last executing test programs: 4m42.746037758s ago: executing program 1 (id=2): syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4m42.543917137s ago: executing program 1 (id=6): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x6093, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r2, 0x0, 0xf3a, 0x0) tee(r1, r5, 0xf3a, 0x4) write$binfmt_elf64(r3, 0x0, 0x18c6) 4m39.811253641s ago: executing program 1 (id=8): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0) r2 = socket(0x1d, 0x2, 0x6) socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r2, 0x89a0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x220) open_tree(0xffffffffffffff9c, 0x0, 0x901) bind$can_j1939(r2, 0x0, 0x0) epoll_create(0x2) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) 4m24.102391987s ago: executing program 32 (id=8): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0) r2 = socket(0x1d, 0x2, 0x6) socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r2, 0x89a0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x220) open_tree(0xffffffffffffff9c, 0x0, 0x901) bind$can_j1939(r2, 0x0, 0x0) epoll_create(0x2) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) 20.544572064s ago: executing program 2 (id=383): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) 15.783213514s ago: executing program 0 (id=384): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xff59}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1, 0x4010, 0xffffffffffffffff, 0x10990000) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x3, 0x10a21a, 0x1c12f6}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000040)=0x3) ioctl$SNDCTL_DSP_RESET(r6, 0x5000, 0x0) 15.782720209s ago: executing program 2 (id=385): r0 = socket(0x6, 0x6, 0xfffffffe) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x4000000000009, 0xd, 0x1000000000424, 0x2, 0xffffffffffffffff, 0x800000000f423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x7ff, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x40000000, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 14.806527294s ago: executing program 3 (id=387): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xff59}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1, 0x4010, 0xffffffffffffffff, 0x10990000) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x3, 0x10a21a, 0x1c12f6}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000040)=0x3) 14.609708141s ago: executing program 0 (id=389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 12.560738044s ago: executing program 4 (id=390): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x721701, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 9.177445521s ago: executing program 4 (id=391): syz_usb_connect$uac1(0x3, 0x0, 0x0, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x1, 0x2, 0x1, 0x20, 0x2}, 0x0, 0x0, 0x4, [{0x3b, &(0x7f0000000180)=@string={0x3b, 0x3, "45d87b41b0e458a4d3e7ccaf39a8ce95f418fa61165e8187df5b1ab5ef5765cf955c0716a94f9726b913020a3d825065cf9911297dfa49e396"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x80c}}, {0xfd, &(0x7f0000000440)=@string={0xfd, 0x3, "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"}}, {0x1a, &(0x7f0000000380)=@string={0x1a, 0x3, "72051df386212c7638749bb290b73e4094caa787bd291e7e"}}]}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x6, 0x0, &(0x7f0000000200)='GPL\x00', 0x4, 0xc6, &(0x7f00000005c0)=""/198, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad", 0x5e}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b9", 0x43}, {&(0x7f0000001400)="9af390e2aadb61017e08249a2485ad46a590a90910858e1ceefc66db2ed8f32bf6be0e2f94e7e4db6454393a128402ed26580c7c5ebc85db639da17c927c23dbde640ab030889e8b61f26d270bc73b21c9ac8ba542e6b4ad2cd147059128ba038e4b9ebb20537f437b23b46ec790720e1fb74cef3c677e9978662a84cf2fcf73c73a5e763358496737af6284226bad34fb9083f87d853ab78c816cf32c90bd5c40ff6446214552d29745d34e0c4bfa623d00e5cbb393972371503122a0f44135db5654ace67cddb85a12df91fcf994fc680afe5d34268b23447589ef3f5383d152bf6dd104984297180f896ec8b1ba50952c5ab76e144f5636692d7cf17922c9b447ed6d59553ec6085e07413034875c1ae0947280e1a6f0d5e7f23b32e56ead8590d3269fdcb624cc870968b2f100bf3bc3d2ab105a5f61456d4969181fbd207b6f4d6d9ca0a1920daabec06d0c5e276d18f2571e88373dd41af9080d72aa88b10f8900b48acb61a61007dd4dd0e9240af5382a26f68bd706a83d8df76a4a5d02b39d07f97c4f86dad9e14eb957cc4be52b027a462262589929e3d035188dd9f0561e3ba2de6bafe743d9ae397e9aa423644fba8b2d6425ac1cd78c76e52e04d3a29e74075625fb5e674bab02843991ce804e0d04961f2978f3749c5ad83f355ae5da936fd6e0178d2bd12aacbe0205aa9a15579fd61d738f8d36412e814ba500edaf28ea68b0e96fb1839acf8416d8f5df7fad3b663f68e2ee5784fd01c7021130a490e629b1348acf3479e0392ecabbeeb18ec421c26e76f6f5c480e7decc85a0583a56180f199d26090b10ee5057ec4c1e04be948a5960acda014d646cf91bfdfb9d327f8ab545f8b41e8dbab94f195b189a8642a6b95e0ceb36b640fbdfe21925cc110bd2ef2c3fe24f12f95771b60e2ffbc47e58b2237b5574cadc32aab0f0db3202e4adc44a0651ef97703957857cfb6022578c97802f486bd7f48129f0c120700d0b70e048618a9f1de9f34dbb1f92dadc86f09e6288eb1bdbd1f700cc2df781654dfd57d9da779607080d3bc6dede5818aa8d6c99fa1ffdbb6a1a43040fe1379cf2a8b4b862db428c29e388a6e6b863bc818c2139a0d4238f10baf22f498b6629181f997ac280547e92fe300d0f8dd8b6724df5aa14be73cd630b808a29bfb52707b8db7d0065bd753b3773f8df58c74ea56f4582caa2fa8532b8049fd9ba775afc5b92b767ed0b35d4c086d9af6f7b7ed96f5f9d3734e703fc683fe0ed82b7763c67734067759e27b60036a3b4c53526716c175d75a9fa6ed019d3e1047bcb9c6510665de23cc2802804a0c3a347faba392282df430e5e6141f9eb660f7cb0eaedb832a7880c953bc0188c1f28eb466799e2768886ef81096847f50159278b572b0cca7744d6a572a81ddd2bcea73da3c8a59680bcaaadaf95e1fe91e41a8036835975b072a9587c560e3da854c96c64011755d08fef5228bb2db62a445bc0b9e17dea88854cd6a7c8a288727d5690fc4941978dee5eda2dbdc85915e7a2fdae978adb217b3f6b31cf69b51b9f805f8b447a4868b442933fc0e03860a7084230ff8fdff70665717f9c0bade31f87f5de99643e800feceb0dfdd6d1b67d4056a52f0efa2ed2b1142132c6242d917b46d939aade6a362bf586058385d7fcef1b4e358a093d6781b9e9bf280520ff083a6026bf701237e3", 0x4bb}], 0x3}}], 0x1, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9.055215982s ago: executing program 0 (id=392): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) close_range(r2, r1, 0x2) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) close(0xffffffffffffffff) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r5, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) socket$kcm(0x10, 0x7, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r6, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) 8.907787877s ago: executing program 3 (id=393): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) close_range(r2, r1, 0x2) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) close(0xffffffffffffffff) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r5, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x442a, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) socket$kcm(0x10, 0x7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r8, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) 6.908346221s ago: executing program 0 (id=394): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xff59}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000380)={0x800, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {0x4}, {}, {0xfffffffe}, {}, 0x0, 0x0, 0x80000000, 0x0, 0x1, 0x4, 0x8, 0x3, 0x3, 0x41, 0x5, 0x40003, 0x53, 0x0, 0x1, 0xc}) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1, 0x4010, 0xffffffffffffffff, 0x10990000) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000040)=0x3) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) 6.865386823s ago: executing program 4 (id=395): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) 6.81174327s ago: executing program 3 (id=396): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x474283, 0x0, 0x14}, 0x20) 6.212635451s ago: executing program 4 (id=397): r0 = syz_open_dev$usbfs(0x0, 0x75, 0x109301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)={0x893d, 0x2, [{0x1, 0x1}, {0x8, 0x1}]}) 6.155840735s ago: executing program 2 (id=398): socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) mkdir(0x0, 0x22) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa9}}, &(0x7f0000000480)='GPL\x00'}, 0x90) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) keyctl$dh_compute(0x17, &(0x7f0000000700), &(0x7f0000000780), 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={'blake2s-128-generic\x00'}, &(0x7f0000000800)="16488a99a96b2b2862ca51fd34fbe6bb6cc4828fa5258d60c7c0b7ed804474b8237f458e0547090878c78ee564f9019c8cc77517486bffae55160b769cd9b44d061db1177f05ae87948702105448de8e102c34bfa82c4a81126a13dff8f69c5c01d9e59e499f410de14a1bcb18ee20796bbdf082da634deead0ea8c67eed3dfff019a4d2", 0x84}) fsmount(r3, 0x0, 0xc) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADV_PARAM={{0x79}, 0xce}}}, 0x7) 5.795919014s ago: executing program 3 (id=399): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x721701, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xfffffffffffffe5f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 5.709300932s ago: executing program 4 (id=400): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x721701, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 4.515361811s ago: executing program 2 (id=401): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800"], 0x50) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) setsockopt$inet_mreqn(r5, 0x0, 0x20, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[]) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) 4.434899252s ago: executing program 0 (id=402): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.556338658s ago: executing program 2 (id=403): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$sndpcmp(&(0x7f0000000380), 0xf, 0x1ef403) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x6}, 0x1c) sendto$inet6(r4, &(0x7f0000000300)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) 1.538319425s ago: executing program 4 (id=404): syz_usb_connect$uac1(0x3, 0x0, 0x0, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x1, 0x2, 0x1, 0x20, 0x2}, 0x0, 0x0, 0x4, [{0x3b, &(0x7f0000000180)=@string={0x3b, 0x3, "45d87b41b0e458a4d3e7ccaf39a8ce95f418fa61165e8187df5b1ab5ef5765cf955c0716a94f9726b913020a3d825065cf9911297dfa49e396"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x80c}}, {0xfd, &(0x7f0000000440)=@string={0xfd, 0x3, "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"}}, {0x1a, &(0x7f0000000380)=@string={0x1a, 0x3, "72051df386212c7638749bb290b73e4094caa787bd291e7e"}}]}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x6, 0x0, &(0x7f0000000200)='GPL\x00', 0x4, 0xc6, &(0x7f00000005c0)=""/198, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad", 0x5e}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b9", 0x43}, {&(0x7f0000001400)="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", 0x4bb}], 0x3}}], 0x1, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.515765138s ago: executing program 3 (id=405): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0xe112, 0x0, 0x0) 1.086827629s ago: executing program 0 (id=406): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 39.398319ms ago: executing program 2 (id=407): r0 = socket(0x6, 0x6, 0xfffffffe) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 0s ago: executing program 3 (id=408): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x474283, 0x0, 0x14}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.211' (ED25519) to the list of known hosts. [ 88.154554][ T5786] cgroup: Unknown subsys name 'net' [ 88.395906][ T5786] cgroup: Unknown subsys name 'cpuset' [ 88.450664][ T5786] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.402044][ T5786] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.156449][ T44] cfg80211: failed to load regulatory.db [ 93.393324][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.395258][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.400171][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.402150][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.403231][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.473158][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.476879][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.485855][ T5117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.490828][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.511208][ T5117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.513744][ T5117] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.514231][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.516710][ T5117] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.517551][ T5117] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.518673][ T5117] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.520591][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.521503][ T5117] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.546633][ T5117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.562555][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.585613][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.587007][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.677718][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.683190][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.701596][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.703095][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.629364][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 94.644694][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 94.655022][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 95.001537][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 95.088040][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 95.511777][ T5809] Bluetooth: hci0: command tx timeout [ 95.590146][ T61] Bluetooth: hci3: command tx timeout [ 95.590301][ T5809] Bluetooth: hci2: command tx timeout [ 95.751532][ T5809] Bluetooth: hci1: command tx timeout [ 95.751548][ T61] Bluetooth: hci4: command tx timeout [ 95.861290][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.861398][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.861866][ T5803] bridge_slave_0: entered allmulticast mode [ 95.864006][ T5803] bridge_slave_0: entered promiscuous mode [ 95.887100][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.887285][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.887660][ T5799] bridge_slave_0: entered allmulticast mode [ 95.892940][ T5799] bridge_slave_0: entered promiscuous mode [ 95.899041][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.899193][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.899406][ T5804] bridge_slave_0: entered allmulticast mode [ 95.903554][ T5804] bridge_slave_0: entered promiscuous mode [ 95.934490][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.934646][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.934847][ T5803] bridge_slave_1: entered allmulticast mode [ 95.938514][ T5803] bridge_slave_1: entered promiscuous mode [ 95.945535][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.945690][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.945921][ T5799] bridge_slave_1: entered allmulticast mode [ 95.949642][ T5799] bridge_slave_1: entered promiscuous mode [ 95.952543][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.952694][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.954855][ T5804] bridge_slave_1: entered allmulticast mode [ 95.958364][ T5804] bridge_slave_1: entered promiscuous mode [ 96.561466][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.561611][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.561827][ T5801] bridge_slave_0: entered allmulticast mode [ 96.563963][ T5801] bridge_slave_0: entered promiscuous mode [ 96.674801][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.678197][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.684104][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.684390][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.684547][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.684749][ T5801] bridge_slave_1: entered allmulticast mode [ 96.687910][ T5801] bridge_slave_1: entered promiscuous mode [ 96.783964][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.786758][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.789640][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.912267][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.912450][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.912601][ T5810] bridge_slave_0: entered allmulticast mode [ 96.914761][ T5810] bridge_slave_0: entered promiscuous mode [ 97.501440][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.501576][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.501782][ T5810] bridge_slave_1: entered allmulticast mode [ 97.503977][ T5810] bridge_slave_1: entered promiscuous mode [ 97.590238][ T5809] Bluetooth: hci0: command tx timeout [ 97.670120][ T61] Bluetooth: hci3: command tx timeout [ 97.670383][ T5809] Bluetooth: hci2: command tx timeout [ 97.734770][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.812684][ T5803] team0: Port device team_slave_0 added [ 97.815113][ T5799] team0: Port device team_slave_0 added [ 97.818632][ T5804] team0: Port device team_slave_0 added [ 97.824507][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.830425][ T5809] Bluetooth: hci1: command tx timeout [ 97.830459][ T5809] Bluetooth: hci4: command tx timeout [ 97.902975][ T5803] team0: Port device team_slave_1 added [ 97.905146][ T5799] team0: Port device team_slave_1 added [ 97.907255][ T5804] team0: Port device team_slave_1 added [ 97.994079][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.296070][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.673297][ T5801] team0: Port device team_slave_0 added [ 98.771905][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.771919][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.771937][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.774574][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.774598][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.774625][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.776146][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.776160][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.776186][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.778640][ T5801] team0: Port device team_slave_1 added [ 98.938601][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.938620][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.938647][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.943678][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.943697][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.943728][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.945805][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.945821][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.945852][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.113694][ T5810] team0: Port device team_slave_0 added [ 99.213108][ T5810] team0: Port device team_slave_1 added [ 99.228518][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.228536][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.228563][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.324600][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.324614][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.324633][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.588376][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.588395][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.588414][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.670105][ T61] Bluetooth: hci0: command tx timeout [ 99.751561][ T61] Bluetooth: hci2: command tx timeout [ 99.751599][ T61] Bluetooth: hci3: command tx timeout [ 99.910094][ T5809] Bluetooth: hci4: command tx timeout [ 99.910131][ T5809] Bluetooth: hci1: command tx timeout [ 99.953867][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.953882][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.953901][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.963205][ T5803] hsr_slave_0: entered promiscuous mode [ 99.965193][ T5803] hsr_slave_1: entered promiscuous mode [ 99.980394][ T5799] hsr_slave_0: entered promiscuous mode [ 99.982128][ T5799] hsr_slave_1: entered promiscuous mode [ 99.983590][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 99.983736][ T5799] Cannot create hsr debugfs directory [ 100.002968][ T5804] hsr_slave_0: entered promiscuous mode [ 100.004637][ T5804] hsr_slave_1: entered promiscuous mode [ 100.005845][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 100.005873][ T5804] Cannot create hsr debugfs directory [ 100.398599][ T5801] hsr_slave_0: entered promiscuous mode [ 100.399595][ T5801] hsr_slave_1: entered promiscuous mode [ 100.403729][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 100.403760][ T5801] Cannot create hsr debugfs directory [ 100.987552][ T5810] hsr_slave_0: entered promiscuous mode [ 100.988776][ T5810] hsr_slave_1: entered promiscuous mode [ 100.989481][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 100.989504][ T5810] Cannot create hsr debugfs directory [ 101.750210][ T61] Bluetooth: hci0: command tx timeout [ 101.830077][ T61] Bluetooth: hci3: command tx timeout [ 101.830109][ T61] Bluetooth: hci2: command tx timeout [ 101.991249][ T5809] Bluetooth: hci1: command tx timeout [ 101.991283][ T5809] Bluetooth: hci4: command tx timeout [ 102.058329][ T5803] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.098264][ T5803] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.134978][ T5803] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.189833][ T5803] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.309718][ T5799] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.358466][ T5799] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.397191][ T5799] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.435100][ T5799] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.550490][ T5804] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.589146][ T5804] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.616641][ T5804] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.674893][ T5804] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.806094][ T5801] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.860725][ T5801] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.911026][ T5801] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.975960][ T5801] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.124944][ T5810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.170904][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.174726][ T5810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.229551][ T5810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.273435][ T5810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.373965][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.420760][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.425298][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.425842][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.478856][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.479018][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.543060][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.580539][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.597792][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.597963][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.639076][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.639277][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.694806][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.725297][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.735566][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.735825][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.779551][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.779755][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.862333][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.883440][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.924168][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.924287][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.980969][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.981116][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.063402][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.098065][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.110246][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.165204][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.165320][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.283774][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.466082][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.782534][ T5799] veth0_vlan: entered promiscuous mode [ 104.892994][ T5799] veth1_vlan: entered promiscuous mode [ 104.914457][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.089214][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.104187][ T5799] veth0_macvtap: entered promiscuous mode [ 105.141202][ T5799] veth1_macvtap: entered promiscuous mode [ 105.161922][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.204093][ T5804] veth0_vlan: entered promiscuous mode [ 105.235014][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.267834][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.277994][ T5804] veth1_vlan: entered promiscuous mode [ 105.294413][ T5803] veth0_vlan: entered promiscuous mode [ 105.326818][ T3596] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.341275][ T3596] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.347365][ T3596] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.367689][ T3596] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.368482][ T5803] veth1_vlan: entered promiscuous mode [ 105.389181][ T5801] veth0_vlan: entered promiscuous mode [ 105.504935][ T5801] veth1_vlan: entered promiscuous mode [ 105.506500][ T5810] veth0_vlan: entered promiscuous mode [ 105.617239][ T5810] veth1_vlan: entered promiscuous mode [ 105.629387][ T5804] veth0_macvtap: entered promiscuous mode [ 105.693896][ T5804] veth1_macvtap: entered promiscuous mode [ 105.698386][ T5803] veth0_macvtap: entered promiscuous mode [ 105.718194][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.718215][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.757356][ T5803] veth1_macvtap: entered promiscuous mode [ 105.825392][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.825414][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.828398][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.829017][ T5801] veth0_macvtap: entered promiscuous mode [ 105.892720][ T5801] veth1_macvtap: entered promiscuous mode [ 105.897476][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.903997][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.932679][ T5810] veth0_macvtap: entered promiscuous mode [ 105.954552][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.954646][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.957611][ T5810] veth1_macvtap: entered promiscuous mode [ 105.964872][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.976620][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.996871][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.015284][ T68] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.035197][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.035723][ T68] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.103929][ T68] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.111688][ T68] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.140253][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.233057][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.329588][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.347560][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.359099][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.393834][ T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.424334][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.511841][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.572598][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.592638][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.592659][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.593989][ T1100] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.612642][ T1100] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.836004][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.836034][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.985110][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.985132][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.426612][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.426635][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.734799][ T5921] usb usb7: usbfs: process 5921 (syz.3.4) did not claim interface 0 before use [ 108.063037][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.063059][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.217687][ T3550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.217708][ T3550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.417249][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.417270][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.582927][ T3550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.582951][ T3550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.629943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.871501][ T5789] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.210035][ T5789] usb 5-1: Using ep0 maxpacket: 16 [ 118.228406][ T5789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.228439][ T5789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.228473][ T5789] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 118.228490][ T5789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.521196][ T5789] usb 5-1: config 0 descriptor?? [ 119.517767][ T5789] usbhid 5-1:0.0: can't add hid device: -71 [ 119.517933][ T5789] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 120.754930][ T5789] usb 5-1: USB disconnect, device number 2 [ 120.803015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.840025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.749942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.099965][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.100463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.750353][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 126.778330][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 126.788562][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 126.809796][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 126.823988][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 129.442466][ T5809] Bluetooth: hci5: command tx timeout [ 130.449912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.449964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.450051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.450129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.510035][ T5809] Bluetooth: hci5: command tx timeout [ 131.682577][ T6026] chnl_net:caif_netlink_parms(): no params data found [ 131.730273][ T5789] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 133.053681][ T5789] usb 5-1: Using ep0 maxpacket: 32 [ 133.059626][ T5789] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.059652][ T5789] usb 5-1: config 0 has no interface number 0 [ 133.590141][ T5809] Bluetooth: hci5: command tx timeout [ 133.608617][ T5789] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 133.608648][ T5789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.608670][ T5789] usb 5-1: Product: syz [ 133.608685][ T5789] usb 5-1: Manufacturer: syz [ 133.608700][ T5789] usb 5-1: SerialNumber: syz [ 133.619356][ T5789] usb 5-1: config 0 descriptor?? [ 133.635088][ T5789] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 133.635130][ T5789] usb 5-1: selecting invalid altsetting 1 [ 133.635146][ T5789] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 133.897973][ T5789] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 133.898704][ T5789] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 133.898821][ T5789] usb 5-1: media controller created [ 134.257930][ T5789] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.757816][ T5809] Bluetooth: hci5: command tx timeout [ 135.874322][ T5789] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 135.874400][ T5789] zl10353_read_register: readreg error (reg=127, ret==-110) [ 135.883653][ T5789] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 136.585393][ T5789] usb 5-1: USB disconnect, device number 3 [ 137.740101][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 139.667408][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.667506][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.724706][ T6122] Zero length message leads to an empty skb [ 139.727134][ T3177] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.749997][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 140.022336][ T10] usb 1-1: device descriptor read/all, error -71 [ 143.664713][ T3177] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.690091][ T5807] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 143.863318][ T5807] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.863347][ T5807] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 143.863406][ T5807] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 143.863430][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.960190][ T5807] usb 3-1: config 0 descriptor?? [ 144.161730][ T5807] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 144.162126][ T5807] dvb-usb: bulk message failed: -22 (3/0) [ 144.201206][ T6150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.201937][ T6150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.346077][ T5807] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 144.350615][ T5807] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 144.350677][ T5807] usb 3-1: media controller created [ 144.354260][ T5807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.379487][ T5807] dvb-usb: bulk message failed: -22 (6/0) [ 145.379626][ T5807] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 145.453057][ T5807] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 145.547892][ T5807] dvb-usb: schedule remote query interval to 150 msecs. [ 145.547920][ T5807] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 145.728321][ T5951] dvb-usb: bulk message failed: -22 (1/0) [ 145.728375][ T5951] dvb-usb: error while querying for an remote control event. [ 145.841886][ T5807] usb 3-1: USB disconnect, device number 2 [ 145.891545][ T5951] dvb-usb: bulk message failed: -22 (1/0) [ 145.891580][ T5951] dvb-usb: error while querying for an remote control event. [ 147.214317][ T5807] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 147.972602][ T5951] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 148.102216][ T5951] usb 4-1: device descriptor read/64, error -71 [ 148.440076][ T5951] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 148.689997][ T5951] usb 4-1: device descriptor read/64, error -71 [ 148.963615][ T5951] usb usb4-port1: attempt power cycle [ 149.139668][ T6158] syz.0.62 (6158): drop_caches: 2 [ 149.275787][ T3177] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.375868][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.376017][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.376261][ T6026] bridge_slave_0: entered allmulticast mode [ 149.408374][ T6026] bridge_slave_0: entered promiscuous mode [ 149.415919][ T5951] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 149.430741][ T5951] usb 4-1: device descriptor read/8, error -71 [ 150.550170][ T5951] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 150.599121][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.599620][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.618413][ T6026] bridge_slave_1: entered allmulticast mode [ 150.641950][ T5951] usb 4-1: device descriptor read/8, error -71 [ 150.642634][ T6026] bridge_slave_1: entered promiscuous mode [ 150.750577][ T5951] usb usb4-port1: unable to enumerate USB device [ 152.744721][ T3177] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.525249][ T6026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.543549][ T5951] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 156.566615][ T6026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.701340][ T5951] usb 5-1: device descriptor read/64, error -71 [ 157.685849][ T5951] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 158.892603][ T6253] ALSA: mixer_oss: invalid OSS volume '' [ 159.519166][ T6026] team0: Port device team_slave_0 added [ 159.763100][ T6026] team0: Port device team_slave_1 added [ 161.659432][ T6026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.659452][ T6026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.659479][ T6026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.756949][ T6026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.756969][ T6026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.756997][ T6026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.366373][ T6026] hsr_slave_0: entered promiscuous mode [ 163.368056][ T6026] hsr_slave_1: entered promiscuous mode [ 163.410211][ T6026] debugfs: 'hsr0' already exists in 'hsr' [ 163.410262][ T6026] Cannot create hsr debugfs directory [ 164.597283][ T6277] syz.3.95 (6277) used greatest stack depth: 17976 bytes left [ 164.971469][ T3177] bridge_slave_1: left allmulticast mode [ 164.971625][ T3177] bridge_slave_1: left promiscuous mode [ 164.973351][ T3177] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.868019][ T6253] syz.2.88 (6253): drop_caches: 2 [ 166.055391][ T3177] bridge_slave_0: left allmulticast mode [ 166.055424][ T3177] bridge_slave_0: left promiscuous mode [ 166.055697][ T3177] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.824240][ T5913] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 167.050046][ T5913] usb 4-1: device descriptor read/64, error -71 [ 167.254008][ T6294] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 167.291543][ T5913] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 167.318650][ T6294] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 168.310966][ T5913] usb 4-1: device descriptor read/64, error -71 [ 168.420528][ T5913] usb usb4-port1: attempt power cycle [ 169.796726][ T5913] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 170.000113][ T5913] usb 4-1: device not accepting address 8, error -71 [ 178.963928][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 179.110101][ T9] usb 5-1: device descriptor read/64, error -71 [ 179.300048][ T5954] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 179.491923][ T9] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 179.620155][ T9] usb 5-1: device descriptor read/64, error -71 [ 179.690133][ T5954] usb 1-1: device descriptor read/64, error -71 [ 179.750070][ T9] usb usb5-port1: attempt power cycle [ 179.930130][ T5954] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 180.070138][ T5954] usb 1-1: device descriptor read/64, error -71 [ 180.150062][ T9] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 181.139961][ T9] usb 5-1: device descriptor read/8, error -71 [ 181.140041][ T5954] usb usb1-port1: attempt power cycle [ 181.395041][ T9] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 181.422959][ T9] usb 5-1: device descriptor read/8, error -71 [ 181.484735][ T3177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.532431][ T9] usb usb5-port1: unable to enumerate USB device [ 181.752018][ T5954] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 181.771803][ T5954] usb 1-1: device descriptor read/8, error -71 [ 181.880429][ T3177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.143206][ T3177] bond0 (unregistering): Released all slaves [ 184.266083][ T6381] fuse: Unknown parameter 'group_id00000000000000000000' [ 187.330057][ T9] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 187.459981][ T9] usb 1-1: device descriptor read/64, error -71 [ 187.592043][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 187.597231][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 187.599613][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 187.613338][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 187.624982][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.709982][ T9] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 187.840028][ T9] usb 1-1: device descriptor read/64, error -71 [ 187.950981][ T9] usb usb1-port1: attempt power cycle [ 188.299993][ T9] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 188.323688][ T9] usb 1-1: device descriptor read/8, error -71 [ 188.560004][ T9] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 188.587192][ T9] usb 1-1: device descriptor read/8, error -71 [ 188.690699][ T9] usb usb1-port1: unable to enumerate USB device [ 188.799941][ T3177] hsr_slave_0: left promiscuous mode [ 188.843393][ T3177] hsr_slave_1: left promiscuous mode [ 188.844476][ T3177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.844566][ T3177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.193994][ T3177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.194024][ T3177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.612820][ T2043] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 192.690055][ T5809] Bluetooth: hci0: command tx timeout [ 192.801423][ T2043] usb 5-1: device descriptor read/64, error -71 [ 193.040223][ T2043] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 193.089062][ T3177] veth1_macvtap: left promiscuous mode [ 193.089314][ T3177] veth0_macvtap: left promiscuous mode [ 193.089623][ T3177] veth1_vlan: left promiscuous mode [ 193.090390][ T3177] veth0_vlan: left promiscuous mode [ 193.180219][ T2043] usb 5-1: device descriptor read/64, error -71 [ 193.412027][ T2043] usb usb5-port1: attempt power cycle [ 193.860148][ T2043] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 194.468576][ T2043] usb 5-1: device descriptor read/8, error -71 [ 194.618664][ T6440] netlink: 60 bytes leftover after parsing attributes in process `syz.4.135'. [ 194.718446][ T5809] Bluetooth: hci0: command tx timeout [ 195.631769][ T6453] random: crng reseeded on system resumption [ 196.790119][ T5809] Bluetooth: hci0: command tx timeout [ 197.260672][ T3177] team0 (unregistering): Port device team_slave_1 removed [ 197.436805][ T3177] team0 (unregistering): Port device team_slave_0 removed [ 198.870110][ T5809] Bluetooth: hci0: command tx timeout [ 199.120135][ T5788] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 199.331952][ T5788] usb 4-1: Using ep0 maxpacket: 32 [ 199.345419][ T5788] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 199.345447][ T5788] usb 4-1: config 0 has no interface number 0 [ 199.350458][ T5788] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 199.350487][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.350509][ T5788] usb 4-1: Product: syz [ 199.350524][ T5788] usb 4-1: Manufacturer: syz [ 199.350540][ T5788] usb 4-1: SerialNumber: syz [ 199.390256][ T5951] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 199.408325][ T5788] usb 4-1: config 0 descriptor?? [ 199.455109][ T5788] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 199.455140][ T5788] usb 4-1: selecting invalid altsetting 1 [ 199.455158][ T5788] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 199.484952][ T5788] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 199.485389][ T5788] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 199.485443][ T5788] usb 4-1: media controller created [ 199.525013][ T5951] usb 5-1: device descriptor read/64, error -71 [ 199.556018][ T5788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 199.920691][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.920760][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.646553][ T5788] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 200.950123][ T5788] zl10353_read_register: readreg error (reg=127, ret==-110) [ 201.063941][ T5951] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 201.239988][ T5951] usb 5-1: device descriptor read/64, error -71 [ 201.350875][ T5951] usb usb5-port1: attempt power cycle [ 201.695981][ T5951] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 201.710884][ T5951] usb 5-1: device descriptor read/8, error -71 [ 202.104107][ T5951] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 202.126675][ T5951] usb 5-1: device descriptor read/8, error -71 [ 202.256077][ T5951] usb usb5-port1: unable to enumerate USB device [ 202.412979][ T6488] netlink: 68 bytes leftover after parsing attributes in process `syz.2.147'. [ 203.224878][ T5788] usb 4-1: USB disconnect, device number 10 [ 203.640770][ T6500] fuse: Bad value for 'user_id' [ 203.640802][ T6500] fuse: Bad value for 'user_id' [ 204.357202][ T6506] random: crng reseeded on system resumption [ 206.729142][ T6403] chnl_net:caif_netlink_parms(): no params data found [ 207.181633][ T5789] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 207.320001][ T5789] usb 3-1: device descriptor read/64, error -71 [ 207.460697][ T6530] could not open pipe file descriptor [ 207.660046][ T5789] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 207.849979][ T5789] usb 3-1: device descriptor read/64, error -71 [ 207.960531][ T5789] usb usb3-port1: attempt power cycle [ 208.153628][ T6403] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.153781][ T6403] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.154012][ T6403] bridge_slave_0: entered allmulticast mode [ 208.157063][ T6403] bridge_slave_0: entered promiscuous mode [ 208.179183][ T6403] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.202887][ T6403] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.203144][ T6403] bridge_slave_1: entered allmulticast mode [ 208.259612][ T6403] bridge_slave_1: entered promiscuous mode [ 208.300006][ T5789] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 208.330845][ T5789] usb 3-1: device descriptor read/8, error -71 [ 208.590013][ T5789] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 208.617327][ T5789] usb 3-1: device descriptor read/8, error -71 [ 208.722305][ T5789] usb usb3-port1: unable to enumerate USB device [ 208.934341][ T3177] bridge_slave_1: left allmulticast mode [ 208.934378][ T3177] bridge_slave_1: left promiscuous mode [ 208.934651][ T3177] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.114781][ T3177] bridge_slave_0: left allmulticast mode [ 209.114812][ T3177] bridge_slave_0: left promiscuous mode [ 209.115082][ T3177] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.162801][ T6551] netlink: 68 bytes leftover after parsing attributes in process `syz.4.158'. [ 209.727857][ T6559] fuse: Bad value for 'fd' [ 212.196442][ T3177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.480989][ T5788] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 212.977443][ T3177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.003124][ T5788] usb 1-1: unable to get BOS descriptor or descriptor too short [ 213.003926][ T5788] usb 1-1: not running at top speed; connect to a high speed hub [ 213.039697][ T5788] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.039723][ T5788] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 213.067867][ T5788] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 213.067899][ T5788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.067920][ T5788] usb 1-1: Product: syz [ 213.067935][ T5788] usb 1-1: Manufacturer: syz [ 213.067951][ T5788] usb 1-1: SerialNumber: syz [ 213.498518][ T3177] bond0 (unregistering): Released all slaves [ 213.680609][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 213.700877][ T6403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.762396][ T5788] usb 1-1: 0:2 : does not exist [ 213.837544][ T6403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.875634][ T5788] usb 1-1: USB disconnect, device number 12 [ 214.111996][ T6351] udevd[6351]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.665394][ T3177] hsr_slave_0: left promiscuous mode [ 214.750101][ T3177] hsr_slave_1: left promiscuous mode [ 214.752919][ T3177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.050949][ T3177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.050097][ T5954] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 217.116412][ T5117] Bluetooth: hci3: command 0x0406 tx timeout [ 217.116539][ T5117] Bluetooth: hci1: command 0x0406 tx timeout [ 217.116626][ T5117] Bluetooth: hci4: command 0x0406 tx timeout [ 217.116651][ T5117] Bluetooth: hci2: command 0x0406 tx timeout [ 217.179986][ T5954] usb 4-1: device descriptor read/64, error -71 [ 217.420129][ T5954] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 217.820055][ T5954] usb 4-1: device descriptor read/64, error -71 [ 218.152156][ T5954] usb usb4-port1: attempt power cycle [ 218.240971][ T3177] team0 (unregistering): Port device team_slave_1 removed [ 218.619981][ T5954] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 219.591087][ T5954] usb 4-1: device descriptor read/8, error -71 [ 219.730725][ T3177] team0 (unregistering): Port device team_slave_0 removed [ 219.971655][ T5954] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 219.997205][ T5954] usb 4-1: device descriptor read/8, error -71 [ 220.128847][ T2043] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 220.129792][ T5954] usb usb4-port1: unable to enumerate USB device [ 220.413555][ T2043] usb 1-1: config 6 has an invalid interface number: 14 but max is 0 [ 220.413585][ T2043] usb 1-1: config 6 has no interface number 0 [ 220.413624][ T2043] usb 1-1: config 6 interface 14 has no altsetting 0 [ 220.417112][ T2043] usb 1-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 220.417142][ T2043] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.417165][ T2043] usb 1-1: Product: syz [ 220.417180][ T2043] usb 1-1: Manufacturer: syz [ 220.417196][ T2043] usb 1-1: SerialNumber: syz [ 220.700906][ T2043] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 220.700979][ T2043] command write [95] error -22 [ 220.714571][ T6403] team0: Port device team_slave_0 added [ 220.741705][ T2043] usb 1-1: USB disconnect, device number 13 [ 220.840163][ T6403] team0: Port device team_slave_1 added [ 224.254732][ T6403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.254750][ T6403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.254778][ T6403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.278050][ T6403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.278064][ T6403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.278082][ T6403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.864965][ T6403] hsr_slave_0: entered promiscuous mode [ 224.879822][ T6403] hsr_slave_1: entered promiscuous mode [ 224.901498][ T6403] debugfs: 'hsr0' already exists in 'hsr' [ 224.901530][ T6403] Cannot create hsr debugfs directory [ 227.359987][ T2043] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 228.180057][ T2043] usb 1-1: device descriptor read/64, error -71 [ 228.613234][ T2043] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 229.719746][ T2043] usb 1-1: device descriptor read/64, error -71 [ 229.834304][ T2043] usb usb1-port1: attempt power cycle [ 230.780114][ T5788] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 230.817807][ T6403] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 230.942966][ T6403] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 230.974802][ T5788] usb 5-1: config 6 has an invalid interface number: 14 but max is 0 [ 230.974833][ T5788] usb 5-1: config 6 has no interface number 0 [ 230.974867][ T5788] usb 5-1: config 6 interface 14 has no altsetting 0 [ 231.013238][ T5788] usb 5-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 231.013266][ T5788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.013280][ T5788] usb 5-1: Product: syz [ 231.013291][ T5788] usb 5-1: Manufacturer: syz [ 231.013301][ T5788] usb 5-1: SerialNumber: syz [ 231.138850][ T6403] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 232.249429][ T6403] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 233.693408][ T5788] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 233.693501][ T5788] command write [95] error -22 [ 233.727727][ T5788] usb 5-1: USB disconnect, device number 18 [ 236.064583][ T6403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.236894][ T6403] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.266957][ T6289] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.267706][ T6289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.305985][ T1418] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.326328][ T1418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.480107][ T5807] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 236.640110][ T5807] usb 1-1: Using ep0 maxpacket: 32 [ 236.642864][ T5807] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 236.642892][ T5807] usb 1-1: config 0 has no interface number 0 [ 236.649423][ T5807] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 236.649452][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.649473][ T5807] usb 1-1: Product: syz [ 236.649488][ T5807] usb 1-1: Manufacturer: syz [ 236.649504][ T5807] usb 1-1: SerialNumber: syz [ 236.718584][ T5807] usb 1-1: config 0 descriptor?? [ 236.758452][ T5807] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 236.758482][ T5807] usb 1-1: selecting invalid altsetting 1 [ 236.758499][ T5807] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 236.791705][ T5807] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 236.792500][ T5807] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 236.792557][ T5807] usb 1-1: media controller created [ 236.876896][ T5807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 238.184311][ T5807] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 238.184369][ T5807] zl10353_read_register: readreg error (reg=127, ret==-110) [ 238.242341][ T9] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 238.403984][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 238.408798][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 238.427030][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.427056][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.490749][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.490782][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.490803][ T9] usb 3-1: Product: syz [ 238.490818][ T9] usb 3-1: Manufacturer: syz [ 238.490833][ T9] usb 3-1: SerialNumber: syz [ 238.773498][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 238.774041][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 238.774439][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 238.844663][ T9] usb 3-1: 0:2 : does not exist [ 238.975702][ T9] usb 3-1: USB disconnect, device number 7 [ 239.066343][ T6484] udevd[6484]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.862432][ T5807] usb 1-1: USB disconnect, device number 17 [ 241.454639][ T6403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.088275][ T6771] netlink: 'syz.2.211': attribute type 4 has an invalid length. [ 242.088302][ T6771] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.211'. [ 244.017223][ T6403] veth0_vlan: entered promiscuous mode [ 244.654934][ T6403] veth1_vlan: entered promiscuous mode [ 244.841300][ T6403] veth0_macvtap: entered promiscuous mode [ 244.860371][ T6403] veth1_macvtap: entered promiscuous mode [ 244.924437][ T6403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.978057][ T6403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.016403][ T3596] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.037857][ T3596] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.038308][ T3596] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.038351][ T3596] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.359990][ T5951] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 246.379966][ T5807] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 246.557841][ T5807] usb 4-1: Using ep0 maxpacket: 16 [ 246.568664][ T5951] usb 3-1: Using ep0 maxpacket: 32 [ 246.600883][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.600981][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.601026][ T5807] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 246.601050][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.639526][ T5951] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 246.639559][ T5951] usb 3-1: config 0 has no interface number 0 [ 246.713170][ T5951] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 246.713201][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.713222][ T5951] usb 3-1: Product: syz [ 246.713237][ T5951] usb 3-1: Manufacturer: syz [ 246.713252][ T5951] usb 3-1: SerialNumber: syz [ 246.722688][ T5807] usb 4-1: config 0 descriptor?? [ 246.749694][ T5951] usb 3-1: config 0 descriptor?? [ 246.809465][ T5951] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 246.809513][ T5951] usb 3-1: selecting invalid altsetting 1 [ 246.809529][ T5951] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 246.914190][ T6290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.914220][ T6290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.237615][ T5951] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 247.238936][ T5951] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 247.239045][ T5951] usb 3-1: media controller created [ 249.231617][ T5951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 249.479036][ T5807] usbhid 4-1:0.0: can't add hid device: -71 [ 249.479131][ T5807] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 249.574797][ T5807] usb 4-1: USB disconnect, device number 15 [ 250.400672][ T5951] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 250.400734][ T5951] zl10353_read_register: readreg error (reg=127, ret==-71) [ 250.403090][ T5951] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 250.471818][ T6843] netlink: 16 bytes leftover after parsing attributes in process `syz.3.226'. [ 252.461058][ T5951] usb 3-1: USB disconnect, device number 8 [ 253.928449][ T6869] could not open pipe file descriptor [ 254.295836][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 254.404584][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 254.405698][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 254.406763][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 254.407513][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.470490][ T61] Bluetooth: hci0: command tx timeout [ 256.495783][ T6890] could not open pipe file descriptor [ 256.660053][ T5788] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 256.774929][ T68] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.860447][ T5788] usb 4-1: Using ep0 maxpacket: 32 [ 256.868276][ T5788] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 256.868303][ T5788] usb 4-1: config 0 has no interface number 0 [ 256.909453][ T5788] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 256.909482][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.909503][ T5788] usb 4-1: Product: syz [ 256.909515][ T5788] usb 4-1: Manufacturer: syz [ 256.909526][ T5788] usb 4-1: SerialNumber: syz [ 257.216877][ T5788] usb 4-1: config 0 descriptor?? [ 257.347733][ T5788] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 257.347754][ T5788] usb 4-1: selecting invalid altsetting 1 [ 257.347766][ T5788] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 257.391480][ T5788] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 257.391999][ T5788] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 257.392054][ T5788] usb 4-1: media controller created [ 257.465623][ T5788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 258.890978][ T61] Bluetooth: hci0: command tx timeout [ 259.069090][ T5788] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 259.069132][ T5788] zl10353_read_register: readreg error (reg=127, ret==-110) [ 259.579268][ T68] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.122706][ T68] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.333646][ T5788] usb 4-1: USB disconnect, device number 16 [ 261.264309][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.264386][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.291704][ T61] Bluetooth: hci0: command tx timeout [ 261.961762][ T6899] syz.4.234 (6899): drop_caches: 2 [ 262.205831][ T68] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.060486][ T6871] chnl_net:caif_netlink_parms(): no params data found [ 263.350117][ T5802] Bluetooth: hci0: command tx timeout [ 264.900251][ T68] bridge_slave_1: left allmulticast mode [ 264.900291][ T68] bridge_slave_1: left promiscuous mode [ 264.900566][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.065886][ T6970] mmap: syz.3.246 (6970) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 266.008428][ T68] bridge_slave_0: left allmulticast mode [ 266.008460][ T68] bridge_slave_0: left promiscuous mode [ 266.008752][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.785622][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.827467][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.844918][ T68] bond0 (unregistering): Released all slaves [ 270.950081][ T5807] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 271.099983][ T5807] usb 5-1: Using ep0 maxpacket: 32 [ 271.102530][ T5807] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 271.102555][ T5807] usb 5-1: config 0 has no interface number 0 [ 271.105592][ T5807] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 271.105620][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.105640][ T5807] usb 5-1: Product: syz [ 271.105656][ T5807] usb 5-1: Manufacturer: syz [ 271.105671][ T5807] usb 5-1: SerialNumber: syz [ 271.160159][ T5788] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 271.182238][ T5807] usb 5-1: config 0 descriptor?? [ 271.202929][ T5807] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 271.202956][ T5807] usb 5-1: selecting invalid altsetting 1 [ 271.202973][ T5807] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 271.234248][ T5807] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 271.234692][ T5807] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 271.234744][ T5807] usb 5-1: media controller created [ 271.285029][ T5807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 271.328421][ T5788] usb 3-1: config 6 has an invalid interface number: 14 but max is 0 [ 271.328451][ T5788] usb 3-1: config 6 has no interface number 0 [ 271.328486][ T5788] usb 3-1: config 6 interface 14 has no altsetting 0 [ 271.332324][ T5788] usb 3-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 271.332357][ T5788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.332381][ T5788] usb 3-1: Product: syz [ 271.332398][ T5788] usb 3-1: Manufacturer: syz [ 271.332416][ T5788] usb 3-1: SerialNumber: syz [ 271.369736][ T6871] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.370558][ T6871] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.370870][ T6871] bridge_slave_0: entered allmulticast mode [ 271.934892][ T6871] bridge_slave_0: entered promiscuous mode [ 272.503567][ T5807] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 272.504750][ T5807] zl10353_read_register: readreg error (reg=127, ret==-110) [ 272.985593][ T6871] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.985763][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.986021][ T6871] bridge_slave_1: entered allmulticast mode [ 273.017353][ T6871] bridge_slave_1: entered promiscuous mode [ 273.195793][ T5788] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 273.195893][ T5788] command write [95] error -22 [ 273.347869][ T5788] usb 3-1: USB disconnect, device number 9 [ 275.130805][ T5807] usb 5-1: USB disconnect, device number 19 [ 275.153996][ T6871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.388147][ T6871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.381001][ T68] hsr_slave_0: left promiscuous mode [ 276.425600][ T68] hsr_slave_1: left promiscuous mode [ 276.426783][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.426810][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.605807][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.605840][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.697504][ T68] veth1_macvtap: left promiscuous mode [ 276.697582][ T68] veth0_macvtap: left promiscuous mode [ 276.699246][ T68] veth1_vlan: left promiscuous mode [ 276.700161][ T68] veth0_vlan: left promiscuous mode [ 280.494815][ T68] team0 (unregistering): Port device team_slave_1 removed [ 280.661136][ T68] team0 (unregistering): Port device team_slave_0 removed [ 286.310053][ T5886] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 286.459967][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 286.466177][ T5886] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 286.466205][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.466225][ T5886] usb 4-1: config 0 has no interface number 0 [ 286.466277][ T5886] usb 4-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.521310][ T5886] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 286.521341][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.521362][ T5886] usb 4-1: Product: syz [ 286.521378][ T5886] usb 4-1: Manufacturer: syz [ 286.521393][ T5886] usb 4-1: SerialNumber: syz [ 286.527290][ T5886] usb 4-1: config 0 descriptor?? [ 286.570944][ T7095] netlink: 16 bytes leftover after parsing attributes in process `syz.4.269'. [ 286.635779][ T5886] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 286.791864][ T6871] team0: Port device team_slave_0 added [ 287.032360][ T6871] team0: Port device team_slave_1 added [ 289.569540][ T5886] usb 4-1: qt2_attach - failed to power on unit: -71 [ 289.569734][ T5886] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 289.683864][ T5886] usb 4-1: USB disconnect, device number 17 [ 289.760281][ T7113] fuse: Bad value for 'rootmode' [ 289.829982][ T990] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 290.115923][ T990] usb 5-1: Using ep0 maxpacket: 32 [ 290.127055][ T990] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 290.127075][ T990] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.127089][ T990] usb 5-1: config 0 has no interface number 0 [ 290.127125][ T990] usb 5-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.142605][ T6871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.142622][ T6871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.142713][ T6871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.171454][ T990] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 290.171491][ T990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.171515][ T990] usb 5-1: Product: syz [ 290.171532][ T990] usb 5-1: Manufacturer: syz [ 290.171550][ T990] usb 5-1: SerialNumber: syz [ 290.195547][ T6871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.195569][ T6871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.195601][ T6871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.319974][ T990] usb 5-1: config 0 descriptor?? [ 290.379998][ T990] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 291.396562][ T990] usb 5-1: qt2_attach - failed to power on unit: -71 [ 291.396690][ T990] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 291.438811][ T990] usb 5-1: USB disconnect, device number 20 [ 292.517778][ T6871] hsr_slave_0: entered promiscuous mode [ 292.519196][ T6871] hsr_slave_1: entered promiscuous mode [ 292.520602][ T6871] debugfs: 'hsr0' already exists in 'hsr' [ 292.520628][ T6871] Cannot create hsr debugfs directory [ 293.920011][ T5954] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 294.093145][ T5954] usb 3-1: Using ep0 maxpacket: 32 [ 294.095537][ T5954] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 294.095564][ T5954] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.095582][ T5954] usb 3-1: config 0 has no interface number 0 [ 294.095631][ T5954] usb 3-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.102555][ T5954] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 294.102591][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.102615][ T5954] usb 3-1: Product: syz [ 294.102633][ T5954] usb 3-1: Manufacturer: syz [ 294.102649][ T5954] usb 3-1: SerialNumber: syz [ 294.179645][ T5954] usb 3-1: config 0 descriptor?? [ 294.206627][ T5954] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 297.011492][ T5954] usb 3-1: qt2_attach - failed to power on unit: -71 [ 297.011671][ T5954] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 297.120774][ T5954] usb 3-1: USB disconnect, device number 10 [ 307.791513][ T6871] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 307.799236][ T7226] fuse: Unknown parameter 'use00000000000000000000' [ 307.924856][ T6871] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 308.019180][ T6871] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 314.791990][ T5954] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 314.845082][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 314.858397][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 314.863603][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 314.883645][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 314.886156][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 314.972794][ T5954] usb 5-1: Using ep0 maxpacket: 32 [ 315.153330][ T5954] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 315.153351][ T5954] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.153364][ T5954] usb 5-1: config 0 has no interface number 0 [ 315.153406][ T5954] usb 5-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 315.160819][ T5954] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 315.160856][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.160878][ T5954] usb 5-1: Product: syz [ 315.160896][ T5954] usb 5-1: Manufacturer: syz [ 315.160913][ T5954] usb 5-1: SerialNumber: syz [ 315.184326][ T5954] usb 5-1: config 0 descriptor?? [ 315.291759][ T5954] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 316.950053][ T61] Bluetooth: hci5: command tx timeout [ 317.474836][ T7279] fuse: Unknown parameter 'use00000000000000000000' [ 318.602966][ T5954] usb 5-1: qt2_attach - failed to power on unit: -71 [ 318.603146][ T5954] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 318.651327][ T5954] usb 5-1: USB disconnect, device number 21 [ 319.093902][ T61] Bluetooth: hci5: command tx timeout [ 320.530010][ T5789] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 320.709978][ T5789] usb 4-1: Using ep0 maxpacket: 8 [ 320.770772][ T5789] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 320.770824][ T5789] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 320.770848][ T5789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.110420][ T61] Bluetooth: hci5: command tx timeout [ 322.193536][ T5789] usb 4-1: string descriptor 0 read error: -71 [ 322.194345][ T5789] hub 4-1:32.0: bad descriptor, ignoring hub [ 322.194382][ T5789] hub 4-1:32.0: probe with driver hub failed with error -5 [ 322.465563][ T5789] usb 4-1: USB disconnect, device number 18 [ 322.764297][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.765690][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.190373][ T61] Bluetooth: hci5: command tx timeout [ 325.329982][ T44] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 325.521698][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.521743][ T44] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 325.521773][ T44] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 325.521789][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.528969][ T44] usb 1-1: config 0 descriptor?? [ 325.579033][ T44] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 325.883124][ T7266] chnl_net:caif_netlink_parms(): no params data found [ 327.433106][ T7266] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.433213][ T7266] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.433385][ T7266] bridge_slave_0: entered allmulticast mode [ 327.446598][ T7266] bridge_slave_0: entered promiscuous mode [ 327.472346][ T7266] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.472485][ T7266] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.472732][ T7266] bridge_slave_1: entered allmulticast mode [ 327.488304][ T7266] bridge_slave_1: entered promiscuous mode [ 327.619688][ T7366] usb usb7: usbfs: process 7366 (syz.4.327) did not claim interface 0 before use [ 328.937648][ T7370] syz.4.327 (7370) used greatest stack depth: 16280 bytes left [ 330.333179][ T990] usb 1-1: USB disconnect, device number 18 [ 331.317031][ T7266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.376610][ T7266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.450173][ T1100] bridge_slave_1: left allmulticast mode [ 332.450204][ T1100] bridge_slave_1: left promiscuous mode [ 332.450485][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.377265][ T1100] bridge_slave_0: left allmulticast mode [ 333.377298][ T1100] bridge_slave_0: left promiscuous mode [ 333.377573][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.741583][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.340786][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.412288][ T1100] bond0 (unregistering): Released all slaves [ 337.583520][ T5807] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 338.185448][ T7266] team0: Port device team_slave_0 added [ 338.187752][ T5807] usb 5-1: Using ep0 maxpacket: 32 [ 338.319166][ T7266] team0: Port device team_slave_1 added [ 339.111140][ T5807] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 339.111162][ T5807] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.111183][ T5807] usb 5-1: config 0 has no interface number 0 [ 339.111221][ T5807] usb 5-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 339.300183][ T5807] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 339.300216][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.300237][ T5807] usb 5-1: Product: syz [ 339.300252][ T5807] usb 5-1: Manufacturer: syz [ 339.300267][ T5807] usb 5-1: SerialNumber: syz [ 339.346224][ T5807] usb 5-1: config 0 descriptor?? [ 339.381790][ T5807] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 341.350034][ T5954] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 341.540016][ T1100] hsr_slave_0: left promiscuous mode [ 342.521561][ T1100] hsr_slave_1: left promiscuous mode [ 342.526575][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.546414][ T5954] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.546442][ T5954] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 342.546500][ T5954] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 342.546524][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.593882][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.713171][ T5807] usb 5-1: qt2_attach - failed to power on unit: -71 [ 342.713294][ T5807] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 342.749430][ T5807] usb 5-1: USB disconnect, device number 22 [ 342.774577][ T5954] usb 4-1: config 0 descriptor?? [ 343.135221][ T5954] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 343.135277][ T5954] dvb-usb: bulk message failed: -22 (3/0) [ 344.165022][ T5954] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 344.279132][ T2043] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 344.282667][ T5954] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 344.282783][ T5954] usb 4-1: media controller created [ 344.312132][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 344.450034][ T2043] usb 3-1: Using ep0 maxpacket: 8 [ 344.452803][ T2043] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 344.452850][ T2043] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 344.452874][ T2043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.554854][ T5954] dvb-usb: bulk message failed: -22 (6/0) [ 344.554921][ T5954] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 344.619089][ T5954] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 345.691637][ T5954] dvb-usb: schedule remote query interval to 150 msecs. [ 345.691657][ T5954] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 345.855165][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 345.855191][ T44] dvb-usb: error while querying for an remote control event. [ 345.971780][ T5954] usb 4-1: USB disconnect, device number 19 [ 346.018963][ T5788] dvb-usb: bulk message failed: -22 (1/0) [ 346.018992][ T5788] dvb-usb: error while querying for an remote control event. [ 346.236005][ T2043] usb 3-1: string descriptor 0 read error: -71 [ 346.236742][ T2043] hub 3-1:32.0: bad descriptor, ignoring hub [ 346.236782][ T2043] hub 3-1:32.0: probe with driver hub failed with error -5 [ 346.662995][ T7466] netlink: 68 bytes leftover after parsing attributes in process `syz.0.350'. [ 346.857740][ T5954] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 346.913339][ T7468] usb usb7: usbfs: process 7468 (syz.0.351) did not claim interface 0 before use [ 346.930105][ T2043] usb 3-1: USB disconnect, device number 11 [ 349.546137][ T7480] usb usb7: usbfs: process 7480 (syz.3.354) did not claim interface 0 before use [ 350.543141][ T7484] syz.3.354 (7484) used greatest stack depth: 15896 bytes left [ 350.836197][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 351.105020][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 352.274069][ T7266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.274087][ T7266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.274114][ T7266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.340919][ T7266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.340939][ T7266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.340967][ T7266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.800950][ T7266] hsr_slave_0: entered promiscuous mode [ 355.802587][ T7266] hsr_slave_1: entered promiscuous mode [ 355.803681][ T7266] debugfs: 'hsr0' already exists in 'hsr' [ 355.803724][ T7266] Cannot create hsr debugfs directory [ 357.250194][ T2043] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 357.405294][ T2043] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.405323][ T2043] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 357.405380][ T2043] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 357.405405][ T2043] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.418849][ T2043] usb 4-1: config 0 descriptor?? [ 357.440463][ T2043] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 357.440518][ T2043] dvb-usb: bulk message failed: -22 (3/0) [ 357.559196][ T2043] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 357.568863][ T2043] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 357.568930][ T2043] usb 4-1: media controller created [ 357.580185][ T2043] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 357.619482][ T2043] dvb-usb: bulk message failed: -22 (6/0) [ 357.619598][ T2043] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 357.747542][ T7528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.748331][ T7528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.281777][ T2043] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 358.322248][ T2043] dvb-usb: schedule remote query interval to 150 msecs. [ 358.322271][ T2043] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 358.480011][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 358.480047][ T44] dvb-usb: error while querying for an remote control event. [ 358.640105][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 358.640140][ T44] dvb-usb: error while querying for an remote control event. [ 358.799973][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 358.800007][ T44] dvb-usb: error while querying for an remote control event. [ 358.959983][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 358.960019][ T44] dvb-usb: error while querying for an remote control event. [ 359.119951][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 359.119986][ T44] dvb-usb: error while querying for an remote control event. [ 359.279968][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 359.280005][ T44] dvb-usb: error while querying for an remote control event. [ 359.440045][ T2043] dvb-usb: bulk message failed: -22 (1/0) [ 359.440082][ T2043] dvb-usb: error while querying for an remote control event. [ 359.600084][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 359.600121][ T44] dvb-usb: error while querying for an remote control event. [ 359.812583][ T7564] ALSA: mixer_oss: invalid OSS volume '' [ 359.873955][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 359.873991][ T44] dvb-usb: error while querying for an remote control event. [ 360.032654][ T2043] dvb-usb: bulk message failed: -22 (1/0) [ 360.032690][ T2043] dvb-usb: error while querying for an remote control event. [ 360.238731][ T2043] dvb-usb: bulk message failed: -22 (1/0) [ 360.238760][ T2043] dvb-usb: error while querying for an remote control event. [ 360.670163][ T2043] dvb-usb: bulk message failed: -22 (1/0) [ 360.670189][ T2043] dvb-usb: error while querying for an remote control event. [ 360.829925][ T5954] dvb-usb: bulk message failed: -22 (1/0) [ 360.829960][ T5954] dvb-usb: error while querying for an remote control event. [ 360.989988][ T5954] dvb-usb: bulk message failed: -22 (1/0) [ 360.990025][ T5954] dvb-usb: error while querying for an remote control event. [ 361.149976][ T5954] dvb-usb: bulk message failed: -22 (1/0) [ 361.150012][ T5954] dvb-usb: error while querying for an remote control event. [ 361.311751][ T5954] dvb-usb: bulk message failed: -22 (1/0) [ 361.311778][ T5954] dvb-usb: error while querying for an remote control event. [ 361.470009][ T5954] dvb-usb: bulk message failed: -22 (1/0) [ 361.470044][ T5954] dvb-usb: error while querying for an remote control event. [ 361.631363][ T2043] dvb-usb: bulk message failed: -22 (1/0) [ 361.631404][ T2043] dvb-usb: error while querying for an remote control event. [ 361.790075][ T5954] dvb-usb: bulk message failed: -22 (1/0) [ 361.790100][ T5954] dvb-usb: error while querying for an remote control event. [ 362.377216][ T5954] dvb-usb: bulk message failed: -22 (1/0) [ 362.377253][ T5954] dvb-usb: error while querying for an remote control event. [ 362.529945][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 362.529980][ T44] dvb-usb: error while querying for an remote control event. [ 362.690024][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 362.690060][ T44] dvb-usb: error while querying for an remote control event. [ 362.851395][ T2043] dvb-usb: bulk message failed: -22 (1/0) [ 362.851432][ T2043] dvb-usb: error while querying for an remote control event. [ 362.869299][ T7562] syz.4.370 (7562): drop_caches: 2 [ 363.013376][ T2043] dvb-usb: bulk message failed: -22 (1/0) [ 363.013663][ T2043] dvb-usb: error while querying for an remote control event. [ 363.170722][ T2043] dvb-usb: bulk message failed: -22 (1/0) [ 363.170908][ T2043] dvb-usb: error while querying for an remote control event. [ 363.379317][ T2043] dvb-usb: bulk message failed: -22 (1/0) [ 363.379560][ T2043] dvb-usb: error while querying for an remote control event. [ 363.530043][ T2043] dvb-usb: bulk message failed: -22 (1/0) [ 363.530071][ T2043] dvb-usb: error while querying for an remote control event. [ 363.556848][ T2043] usb 4-1: USB disconnect, device number 20 [ 363.871594][ T2043] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 365.430118][ T5886] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 365.591849][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 365.594422][ T5886] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 365.594467][ T5886] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 365.594490][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.827400][ T7266] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 367.969488][ T7266] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 368.404090][ T5886] usb 3-1: string descriptor 0 read error: -71 [ 368.404907][ T5886] hub 3-1:32.0: bad descriptor, ignoring hub [ 368.404946][ T5886] hub 3-1:32.0: probe with driver hub failed with error -5 [ 372.653988][ T7266] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 372.763021][ T7266] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 373.042808][ T5886] usb 3-1: USB disconnect, device number 12 [ 380.132461][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 381.006153][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 381.040562][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 381.992243][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 382.008800][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 382.920274][ T7698] fuse: Bad value for 'fd' [ 384.237913][ T5814] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 384.237995][ T5814] Bluetooth: hci0: command tx timeout [ 384.239650][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.239699][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.455229][ T61] Bluetooth: hci0: command tx timeout [ 389.996083][ C0] ------------[ cut here ]------------ [ 389.996104][ C0] refcount_t: addition on 0; use-after-free. [ 390.067334][ C0] WARNING: CPU: 0 PID: 16 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0 [ 390.067385][ C0] Modules linked in: [ 390.067428][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 390.067472][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 390.067488][ C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 390.067511][ C0] Code: 00 00 e8 59 f5 3d fd 5b 41 5e e9 81 67 49 06 cc e8 4b f5 3d fd c6 05 72 a8 60 0a 01 90 48 c7 c7 20 a5 3e 8b e8 b7 3d 02 fd 90 <0f> 0b 90 90 eb d7 e8 2b f5 3d fd c6 05 53 a8 60 0a 01 90 48 c7 c7 [ 390.067528][ C0] RSP: 0018:ffffc90000157830 EFLAGS: 00010246 [ 390.067546][ C0] RAX: 0311a2758a827800 RBX: 0000000000000002 RCX: ffff88801bea5a00 [ 390.067561][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 390.067573][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 390.067585][ C0] R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff9200002af18 [ 390.067600][ C0] R13: ffff8880287e8458 R14: ffff8880287e8080 R15: dffffc0000000000 [ 390.067616][ C0] FS: 0000000000000000(0000) GS:ffff888126bc6000(0000) knlGS:0000000000000000 [ 390.067632][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 390.067646][ C0] CR2: 0000200001000000 CR3: 0000000035540000 CR4: 00000000003526f0 [ 390.067663][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 390.067677][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 390.067690][ C0] Call Trace: [ 390.067702][ C0] [ 390.067713][ C0] mptcp_schedule_work+0x164/0x1a0 [ 390.067743][ C0] mptcp_tout_timer+0x21/0xa0 [ 390.067775][ C0] call_timer_fn+0x17e/0x5f0 [ 390.067797][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 390.067826][ C0] ? call_timer_fn+0xbe/0x5f0 [ 390.067846][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 390.067876][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 390.067908][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.067937][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 390.067969][ C0] __run_timer_base+0x648/0x970 [ 390.068017][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 390.068066][ C0] run_timer_softirq+0xb7/0x180 [ 390.068086][ C0] handle_softirqs+0x22f/0x710 [ 390.068127][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 390.068170][ C0] run_ktimerd+0xcf/0x190 [ 390.068191][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 390.068210][ C0] ? schedule+0x91/0x360 [ 390.068254][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 390.068274][ C0] smpboot_thread_fn+0x542/0xa60 [ 390.068299][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 390.068331][ C0] kthread+0x711/0x8a0 [ 390.068363][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 390.068385][ C0] ? __pfx_kthread+0x10/0x10 [ 390.068410][ C0] ? rt_spin_unlock+0x150/0x200 [ 390.068446][ C0] ? rt_spin_unlock+0x161/0x200 [ 390.068480][ C0] ? __pfx_kthread+0x10/0x10 [ 390.068510][ C0] ret_from_fork+0x4bc/0x870 [ 390.068549][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 390.068594][ C0] ? __switch_to_asm+0x39/0x70 [ 390.068626][ C0] ? __switch_to_asm+0x33/0x70 [ 390.068655][ C0] ? __pfx_kthread+0x10/0x10 [ 390.068684][ C0] ret_from_fork_asm+0x1a/0x30 [ 390.068737][ C0] [ 390.068754][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 390.068769][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 390.068791][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 390.068803][ C0] Call Trace: [ 390.068811][ C0] [ 390.068818][ C0] dump_stack_lvl+0x99/0x250 [ 390.068843][ C0] ? __asan_memcpy+0x40/0x70 [ 390.068873][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.068898][ C0] ? __pfx__printk+0x10/0x10 [ 390.068936][ C0] vpanic+0x237/0x6d0 [ 390.068955][ C0] ? __pfx_vpanic+0x10/0x10 [ 390.068985][ C0] panic+0xb9/0xc0 [ 390.069004][ C0] ? __pfx_panic+0x10/0x10 [ 390.069039][ C0] __warn+0x31b/0x4b0 [ 390.069057][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 390.069082][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 390.069103][ C0] report_bug+0x2be/0x4f0 [ 390.069133][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 390.069154][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 390.069176][ C0] ? refcount_warn_saturate+0xfc/0x1d0 [ 390.069197][ C0] handle_bug+0x84/0x160 [ 390.069222][ C0] exc_invalid_op+0x1a/0x50 [ 390.069247][ C0] asm_exc_invalid_op+0x1a/0x20 [ 390.069269][ C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 390.069294][ C0] Code: 00 00 e8 59 f5 3d fd 5b 41 5e e9 81 67 49 06 cc e8 4b f5 3d fd c6 05 72 a8 60 0a 01 90 48 c7 c7 20 a5 3e 8b e8 b7 3d 02 fd 90 <0f> 0b 90 90 eb d7 e8 2b f5 3d fd c6 05 53 a8 60 0a 01 90 48 c7 c7 [ 390.069312][ C0] RSP: 0018:ffffc90000157830 EFLAGS: 00010246 [ 390.069332][ C0] RAX: 0311a2758a827800 RBX: 0000000000000002 RCX: ffff88801bea5a00 [ 390.069348][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 390.069362][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 390.069376][ C0] R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff9200002af18 [ 390.069393][ C0] R13: ffff8880287e8458 R14: ffff8880287e8080 R15: dffffc0000000000 [ 390.069433][ C0] mptcp_schedule_work+0x164/0x1a0 [ 390.069469][ C0] mptcp_tout_timer+0x21/0xa0 [ 390.069501][ C0] call_timer_fn+0x17e/0x5f0 [ 390.069522][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 390.069551][ C0] ? call_timer_fn+0xbe/0x5f0 [ 390.069571][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 390.069602][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 390.069633][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.069662][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 390.069694][ C0] __run_timer_base+0x648/0x970 [ 390.069742][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 390.069797][ C0] run_timer_softirq+0xb7/0x180 [ 390.069820][ C0] handle_softirqs+0x22f/0x710 [ 390.069872][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 390.069922][ C0] run_ktimerd+0xcf/0x190 [ 390.069946][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 390.069968][ C0] ? schedule+0x91/0x360 [ 390.070011][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 390.070031][ C0] smpboot_thread_fn+0x542/0xa60 [ 390.070055][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 390.070087][ C0] kthread+0x711/0x8a0 [ 390.070119][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 390.070140][ C0] ? __pfx_kthread+0x10/0x10 [ 390.070164][ C0] ? rt_spin_unlock+0x150/0x200 [ 390.070199][ C0] ? rt_spin_unlock+0x161/0x200 [ 390.070227][ C0] ? __pfx_kthread+0x10/0x10 [ 390.070255][ C0] ret_from_fork+0x4bc/0x870 [ 390.070294][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 390.070339][ C0] ? __switch_to_asm+0x39/0x70 [ 390.070370][ C0] ? __switch_to_asm+0x33/0x70 [ 390.070400][ C0] ? __pfx_kthread+0x10/0x10 [ 390.070428][ C0] ret_from_fork_asm+0x1a/0x30 [ 390.070484][ C0] [ 390.070871][ C0] Kernel Offset: disabled