridge_slave_0: entered promiscuous mode [ 96.295926][ T5141] Bluetooth: hci0: command tx timeout [ 96.362279][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.362558][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.362732][ T5822] bridge_slave_1: entered allmulticast mode [ 96.368202][ T5822] bridge_slave_1: entered promiscuous mode [ 96.374907][ T5141] Bluetooth: hci1: command tx timeout [ 96.478209][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.478441][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.478615][ T5830] bridge_slave_0: entered allmulticast mode [ 96.480745][ T5830] bridge_slave_0: entered promiscuous mode [ 96.487291][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.487611][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.487891][ T5825] bridge_slave_0: entered allmulticast mode [ 96.491572][ T5825] bridge_slave_0: entered promiscuous mode [ 96.506231][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.525992][ T5141] Bluetooth: hci2: command tx timeout [ 96.581094][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.581468][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.581887][ T5830] bridge_slave_1: entered allmulticast mode [ 96.584822][ T5830] bridge_slave_1: entered promiscuous mode [ 96.588458][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.588802][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.589408][ T5825] bridge_slave_1: entered allmulticast mode [ 96.592967][ T5825] bridge_slave_1: entered promiscuous mode [ 96.601517][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.604779][ T5141] Bluetooth: hci4: command tx timeout [ 96.613040][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.613999][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.615948][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.616261][ T5831] bridge_slave_0: entered allmulticast mode [ 96.620497][ T5831] bridge_slave_0: entered promiscuous mode [ 96.694480][ T5141] Bluetooth: hci3: command tx timeout [ 96.712964][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.713422][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.713661][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.714045][ T5831] bridge_slave_1: entered allmulticast mode [ 96.718545][ T5831] bridge_slave_1: entered promiscuous mode [ 96.828648][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.836196][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.850706][ T5821] team0: Port device team_slave_0 added [ 96.895124][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.899135][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.902191][ T5821] team0: Port device team_slave_1 added [ 96.907124][ T5822] team0: Port device team_slave_0 added [ 96.919155][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.996678][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.018664][ T5822] team0: Port device team_slave_1 added [ 97.085812][ T5830] team0: Port device team_slave_0 added [ 97.106821][ T5825] team0: Port device team_slave_0 added [ 97.109140][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.109152][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.109168][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.159604][ T5830] team0: Port device team_slave_1 added [ 97.187700][ T5825] team0: Port device team_slave_1 added [ 97.189473][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.189488][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.189506][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.193898][ T5831] team0: Port device team_slave_0 added [ 97.269424][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.269437][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.269454][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.341918][ T5831] team0: Port device team_slave_1 added [ 97.360863][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.360875][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.360893][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.417128][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.417140][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.417157][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.436698][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.436723][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.436749][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.469985][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.470005][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.470030][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.482849][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.482887][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.482912][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.511573][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.511591][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.511617][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.580601][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.580619][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.580644][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.088317][ T5821] hsr_slave_0: entered promiscuous mode [ 98.089927][ T5821] hsr_slave_1: entered promiscuous mode [ 98.147524][ T5822] hsr_slave_0: entered promiscuous mode [ 98.148957][ T5822] hsr_slave_1: entered promiscuous mode [ 98.150272][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 98.150348][ T5822] Cannot create hsr debugfs directory [ 98.253015][ T5830] hsr_slave_0: entered promiscuous mode [ 98.258003][ T5830] hsr_slave_1: entered promiscuous mode [ 98.259950][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 98.259973][ T5830] Cannot create hsr debugfs directory [ 98.275644][ T5825] hsr_slave_0: entered promiscuous mode [ 98.277823][ T5825] hsr_slave_1: entered promiscuous mode [ 98.279558][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 98.279581][ T5825] Cannot create hsr debugfs directory [ 98.345632][ T5831] hsr_slave_0: entered promiscuous mode [ 98.347174][ T5831] hsr_slave_1: entered promiscuous mode [ 98.348346][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 98.348371][ T5831] Cannot create hsr debugfs directory [ 98.366269][ T5141] Bluetooth: hci0: command tx timeout [ 98.444635][ T5141] Bluetooth: hci1: command tx timeout [ 98.604793][ T5141] Bluetooth: hci2: command tx timeout [ 98.684673][ T5141] Bluetooth: hci4: command tx timeout [ 98.765382][ T5141] Bluetooth: hci3: command tx timeout [ 99.420022][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.468295][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.478612][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.519631][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.523429][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.560945][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.594065][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.643142][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.813929][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.861439][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.869618][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.899363][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.904652][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.940010][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.961771][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.011631][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.180639][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.221574][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.234679][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.271525][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.289607][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.329710][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.357133][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.402155][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.444885][ T5141] Bluetooth: hci0: command tx timeout [ 100.524980][ T5141] Bluetooth: hci1: command tx timeout [ 100.588617][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.630951][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.648511][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.679499][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.687454][ T5141] Bluetooth: hci2: command tx timeout [ 100.703819][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.731580][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.761241][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.765997][ T5141] Bluetooth: hci4: command tx timeout [ 100.792262][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.847123][ T5141] Bluetooth: hci3: command tx timeout [ 100.888360][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.047604][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.088818][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.101903][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.140092][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.158860][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.201180][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.227216][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.272288][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.288861][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.368026][ T4476] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.368215][ T4476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.387586][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.454809][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.455009][ T4182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.582383][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.643057][ T4476] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.643515][ T4476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.706485][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.730795][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.731086][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.879368][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.938410][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.996645][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.999514][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.098013][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.098157][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.226049][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.307045][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.307150][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.338026][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.411299][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.419210][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.525644][ T5141] Bluetooth: hci0: command tx timeout [ 102.582446][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.601213][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.604940][ T5141] Bluetooth: hci1: command tx timeout [ 102.690922][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.691079][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.766104][ T5141] Bluetooth: hci2: command tx timeout [ 102.793414][ T1037] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.793693][ T1037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.847057][ T5141] Bluetooth: hci4: command tx timeout [ 102.925905][ T5141] Bluetooth: hci3: command tx timeout [ 103.022495][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.337062][ T5821] veth0_vlan: entered promiscuous mode [ 103.463463][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.560147][ T5821] veth1_vlan: entered promiscuous mode [ 103.877074][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.993495][ T5821] veth0_macvtap: entered promiscuous mode [ 104.021939][ T5822] veth0_vlan: entered promiscuous mode [ 104.030306][ T5830] veth0_vlan: entered promiscuous mode [ 104.052501][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.073156][ T5821] veth1_macvtap: entered promiscuous mode [ 104.151119][ T5830] veth1_vlan: entered promiscuous mode [ 104.162591][ T5822] veth1_vlan: entered promiscuous mode [ 104.228952][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.275477][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.308924][ T5825] veth0_vlan: entered promiscuous mode [ 104.333541][ T4476] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.362856][ T4476] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.395946][ T4476] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.433112][ T4476] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.473872][ T5825] veth1_vlan: entered promiscuous mode [ 104.586832][ T5822] veth0_macvtap: entered promiscuous mode [ 104.648919][ T5830] veth0_macvtap: entered promiscuous mode [ 104.685378][ T5831] veth0_vlan: entered promiscuous mode [ 104.752674][ T5822] veth1_macvtap: entered promiscuous mode [ 104.865434][ T5830] veth1_macvtap: entered promiscuous mode [ 104.957282][ T5831] veth1_vlan: entered promiscuous mode [ 105.047864][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.096120][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.137037][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.149250][ T5825] veth0_macvtap: entered promiscuous mode [ 105.172482][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.190157][ T4476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.190180][ T4476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.262892][ T5825] veth1_macvtap: entered promiscuous mode [ 105.282946][ T4182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.312985][ T4182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.331876][ T4182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.368182][ T4182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.387126][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.391045][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.391066][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.421345][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.428858][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.548201][ T75] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.552991][ T5831] veth0_macvtap: entered promiscuous mode [ 105.618615][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.711111][ T5831] veth1_macvtap: entered promiscuous mode [ 105.978154][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.296162][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.312478][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.330326][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.379468][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.443873][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.534521][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.534629][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.664706][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.721101][ T5940] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.930730][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.930751][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.940871][ T4476] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.990090][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.090278][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.273508][ T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.361068][ T5950] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.453878][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.453900][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.742091][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.742114][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.151922][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.151944][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.405756][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.405780][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.551676][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.551700][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.989698][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.989721][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.396794][ T5929] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.615190][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 115.709311][ T5929] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 115.709346][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.709366][ T5929] usb 4-1: Product: syz [ 115.709531][ T5929] usb 4-1: Manufacturer: syz [ 115.709548][ T5929] usb 4-1: SerialNumber: syz [ 115.790485][ T5929] usb 4-1: config 0 descriptor?? [ 116.323993][ T5929] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 118.940345][ T5929] gspca_ov534_9: reg_w failed -110 [ 119.276016][ T5929] gspca_ov534_9: Unknown sensor 0000 [ 119.276132][ T5929] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 119.745308][ T5929] usb 4-1: USB disconnect, device number 2 [ 129.789128][ T6070] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 133.737777][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.737920][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.765298][ T6088] netlink: 'syz.3.38': attribute type 11 has an invalid length. [ 143.313697][ T6117] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20257 [ 143.314148][ T5896] IPVS: starting estimator thread 0... [ 144.456223][ T6116] IPVS: using max 7 ests per chain, 16800 per kthread [ 145.662706][ T5882] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 147.628627][ T5882] usb 3-1: Using ep0 maxpacket: 32 [ 147.633634][ T5882] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 147.633665][ T5882] usb 3-1: config 0 has no interface number 0 [ 147.633717][ T5882] usb 3-1: config 0 interface 184 has no altsetting 0 [ 147.640704][ T5882] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 147.640736][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.640755][ T5882] usb 3-1: Product: syz [ 147.640770][ T5882] usb 3-1: Manufacturer: syz [ 147.640783][ T5882] usb 3-1: SerialNumber: syz [ 147.681317][ T5882] usb 3-1: config 0 descriptor?? [ 148.355756][ T5882] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 148.370728][ T5882] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 149.072665][ T6136] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 149.112469][ T6137] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 150.725288][ T5141] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 150.818377][ T5141] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.454464][ T6141] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 151.551571][ T5882] usb 3-1: USB disconnect, device number 2 [ 153.224747][ T6132] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 153.904374][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 154.098709][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 154.100896][ T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 154.100917][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.198694][ T10] usb 2-1: config 0 descriptor?? [ 154.500394][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 154.620225][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 154.621699][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 154.621785][ T10] usb 2-1: media controller created [ 154.707017][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 154.843247][ T10] az6027: usb out operation failed. (-71) [ 154.851755][ T10] az6027: usb out operation failed. (-71) [ 154.851774][ T10] stb0899_attach: Driver disabled by Kconfig [ 154.851783][ T10] az6027: no front-end attached [ 154.851783][ T10] [ 154.852235][ T10] az6027: usb out operation failed. (-71) [ 154.852250][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 154.911825][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 154.953237][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 154.953266][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 155.011848][ T10] usb 2-1: USB disconnect, device number 2 [ 155.716215][ T1665] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 156.099818][ T6178] XFS (nbd3): no-recovery mounts must be read-only. [ 156.591500][ T1665] usb 1-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 156.591526][ T1665] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.644566][ T5882] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 156.777827][ T1665] usb 1-1: config 0 descriptor?? [ 156.816195][ T5882] usb 3-1: Using ep0 maxpacket: 32 [ 157.032071][ T5882] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 157.032094][ T5882] usb 3-1: config 0 has no interface number 0 [ 157.032123][ T5882] usb 3-1: config 0 interface 184 has no altsetting 0 [ 157.069386][ T5882] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 157.069417][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.069436][ T5882] usb 3-1: Product: syz [ 157.069450][ T5882] usb 3-1: Manufacturer: syz [ 157.069463][ T5882] usb 3-1: SerialNumber: syz [ 157.178819][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 157.510079][ T5882] usb 3-1: config 0 descriptor?? [ 157.694762][ T6184] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 158.204377][ T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 158.390723][ T10] usb 2-1: config 4 has an invalid interface number: 118 but max is 0 [ 158.390756][ T10] usb 2-1: config 4 has no interface number 0 [ 158.390793][ T10] usb 2-1: config 4 interface 118 has no altsetting 0 [ 158.392006][ T10] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b0.71 [ 158.392024][ T10] usb 2-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 158.392036][ T10] usb 2-1: Product: syz [ 158.761927][ T5882] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 158.761959][ T5882] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 158.796129][ T5882] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 158.796154][ T5882] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 158.796166][ T5882] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 158.796177][ T5882] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 158.796394][ T5882] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 158.816527][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 158.838695][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 158.846660][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 158.927955][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 158.932199][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 158.944680][ T1665] semitek 0003:1EA7:0907.0001: unknown main item tag 0x2 [ 158.944722][ T1665] semitek 0003:1EA7:0907.0001: unknown main item tag 0x2 [ 158.944746][ T1665] semitek 0003:1EA7:0907.0001: unknown main item tag 0x0 [ 158.944780][ T1665] semitek 0003:1EA7:0907.0001: unknown main item tag 0x0 [ 158.944803][ T1665] semitek 0003:1EA7:0907.0001: unknown main item tag 0x0 [ 158.944826][ T1665] semitek 0003:1EA7:0907.0001: unknown main item tag 0x0 [ 158.944850][ T1665] semitek 0003:1EA7:0907.0001: unknown main item tag 0x0 [ 158.944872][ T1665] semitek 0003:1EA7:0907.0001: unknown main item tag 0x0 [ 158.944895][ T1665] semitek 0003:1EA7:0907.0001: unknown main item tag 0x0 [ 158.944918][ T1665] semitek 0003:1EA7:0907.0001: unknown main item tag 0x0 [ 159.885190][ T1665] semitek 0003:1EA7:0907.0001: hidraw0: USB HID vff.ff Device [HID 1ea7:0907] on usb-dummy_hcd.0-1/input0 [ 159.903079][ T10] usb 2-1: USB disconnect, device number 3 [ 160.018449][ T32] usb 3-1: USB disconnect, device number 3 [ 161.805530][ T5141] Bluetooth: hci5: command tx timeout [ 161.943160][ T1665] usb 1-1: USB disconnect, device number 2 [ 162.861775][ T6220] fido_id[6220]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 162.904584][ T5824] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 163.144350][ T5824] usb 4-1: Using ep0 maxpacket: 32 [ 163.153722][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.153755][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.153795][ T5824] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 163.153818][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.227701][ T5824] usb 4-1: config 0 descriptor?? [ 163.247315][ T5824] hub 4-1:0.0: USB hub found [ 163.471641][ T5824] hub 4-1:0.0: 1 port detected [ 163.885265][ T5141] Bluetooth: hci5: command tx timeout [ 164.103726][ T5824] hub 4-1:0.0: activate --> -90 [ 165.569324][ T5824] usb 4-1-port1: config error [ 165.592180][ T5824] hub 4-1:0.0: hub_ext_port_status failed (err = -32) [ 165.592212][ T5824] usb 4-1-port1: connect-debounce failed [ 165.705450][ T1665] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 165.847687][ T5929] usb 4-1: USB disconnect, device number 3 [ 165.902273][ T1665] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.902311][ T1665] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.902335][ T1665] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 165.902380][ T1665] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 165.902403][ T1665] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.966764][ T5141] Bluetooth: hci5: command tx timeout [ 166.047838][ T1665] usb 1-1: config 0 descriptor?? [ 166.607451][ T1665] hid_parser_main: 471 callbacks suppressed [ 166.607482][ T1665] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 166.607513][ T1665] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 166.607539][ T1665] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 166.607564][ T1665] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 166.607589][ T1665] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 166.607615][ T1665] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 166.607649][ T1665] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 166.607674][ T1665] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 166.607699][ T1665] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 167.081537][ T2979] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.238525][ T1665] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 168.050174][ T5141] Bluetooth: hci5: command tx timeout [ 168.127868][ T1665] usb 1-1: USB disconnect, device number 3 [ 168.350861][ T6241] fido_id[6241]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 168.977590][ T2979] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.997249][ T5929] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 169.080256][ T6247] input: syz0 as /devices/virtual/input/input9 [ 169.198595][ T5929] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 169.198629][ T5929] usb 4-1: config 8 has an invalid descriptor of length 71, skipping remainder of the config [ 169.198650][ T5929] usb 4-1: config 8 has no interface number 0 [ 169.198702][ T5929] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 169.252248][ T5929] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 169.252282][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.252305][ T5929] usb 4-1: Product: syz [ 169.252320][ T5929] usb 4-1: Manufacturer: syz [ 169.252334][ T5929] usb 4-1: SerialNumber: syz [ 169.274648][ T1665] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 169.450584][ T1665] usb 1-1: Using ep0 maxpacket: 32 [ 169.455312][ T1665] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 169.455344][ T1665] usb 1-1: config 0 has no interface number 0 [ 169.455398][ T1665] usb 1-1: config 0 interface 184 has no altsetting 0 [ 169.496995][ T1665] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 169.497029][ T1665] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.497042][ T1665] usb 1-1: Product: syz [ 169.497051][ T1665] usb 1-1: Manufacturer: syz [ 169.497059][ T1665] usb 1-1: SerialNumber: syz [ 169.569415][ T1665] usb 1-1: config 0 descriptor?? [ 169.754314][ T5929] usb 4-1: USB disconnect, device number 4 [ 169.859498][ T2979] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.166176][ T6257] tipc: Can't bind to reserved service type 1 [ 171.023027][ T1665] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 171.023062][ T1665] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 171.023989][ T1665] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 171.024018][ T1665] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 171.024037][ T1665] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 171.024056][ T1665] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 171.024651][ T1665] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 171.296355][ T5929] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 171.448813][ T2979] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.474744][ T5929] usb 3-1: Using ep0 maxpacket: 32 [ 171.478269][ T5929] usb 3-1: unable to get BOS descriptor or descriptor too short [ 171.481602][ T5929] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.481643][ T5929] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 171.481657][ T5929] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 171.535480][ T5929] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 171.535514][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.535533][ T5929] usb 3-1: Product: syz [ 171.535547][ T5929] usb 3-1: Manufacturer: syz [ 171.535561][ T5929] usb 3-1: SerialNumber: syz [ 172.212162][ T5929] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 172.212321][ T5929] usb 3-1: MIDIStreaming interface descriptor not found [ 172.316957][ T5882] usb 1-1: USB disconnect, device number 4 [ 173.714221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 173.734224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 173.744261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 173.946480][ T6283] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 175.924234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 176.484229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 176.675677][ T6300] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 176.727957][ T6281] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 176.727986][ T6281] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 176.728001][ T6281] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 177.356380][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 177.364513][ T6307] netlink: 24 bytes leftover after parsing attributes in process `syz.2.100'. [ 178.002358][ T5929] usb 3-1: USB disconnect, device number 4 [ 178.354392][ T6101] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 178.515080][ T6101] usb 1-1: Using ep0 maxpacket: 32 [ 178.518851][ T6101] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 178.518884][ T6101] usb 1-1: config 0 has no interface number 0 [ 178.518932][ T6101] usb 1-1: config 0 interface 184 has no altsetting 0 [ 178.568760][ T6101] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 178.568794][ T6101] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.568814][ T6101] usb 1-1: Product: syz [ 178.568828][ T6101] usb 1-1: Manufacturer: syz [ 178.568840][ T6101] usb 1-1: SerialNumber: syz [ 178.949762][ T6186] chnl_net:caif_netlink_parms(): no params data found [ 178.978774][ T6101] usb 1-1: config 0 descriptor?? [ 179.662122][ T6101] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 179.662152][ T6101] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 179.864368][ T6101] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 179.864405][ T6101] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 179.864427][ T6101] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 179.864445][ T6101] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 179.866079][ T6101] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 180.047191][ T6328] netlink: 68 bytes leftover after parsing attributes in process `syz.1.107'. [ 181.017730][ T2979] bridge_slave_1: left allmulticast mode [ 181.017909][ T2979] bridge_slave_1: left promiscuous mode [ 181.438275][ T2979] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.451232][ T5929] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 181.648412][ T5824] usb 1-1: USB disconnect, device number 5 [ 182.181250][ T2979] bridge_slave_0: left allmulticast mode [ 182.181291][ T2979] bridge_slave_0: left promiscuous mode [ 182.399216][ T2979] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.276495][ T6347] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 183.663091][ T38] audit: type=1804 audit(2000000035.080:2): pid=6346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.110" name="/newroot/20/file0" dev="tmpfs" ino=118 res=1 errno=0 [ 184.467021][ T2979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.555396][ T2979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.645746][ T2979] bond0 (unregistering): Released all slaves [ 185.171655][ T6348] uprobe: syz.0.110:6348 failed to unregister, leaking uprobe [ 185.444430][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 186.567677][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 186.569615][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.569642][ T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 186.569710][ T10] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 186.569753][ T10] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 186.569798][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 186.569826][ T10] usb 3-1: config 1 interface 1 has no altsetting 0 [ 186.662747][ T6348] uprobe: syz.0.110:6348 failed to unregister, leaking uprobe [ 186.684551][ T10] usb 3-1: string descriptor 0 read error: -22 [ 186.684750][ T10] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 186.684777][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.839558][ T6186] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.831435][ T6186] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.834365][ T6186] bridge_slave_0: entered allmulticast mode [ 188.039347][ T6186] bridge_slave_0: entered promiscuous mode [ 188.493133][ T6371] vivid-006: kernel_thread() failed [ 188.698345][ T6186] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.698726][ T6186] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.699082][ T6186] bridge_slave_1: entered allmulticast mode [ 188.708849][ T6186] bridge_slave_1: entered promiscuous mode [ 189.478958][ T10] usb 3-1: 2:0: failed to get current value for ch 1 (-71) [ 189.644957][ T10] usb 3-1: Warning! Unlikely big volume step count (=5423), linear volume or wrong cval->res? [ 189.644987][ T10] usb 3-1: [2] FU [Speaker Playback Volume] ch = 1, val = -13410/-7987/1 [ 190.194352][ T1665] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 190.337818][ T10] usb 3-1: USB disconnect, device number 6 [ 190.384571][ T1665] usb 2-1: Using ep0 maxpacket: 32 [ 190.445852][ T1665] usb 2-1: unable to get BOS descriptor or descriptor too short [ 190.465530][ T1665] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.465623][ T1665] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 190.465657][ T1665] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 190.545927][ T1665] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 190.545961][ T1665] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.545982][ T1665] usb 2-1: Product: syz [ 190.545997][ T1665] usb 2-1: Manufacturer: syz [ 190.546091][ T1665] usb 2-1: SerialNumber: syz [ 194.794536][ T6414] misc userio: Invalid payload size [ 194.794864][ T6414] misc userio: No port type given on /dev/userio [ 195.241360][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.241465][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.278268][ T6186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.320443][ T1665] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 197.320479][ T1665] usb 2-1: MIDIStreaming interface descriptor not found [ 197.500343][ T6186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.634222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 200.422262][ T6186] team0: Port device team_slave_0 added [ 201.070363][ T6186] team0: Port device team_slave_1 added [ 201.285372][ T1665] usb 2-1: USB disconnect, device number 4 [ 201.353111][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 201.657139][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.946688][ T6453] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 202.566007][ T5918] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 202.931141][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.931166][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.931180][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.931209][ T5918] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.931224][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.963270][ T5918] usb 4-1: config 0 descriptor?? [ 205.439272][ T6463] misc userio: Invalid payload size [ 205.439459][ T6463] misc userio: No port type given on /dev/userio [ 205.622514][ T5918] usbhid 4-1:0.0: can't add hid device: -71 [ 205.622659][ T5918] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 205.706823][ T5918] usb 4-1: USB disconnect, device number 5 [ 206.999675][ T6468] netlink: 'syz.0.140': attribute type 2 has an invalid length. [ 206.999696][ T6468] netlink: 'syz.0.140': attribute type 2 has an invalid length. [ 207.020284][ T6186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.020301][ T6186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.020326][ T6186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.023829][ T6186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.023843][ T6186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.023867][ T6186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.393184][ T6485] Bluetooth: MGMT ver 1.23 [ 209.046905][ T2979] hsr_slave_0: left promiscuous mode [ 209.098041][ T2979] hsr_slave_1: left promiscuous mode [ 209.099142][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.099213][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.212907][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.212938][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.321206][ T5882] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 209.499235][ T5882] usb 3-1: Using ep0 maxpacket: 32 [ 209.525415][ T5882] usb 3-1: unable to get BOS descriptor or descriptor too short [ 209.551437][ T5882] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.568699][ T5882] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 209.568734][ T5882] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 209.622484][ T5882] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 209.623069][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.623092][ T5882] usb 3-1: Product: syz [ 209.623105][ T5882] usb 3-1: Manufacturer: syz [ 209.623119][ T5882] usb 3-1: SerialNumber: syz [ 210.746073][ T2979] veth1_macvtap: left promiscuous mode [ 210.880012][ T2979] veth0_macvtap: left promiscuous mode [ 210.880480][ T2979] veth1_vlan: left promiscuous mode [ 211.012001][ T2979] veth0_vlan: left promiscuous mode [ 214.798250][ T5882] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 214.798314][ T5882] usb 3-1: MIDIStreaming interface descriptor not found [ 215.004257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 215.144298][ T6516] misc userio: Invalid payload size [ 215.144672][ T6516] misc userio: No port type given on /dev/userio [ 216.447838][ T2979] team0 (unregistering): Port device team_slave_1 removed [ 216.511432][ T2979] team0 (unregistering): Port device team_slave_0 removed [ 217.443856][ T5486] 8021q: adding VLAN 0 to HW filter on device eth1 [ 217.788775][ T6186] hsr_slave_0: entered promiscuous mode [ 217.833724][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 217.833770][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 217.833797][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 217.833821][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 217.856310][ T6186] hsr_slave_1: entered promiscuous mode [ 217.858747][ T6186] debugfs: 'hsr0' already exists in 'hsr' [ 217.873191][ T6186] Cannot create hsr debugfs directory [ 218.229706][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.293228][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.306625][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.339610][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.356218][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.377100][ T5918] usb 3-1: USB disconnect, device number 7 [ 220.250259][ T6541] fuse: Unknown parameter 'group_id00000000000000000000' [ 220.616934][ T5827] Bluetooth: hci3: command tx timeout [ 222.687226][ T5827] Bluetooth: hci3: command tx timeout [ 224.772676][ T5827] Bluetooth: hci3: command tx timeout [ 225.114208][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 225.987429][ T5486] 8021q: adding VLAN 0 to HW filter on device eth2 [ 226.294377][ T5824] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 226.455487][ T5824] usb 1-1: Using ep0 maxpacket: 32 [ 226.464112][ T5824] usb 1-1: unable to get BOS descriptor or descriptor too short [ 226.477633][ T5824] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.477703][ T5824] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 226.477728][ T5824] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 226.522957][ T5824] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 226.522990][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.523021][ T5824] usb 1-1: Product: syz [ 226.523035][ T5824] usb 1-1: Manufacturer: syz [ 226.523050][ T5824] usb 1-1: SerialNumber: syz [ 226.662200][ T6589] fuse: Unknown parameter 'group_id00000000000000000000' [ 226.797811][ T6525] chnl_net:caif_netlink_parms(): no params data found [ 226.845045][ T5827] Bluetooth: hci3: command tx timeout [ 229.374456][ T6101] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 229.590823][ T6101] usb 4-1: Using ep0 maxpacket: 8 [ 229.808727][ T6101] usb 4-1: config 53 has an invalid interface number: 101 but max is 0 [ 229.808756][ T6101] usb 4-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 229.808779][ T6101] usb 4-1: config 53 has no interface number 0 [ 229.808836][ T6101] usb 4-1: config 53 interface 101 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 229.808865][ T6101] usb 4-1: config 53 interface 101 altsetting 0 endpoint 0x82 has invalid maxpacket 33307, setting to 1024 [ 229.809195][ T6101] usb 4-1: config 53 interface 101 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 229.809236][ T6101] usb 4-1: config 53 interface 101 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 229.809274][ T6101] usb 4-1: config 53 interface 101 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 229.939129][ T6101] usb 4-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=33.a1 [ 229.939154][ T6101] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.939186][ T6101] usb 4-1: Product: syz [ 229.939201][ T6101] usb 4-1: Manufacturer: syz [ 229.939216][ T6101] usb 4-1: SerialNumber: syz [ 230.013574][ T6605] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 230.114574][ T2979] bridge_slave_1: left allmulticast mode [ 230.114609][ T2979] bridge_slave_1: left promiscuous mode [ 230.115030][ T2979] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.599444][ T2979] bridge_slave_0: left allmulticast mode [ 230.671147][ T2979] bridge_slave_0: left promiscuous mode [ 230.751737][ T2979] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.334920][ T5827] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 232.051328][ T5824] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 232.051391][ T5824] usb 1-1: MIDIStreaming interface descriptor not found [ 232.771965][ T6619] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 233.014215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 233.154266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 233.271133][ T6101] kvaser_usb 4-1:53.101: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 233.271162][ T6101] kvaser_usb 4-1:53.101: error -EMSGSIZE: Failed to initialize card [ 233.271459][ T6101] kvaser_usb 4-1:53.101: probe with driver kvaser_usb failed with error -90 [ 233.622611][ T6101] usb 4-1: USB disconnect, device number 6 [ 233.707755][ T6554] syz.2.158 (6554) used greatest stack depth: 18816 bytes left [ 235.336553][ T5827] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 235.340610][ T5827] Bluetooth: hci0: Injecting HCI hardware error event [ 235.358390][ T5141] Bluetooth: hci0: hardware error 0x00 [ 235.611422][ T5824] usb 1-1: USB disconnect, device number 6 [ 235.783185][ T6643] fuse: Bad value for 'user_id' [ 235.783207][ T6643] fuse: Bad value for 'user_id' [ 235.939681][ T2979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.266277][ T2979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.421592][ T2979] bond0 (unregistering): Released all slaves [ 236.755792][ T5486] 8021q: adding VLAN 0 to HW filter on device eth3 [ 237.159896][ T2979] hsr_slave_0: left promiscuous mode [ 237.196327][ T2979] hsr_slave_1: left promiscuous mode [ 237.219094][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.283312][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.416231][ T1665] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 237.564647][ T5141] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 237.604472][ T1665] usb 4-1: Using ep0 maxpacket: 32 [ 237.606621][ T1665] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 237.606641][ T1665] usb 4-1: config 0 has no interface number 0 [ 237.606670][ T1665] usb 4-1: config 0 interface 184 has no altsetting 0 [ 237.609002][ T1665] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 237.609023][ T1665] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.609035][ T1665] usb 4-1: Product: syz [ 237.609043][ T1665] usb 4-1: Manufacturer: syz [ 237.609052][ T1665] usb 4-1: SerialNumber: syz [ 237.612896][ T1665] usb 4-1: config 0 descriptor?? [ 237.826817][ T2979] team0 (unregistering): Port device team_slave_1 removed [ 238.096690][ T2979] team0 (unregistering): Port device team_slave_0 removed [ 238.281758][ T1665] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 238.281788][ T1665] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 238.495706][ T1665] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 238.495730][ T1665] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 238.495742][ T1665] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 238.495753][ T1665] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 238.496005][ T1665] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 239.023548][ T6660] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 239.979672][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.979997][ T6525] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.980541][ T6525] bridge_slave_0: entered allmulticast mode [ 239.998169][ T6525] bridge_slave_0: entered promiscuous mode [ 240.005883][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.006218][ T6525] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.006525][ T6525] bridge_slave_1: entered allmulticast mode [ 240.041648][ T6525] bridge_slave_1: entered promiscuous mode [ 240.115855][ T10] usb 4-1: USB disconnect, device number 7 [ 240.334917][ T6525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.368779][ T6525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.620887][ T6680] fuse: Bad value for 'user_id' [ 240.620911][ T6680] fuse: Bad value for 'user_id' [ 240.798076][ T6525] team0: Port device team_slave_0 added [ 240.810368][ T6525] team0: Port device team_slave_1 added [ 240.977764][ T6665] Zero length message leads to an empty skb [ 241.238119][ T5883] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 241.424471][ T5883] usb 2-1: Using ep0 maxpacket: 32 [ 241.432990][ T5883] usb 2-1: unable to get BOS descriptor or descriptor too short [ 241.536028][ T5883] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.536073][ T5883] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 241.536087][ T5883] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 241.539407][ T5883] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 241.539427][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.539439][ T5883] usb 2-1: Product: syz [ 241.539448][ T5883] usb 2-1: Manufacturer: syz [ 241.539456][ T5883] usb 2-1: SerialNumber: syz [ 242.166138][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.166159][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.166186][ T6525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.222958][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.222976][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.223017][ T6525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.384116][ T6525] hsr_slave_0: entered promiscuous mode [ 244.470111][ T6525] hsr_slave_1: entered promiscuous mode [ 244.520698][ T6525] debugfs: 'hsr0' already exists in 'hsr' [ 244.520721][ T6525] Cannot create hsr debugfs directory [ 246.605464][ T6719] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 246.757986][ T5883] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 246.758041][ T5883] usb 2-1: MIDIStreaming interface descriptor not found [ 247.073459][ T5486] 8021q: adding VLAN 0 to HW filter on device eth4 [ 247.769308][ T5882] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 247.924281][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 247.926113][ T5882] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 247.926131][ T5882] usb 4-1: config 0 has no interface number 0 [ 247.926173][ T5882] usb 4-1: config 0 interface 184 has no altsetting 0 [ 247.944074][ T5882] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 247.944108][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.944126][ T5882] usb 4-1: Product: syz [ 247.944919][ T5882] usb 4-1: Manufacturer: syz [ 247.944936][ T5882] usb 4-1: SerialNumber: syz [ 247.966223][ T5882] usb 4-1: config 0 descriptor?? [ 248.595683][ T5882] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 248.595719][ T5882] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 249.233680][ T5882] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 249.233714][ T5882] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 249.233732][ T5882] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 249.233751][ T5882] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 249.234065][ T5882] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 249.526448][ T5883] usb 2-1: USB disconnect, device number 5 [ 250.560694][ T5824] usb 4-1: USB disconnect, device number 8 [ 250.607796][ T5883] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 250.758544][ T6525] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 250.776974][ T5883] usb 2-1: device descriptor read/64, error -71 [ 250.795496][ T6748] program syz.3.203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.896931][ T6525] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 250.915047][ T6525] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 251.080716][ T6525] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 251.116269][ T6525] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 251.156130][ T5883] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 251.296085][ T5883] usb 2-1: device descriptor read/64, error -71 [ 251.404872][ T5883] usb usb2-port1: attempt power cycle [ 251.469733][ T6761] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 251.615595][ T6525] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 252.133595][ T6525] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 252.183881][ T6525] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 252.614392][ T5883] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 252.687195][ T6774] misc userio: Invalid payload size [ 253.377270][ T5883] usb 2-1: device descriptor read/8, error -71 [ 253.821476][ T6780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.209'. [ 254.954508][ T32] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 255.124410][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 255.127375][ T32] usb 1-1: unable to get BOS descriptor or descriptor too short [ 255.796896][ T32] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.796958][ T32] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 255.796988][ T32] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 255.869340][ T32] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 255.869372][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.869392][ T32] usb 1-1: Product: syz [ 255.869406][ T32] usb 1-1: Manufacturer: syz [ 255.869416][ T32] usb 1-1: SerialNumber: syz [ 255.952846][ T6525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.244922][ T6525] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.539832][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.567025][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.995178][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.047524][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.529538][ T5882] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 257.684297][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 257.687108][ T5882] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 257.687136][ T5882] usb 2-1: config 0 has no interface number 0 [ 257.687184][ T5882] usb 2-1: config 0 interface 184 has no altsetting 0 [ 257.699309][ T5882] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 257.699342][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.699376][ T5882] usb 2-1: Product: syz [ 257.699391][ T5882] usb 2-1: Manufacturer: syz [ 257.699406][ T5882] usb 2-1: SerialNumber: syz [ 257.758630][ T5882] usb 2-1: config 0 descriptor?? [ 258.022256][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.041800][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.871983][ T5882] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 258.872018][ T5882] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 259.085043][ T5882] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 259.085080][ T5882] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 259.085100][ T5882] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 259.085449][ T5882] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 259.153493][ T5882] usb 2-1: USB disconnect, device number 10 [ 264.242878][ T32] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 264.242935][ T32] usb 1-1: MIDIStreaming interface descriptor not found [ 266.367482][ T10] usb 1-1: USB disconnect, device number 7 [ 268.766769][ T6199] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 269.014323][ T6199] usb 1-1: device descriptor read/64, error -71 [ 269.324563][ T6199] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 269.469145][ T6199] usb 1-1: device descriptor read/64, error -71 [ 269.584933][ T6199] usb usb1-port1: attempt power cycle [ 269.721121][ T6525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.991829][ T6199] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 271.005555][ T6199] usb 1-1: device descriptor read/8, error -71 [ 271.288413][ T6199] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 271.316975][ T6199] usb 1-1: device descriptor read/8, error -71 [ 271.358223][ T6853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.221'. [ 271.436275][ T6199] usb usb1-port1: unable to enumerate USB device [ 274.174931][ T5883] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 274.325237][ T5883] usb 4-1: Using ep0 maxpacket: 32 [ 274.333364][ T5883] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 274.333396][ T5883] usb 4-1: config 0 has no interface number 0 [ 274.333466][ T5883] usb 4-1: config 0 interface 184 has no altsetting 0 [ 274.368677][ T5883] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 274.368710][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.368732][ T5883] usb 4-1: Product: syz [ 274.368747][ T5883] usb 4-1: Manufacturer: syz [ 274.368762][ T5883] usb 4-1: SerialNumber: syz [ 274.398371][ T5883] usb 4-1: config 0 descriptor?? [ 274.835200][ T6525] veth0_vlan: entered promiscuous mode [ 275.774914][ T6525] veth1_vlan: entered promiscuous mode [ 276.138838][ T5883] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 276.138873][ T5883] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 276.367894][ T6525] veth0_macvtap: entered promiscuous mode [ 276.374455][ T5883] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 276.374490][ T5883] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 276.374511][ T5883] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 276.374936][ T5883] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 276.455116][ T5883] usb 4-1: USB disconnect, device number 9 [ 276.501096][ T6525] veth1_macvtap: entered promiscuous mode [ 276.624357][ T5896] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 276.736683][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.774430][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 276.777175][ T5896] usb 2-1: unable to get BOS descriptor or descriptor too short [ 276.778269][ T5896] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.778303][ T5896] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 276.778317][ T5896] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 276.780172][ T5896] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 276.780189][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.780201][ T5896] usb 2-1: Product: syz [ 276.780210][ T5896] usb 2-1: Manufacturer: syz [ 276.780218][ T5896] usb 2-1: SerialNumber: syz [ 276.961335][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.354642][ T4476] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.462259][ T4476] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.475595][ T4476] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.476062][ T4476] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.869377][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.896510][ T6916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.233'. [ 280.003570][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.095590][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.201887][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.221867][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.668431][ T5896] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 280.668496][ T5896] usb 2-1: MIDIStreaming interface descriptor not found [ 280.929578][ T5896] usb 2-1: USB disconnect, device number 11 [ 282.844920][ T5141] Bluetooth: hci5: command tx timeout [ 284.794476][ T6320] udevd[6320]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.924451][ T5141] Bluetooth: hci5: command tx timeout [ 286.191766][ T5896] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 287.106022][ T5141] Bluetooth: hci5: command tx timeout [ 287.194723][ T5896] usb 1-1: config 127 has an invalid interface number: 192 but max is 0 [ 287.194757][ T5896] usb 1-1: config 127 has no interface number 0 [ 287.225764][ T5896] usb 1-1: New USB device found, idVendor=093a, idProduct=2600, bcdDevice=1a.06 [ 287.225800][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.225823][ T5896] usb 1-1: Product: syz [ 287.225838][ T5896] usb 1-1: Manufacturer: syz [ 287.225854][ T5896] usb 1-1: SerialNumber: syz [ 287.503304][ T5896] gspca_main: pac7311-2.14.0 probing 093a:2600 [ 287.675928][ T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 287.899245][ T5896] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 287.899423][ T5896] pac7311 1-1:127.192: probe with driver pac7311 failed with error -71 [ 287.927185][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 287.976778][ T5896] usb 1-1: USB disconnect, device number 12 [ 288.012496][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 47, changing to 4 [ 288.012551][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 231, changing to 4 [ 288.784872][ T10] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 288.784909][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.784932][ T10] usb 3-1: Product: syz [ 288.784947][ T10] usb 3-1: Manufacturer: syz [ 288.784963][ T10] usb 3-1: SerialNumber: syz [ 289.164310][ T5141] Bluetooth: hci5: command tx timeout [ 289.269527][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 289.295481][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 289.318087][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 289.345436][ T10] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 289.351957][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 291.178827][ T6963] netlink: 16 bytes leftover after parsing attributes in process `syz.3.244'. [ 291.834749][ T5896] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 291.994927][ T5896] usb 1-1: Using ep0 maxpacket: 32 [ 292.011961][ T5896] usb 1-1: unable to get BOS descriptor or descriptor too short [ 292.029110][ T5896] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.029169][ T5896] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 292.029272][ T5896] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 292.039017][ T5896] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 292.039067][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.039106][ T5896] usb 1-1: Product: syz [ 292.039138][ T5896] usb 1-1: Manufacturer: syz [ 292.039171][ T5896] usb 1-1: SerialNumber: syz [ 292.119447][ T10] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 292.208384][ T10] usb 3-1: USB disconnect, device number 8 [ 292.276015][ T1037] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.247906][ T6218] udevd[6218]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.335815][ T5896] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 295.335874][ T5896] usb 1-1: MIDIStreaming interface descriptor not found [ 296.472086][ T5896] usb 1-1: USB disconnect, device number 13 [ 297.691202][ T7011] netlink: 16 bytes leftover after parsing attributes in process `syz.3.258'. [ 298.687988][ T1037] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.039747][ T1037] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.274939][ T5896] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 301.430536][ T6912] chnl_net:caif_netlink_parms(): no params data found [ 302.684543][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 302.690886][ T5896] usb 4-1: unable to get BOS descriptor or descriptor too short [ 302.711807][ T5896] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.711984][ T5896] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 302.712011][ T5896] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 302.769516][ T5896] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 302.769550][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.769573][ T5896] usb 4-1: Product: syz [ 302.769588][ T5896] usb 4-1: Manufacturer: syz [ 302.769604][ T5896] usb 4-1: SerialNumber: syz [ 305.539812][ T1037] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.289625][ T7080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.272'. [ 309.203643][ T5896] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 309.203699][ T5896] usb 4-1: MIDIStreaming interface descriptor not found [ 309.644354][ T5918] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 310.140908][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 311.366627][ T5918] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 311.371993][ T5918] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=4b.99 [ 311.372037][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.372125][ T5918] usb 2-1: Product: syz [ 311.372142][ T5918] usb 2-1: Manufacturer: syz [ 311.372157][ T5918] usb 2-1: SerialNumber: syz [ 312.668849][ T6912] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.669200][ T6912] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.669438][ T6912] bridge_slave_0: entered allmulticast mode [ 312.671634][ T6912] bridge_slave_0: entered promiscuous mode [ 312.687177][ T6912] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.688009][ T6912] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.693752][ T6912] bridge_slave_1: entered allmulticast mode [ 312.774986][ T6912] bridge_slave_1: entered promiscuous mode [ 313.021085][ T5918] usb 2-1: can't set config #8, error -71 [ 313.038858][ T5918] usb 2-1: USB disconnect, device number 12 [ 313.628976][ T6988] usb 4-1: USB disconnect, device number 10 [ 313.876885][ T6912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.954959][ T6912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.335641][ T7098] [U]  [ 315.325473][ T6912] team0: Port device team_slave_0 added [ 316.416677][ T6912] team0: Port device team_slave_1 added [ 316.578441][ T7122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.284'. [ 319.168974][ T7133] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.958066][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.958181][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.006731][ T1037] bridge_slave_1: left allmulticast mode [ 320.006769][ T1037] bridge_slave_1: left promiscuous mode [ 320.007084][ T1037] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.671715][ T1037] bridge_slave_0: left allmulticast mode [ 320.671742][ T1037] bridge_slave_0: left promiscuous mode [ 320.671941][ T1037] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.018609][ T7147] misc userio: No port type given on /dev/userio [ 322.045214][ T1037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.109216][ T1037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.127978][ T1037] bond0 (unregistering): Released all slaves [ 322.489141][ T7149] [U]  [ 322.596880][ T7155] fuse: Bad value for 'rootmode' [ 322.839956][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.839971][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.839988][ T6912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.840379][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.295'. [ 324.065609][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.065630][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.065657][ T6912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.647537][ T7170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.298'. [ 326.054525][ T7158] syz.1.293 (7158) used greatest stack depth: 18072 bytes left [ 326.121340][ T6912] hsr_slave_0: entered promiscuous mode [ 326.129022][ T6912] hsr_slave_1: entered promiscuous mode [ 326.138410][ T6912] debugfs: 'hsr0' already exists in 'hsr' [ 326.138430][ T6912] Cannot create hsr debugfs directory [ 326.755564][ T1037] hsr_slave_0: left promiscuous mode [ 326.794453][ T1037] hsr_slave_1: left promiscuous mode [ 326.795376][ T1037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.795396][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.835719][ T1037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.835744][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.923826][ T1037] veth1_macvtap: left promiscuous mode [ 326.923949][ T1037] veth0_macvtap: left promiscuous mode [ 326.925252][ T1037] veth1_vlan: left promiscuous mode [ 326.925464][ T1037] veth0_vlan: left promiscuous mode [ 327.284327][ T5918] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 327.339406][ T7192] [U]  [ 327.418685][ T7195] fuse: Bad value for 'rootmode' [ 327.454673][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 327.463690][ T5918] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 327.463723][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.463744][ T5918] usb 2-1: Product: syz [ 327.463759][ T5918] usb 2-1: Manufacturer: syz [ 327.463775][ T5918] usb 2-1: SerialNumber: syz [ 327.497032][ T5918] usb 2-1: config 0 descriptor?? [ 327.551528][ T5918] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 327.754982][ T5918] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 327.755184][ T5918] visor 2-1:0.0: probe with driver visor failed with error -5 [ 327.835309][ T1037] team0 (unregistering): Port device team_slave_1 removed [ 327.888340][ T1037] team0 (unregistering): Port device team_slave_0 removed [ 328.461166][ T5918] usb 2-1: USB disconnect, device number 13 [ 328.610119][ T7181] €: renamed from hsr0 (while UP) [ 330.160128][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 330.450197][ T7214] overlay: ./file0 is not a directory [ 331.698094][ T7225] ======================================================= [ 331.698094][ T7225] WARNING: The mand mount option has been deprecated and [ 331.698094][ T7225] and is ignored by this kernel. Remove the mand [ 331.698094][ T7225] option from the mount to silence this warning. [ 331.698094][ T7225] ======================================================= [ 332.637446][ T5141] Bluetooth: hci4: Unable to find connection with handle 0x00c8 [ 333.304825][ T7231] fuse: Unknown parameter 'use00000000000000000000' [ 337.691386][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'. [ 337.993152][ T7277] fuse: Unknown parameter 'use00000000000000000000' [ 338.265115][ T5486] 8021q: adding VLAN 0 to HW filter on device eth5 [ 340.013148][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.255828][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.259191][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.287162][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.299113][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 343.133654][ T7330] fuse: Unknown parameter 'use00000000000000000000' [ 343.157037][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'. [ 343.333927][ T5141] Bluetooth: hci3: command tx timeout [ 343.754432][ T1665] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 343.908383][ T1665] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.908414][ T1665] usb 1-1: config 0 has no interfaces? [ 343.908449][ T1665] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 343.908473][ T1665] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.038138][ T1665] usb 1-1: config 0 descriptor?? [ 345.404336][ T5141] Bluetooth: hci3: command tx timeout [ 346.668507][ T32] usb 1-1: USB disconnect, device number 14 [ 347.131005][ T7374] fuse: Unknown parameter 'user_i00000000000000000000' [ 347.575020][ T5141] Bluetooth: hci3: command tx timeout [ 347.958342][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.352'. [ 347.960387][ T7303] chnl_net:caif_netlink_parms(): no params data found [ 349.644224][ T5141] Bluetooth: hci3: command tx timeout [ 350.186959][ T13] bridge_slave_1: left allmulticast mode [ 350.187000][ T13] bridge_slave_1: left promiscuous mode [ 350.188221][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.368534][ T13] bridge_slave_0: left allmulticast mode [ 351.368572][ T13] bridge_slave_0: left promiscuous mode [ 351.368876][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.158633][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.358'. [ 353.259250][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.426632][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.545953][ T13] bond0 (unregistering): Released all slaves [ 353.577238][ T7369] syz.1.348 (7369) used greatest stack depth: 17200 bytes left [ 353.629291][ T7303] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.629696][ T7303] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.630045][ T7303] bridge_slave_0: entered allmulticast mode [ 353.681159][ T7303] bridge_slave_0: entered promiscuous mode [ 353.730762][ T7303] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.731194][ T7303] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.731554][ T7303] bridge_slave_1: entered allmulticast mode [ 353.770704][ T7303] bridge_slave_1: entered promiscuous mode [ 353.849149][ T7427] fuse: Unknown parameter 'user_i00000000000000000000' [ 354.915376][ T13] hsr_slave_0: left promiscuous mode [ 355.014191][ T7448] ubi16: attaching mtd0 [ 355.366679][ T7448] ubi16: scanning is finished [ 355.366726][ T7448] ubi16: empty MTD device detected [ 355.891267][ T13] hsr_slave_1: left promiscuous mode [ 355.892537][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.992009][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.976066][ T13] team0 (unregistering): Port device team_slave_1 removed [ 357.025071][ T13] team0 (unregistering): Port device team_slave_0 removed [ 357.274247][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'. [ 357.406083][ T7303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.508059][ T7303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.086691][ T7303] team0: Port device team_slave_0 added [ 359.121484][ T7303] team0: Port device team_slave_1 added [ 360.300931][ T7448] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4 [ 360.526985][ T7482] fuse: Unknown parameter 'user_i00000000000000000000' [ 360.685225][ T7303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.685244][ T7303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.685272][ T7303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.689421][ T7303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.689439][ T7303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.689469][ T7303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.438551][ T7303] hsr_slave_0: entered promiscuous mode [ 362.440097][ T7303] hsr_slave_1: entered promiscuous mode [ 362.445923][ T7303] debugfs: 'hsr0' already exists in 'hsr' [ 362.445948][ T7303] Cannot create hsr debugfs directory [ 362.459641][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 365.962457][ T7521] fuse: Unknown parameter 'user_id00000000000000000000' [ 367.495951][ T7303] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 367.595710][ T7303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 367.610059][ T7303] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 368.299404][ T7303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 368.317527][ T7303] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 368.413043][ T7303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 368.461596][ T7303] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 368.961442][ T7303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 368.961804][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'. [ 371.616164][ T7560] fuse: Unknown parameter 'user_id00000000000000000000' [ 372.046848][ T7566] netlink: 104 bytes leftover after parsing attributes in process `syz.1.400'. [ 373.403781][ T7574] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 373.751887][ T7303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.181022][ T7303] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.254011][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.258713][ T4182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.299229][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.300261][ T4182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.258390][ T7607] fuse: Unknown parameter 'user_id00000000000000000000' [ 381.947234][ T7618] could not allocate digest TFM handle nhpoly1305-neon [ 382.152119][ T7629] netlink: 104 bytes leftover after parsing attributes in process `syz.3.415'. [ 385.213607][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.213725][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.338019][ T7303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.378690][ T7303] veth0_vlan: entered promiscuous mode [ 387.501419][ T7685] netlink: 104 bytes leftover after parsing attributes in process `syz.0.430'. [ 388.681664][ T7686] netlink: 'syz.3.425': attribute type 4 has an invalid length. [ 389.574364][ T32] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 389.752311][ T7699] could not allocate digest TFM handle nhpoly1305-neon [ 389.792933][ T32] usb 3-1: config 127 has an invalid interface number: 192 but max is 0 [ 389.792964][ T32] usb 3-1: config 127 has no interface number 0 [ 389.813829][ T32] usb 3-1: New USB device found, idVendor=093a, idProduct=2600, bcdDevice=1a.06 [ 389.813864][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.813886][ T32] usb 3-1: Product: syz [ 389.813901][ T32] usb 3-1: Manufacturer: syz [ 389.813916][ T32] usb 3-1: SerialNumber: syz [ 390.097016][ T32] gspca_main: pac7311-2.14.0 probing 093a:2600 [ 390.475638][ T32] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 390.475748][ T32] pac7311 3-1:127.192: probe with driver pac7311 failed with error -71 [ 390.559653][ T32] usb 3-1: USB disconnect, device number 9 [ 391.861537][ T7722] ubi16: attaching mtd0 [ 391.866357][ T7722] ubi16: scanning is finished [ 392.131346][ T7722] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4 [ 392.232995][ T7303] veth1_vlan: entered promiscuous mode [ 392.405360][ T7303] veth0_macvtap: entered promiscuous mode [ 392.418500][ T7303] veth1_macvtap: entered promiscuous mode [ 392.467986][ T7303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.554274][ T5918] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 392.618210][ T7303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.575830][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 393.579949][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.579978][ T5918] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 393.580015][ T5918] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 393.580041][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.679176][ T5918] usb 3-1: config 0 descriptor?? [ 393.717357][ T4182] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.719267][ T4182] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.720527][ T4182] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.737389][ T7738] netlink: 104 bytes leftover after parsing attributes in process `syz.1.443'. [ 393.740672][ T4182] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.642465][ T6988] usb 3-1: USB disconnect, device number 10 [ 396.164957][ T4182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.164981][ T4182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.354622][ T7767] ubi16: attaching mtd0 [ 397.425805][ T7767] ubi16: scanning is finished [ 399.262000][ T7774] netlink: 'syz.1.454': attribute type 2 has an invalid length. [ 399.788401][ T7767] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4 [ 400.096004][ T6988] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 400.266576][ T6988] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.266607][ T6988] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 400.266647][ T6988] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 400.266672][ T6988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.327700][ T6988] usb 4-1: config 0 descriptor?? [ 400.554284][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 400.568947][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 400.668254][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 400.676422][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 400.677528][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 400.678256][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 400.719544][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 400.730819][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.730848][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 400.730888][ T10] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 400.730912][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.769586][ T10] usb 1-1: config 0 descriptor?? [ 402.315920][ T7801] netlink: 16 bytes leftover after parsing attributes in process `syz.1.461'. [ 402.844507][ T5141] Bluetooth: hci5: command tx timeout [ 403.297022][ T32] usb 4-1: USB disconnect, device number 11 [ 403.301249][ T5824] usb 1-1: USB disconnect, device number 15 [ 403.881657][ T7810] netlink: 48 bytes leftover after parsing attributes in process `syz.3.464'. [ 404.276303][ T6295] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.019852][ T5141] Bluetooth: hci5: command tx timeout [ 405.531336][ T7819] netlink: 'syz.1.469': attribute type 2 has an invalid length. [ 405.707261][ T7827] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 405.768364][ T6295] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.106841][ T1665] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 406.235551][ T7840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.476'. [ 406.493984][ T1665] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.494014][ T1665] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 406.516238][ T1665] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 406.516325][ T1665] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.777002][ T1665] usb 4-1: config 0 descriptor?? [ 407.092639][ T5141] Bluetooth: hci5: command tx timeout [ 407.491696][ T7846] netlink: 48 bytes leftover after parsing attributes in process `syz.0.478'. [ 407.566295][ T6295] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.172596][ T5141] Bluetooth: hci5: command tx timeout [ 409.537843][ T10] usb 4-1: USB disconnect, device number 12 [ 409.936205][ T7870] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 410.094961][ T6295] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.201499][ T7873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.489'. [ 410.503962][ T7782] chnl_net:caif_netlink_parms(): no params data found [ 411.015612][ T7879] netlink: 'syz.3.490': attribute type 2 has an invalid length. [ 411.370020][ T7887] netlink: 48 bytes leftover after parsing attributes in process `syz.1.492'. [ 412.285582][ T1665] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 412.438536][ T7782] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.439630][ T7782] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.439987][ T7782] bridge_slave_0: entered allmulticast mode [ 412.449153][ T7782] bridge_slave_0: entered promiscuous mode [ 412.703716][ T1665] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.705258][ T1665] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 412.705289][ T1665] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 412.705311][ T1665] usb 3-1: Manufacturer: syz [ 412.707815][ T7782] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.708225][ T7782] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.708532][ T7782] bridge_slave_1: entered allmulticast mode [ 412.873145][ T32] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 413.527225][ T32] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.527367][ T32] usb 4-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 413.527412][ T32] usb 4-1: config 0 interface 0 has no altsetting 0 [ 413.527462][ T32] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 413.527488][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.661484][ T1665] usb 3-1: config 0 descriptor?? [ 413.693007][ T7782] bridge_slave_1: entered promiscuous mode [ 413.717514][ T32] usb 4-1: config 0 descriptor?? [ 413.734286][ T1665] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 413.769477][ T32] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 413.972883][ T7782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.040206][ T7782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.507109][ T7916] netlink: 16 bytes leftover after parsing attributes in process `syz.0.504'. [ 414.581749][ T7921] netlink: 48 bytes leftover after parsing attributes in process `syz.1.503'. [ 415.330951][ T5918] usb 3-1: USB disconnect, device number 11 [ 415.454278][ T7782] team0: Port device team_slave_0 added [ 415.523166][ T6988] usb 4-1: USB disconnect, device number 13 [ 415.714387][ T7782] team0: Port device team_slave_1 added [ 415.786357][ T7923] could not allocate digest TFM handle nhpoly1305-neon [ 416.315371][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 416.798772][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 416.803707][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.803734][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 416.808111][ T10] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 416.808142][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.808163][ T10] usb 1-1: Product: syz [ 416.808179][ T10] usb 1-1: Manufacturer: syz [ 416.808203][ T10] usb 1-1: SerialNumber: syz [ 417.280956][ T10] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 417.280987][ T10] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 417.281010][ T10] usb 1-1: 1:1 : sample bitwidth 236 in over sample bytes 2 [ 417.281035][ T10] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 417.281569][ T10] usb 1-1: 0:2 : does not exist [ 417.471661][ T10] usb 1-1: USB disconnect, device number 16 [ 417.518721][ T6295] bridge_slave_1: left allmulticast mode [ 417.518761][ T6295] bridge_slave_1: left promiscuous mode [ 417.519072][ T6295] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.740808][ T7439] udevd[7439]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 417.789121][ T6295] bridge_slave_0: left allmulticast mode [ 417.789163][ T6295] bridge_slave_0: left promiscuous mode [ 417.789466][ T6295] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.018391][ T7955] netlink: 16 bytes leftover after parsing attributes in process `syz.0.516'. [ 419.574361][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 420.712094][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.712132][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.713650][ T10] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 420.713678][ T10] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 420.713699][ T10] usb 4-1: Manufacturer: syz [ 420.721082][ T10] usb 4-1: config 0 descriptor?? [ 421.166062][ T6295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.186661][ T10] usbhid 4-1:0.0: can't add hid device: -32 [ 421.186798][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 421.225089][ T6295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.266541][ T6295] bond0 (unregistering): Released all slaves [ 421.471866][ T7782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.471887][ T7782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.471917][ T7782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.495246][ T7782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.495264][ T7782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.495289][ T7782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.047510][ T7975] could not allocate digest TFM handle nhpoly1305-neon [ 423.163315][ T7782] hsr_slave_0: entered promiscuous mode [ 423.165939][ T7782] hsr_slave_1: entered promiscuous mode [ 423.168018][ T7782] debugfs: 'hsr0' already exists in 'hsr' [ 423.168047][ T7782] Cannot create hsr debugfs directory [ 427.179591][ T6101] usb 4-1: USB disconnect, device number 14 [ 428.688064][ T8001] netlink: 16 bytes leftover after parsing attributes in process `syz.1.529'. [ 429.561908][ T5141] Bluetooth: hci4: Unable to find connection with handle 0x00c8 [ 434.655194][ T8051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.541'. [ 435.804425][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 435.806587][ T5896] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 435.924336][ T6295] hsr_slave_0: left promiscuous mode [ 437.408047][ T6295] hsr_slave_1: left promiscuous mode [ 437.426784][ T6295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.426817][ T6295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.987943][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 438.001997][ T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 438.002028][ T10] usb 4-1: config 0 has no interface number 0 [ 438.002080][ T10] usb 4-1: config 0 interface 184 has no altsetting 0 [ 438.004808][ T5896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.004866][ T5896] usb 2-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 438.004896][ T5896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 438.004943][ T5896] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 438.004969][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.012782][ T5896] usb 2-1: config 0 descriptor?? [ 438.015809][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 438.015840][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.015860][ T10] usb 4-1: Product: syz [ 438.015874][ T10] usb 4-1: Manufacturer: syz [ 438.015888][ T10] usb 4-1: SerialNumber: syz [ 438.149377][ T6295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.149408][ T6295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.162011][ T10] usb 4-1: config 0 descriptor?? [ 438.173067][ T5896] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 438.266620][ T6295] veth1_macvtap: left promiscuous mode [ 438.266726][ T6295] veth0_macvtap: left promiscuous mode [ 438.267134][ T6295] veth1_vlan: left promiscuous mode [ 438.267327][ T6295] veth0_vlan: left promiscuous mode [ 439.272340][ T5918] usb 2-1: USB disconnect, device number 14 [ 439.408326][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -61 [ 439.408362][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 439.610661][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 439.610694][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 439.610713][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 439.610733][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 439.611051][ T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 439.642906][ T10] usb 4-1: USB disconnect, device number 15 [ 439.725167][ T6295] team0 (unregistering): Port device team_slave_1 removed [ 439.785257][ T6295] team0 (unregistering): Port device team_slave_0 removed [ 440.086724][ T5486] 8021q: adding VLAN 0 to HW filter on device eth5 [ 442.884021][ T8095] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 442.884379][ T8095] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 442.886274][ T8098] netlink: 48 bytes leftover after parsing attributes in process `syz.3.554'. [ 443.702840][ T8104] netlink: 104 bytes leftover after parsing attributes in process `syz.3.557'. [ 444.423330][ T8102] overlay: ./file0 is not a directory [ 445.112304][ T8117] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 445.414557][ T5918] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 445.978215][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.978517][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.012627][ T5918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.012689][ T5918] usb 1-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 446.012719][ T5918] usb 1-1: config 0 interface 0 has no altsetting 0 [ 446.012769][ T5918] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 446.012795][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.103148][ T5918] usb 1-1: config 0 descriptor?? [ 446.158457][ T5918] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 448.192845][ T8152] overlay: ./file0 is not a directory [ 448.856879][ T8159] netlink: 104 bytes leftover after parsing attributes in process `syz.3.569'. [ 448.867357][ T5918] usb 1-1: USB disconnect, device number 17 [ 451.106444][ T8185] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 451.156255][ T7782] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 451.281777][ T7782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 451.297737][ T7782] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 451.637301][ T7782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 451.643842][ T7782] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 451.776408][ T7782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 451.818536][ T7782] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 452.155811][ T7782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 453.154339][ T1665] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 453.231709][ T8217] overlay: ./file0 is not a directory [ 454.146748][ T1665] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 454.146780][ T1665] usb 4-1: config 0 has no interface number 0 [ 454.146829][ T1665] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 454.146857][ T1665] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 454.146886][ T1665] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 454.149238][ T1665] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 454.149265][ T1665] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 454.149284][ T1665] usb 4-1: Product: syz [ 454.149298][ T1665] usb 4-1: SerialNumber: syz [ 454.182948][ T1665] usb 4-1: config 0 descriptor?? [ 454.205065][ T1665] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 454.259380][ T1665] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input16 [ 454.619857][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 454.947517][ T7782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.973546][ T1665] usb 4-1: USB disconnect, device number 16 [ 455.205506][ T7782] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.424393][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.427013][ T1037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.606828][ T1665] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 455.691629][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.691829][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.602139][ T8262] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 456.602170][ T8262] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 458.674570][ T5918] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 458.834682][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 458.837417][ T5918] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 458.837447][ T5918] usb 2-1: config 0 has no interface number 0 [ 458.837506][ T5918] usb 2-1: config 0 interface 184 has no altsetting 0 [ 458.861947][ T5918] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 458.861985][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.862006][ T5918] usb 2-1: Product: syz [ 458.862022][ T5918] usb 2-1: Manufacturer: syz [ 458.862036][ T5918] usb 2-1: SerialNumber: syz [ 458.922098][ T5918] usb 2-1: config 0 descriptor?? [ 459.232599][ T7782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.177034][ T5918] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -61 [ 460.177070][ T5918] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 460.829301][ T5918] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 460.829335][ T5918] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 460.829356][ T5918] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 460.829374][ T5918] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 460.829719][ T5918] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 460.889132][ T5918] usb 2-1: USB disconnect, device number 15 [ 461.325657][ T8308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.597'. [ 461.352313][ T8309] netlink: 48 bytes leftover after parsing attributes in process `syz.3.598'. [ 462.645741][ T8321] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 462.645765][ T8321] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 462.701601][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 462.725499][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 462.750005][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 462.761701][ T32] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 462.820790][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 462.821677][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 462.970868][ T32] usb 1-1: config 127 has an invalid interface number: 192 but max is 0 [ 462.970903][ T32] usb 1-1: config 127 has no interface number 0 [ 463.029674][ T32] usb 1-1: New USB device found, idVendor=093a, idProduct=2600, bcdDevice=1a.06 [ 463.029707][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.029728][ T32] usb 1-1: Product: syz [ 463.029743][ T32] usb 1-1: Manufacturer: syz [ 463.029758][ T32] usb 1-1: SerialNumber: syz [ 463.464590][ T32] gspca_main: pac7311-2.14.0 probing 093a:2600 [ 463.475973][ T32] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 463.476257][ T32] pac7311 1-1:127.192: probe with driver pac7311 failed with error -71 [ 463.527683][ T32] usb 1-1: USB disconnect, device number 18 [ 465.109377][ T5827] Bluetooth: hci3: command tx timeout [ 466.762894][ T67] Bluetooth: hci5: Frame reassembly failed (-84) [ 466.824582][ T6295] Bluetooth: hci5: Frame reassembly failed (-84) [ 466.857316][ T156] Bluetooth: hci5: Frame reassembly failed (-84) [ 467.874513][ T5141] Bluetooth: hci3: command tx timeout [ 468.296548][ T8350] netlink: 'syz.3.610': attribute type 2 has an invalid length. [ 468.455785][ T8354] netlink: 48 bytes leftover after parsing attributes in process `syz.2.611'. [ 468.666082][ T8357] overlay: ./file0 is not a directory [ 468.687270][ T5827] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 469.317487][ T8359] binder: 8358:8359 ioctl c0306201 0 returned -14 [ 469.886671][ T5827] Bluetooth: hci3: command tx timeout [ 472.379794][ T5827] Bluetooth: hci3: command tx timeout [ 472.823908][ T32] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 473.572201][ T32] usb 4-1: device descriptor read/all, error -71 [ 474.492375][ T8386] netlink: 48 bytes leftover after parsing attributes in process `syz.3.622'. [ 474.681022][ T8394] binder: 8391:8394 ioctl c0306201 0 returned -14 [ 474.690124][ T8388] netlink: 'syz.2.623': attribute type 2 has an invalid length. [ 475.205438][ T8396] overlay: ./file0 is not a directory [ 476.137510][ T5827] Bluetooth: hci4: Unable to find connection with handle 0x00c8 [ 477.407440][ T6988] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 477.590766][ T6988] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.590798][ T6988] usb 2-1: config 0 has no interfaces? [ 477.590832][ T6988] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 477.590858][ T6988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.640232][ T6988] usb 2-1: config 0 descriptor?? [ 478.964279][ T5824] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 478.997006][ T32] usb 2-1: USB disconnect, device number 16 [ 479.234247][ T5824] usb 3-1: Using ep0 maxpacket: 32 [ 479.238044][ T5824] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 479.238088][ T5824] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 479.238126][ T5824] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 106, changing to 10 [ 479.238151][ T5824] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 42299, setting to 1024 [ 479.238178][ T5824] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 479.238204][ T5824] usb 3-1: config 0 interface 0 has no altsetting 0 [ 479.276150][ T5824] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 479.276181][ T5824] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 479.276201][ T5824] usb 3-1: Product: syz [ 479.276213][ T5824] usb 3-1: Manufacturer: syz [ 479.276227][ T5824] usb 3-1: SerialNumber: syz [ 479.293481][ T5824] usb 3-1: config 0 descriptor?? [ 479.296091][ T8422] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 479.328750][ T5824] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 479.353486][ T8427] binder: 8426:8427 ioctl c0306201 0 returned -14 [ 480.302110][ T8435] overlay: ./file0 is not a directory [ 480.306345][ T5824] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 480.616884][ T8322] chnl_net:caif_netlink_parms(): no params data found [ 480.686701][ T5824] usb 3-1: USB disconnect, device number 12 [ 480.742462][ T5824] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 481.750374][ T5827] Bluetooth: hci4: Unable to find connection with handle 0x00c8 [ 482.085716][ T8322] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.094828][ T8322] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.110589][ T8322] bridge_slave_0: entered allmulticast mode [ 482.128249][ T8322] bridge_slave_0: entered promiscuous mode [ 482.150209][ T8322] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.150843][ T8322] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.151616][ T8322] bridge_slave_1: entered allmulticast mode [ 482.189519][ T8322] bridge_slave_1: entered promiscuous mode [ 482.290901][ T8322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.331944][ T8322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.127963][ T8452] netlink: 'syz.1.639': attribute type 2 has an invalid length. [ 483.299258][ T6199] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 483.650272][ T6199] usb 1-1: Using ep0 maxpacket: 32 [ 483.873289][ T6199] usb 1-1: unable to get BOS descriptor or descriptor too short [ 483.894306][ T67] bridge_slave_1: left allmulticast mode [ 483.894333][ T67] bridge_slave_1: left promiscuous mode [ 483.894525][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.926564][ T6199] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.926632][ T6199] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 483.926657][ T6199] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 483.932154][ T6199] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 483.932185][ T6199] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.932203][ T6199] usb 1-1: Product: syz [ 483.932216][ T6199] usb 1-1: Manufacturer: syz [ 483.932229][ T6199] usb 1-1: SerialNumber: syz [ 484.125792][ T67] bridge_slave_0: left allmulticast mode [ 484.125823][ T67] bridge_slave_0: left promiscuous mode [ 484.127082][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.789709][ C0] [ 486.789724][ C0] ====================================================== [ 486.789733][ C0] WARNING: possible circular locking dependency detected [ 486.789743][ C0] syzkaller #0 Not tainted [ 486.789755][ C0] ------------------------------------------------------ [ 486.789763][ C0] kworker/u8:17/7958 is trying to acquire lock: [ 486.789777][ C0] ffff8880263eda20 (slock-AF_PHONET/1){+.+.}-{3:3}, at: __sk_receive_skb+0x1bf/0x9e0 [ 486.789845][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 486.789845][ C0] but task is already holding lock: [ 486.789851][ C0] ffff88803ccb2e60 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 486.789901][ C0] [ 486.789901][ C0] which lock already depends on the new lock. [ 486.789901][ C0] [ 486.789908][ C0] [ 486.789908][ C0] the existing dependency chain (in reverse order) is: [ 486.789916][ C0] [ 486.789916][ C0] -> #1 (slock-AF_PHONET){+...}-{3:3}: [ 486.789945][ C0] rt_spin_lock+0x83/0x400 [ 486.789970][ C0] __sk_receive_skb+0x1f1/0x9e0 [ 486.789996][ C0] phonet_rcv+0x781/0xc40 [ 486.790017][ C0] process_backlog+0x5e1/0xc60 [ 486.790045][ C0] __napi_poll+0xab/0x550 [ 486.790075][ C0] net_rx_action+0x696/0xe00 [ 486.790101][ C0] handle_softirqs+0x1de/0x6d0 [ 486.790132][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 486.790153][ C0] netif_rx+0xb9/0xf0 [ 486.790171][ C0] pn_send+0x62a/0x8e0 [ 486.790191][ C0] pn_skb_send+0x218/0x530 [ 486.790212][ C0] pipe_snd_status+0x1f1/0x320 [ 486.790235][ C0] pipe_do_rcv+0xf15/0x16a0 [ 486.790259][ C0] __sk_receive_skb+0x962/0x9e0 [ 486.790285][ C0] pep_do_rcv+0x685/0xaa0 [ 486.790308][ C0] __release_sock+0x2a9/0x3d0 [ 486.790328][ C0] release_sock+0x1be/0x290 [ 486.790354][ C0] pep_sock_accept+0xd47/0x11e0 [ 486.790375][ C0] pn_socket_accept+0xc1/0x310 [ 486.790393][ C0] do_accept+0x6ca/0x930 [ 486.790419][ C0] __sys_accept4+0x139/0x230 [ 486.790446][ C0] __x64_sys_accept4+0x9a/0xb0 [ 486.790472][ C0] do_syscall_64+0x15f/0xf80 [ 486.790500][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.790520][ C0] [ 486.790520][ C0] -> #0 (slock-AF_PHONET/1){+.+.}-{3:3}: [ 486.790556][ C0] __lock_acquire+0x15a5/0x2cf0 [ 486.790584][ C0] lock_acquire+0x106/0x350 [ 486.790609][ C0] rt_spin_lock_nested+0x81/0x3f0 [ 486.790630][ C0] __sk_receive_skb+0x1bf/0x9e0 [ 486.790656][ C0] pep_do_rcv+0x685/0xaa0 [ 486.790678][ C0] __sk_receive_skb+0x962/0x9e0 [ 486.790704][ C0] phonet_rcv+0x781/0xc40 [ 486.790725][ C0] process_backlog+0x5e1/0xc60 [ 486.790751][ C0] __napi_poll+0xab/0x550 [ 486.790774][ C0] net_rx_action+0x696/0xe00 [ 486.790799][ C0] handle_softirqs+0x1de/0x6d0 [ 486.790820][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 486.790841][ C0] netif_rx+0xb9/0xf0 [ 486.790859][ C0] batadv_bla_send_claim+0xa12/0xeb0 [ 486.790882][ C0] batadv_bla_periodic_work+0x629/0xae0 [ 486.790902][ C0] process_one_work+0x9a3/0x1710 [ 486.790922][ C0] worker_thread+0xba8/0x11e0 [ 486.790943][ C0] kthread+0x388/0x470 [ 486.790969][ C0] ret_from_fork+0x514/0xb70 [ 486.790990][ C0] ret_from_fork_asm+0x1a/0x30 [ 486.791015][ C0] [ 486.791015][ C0] other info that might help us debug this: [ 486.791015][ C0] [ 486.791023][ C0] Possible unsafe locking scenario: [ 486.791023][ C0] [ 486.791030][ C0] CPU0 CPU1 [ 486.791036][ C0] ---- ---- [ 486.791043][ C0] lock(slock-AF_PHONET); [ 486.791058][ C0] lock(slock-AF_PHONET/1); [ 486.791080][ C0] lock(slock-AF_PHONET); [ 486.791096][ C0] lock(slock-AF_PHONET/1); [ 486.791114][ C0] [ 486.791114][ C0] *** DEADLOCK *** [ 486.791114][ C0] [ 486.791128][ C0] 8 locks held by kworker/u8:17/7958: [ 486.791142][ C0] #0: ffff8880333c8938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 486.791194][ C0] #1: ffffc90004f77c40 ((work_completion)(&(&bat_priv->bla.work)->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 486.791247][ C0] #2: ffffffff8dfc81c0 (rcu_read_lock){....}-{1:3}, at: batadv_bla_periodic_work+0x333/0xae0 [ 486.791298][ C0] #3: ffffffff8dfc81c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 486.791349][ C0] #4: ffffffff8dfc81c0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60 [ 486.791403][ C0] #5: ffff88803ccb2e60 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 486.791461][ C0] #6: ffffffff8dfc81c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 486.791515][ C0] #7: ffff88803ccb2f18 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x781/0xc40 [ 486.791567][ C0] [ 486.791567][ C0] stack backtrace: [ 486.791580][ C0] CPU: 0 UID: 0 PID: 7958 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 486.791605][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 486.791620][ C0] Workqueue: bat_events batadv_bla_periodic_work [ 486.791644][ C0] Call Trace: [ 486.791652][ C0] [ 486.791662][ C0] dump_stack_lvl+0xe8/0x150 [ 486.791687][ C0] print_circular_bug+0x2e1/0x300 [ 486.791723][ C0] check_noncircular+0x12e/0x150 [ 486.791760][ C0] __lock_acquire+0x15a5/0x2cf0 [ 486.791791][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 486.791826][ C0] ? __sk_receive_skb+0x1bf/0x9e0 [ 486.791853][ C0] lock_acquire+0x106/0x350 [ 486.791880][ C0] ? __sk_receive_skb+0x1bf/0x9e0 [ 486.791909][ C0] ? sk_filter_trim_cap+0x8f1/0xce0 [ 486.791937][ C0] rt_spin_lock_nested+0x81/0x3f0 [ 486.791962][ C0] ? __sk_receive_skb+0x1bf/0x9e0 [ 486.791990][ C0] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 486.792012][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 486.792040][ C0] ? __pfx_rt_spin_lock_nested+0x10/0x10 [ 486.792067][ C0] ? rt_spin_lock+0x1e0/0x400 [ 486.792094][ C0] __sk_receive_skb+0x1bf/0x9e0 [ 486.792136][ C0] pep_do_rcv+0x685/0xaa0 [ 486.792163][ C0] ? __pfx_pep_do_rcv+0x10/0x10 [ 486.792192][ C0] ? __pfx_pep_do_rcv+0x10/0x10 [ 486.792218][ C0] ? phonet_rcv+0x781/0xc40 [ 486.792239][ C0] __sk_receive_skb+0x962/0x9e0 [ 486.792269][ C0] phonet_rcv+0x781/0xc40 [ 486.792291][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 486.792328][ C0] ? __pfx_phonet_rcv+0x10/0x10 [ 486.792354][ C0] ? process_backlog+0x271/0xc60 [ 486.792380][ C0] ? process_backlog+0x271/0xc60 [ 486.792406][ C0] ? __pfx_phonet_rcv+0x10/0x10 [ 486.792428][ C0] process_backlog+0x5e1/0xc60 [ 486.792466][ C0] __napi_poll+0xab/0x550 [ 486.792493][ C0] net_rx_action+0x696/0xe00 [ 486.792528][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 486.792556][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 486.792590][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 486.792625][ C0] ? enqueue_to_backlog+0x340/0xcb0 [ 486.792655][ C0] handle_softirqs+0x1de/0x6d0 [ 486.792683][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 486.792708][ C0] netif_rx+0xb9/0xf0 [ 486.792729][ C0] batadv_bla_send_claim+0xa12/0xeb0 [ 486.792758][ C0] ? __pfx_batadv_bla_send_claim+0x10/0x10 [ 486.792782][ C0] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 486.792805][ C0] ? batadv_bla_periodic_work+0x5f7/0xae0 [ 486.792830][ C0] batadv_bla_periodic_work+0x629/0xae0 [ 486.792855][ C0] ? batadv_bla_periodic_work+0x333/0xae0 [ 486.792881][ C0] ? __pfx_batadv_bla_periodic_work+0x10/0x10 [ 486.792909][ C0] ? process_one_work+0x8b7/0x1710 [ 486.792930][ C0] process_one_work+0x9a3/0x1710 [ 486.792961][ C0] ? __pfx_process_one_work+0x10/0x10 [ 486.792982][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 486.793014][ C0] worker_thread+0xba8/0x11e0 [ 486.793042][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 486.793075][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 486.793101][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 486.793137][ C0] kthread+0x388/0x470 [ 486.793167][ C0] ? __pfx_worker_thread+0x10/0x10 [ 486.793189][ C0] ? __pfx_kthread+0x10/0x10 [ 486.793218][ C0] ret_from_fork+0x514/0xb70 [ 486.793242][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 486.793265][ C0] ? __switch_to+0xc79/0x1410 [ 486.793299][ C0] ? __pfx_kthread+0x10/0x10 [ 486.793328][ C0] ret_from_fork_asm+0x1a/0x30 [ 486.793362][ C0] [ 488.102935][ T6199] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 488.102982][ T6199] usb 1-1: MIDIStreaming interface descriptor not found [ 488.244848][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.364573][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.408075][ T67] bond0 (unregistering): Released all slaves [ 488.633033][ T8322] team0: Port device team_slave_0 added [ 488.909674][ T6199] usb 1-1: USB disconnect, device number 19 [ 490.204306][ T67] hsr_slave_0: left promiscuous mode [ 490.244277][ T67] hsr_slave_1: left promiscuous mode [ 490.244835][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.284924][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.614912][ T67] team0 (unregistering): Port device team_slave_1 removed [ 490.635296][ T67] team0 (unregistering): Port device team_slave_0 removed [ 490.738002][ T5486] 8021q: adding VLAN 0 to HW filter on device eth5 [ 490.997819][ T5486] 8021q: adding VLAN 0 to HW filter on device eth6 [ 491.242197][ T5486] 8021q: adding VLAN 0 to HW filter on device eth7 [ 491.495988][ T5486] 8021q: adding VLAN 0 to HW filter on device eth8 [ 491.795613][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.976025][ T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.165999][ T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.375321][ T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.655820][ T67] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.877159][ T67] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.928079][ T5486] 8021q: adding VLAN 0 to HW filter on device eth9 [ 493.116220][ T67] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.335462][ T67] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.375782][ T5486] 8021q: adding VLAN 0 to HW filter on device eth10 [ 493.695223][ T67] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.736274][ T5486] 8021q: adding VLAN 0 to HW filter on device eth11 [ 493.936349][ T67] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.001660][ T5486] 8021q: adding VLAN 0 to HW filter on device eth12 [ 494.176837][ T67] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.415939][ T67] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.436466][ T5486] 8021q: adding VLAN 0 to HW filter on device eth13 [ 494.775354][ T67] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.815890][ T5486] 8021q: adding VLAN 0 to HW filter on device eth14 [ 495.015379][ T67] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.255611][ T67] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.277120][ T5486] 8021q: adding VLAN 0 to HW filter on device eth15 [ 495.476889][ T67] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.545914][ T5486] 8021q: adding VLAN 0 to HW filter on device eth16 [ 496.034633][ T67] bridge_slave_1: left allmulticast mode [ 496.034655][ T67] bridge_slave_1: left promiscuous mode [ 496.034790][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.094588][ T67] bridge_slave_0: left allmulticast mode [ 496.094612][ T67] bridge_slave_0: left promiscuous mode [ 496.094751][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.234363][ T67] bridge_slave_1: left allmulticast mode [ 496.234385][ T67] bridge_slave_1: left promiscuous mode [ 496.234507][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.294818][ T67] bridge_slave_0: left allmulticast mode [ 496.294839][ T67] bridge_slave_0: left promiscuous mode [ 496.294959][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.594399][ T67] bridge_slave_1: left allmulticast mode [ 496.594422][ T67] bridge_slave_1: left promiscuous mode [ 496.594552][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.654664][ T67] bridge_slave_0: left allmulticast mode [ 496.654687][ T67] bridge_slave_0: left promiscuous mode [ 496.654819][ T67] bridge0: port 1(bridge_slave_0) entered disabled state