last executing test programs: 2m55.354807528s ago: executing program 1 (id=2897): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0xb, &(0x7f0000000000)={0x5, 0x4}) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 2m53.376397717s ago: executing program 1 (id=2898): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r1, &(0x7f0000000300)='1\x00', 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000005480)=ANY=[@ANYBLOB]) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_reply={0x2a}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4890}, 0x40) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4}) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 2m51.595775273s ago: executing program 3 (id=2901): add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000021000100000000000000000002002000000000000d000000080002"], 0x44}}, 0x20000040) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x104, 0x8, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000000}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xdb) 2m48.140236488s ago: executing program 1 (id=2910): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) 2m47.667966588s ago: executing program 3 (id=2911): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) close(r1) 2m47.145468657s ago: executing program 1 (id=2912): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x200}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0), 0x700}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) lseek(0xffffffffffffffff, 0xfffd, 0x0) execveat(0xffffffffffffffff, 0x0, &(0x7f0000000600)={[&(0x7f0000000440)='\x00', &(0x7f0000000480)='pim6reg1\x00', &(0x7f0000000500)=',&\x00', &(0x7f0000000540)='bond_slave_1\x00', &(0x7f0000000580)=',:%{)+\x00', &(0x7f00000005c0)='pim6reg1\x00']}, 0x0, 0x400) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x378, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x2e0, 0x206, 0x240, 0x2e0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x1e8, 0x208, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) 2m47.090938249s ago: executing program 3 (id=2914): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffdb7, 0x0, 0x1, 0x0, 0x0, 0x200480c0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f00000006c0)=[@uexit={0x0, 0x18, 0xce}, @cpuid={0x2, 0x18, {0x0, 0x10}}, @cpuid={0x2, 0x18, {0xab8, 0x401}}, @cpuid={0x2, 0x18, {0x2, 0x3e}}, @code={0x1, 0x50, {"66ba2100ecb904080000b800980000ba000000000f30c4813658f40f01cb4c0fc79fa8404c87f20f07f20fc27b00ae66b808010f00d066baa10066ed670f30"}}], 0xb0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @value=r2}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000280)={0x1ff, 0x2, 0x3, 0x0, 0x6, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x80000000001, 0x10001, 0x0, 0xc, 0xa88, 0x80000000000000, 0xcc3, 0x2, 0x1, 0x94d6, 0x0, 0x0, 0x809, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x0, 0x2000000000005}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$radio(&(0x7f0000000240), 0x3, 0x2) 2m46.25583179s ago: executing program 1 (id=2916): socket$kcm(0xa, 0x3, 0x87) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="400000000000000002004e22ac14142c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e20ac141410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000926320b038d86508e357382df0ef843f4e54db3499da6b27804817"], 0x110) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r6 = syz_open_pts(r5, 0x141601) fcntl$setstatus(r6, 0x4, 0x102800) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x19) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8, @loopback, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='e', 0x1}], 0x1}, 0x4048043) 2m45.992728249s ago: executing program 3 (id=2917): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) r2 = socket$inet(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000b40)) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r6}) ioctl$VHOST_NET_SET_BACKEND(r4, 0xaf02, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, 0x0, 0x0) 2m43.449424216s ago: executing program 1 (id=2921): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() pipe(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, r1, 0x4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='fuseblk\x00', 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40404}, 0x100) chdir(0x0) lchown(0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000280)={r5, r5, 0x1, 0x0, 0x0, 0x48, 0x41, 0x1000, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) ioctl$FICLONERANGE(r5, 0x4020940d, 0x0) 2m40.868361017s ago: executing program 3 (id=2928): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) 2m38.03806675s ago: executing program 3 (id=2932): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socket$kcm(0x2, 0x922000000001, 0x106) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_wait(r4, &(0x7f0000000340)=[{}], 0x1, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, 0x0) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) unshare(0x42000000) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000140)="e9bb917d5ffbe176842cac823ddde55f541befe6f979b7f7f2", 0x19, 0x1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, 0x3}, 0x10) 2m22.852164967s ago: executing program 32 (id=2932): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socket$kcm(0x2, 0x922000000001, 0x106) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_wait(r4, &(0x7f0000000340)=[{}], 0x1, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, 0x0) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) unshare(0x42000000) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000140)="e9bb917d5ffbe176842cac823ddde55f541befe6f979b7f7f2", 0x19, 0x1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, 0x3}, 0x10) 16.549966954s ago: executing program 2 (id=3148): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002240)=""/102400, 0x19000) setreuid(0x0, 0x0) timer_create(0x3, &(0x7f0000000080)={0x0, 0x22, 0x0, @thr={&(0x7f0000000300)="c77d103130dc79d5d1c9a21f59b4c30c2c208c5a2a1944b09f01664fa8f91a5f18f7af443f2aaf73f2bd51101d12ee8d9cba079af981c1742bb94c4c9103b2e106372a202bc656ffdf58f8a2bc956728e7667aa1386e877ac1d074975fab4fce9fad43261aa3ac30cda7b68e66f880821552ddfa0160a0748d425798", &(0x7f0000000480)}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x4040814) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, 0x0) gettid() 11.922795003s ago: executing program 4 (id=3155): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="d80000001b0001002dbd7000fddbdf2500000000000000000000000000000000ac1e00010000000000000000000000004e2200004e23000c0a000080320000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00080009000000008000000000000000f8ffffffffffffffff01000000000000010000000000000001000000000000800900000000000000000000008015010002000000000000000100000000000000fd002ceb3950466f6ff00000000000000700000000000000000002030000000029"], 0xd8}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x8010) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xdc) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)={0x60, 0x0, 0x3661e26ac249836a, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x60}}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) fsetxattr$smack_xattr_label(0xffffffffffffffff, &(0x7f0000000940)='security.SMACK64\x00', &(0x7f0000000980)=ANY=[@ANYBLOB=':\x00'], 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x4a) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000300)={0x1, 0x80, "3b8203", 0x4, 0x3}) 11.70557087s ago: executing program 4 (id=3156): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x14c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x6}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x118, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xf4, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '%!\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0xb8, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x85, 0x6, "0ef6a460a5bbda16e826eafe044d3376872c48b74ae60f057b238fb15e2207986c5639bfbc3d91ee00b5a433e95b6b3527d9711d16abc0abaea910bcdffe4d3ec14fb60880000000000000873a3f054bcbf1e53f85fe7aee4ccd90229e6ba2b45bd165ebd7929c21abcdf0b8d47ff6a950009bf4b1ef96863b19aaa1c52a12b02f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 11.082045052s ago: executing program 4 (id=3157): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket(0x1e, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000002100df4c2abd70c6270000220000e900104e88cb7634ce58ea22000000000100"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x1, "bf631e4b"}}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x2000, 0x3, 0x4, 0x0, 0xd, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "a730ba01"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) 10.64197272s ago: executing program 2 (id=3158): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) socket$inet6(0xa, 0x8000e, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8502, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x9) pread64(r1, &(0x7f0000000580)=""/199, 0xc7, 0x4) 9.498847231s ago: executing program 2 (id=3159): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c00128009000100626f6e640000f6ff0b00028005000100040000009ad80783087dd433770cefa8b283dcd0a628841974256875d657ea29aee445f5e3714bf6af9da2f10dd113acab001778c0d29dd37d5b8c5a042d572ba9b19726f4a4a803dc5955e2da5fbdb4c47a6ec8b24e198595905cf3e646be22ee3b4833d7320c3a1c9de025997a81907e538d1d9783d0a28e26772ac867645e62a33289c23003de7e6ca78bac48aa7acf30e23a54", @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 9.330637851s ago: executing program 2 (id=3160): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x7350, &(0x7f00000000c0)={0x0, 0x25bc, 0x100, 0x0, 0x215}, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x24020000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 8.076402902s ago: executing program 0 (id=3161): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000083c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x78, 0x0, 0xb, {0x8, 0x1, 0x0, {0x0, 0x7ff, 0xd09, 0xfe63, 0x3, 0x4, 0x4, 0x7, 0x4, 0x6000, 0x7, r0, r1, 0xcdb, 0x17}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}, @IFLA_GRE_LOCAL={0x14, 0x6, @loopback={0x300}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x11, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x400000000000, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.798336801s ago: executing program 2 (id=3162): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24", @ANYRES8=r4, @ANYRES64], 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) 7.475163875s ago: executing program 0 (id=3163): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1d4, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x6}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x110, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_POLICE={0x48, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffe}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0xfd12, 0x7f, 0xe, 0x6}, {0x800, 0xc0, 0x7, 0x6}, {0xf, 0x9, 0x2, 0x10000}, {0x5, 0x3, 0x5, 0x3}, {0x2, 0x4, 0x2, 0x8}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x3, 0x49, 0x7, 0x4}, {0x3, 0x9, 0x9, 0xb24}, {0x6, 0x8, 0x9, 0x6}]}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_POLICE={0x54, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x3, 0x3, 0x401, 0x9, {0xf, 0x2, 0x9f, 0x3ff, 0x3, 0x9}, {0xd, 0x3, 0x40, 0x7f, 0x0, 0x8}, 0xa, 0x8}}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x80000000}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x88, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x64, 0x1, [@m_simple={0x60, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '%!\x00'}]}, {0x29, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 7.228595331s ago: executing program 0 (id=3164): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="d80000001b0001002dbd7000fddbdf2500000000000000000000000000000000ac1e00010000000000000000000000004e2200004e23000c0a000080320000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00080009000000008000000000000000f8ffffffffffffffff01000000000000010000000000000001000000000000800900000000000000000000008015010002000000000000000100000000000000fd002ceb3950466f6ff00000000000000700000000000000000002030000000029"], 0xd8}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x8010) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xdc) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)={0x60, 0x0, 0x3661e26ac249836a, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x60}}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) fsetxattr$smack_xattr_label(0xffffffffffffffff, &(0x7f0000000940)='security.SMACK64\x00', &(0x7f0000000980)=ANY=[@ANYBLOB=':\x00'], 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x4a) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000300)={0x1, 0x80, "3b8203", 0x4, 0x3}) 6.974622673s ago: executing program 0 (id=3165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r1, 0x4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='fuseblk\x00', 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40404}, 0x100) chdir(0x0) lchown(0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000280)={r6, r6, 0x1, 0x0, 0x0, 0x48, 0x41, 0x1000, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) ioctl$FICLONERANGE(r6, 0x4020940d, 0x0) 5.147571844s ago: executing program 0 (id=3166): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002240)=""/102400, 0x19000) setreuid(0x0, 0x0) timer_create(0x3, &(0x7f0000000080)={0x0, 0x22, 0x0, @thr={&(0x7f0000000300)="c77d103130dc79d5d1c9a21f59b4c30c2c208c5a2a1944b09f01664fa8f91a5f18f7af443f2aaf73f2bd51101d12ee8d9cba079af981c1742bb94c4c9103b2e106372a202bc656ffdf58f8a2bc956728e7667aa1386e877ac1d074975fab4fce9fad43261aa3ac30cda7b68e66f880821552ddfa0160a0748d425798", &(0x7f0000000480)}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x4040814) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, 0x0) gettid() 4.570572928s ago: executing program 4 (id=3167): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) socket$inet6(0xa, 0x8000e, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8502, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x9) pread64(r1, &(0x7f0000000580)=""/199, 0xc7, 0x4) 4.426742279s ago: executing program 2 (id=3168): socket$kcm(0x2, 0x1000000000000002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x25, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xd231c4f959ad4808) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x6, 0xa8, @random="f900"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004044}, 0x0) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000000900)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0xa, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000280)}], 0x1}}], 0x1, 0x4000844) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=@newtfilter={0x488, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x450, 0x2, [@TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x9, 0x8, 0x0, {0x9, 0x2, 0x2, 0x7, 0x8000, 0x2}, {0x8, 0x2, 0x7, 0xf0, 0x1}, 0x0, 0x800003, 0xfffffff9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8, 0x3, 0x9, 0x4, 0x4, 0x4, 0x2, 0x0, 0x7, 0x16a, 0x6, 0x4, 0x5, 0x7fffffff, 0x6, 0x7b1, 0xb5, 0x3, 0x5, 0x0, 0x1, 0x7, 0x3, 0xe, 0xfff, 0x19, 0x3, 0xf8a3, 0xff, 0x3, 0x8, 0x2c1, 0x8, 0x6, 0xb, 0x639, 0x7, 0x3ff, 0x200, 0x8, 0xe, 0x3, 0xd65, 0x4, 0x2c, 0xb, 0xc10, 0xfb, 0x80000000, 0xc, 0xff, 0xffff, 0xffffffff, 0x7ff, 0x3, 0x1, 0x8, 0x2, 0xc, 0x3ff, 0xfff, 0xef, 0x662, 0xfff, 0x0, 0x8, 0x1, 0x7ff, 0x77, 0xd0dc, 0x1, 0x10, 0x3, 0x7, 0x2, 0x5, 0x80000000, 0x0, 0xfffffffb, 0x80000000, 0x57d, 0x5, 0x8, 0x1, 0x8, 0x4, 0x6, 0x1, 0x6, 0x3, 0x200, 0xae, 0x7, 0x8001, 0xe, 0xfffffffe, 0x7, 0x3, 0x8, 0x1, 0x8, 0x7fffffff, 0x6, 0x10001, 0x3, 0x10000, 0x0, 0x8, 0x846, 0x1ff, 0x9, 0x3ff, 0xfffffffa, 0x5, 0x400, 0xaa9, 0x81, 0x8001, 0x3, 0x2c18, 0x8, 0x9, 0x9, 0x0, 0x600, 0x4, 0x80000001, 0x800, 0x100, 0x7, 0x2, 0x32, 0x9, 0x7, 0x2, 0x7, 0x8, 0x4, 0x2, 0x40000000, 0x7f, 0x7, 0x4, 0x7, 0x2, 0x5, 0x5d41, 0x1, 0x4, 0x0, 0xb, 0x7, 0x200, 0x10001, 0x9, 0x401, 0x6, 0x1, 0x3, 0x8, 0x8, 0x8, 0x9, 0x0, 0x9, 0x4, 0xc, 0x800, 0x6, 0x8, 0x32e, 0x5, 0x5, 0x2, 0x40, 0x52, 0xfff, 0x6, 0x2, 0x0, 0x7, 0xd, 0x2, 0x1, 0x9, 0x0, 0xf, 0x8, 0x0, 0x1, 0x9, 0x1, 0x1576, 0x8001, 0x7, 0x5, 0x1, 0xcdd6, 0x0, 0x74, 0x8000, 0x80000001, 0x6, 0x5b, 0x7, 0x5, 0xccb9, 0x9b, 0xffff8bf5, 0x7, 0x0, 0x8001, 0x9, 0x5, 0x1000, 0x4, 0x8, 0x29, 0x665, 0x8, 0x9, 0x7, 0x6, 0x5c, 0x80, 0xffffffff, 0x4, 0xa000, 0x3, 0x7e8, 0x86f070e5, 0x401, 0x6, 0x4, 0x10, 0x2, 0x3, 0x6, 0x5, 0x5, 0x5, 0x1000, 0xd0, 0x5, 0x10, 0x1e70, 0x4, 0xdbc, 0x1, 0x80000000, 0x8000, 0xff, 0x4, 0xcca, 0x827]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x488}, 0x1, 0x0, 0x0, 0xc0c3}, 0x800) 3.296378785s ago: executing program 4 (id=3169): r0 = syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000206b1d010140000102030109025f0003010000000904000000"], 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xb}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00033800000038036cbd87551224e3c8275152be915e9ccf0428ac904e711e9a29ebe9624df68af5025c0b2c4f"]}, 0x0) 1.193039843s ago: executing program 0 (id=3170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r1, 0x4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='fuseblk\x00', 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40404}, 0x100) chdir(0x0) lchown(0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000280)={r6, r6, 0x1, 0x0, 0x0, 0x48, 0x41, 0x1000, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) ioctl$FICLONERANGE(r6, 0x4020940d, 0x0) 0s ago: executing program 4 (id=3171): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x7350, &(0x7f00000000c0)={0x0, 0x25bc, 0x100, 0x0, 0x215}, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x24020000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) kernel console output (not intermixed with test programs): : Mfr=1, Product=2, SerialNumber=3 [ 718.590078][ T5957] usb 2-1: Product: syz [ 718.590085][ T5957] usb 2-1: Manufacturer: syz [ 718.590093][ T5957] usb 2-1: SerialNumber: syz [ 718.593981][ T5957] usb 2-1: config 0 descriptor?? [ 719.182021][ T5957] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 719.846875][ T5957] gspca_ov534_9: reg_w failed -110 [ 720.295945][ T5957] gspca_ov534_9: Unknown sensor 0000 [ 720.296050][ T5957] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 721.465930][ T10] usb 2-1: USB disconnect, device number 27 [ 722.150340][T13992] fuse: Unknown parameter 'group_id00000000000000000000' [ 722.417969][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 722.919813][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 722.919842][ T10] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 722.919862][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 722.919916][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 722.919942][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 722.921825][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 722.921853][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 722.921873][ T10] usb 2-1: Product: syz [ 722.921887][ T10] usb 2-1: Manufacturer: syz [ 723.179751][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 723.179766][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 723.218459][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 723.218482][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 724.963423][T14013] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 725.926029][T14020] EXT4-fs: Conflicting test_dummy_encryption options [ 725.936328][T14020] fuse: Unknown parameter '00000000000000000005' [ 726.143895][ T10] usb 2-1: USB disconnect, device number 28 [ 726.209055][ T5885] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 726.652611][ T5885] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 726.652630][ T5885] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 726.652640][ T5885] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 726.652669][ T5885] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 726.652682][ T5885] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 726.656423][ T5885] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 726.656440][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 726.656451][ T5885] usb 1-1: Product: syz [ 726.656458][ T5885] usb 1-1: Manufacturer: syz [ 726.815252][ T5885] cdc_wdm 1-1:1.0: skipping garbage [ 726.815272][ T5885] cdc_wdm 1-1:1.0: skipping garbage [ 726.817650][ T5885] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 726.817668][ T5885] cdc_wdm 1-1:1.0: Unknown control protocol [ 727.913722][T14037] EXT4-fs: Conflicting test_dummy_encryption options [ 727.932068][T14037] fuse: Unknown parameter '00000000000000000005' [ 728.537935][ T5885] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 728.710147][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -EPIPE [ 728.776870][ T5885] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 728.776895][ T5885] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 728.776905][ T5885] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 728.776943][ T5885] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 728.777205][ T5885] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 729.569489][ T5885] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 729.569517][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 729.569535][ T5885] usb 5-1: Product: syz [ 729.569548][ T5885] usb 5-1: Manufacturer: syz [ 729.623405][ T5885] cdc_wdm 5-1:1.0: skipping garbage [ 729.623426][ T5885] cdc_wdm 5-1:1.0: skipping garbage [ 729.649206][ T5885] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 729.649229][ T5885] cdc_wdm 5-1:1.0: Unknown control protocol [ 729.660204][T13831] usb 1-1: USB disconnect, device number 42 [ 731.643489][ T9402] usb 5-1: USB disconnect, device number 41 [ 731.817932][T13831] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 732.078965][T13831] usb 1-1: config 7 has an invalid interface number: 101 but max is 0 [ 732.079046][T13831] usb 1-1: config 7 has no interface number 0 [ 732.731703][T13831] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 732.731725][T13831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.731735][T13831] usb 1-1: Product: syz [ 732.731742][T13831] usb 1-1: Manufacturer: syz [ 732.731750][T13831] usb 1-1: SerialNumber: syz [ 733.136383][T14074] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 733.138030][ T9402] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 733.297928][ T9402] usb 5-1: Using ep0 maxpacket: 32 [ 733.306267][ T9402] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 733.306288][ T9402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.306308][ T9402] usb 5-1: Product: syz [ 733.306321][ T9402] usb 5-1: Manufacturer: syz [ 733.306334][ T9402] usb 5-1: SerialNumber: syz [ 733.322891][ T9402] usb 5-1: config 0 descriptor?? [ 733.332517][ T9402] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 733.756197][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 733.756216][ T37] audit: type=1326 audit(1765198435.087:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14070 comm="syz.3.2486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a653cf749 code=0x0 [ 734.402017][ T5806] Bluetooth: hci3: command 0x0406 tx timeout [ 734.403675][ T9402] gspca_ov534_9: reg_w failed -110 [ 734.648229][T13831] as10x_usb: device has been detected [ 734.649702][T13831] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 734.736022][T13831] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 734.818121][ T9402] gspca_ov534_9: Unknown sensor 0000 [ 734.818209][ T9402] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 734.857722][T13831] as10x_usb: error during firmware upload part1 [ 734.865385][T13831] Registered device Elgato EyeTV DTT Deluxe [ 734.882285][T13831] usb 1-1: USB disconnect, device number 43 [ 734.920889][T13831] Unregistered device Elgato EyeTV DTT Deluxe [ 734.922234][T13831] as10x_usb: device has been disconnected [ 735.388649][ T37] audit: type=1326 audit(1765198436.817:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14067 comm="syz.4.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778df0f749 code=0x7ffc0000 [ 735.389533][ T37] audit: type=1326 audit(1765198436.817:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14067 comm="syz.4.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778df0f749 code=0x7ffc0000 [ 735.635531][ T37] audit: type=1326 audit(1765198437.057:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14067 comm="syz.4.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f778df0df90 code=0x7ffc0000 [ 735.635960][ T37] audit: type=1326 audit(1765198437.057:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14067 comm="syz.4.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778df0f749 code=0x7ffc0000 [ 735.636933][ T37] audit: type=1326 audit(1765198437.057:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14067 comm="syz.4.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f778df0f749 code=0x7ffc0000 [ 735.636977][ T37] audit: type=1326 audit(1765198437.057:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14067 comm="syz.4.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778df0f749 code=0x7ffc0000 [ 735.738905][T14084] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2487'. [ 735.742448][ T37] audit: type=1326 audit(1765198437.167:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14067 comm="syz.4.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f778df0e1ff code=0x7ffc0000 [ 735.807996][ T37] audit: type=1326 audit(1765198437.187:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14067 comm="syz.4.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778df0f749 code=0x7ffc0000 [ 735.808052][ T37] audit: type=1326 audit(1765198437.217:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14067 comm="syz.4.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778df0f749 code=0x7ffc0000 [ 736.226790][T13831] usb 5-1: USB disconnect, device number 42 [ 737.917940][ T9402] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 738.072044][ T9402] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 738.072074][ T9402] usb 3-1: config 7 has no interface number 0 [ 738.079453][ T9402] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 738.079482][ T9402] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.079500][ T9402] usb 3-1: Product: syz [ 738.079514][ T9402] usb 3-1: Manufacturer: syz [ 738.079526][ T9402] usb 3-1: SerialNumber: syz [ 738.912628][T14104] lo speed is unknown, defaulting to 1000 [ 740.352239][ T9402] as10x_usb: device has been detected [ 740.353249][ T9402] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 740.406432][ T9402] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 740.442022][ T9402] as10x_usb: error during firmware upload part1 [ 740.444771][ T9402] Registered device Elgato EyeTV DTT Deluxe [ 740.518254][ T9402] usb 3-1: USB disconnect, device number 36 [ 740.590938][ T9402] Unregistered device Elgato EyeTV DTT Deluxe [ 740.663572][T14126] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 740.719760][ T9402] as10x_usb: device has been disconnected [ 743.122930][T14148] input: syz1 as /devices/virtual/input/input38 [ 743.843866][ T37] audit: type=1326 audit(1765198445.267:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14142 comm="syz.1.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e908f749 code=0x7ffc0000 [ 743.844100][ T37] audit: type=1326 audit(1765198445.267:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14142 comm="syz.1.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f64e908f749 code=0x7ffc0000 [ 744.691377][ T37] audit: type=1326 audit(1765198445.267:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14142 comm="syz.1.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e908f749 code=0x7ffc0000 [ 744.691445][ T37] audit: type=1326 audit(1765198445.267:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14142 comm="syz.1.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f64e908f749 code=0x7ffc0000 [ 744.691570][ T37] audit: type=1326 audit(1765198445.267:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14142 comm="syz.1.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e908f749 code=0x7ffc0000 [ 744.691703][ T37] audit: type=1326 audit(1765198445.267:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14142 comm="syz.1.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f64e908f749 code=0x7ffc0000 [ 744.847993][ T37] audit: type=1326 audit(1765198446.237:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14142 comm="syz.1.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e908f749 code=0x7ffc0000 [ 745.189932][ T37] audit: type=1326 audit(1765198446.307:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14142 comm="syz.1.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e908f749 code=0x7ffc0000 [ 745.189984][ T37] audit: type=1326 audit(1765198446.607:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14142 comm="syz.1.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64e908f749 code=0x7ffc0000 [ 745.190028][ T37] audit: type=1326 audit(1765198446.617:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14142 comm="syz.1.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e908f749 code=0x7ffc0000 [ 746.350650][T14145] lo speed is unknown, defaulting to 1000 [ 746.488027][ T5885] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 746.641295][ T5885] usb 1-1: config 7 has an invalid interface number: 101 but max is 0 [ 746.641314][ T5885] usb 1-1: config 7 has no interface number 0 [ 746.643739][ T5885] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 746.643768][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.643787][ T5885] usb 1-1: Product: syz [ 746.643801][ T5885] usb 1-1: Manufacturer: syz [ 746.643815][ T5885] usb 1-1: SerialNumber: syz [ 746.966314][T14175] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2511'. [ 747.630574][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.630643][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.618326][ T5885] as10x_usb: device has been detected [ 748.771217][ T5885] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 748.907426][T14184] fuse: Unknown parameter '00000000000000000006' [ 749.015149][ T5885] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 749.114898][ T5885] as10x_usb: error during firmware upload part1 [ 749.115296][ T5885] Registered device Elgato EyeTV DTT Deluxe [ 749.220390][ T5885] usb 1-1: USB disconnect, device number 44 [ 749.380749][ T5885] Unregistered device Elgato EyeTV DTT Deluxe [ 749.390264][ T5885] as10x_usb: device has been disconnected [ 749.777964][ T5885] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 749.929761][ T5885] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 749.929791][ T5885] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 749.929810][ T5885] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 749.929844][ T5885] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 749.929858][ T5885] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 749.931539][ T5885] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 749.931556][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 749.931567][ T5885] usb 1-1: Product: syz [ 749.931574][ T5885] usb 1-1: Manufacturer: syz [ 750.039837][ T5885] cdc_wdm 1-1:1.0: skipping garbage [ 750.039855][ T5885] cdc_wdm 1-1:1.0: skipping garbage [ 750.133184][ T5885] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 750.133198][ T5885] cdc_wdm 1-1:1.0: Unknown control protocol [ 750.633313][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -EPIPE [ 750.838757][ T9403] usb 1-1: USB disconnect, device number 45 [ 752.306471][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 752.306489][ T37] audit: type=1326 audit(1765198453.727:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14207 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7032f749 code=0x7ffc0000 [ 752.306535][ T37] audit: type=1326 audit(1765198453.727:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14207 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7032f749 code=0x7ffc0000 [ 752.306560][ T37] audit: type=1326 audit(1765198453.727:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14207 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6b7032f749 code=0x7ffc0000 [ 752.306582][ T37] audit: type=1326 audit(1765198453.727:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14207 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7032f749 code=0x7ffc0000 [ 752.306604][ T37] audit: type=1326 audit(1765198453.727:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14207 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7032f749 code=0x7ffc0000 [ 752.306626][ T37] audit: type=1326 audit(1765198453.727:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14207 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f6b7032f749 code=0x7ffc0000 [ 752.306647][ T37] audit: type=1326 audit(1765198453.727:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14207 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7032f749 code=0x7ffc0000 [ 752.306669][ T37] audit: type=1326 audit(1765198453.727:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14207 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7032f749 code=0x7ffc0000 [ 752.306692][ T37] audit: type=1326 audit(1765198453.727:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14207 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f6b7032f749 code=0x7ffc0000 [ 752.387181][ T37] audit: type=1326 audit(1765198453.807:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14207 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7032f749 code=0x7ffc0000 [ 757.376485][ T37] kauditd_printk_skb: 28 callbacks suppressed [ 757.376502][ T37] audit: type=1326 audit(1765198458.797:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14237 comm="syz.1.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64e908f749 code=0x7ffc0000 [ 757.380090][ T37] audit: type=1326 audit(1765198458.797:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14237 comm="syz.1.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e908f749 code=0x7ffc0000 [ 757.380430][ T37] audit: type=1326 audit(1765198458.807:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14237 comm="syz.1.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e908f749 code=0x7ffc0000 [ 757.386594][ T37] audit: type=1326 audit(1765198458.807:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14237 comm="syz.1.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f64e908e1ff code=0x7ffc0000 [ 757.387031][ T37] audit: type=1326 audit(1765198458.807:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14237 comm="syz.1.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e908f749 code=0x7ffc0000 [ 757.387390][ T37] audit: type=1326 audit(1765198458.807:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14237 comm="syz.1.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e908f749 code=0x7ffc0000 [ 757.388742][ T37] audit: type=1326 audit(1765198458.817:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14237 comm="syz.1.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f64e908f749 code=0x7ffc0000 [ 757.717956][ T9176] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 757.855561][ T37] audit: type=1326 audit(1765198459.277:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14237 comm="syz.1.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e908f749 code=0x7ffc0000 [ 757.855922][ T37] audit: type=1326 audit(1765198459.277:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14237 comm="syz.1.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f64e908f749 code=0x7ffc0000 [ 757.868134][ T37] audit: type=1326 audit(1765198459.277:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14237 comm="syz.1.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e908f749 code=0x7ffc0000 [ 757.945900][ T9176] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 757.945921][ T9176] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.945932][ T9176] usb 1-1: Product: syz [ 757.945939][ T9176] usb 1-1: Manufacturer: syz [ 757.945947][ T9176] usb 1-1: SerialNumber: syz [ 757.950548][ T9176] usb 1-1: config 0 descriptor?? [ 759.412769][ T9176] airspy 1-1:0.0: usb_control_msg() failed -110 request 0a [ 759.412788][ T9176] airspy 1-1:0.0: Could not detect board [ 759.412851][ T9176] airspy 1-1:0.0: probe with driver airspy failed with error -110 [ 760.498357][T14046] usb 1-1: USB disconnect, device number 46 [ 761.158996][T14291] input: syz1 as /devices/virtual/input/input39 [ 762.459005][ T9176] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 762.670205][ T9176] usb 2-1: config 7 has an invalid interface number: 101 but max is 0 [ 762.670234][ T9176] usb 2-1: config 7 has no interface number 0 [ 762.672788][ T9176] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 762.672815][ T9176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.672832][ T9176] usb 2-1: Product: syz [ 762.672840][ T9176] usb 2-1: Manufacturer: syz [ 762.672847][ T9176] usb 2-1: SerialNumber: syz [ 764.463715][ T9176] as10x_usb: device has been detected [ 764.464802][ T9176] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 764.507569][ T9176] usb 2-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 764.610787][ T9176] as10x_usb: error during firmware upload part1 [ 764.611204][ T9176] Registered device Elgato EyeTV DTT Deluxe [ 764.638134][ T9176] usb 2-1: USB disconnect, device number 29 [ 764.720871][ T9176] Unregistered device Elgato EyeTV DTT Deluxe [ 764.748831][ T9176] as10x_usb: device has been disconnected [ 765.821905][T14320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2553'. [ 767.370372][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 767.370389][ T37] audit: type=1326 audit(1765198468.797:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14323 comm="syz.4.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778df0f749 code=0x7ffc0000 [ 767.370604][ T37] audit: type=1326 audit(1765198468.797:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14323 comm="syz.4.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778df0f749 code=0x7ffc0000 [ 767.371105][ T37] audit: type=1326 audit(1765198468.797:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14323 comm="syz.4.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f778df0f749 code=0x7ffc0000 [ 767.372168][ T37] audit: type=1326 audit(1765198468.797:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14323 comm="syz.4.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778df0f749 code=0x7ffc0000 [ 767.372197][ T37] audit: type=1326 audit(1765198468.797:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14323 comm="syz.4.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778df0f749 code=0x7ffc0000 [ 767.372220][ T37] audit: type=1326 audit(1765198468.797:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14323 comm="syz.4.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f778df0f749 code=0x7ffc0000 [ 767.372243][ T37] audit: type=1326 audit(1765198468.797:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14323 comm="syz.4.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778df0f749 code=0x7ffc0000 [ 767.372265][ T37] audit: type=1326 audit(1765198468.797:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14323 comm="syz.4.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778df0f749 code=0x7ffc0000 [ 767.372784][ T37] audit: type=1326 audit(1765198468.797:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14323 comm="syz.4.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f778df0f749 code=0x7ffc0000 [ 768.003689][T14342] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2559'. [ 768.003954][T14337] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2559'. [ 768.098180][ T37] audit: type=1326 audit(1765198469.517:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14323 comm="syz.4.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778df0f749 code=0x7ffc0000 [ 770.768342][T14366] binder: 14365:14366 ioctl c0306201 0 returned -14 [ 773.669311][T13831] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 773.823677][T13831] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 773.823707][T13831] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 773.826704][T13831] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 773.826732][T13831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.826754][T13831] usb 1-1: Product: syz [ 773.826768][T13831] usb 1-1: Manufacturer: syz [ 773.826782][T13831] usb 1-1: SerialNumber: syz [ 774.269133][T13831] usb 1-1: cannot find UAC_HEADER [ 774.889851][T13831] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 774.904595][T13831] usb 1-1: USB disconnect, device number 47 [ 774.978606][T14398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2574'. [ 775.004034][T14364] udevd[14364]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 777.074789][T14423] lo speed is unknown, defaulting to 1000 [ 780.037545][T14453] fuse: Unknown parameter '00000000000000000005' [ 780.297965][ T5885] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 780.452061][ T5885] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 780.452092][ T5885] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 780.452111][ T5885] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 780.452168][ T5885] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 780.452199][ T5885] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 780.454236][ T5885] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 780.454252][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 780.454263][ T5885] usb 1-1: Product: syz [ 780.454270][ T5885] usb 1-1: Manufacturer: syz [ 780.541697][ T5885] cdc_wdm 1-1:1.0: skipping garbage [ 780.541709][ T5885] cdc_wdm 1-1:1.0: skipping garbage [ 780.545202][ T5885] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 780.545222][ T5885] cdc_wdm 1-1:1.0: Unknown control protocol [ 781.240490][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -EPIPE [ 781.568495][T13831] usb 1-1: USB disconnect, device number 48 [ 783.664499][T14477] fuse: Unknown parameter '00000000000000000005' [ 784.288010][T13831] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 784.452191][T13831] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 784.452220][T13831] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 784.452238][T13831] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 784.452291][T13831] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 784.452316][T13831] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 784.455843][T13831] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 784.455873][T13831] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 784.455892][T13831] usb 4-1: Product: syz [ 784.455905][T13831] usb 4-1: Manufacturer: syz [ 784.507490][T13831] cdc_wdm 4-1:1.0: skipping garbage [ 784.507511][T13831] cdc_wdm 4-1:1.0: skipping garbage [ 784.532294][T13831] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 784.532318][T13831] cdc_wdm 4-1:1.0: Unknown control protocol [ 785.434941][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE [ 785.707449][ T9176] usb 4-1: USB disconnect, device number 46 [ 786.318709][T14498] input: syz1 as /devices/virtual/input/input40 [ 794.295490][T14553] fuse: Unknown parameter '00000000000000000006' [ 794.923926][ T5885] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 795.196021][ T5885] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 795.196041][ T5885] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 795.196051][ T5885] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 795.196081][ T5885] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 795.196095][ T5885] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 795.197679][ T5885] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 795.197695][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 795.197705][ T5885] usb 2-1: Product: syz [ 795.197713][ T5885] usb 2-1: Manufacturer: syz [ 795.287920][ T9176] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 795.320635][ T5885] cdc_wdm 2-1:1.0: skipping garbage [ 795.320649][ T5885] cdc_wdm 2-1:1.0: skipping garbage [ 795.355712][ T5885] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 795.355735][ T5885] cdc_wdm 2-1:1.0: Unknown control protocol [ 795.475512][ T9176] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 795.475626][ T9176] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.475646][ T9176] usb 1-1: Product: syz [ 795.475660][ T9176] usb 1-1: Manufacturer: syz [ 795.475674][ T9176] usb 1-1: SerialNumber: syz [ 795.479508][ T9176] usb 1-1: config 0 descriptor?? [ 796.167346][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE [ 796.501319][T13831] usb 2-1: USB disconnect, device number 30 [ 796.989310][ T9176] airspy 1-1:0.0: usb_control_msg() failed -110 request 0a [ 796.990423][ T9176] airspy 1-1:0.0: Could not detect board [ 796.990530][ T9176] airspy 1-1:0.0: probe with driver airspy failed with error -110 [ 801.282306][T13831] usb 1-1: USB disconnect, device number 49 [ 802.921548][T14625] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2635'. [ 803.557416][ T9403] IPVS: starting estimator thread 0... [ 803.658057][T14630] IPVS: using max 8 ests per chain, 19200 per kthread [ 806.367993][ T9403] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 806.528573][ T9403] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 806.528593][ T9403] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.528603][ T9403] usb 1-1: Product: syz [ 806.528611][ T9403] usb 1-1: Manufacturer: syz [ 806.528619][ T9403] usb 1-1: SerialNumber: syz [ 806.534711][ T9403] usb 1-1: config 0 descriptor?? [ 806.579393][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 806.590357][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 806.605456][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 806.626881][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 806.637225][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 806.983659][T14650] lo speed is unknown, defaulting to 1000 [ 807.091734][ T9403] airspy 1-1:0.0: usb_control_msg() failed -71 request 0a [ 807.091753][ T9403] airspy 1-1:0.0: Could not detect board [ 807.091817][ T9403] airspy 1-1:0.0: probe with driver airspy failed with error -71 [ 807.196598][ T9403] usb 1-1: USB disconnect, device number 50 [ 808.753802][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.753874][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.830380][ T61] Bluetooth: hci5: command tx timeout [ 809.336018][T14672] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2647'. [ 809.614131][T14675] fuse: Unknown parameter '00000000000000000006' [ 809.877966][ T9176] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 810.716108][ T9176] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 810.716136][ T9176] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 810.716154][ T9176] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 810.716235][ T9176] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 810.716271][ T9176] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 810.782331][ T9176] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 810.782358][ T9176] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 810.782375][ T9176] usb 1-1: Product: syz [ 810.782388][ T9176] usb 1-1: Manufacturer: syz [ 810.809347][ T9176] cdc_wdm 1-1:1.0: skipping garbage [ 810.809365][ T9176] cdc_wdm 1-1:1.0: skipping garbage [ 810.824850][ T9176] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 810.824872][ T9176] cdc_wdm 1-1:1.0: Unknown control protocol [ 810.908172][ T61] Bluetooth: hci5: command tx timeout [ 812.172327][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -EPIPE [ 812.976869][ T5885] usb 1-1: USB disconnect, device number 51 [ 812.988032][ T61] Bluetooth: hci5: command tx timeout [ 813.231313][T14650] chnl_net:caif_netlink_parms(): no params data found [ 813.579600][T14707] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2657'. [ 813.873944][T14718] fuse: Unknown parameter '00000000000000000006' [ 814.008083][T13831] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 814.127955][T14046] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 814.171380][T13831] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 814.171409][T13831] usb 2-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 814.171427][T13831] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 814.171479][T13831] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 814.222352][T13831] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 814.222383][T13831] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 814.222403][T13831] usb 2-1: Product: syz [ 814.222417][T13831] usb 2-1: Manufacturer: syz [ 814.226049][T14650] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.226180][T14650] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.226425][T14650] bridge_slave_0: entered allmulticast mode [ 814.236465][T14650] bridge_slave_0: entered promiscuous mode [ 814.260895][T14650] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.271652][T14650] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.271913][T14650] bridge_slave_1: entered allmulticast mode [ 814.282185][T14046] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 814.282211][T14046] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 814.282229][T14046] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 814.282278][T14046] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 814.282303][T14046] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 814.284046][T14046] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 814.284071][T14046] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 814.284089][T14046] usb 3-1: Product: syz [ 814.284103][T14046] usb 3-1: Manufacturer: syz [ 814.296974][T13831] cdc_wdm 2-1:1.0: skipping garbage [ 814.296993][T13831] cdc_wdm 2-1:1.0: skipping garbage [ 814.297026][T13831] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 814.340653][T14046] cdc_wdm 3-1:1.0: skipping garbage [ 814.340672][T14046] cdc_wdm 3-1:1.0: skipping garbage [ 814.349701][T14650] bridge_slave_1: entered promiscuous mode [ 814.368500][T14046] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 814.368520][T14046] cdc_wdm 3-1:1.0: Unknown control protocol [ 814.527565][ T10] usb 2-1: USB disconnect, device number 31 [ 814.600580][ T3514] bridge_slave_1: left allmulticast mode [ 814.600790][ T3514] bridge_slave_1: left promiscuous mode [ 814.627656][ T3514] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.018767][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE [ 815.070272][ T61] Bluetooth: hci5: command tx timeout [ 815.222056][ T10] usb 3-1: USB disconnect, device number 37 [ 818.808734][ T3514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 818.848467][ T3514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 818.868689][ T3514] bond0 (unregistering): Released all slaves [ 819.770527][ T3514] bond1 (unregistering): Released all slaves [ 820.629843][ T3514] bond2 (unregistering): Released all slaves [ 820.804784][T14764] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2668'. [ 820.804868][ T3514] tipc: Disabling bearer [ 820.809752][ T3514] tipc: Left network mode [ 820.814206][T14650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.858259][T14751] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2666'. [ 820.858498][T14761] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2666'. [ 820.921443][T14650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.620371][T14046] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 821.772084][T14046] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 821.772113][T14046] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 821.772130][T14046] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 821.772183][T14046] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 821.775064][T14046] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 821.775092][T14046] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 821.775112][T14046] usb 1-1: Product: syz [ 821.775124][T14046] usb 1-1: Manufacturer: syz [ 821.843459][T14650] team0: Port device team_slave_0 added [ 821.876100][T14046] cdc_wdm 1-1:1.0: skipping garbage [ 821.876114][T14046] cdc_wdm 1-1:1.0: skipping garbage [ 821.876120][T14046] cdc_wdm 1-1:1.0: skipping garbage [ 821.876138][T14046] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 821.984407][T14650] team0: Port device team_slave_1 added [ 822.091816][ T9176] usb 1-1: USB disconnect, device number 52 [ 823.295155][T14650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.295167][T14650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.295182][T14650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.296776][T14650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.296787][T14650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.296801][T14650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.120161][T14803] mmap: syz.0.2678 (14803) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 824.886246][T14650] hsr_slave_0: entered promiscuous mode [ 824.898477][T14650] hsr_slave_1: entered promiscuous mode [ 824.946218][T14650] debugfs: 'hsr0' already exists in 'hsr' [ 824.946248][T14650] Cannot create hsr debugfs directory [ 824.946478][T14812] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2680'. [ 826.067983][ T3514] hsr_slave_0: left promiscuous mode [ 826.108116][ T3514] hsr_slave_1: left promiscuous mode [ 826.113711][ T3514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 827.588394][ T9176] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 827.782067][ T9176] usb 2-1: Using ep0 maxpacket: 32 [ 827.954541][ T9176] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 827.954573][ T9176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.954593][ T9176] usb 2-1: Product: syz [ 827.954607][ T9176] usb 2-1: Manufacturer: syz [ 827.954621][ T9176] usb 2-1: SerialNumber: syz [ 827.981269][ T9176] usb 2-1: config 0 descriptor?? [ 828.002826][ T9176] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 828.186607][T14876] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 829.051904][ T9176] gspca_ov534_9: reg_w failed -110 [ 829.321314][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 829.321331][ T37] audit: type=1326 audit(1765198530.747:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14864 comm="syz.1.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e908f749 code=0x7ffc0000 [ 829.322058][ T37] audit: type=1326 audit(1765198530.747:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14864 comm="syz.1.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f64e908f749 code=0x7ffc0000 [ 829.323440][ T37] audit: type=1326 audit(1765198530.747:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14864 comm="syz.1.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e908f749 code=0x7ffc0000 [ 829.323481][ T37] audit: type=1326 audit(1765198530.747:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14864 comm="syz.1.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f64e908f749 code=0x7ffc0000 [ 829.323506][ T37] audit: type=1326 audit(1765198530.747:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14864 comm="syz.1.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e908f749 code=0x7ffc0000 [ 829.323528][ T37] audit: type=1326 audit(1765198530.747:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14864 comm="syz.1.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f64e908f749 code=0x7ffc0000 [ 829.337906][ T9176] gspca_ov534_9: Unknown sensor 0000 [ 829.338009][ T9176] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 829.718136][ T37] audit: type=1326 audit(1765198531.137:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14864 comm="syz.1.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e908f749 code=0x7ffc0000 [ 829.718463][ T37] audit: type=1326 audit(1765198531.147:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14864 comm="syz.1.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e908f749 code=0x7ffc0000 [ 829.957988][T14046] usb 2-1: USB disconnect, device number 32 [ 831.701877][ T3514] team0 (unregistering): Port device team_slave_1 removed [ 831.990364][ T3514] team0 (unregistering): Port device team_slave_0 removed [ 836.757902][ T9176] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 837.135619][T14046] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 837.137682][ T9176] usb 1-1: config 7 has an invalid interface number: 101 but max is 0 [ 837.137708][ T9176] usb 1-1: config 7 has no interface number 0 [ 837.172486][ T9176] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 837.172516][ T9176] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.172536][ T9176] usb 1-1: Product: syz [ 837.172550][ T9176] usb 1-1: Manufacturer: syz [ 837.172560][ T9176] usb 1-1: SerialNumber: syz [ 837.317909][T14046] usb 4-1: Using ep0 maxpacket: 32 [ 837.323452][T14046] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 837.323482][T14046] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.323501][T14046] usb 4-1: Product: syz [ 837.323515][T14046] usb 4-1: Manufacturer: syz [ 837.323529][T14046] usb 4-1: SerialNumber: syz [ 837.372392][T14046] usb 4-1: config 0 descriptor?? [ 837.377755][T14046] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 838.793464][T14046] gspca_ov534_9: reg_w failed -110 [ 838.878173][ T9176] as10x_usb: device has been detected [ 838.878736][ T9176] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 838.941444][ T9176] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 838.960204][ T9176] as10x_usb: error during firmware upload part1 [ 838.960908][ T9176] Registered device Elgato EyeTV DTT Deluxe [ 838.998142][ T9176] usb 1-1: USB disconnect, device number 53 [ 839.147936][T14046] gspca_ov534_9: Unknown sensor 0000 [ 839.148039][T14046] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 839.297432][ T9176] Unregistered device Elgato EyeTV DTT Deluxe [ 840.064231][ T9176] as10x_usb: device has been disconnected [ 840.306425][ T9176] usb 4-1: USB disconnect, device number 47 [ 840.457698][ T3514] IPVS: stop unused estimator thread 0... [ 841.001299][T14961] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2705'. [ 842.789402][T14981] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2709'. [ 844.112864][T14650] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 844.234701][T14650] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 844.511553][T14650] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 844.810549][T14650] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 846.668631][T14650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 847.142687][T14650] 8021q: adding VLAN 0 to HW filter on device team0 [ 847.149321][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.149526][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.277901][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.277987][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.061941][T15045] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2716'. [ 849.976242][T14650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.378840][T14650] veth0_vlan: entered promiscuous mode [ 851.400736][T14650] veth1_vlan: entered promiscuous mode [ 851.553818][T14650] veth0_macvtap: entered promiscuous mode [ 851.577426][T14650] veth1_macvtap: entered promiscuous mode [ 851.778338][T14650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 851.876852][T14650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 851.937118][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.951180][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.951223][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.951255][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.679404][T15103] fuse: Unknown parameter '00000000000000000006' [ 854.067918][ T5885] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 854.310581][ T5885] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 854.310612][ T5885] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 854.310630][ T5885] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 854.310685][ T5885] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 854.310711][ T5885] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 854.313356][ T5885] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 854.313383][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 854.313401][ T5885] usb 4-1: Product: syz [ 854.313414][ T5885] usb 4-1: Manufacturer: syz [ 854.374785][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.384159][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.446027][ T5885] cdc_wdm 4-1:1.0: skipping garbage [ 854.446048][ T5885] cdc_wdm 4-1:1.0: skipping garbage [ 854.458483][ T5885] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 854.458496][ T5885] cdc_wdm 4-1:1.0: Unknown control protocol [ 854.631405][T15118] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 854.778234][ T1437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.778255][ T1437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.169663][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE [ 855.455558][ T9176] usb 4-1: USB disconnect, device number 48 [ 857.178077][T15137] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2728'. [ 869.732235][ T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 869.892290][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.892310][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.892332][ T10] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 869.892345][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.895468][ T10] usb 4-1: config 0 descriptor?? [ 870.260309][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.261941][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.643177][ T10] hid_parser_main: 5 callbacks suppressed [ 870.643196][ T10] hid-led 0003:1D34:000A.001E: unknown main item tag 0x0 [ 870.643214][ T10] hid-led 0003:1D34:000A.001E: unknown main item tag 0x0 [ 870.643230][ T10] hid-led 0003:1D34:000A.001E: unknown main item tag 0x0 [ 870.793705][ T10] hid-led 0003:1D34:000A.001E: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 870.892437][ T10] hid-led 0003:1D34:000A.001E: Dream Cheeky Webmail Notifier initialized [ 871.023207][ T9743] usb 4-1: USB disconnect, device number 49 [ 871.103147][T15280] fido_id[15280]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 875.465662][T15316] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2766'. [ 883.249384][ T9743] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 883.774289][ T9743] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 883.774319][ T9743] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 883.774339][ T9743] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 883.774390][ T9743] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 883.774416][ T9743] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 883.776067][ T9743] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 883.776083][ T9743] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 883.776093][ T9743] usb 4-1: Product: syz [ 883.776100][ T9743] usb 4-1: Manufacturer: syz [ 883.932251][ T9743] cdc_wdm 4-1:1.0: skipping garbage [ 883.932271][ T9743] cdc_wdm 4-1:1.0: skipping garbage [ 883.973627][ T9743] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 883.973649][ T9743] cdc_wdm 4-1:1.0: Unknown control protocol [ 884.096552][ C1] wdm_int_callback: 64 callbacks suppressed [ 884.096571][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 884.300620][T14046] usb 4-1: USB disconnect, device number 50 [ 884.540229][ T9743] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 885.372189][ T9743] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 885.372217][ T9743] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 885.375022][ T9743] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 885.375090][ T9743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.375110][ T9743] usb 1-1: Product: syz [ 885.375122][ T9743] usb 1-1: Manufacturer: syz [ 885.375135][ T9743] usb 1-1: SerialNumber: syz [ 885.819305][ T9743] usb 1-1: cannot find UAC_HEADER [ 886.250160][ T9743] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 886.378657][ T9743] usb 1-1: USB disconnect, device number 54 [ 886.632565][T15381] udevd[15381]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 887.424393][T15413] lo speed is unknown, defaulting to 1000 [ 889.437985][ T9403] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 889.528574][T15423] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2795'. [ 889.610017][ T9403] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 889.610040][ T9403] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.610051][ T9403] usb 1-1: Product: syz [ 889.610058][ T9403] usb 1-1: Manufacturer: syz [ 889.610066][ T9403] usb 1-1: SerialNumber: syz [ 889.613165][ T9403] usb 1-1: config 0 descriptor?? [ 890.234077][ T9403] airspy 1-1:0.0: usb_control_msg() failed -71 request 0a [ 890.234097][ T9403] airspy 1-1:0.0: Could not detect board [ 890.234160][ T9403] airspy 1-1:0.0: probe with driver airspy failed with error -71 [ 890.239477][ T9403] usb 1-1: USB disconnect, device number 55 [ 892.758209][T15465] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 894.518946][T15474] fuse: Unknown parameter '00000000000000000006' [ 894.817915][ T5885] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 895.078508][ T5885] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 895.078536][ T5885] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 895.078553][ T5885] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 895.078604][ T5885] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 895.078630][ T5885] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 895.080623][ T5885] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 895.080640][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 895.080650][ T5885] usb 5-1: Product: syz [ 895.080657][ T5885] usb 5-1: Manufacturer: syz [ 895.091729][ T5885] cdc_wdm 5-1:1.0: skipping garbage [ 895.091742][ T5885] cdc_wdm 5-1:1.0: skipping garbage [ 895.093309][ T5885] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 895.093320][ T5885] cdc_wdm 5-1:1.0: Unknown control protocol [ 895.919025][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE [ 896.205818][ T9715] usb 5-1: USB disconnect, device number 43 [ 898.508480][ T9176] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 898.891045][ T9176] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 898.891074][ T9176] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 898.917526][ T9176] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 898.917544][ T9176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.917555][ T9176] usb 5-1: Product: syz [ 898.917562][ T9176] usb 5-1: Manufacturer: syz [ 898.917570][ T9176] usb 5-1: SerialNumber: syz [ 899.398464][ T9176] usb 5-1: cannot find UAC_HEADER [ 899.633510][ T9176] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 899.657481][ T9176] usb 5-1: USB disconnect, device number 44 [ 900.492412][T15381] udevd[15381]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 905.327980][ T9176] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 906.436678][T15551] fuse: Unknown parameter '00000000000000000006' [ 906.531059][ T9176] usb 5-1: config 7 has an invalid interface number: 101 but max is 0 [ 906.531133][ T9176] usb 5-1: config 7 has no interface number 0 [ 906.534390][ T9176] usb 5-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 906.534409][ T9176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.534420][ T9176] usb 5-1: Product: syz [ 906.534427][ T9176] usb 5-1: Manufacturer: syz [ 906.534434][ T9176] usb 5-1: SerialNumber: syz [ 906.668261][ T9743] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 906.738338][T14046] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 906.827988][ T9743] usb 4-1: Using ep0 maxpacket: 32 [ 906.849132][ T9743] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 906.849194][ T9743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.849205][ T9743] usb 4-1: Product: syz [ 906.849212][ T9743] usb 4-1: Manufacturer: syz [ 906.849220][ T9743] usb 4-1: SerialNumber: syz [ 906.864924][ T9743] usb 4-1: config 0 descriptor?? [ 906.902891][T14046] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 906.903251][T14046] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 906.903272][T14046] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 906.903729][T14046] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 906.903757][T14046] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 906.909444][T14046] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 906.909473][T14046] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 906.916349][T14046] usb 2-1: Product: syz [ 906.920073][T14046] usb 2-1: Manufacturer: syz [ 906.994708][ T9743] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 907.017337][T14046] cdc_wdm 2-1:1.0: skipping garbage [ 907.017359][T14046] cdc_wdm 2-1:1.0: skipping garbage [ 907.032274][T14046] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 907.032295][T14046] cdc_wdm 2-1:1.0: Unknown control protocol [ 907.484505][ T9176] as10x_usb: device has been detected [ 907.485529][ T9176] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 907.533598][ T9176] usb 5-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 907.662325][ T9176] as10x_usb: error during firmware upload part1 [ 907.668624][ T9176] Registered device Elgato EyeTV DTT Deluxe [ 907.728463][ T9176] usb 5-1: USB disconnect, device number 45 [ 907.934651][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE [ 908.028126][T15552] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 908.068062][ T9743] gspca_ov534_9: reg_w failed -110 [ 908.113547][ T9176] Unregistered device Elgato EyeTV DTT Deluxe [ 908.123861][ T9176] as10x_usb: device has been disconnected [ 908.177417][ T5885] usb 2-1: USB disconnect, device number 33 [ 908.180865][T15552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.180897][T15552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.180932][T15552] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 908.180955][T15552] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.288794][T15552] usb 3-1: config 0 descriptor?? [ 908.357933][ T9743] gspca_ov534_9: Unknown sensor 0000 [ 908.358003][ T9743] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 908.513493][ T9176] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 908.661075][ T9176] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 908.661102][ T9176] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 908.705779][ T9176] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 908.705809][ T9176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.705829][ T9176] usb 5-1: Product: syz [ 908.705842][ T9176] usb 5-1: Manufacturer: syz [ 908.705855][ T9176] usb 5-1: SerialNumber: syz [ 908.796652][ T9743] usb 4-1: USB disconnect, device number 51 [ 908.798513][T15552] hid-led 0003:1D34:000A.001F: unknown main item tag 0x0 [ 908.798545][T15552] hid-led 0003:1D34:000A.001F: unknown main item tag 0x0 [ 908.798571][T15552] hid-led 0003:1D34:000A.001F: unknown main item tag 0x0 [ 908.901795][T15552] hid-led 0003:1D34:000A.001F: probe with driver hid-led failed with error -71 [ 908.943142][T15552] usb 3-1: USB disconnect, device number 38 [ 910.085056][ T9176] usb 5-1: cannot find UAC_HEADER [ 910.123058][ T9176] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 910.127435][ T9176] usb 5-1: USB disconnect, device number 46 [ 910.187134][T15542] udevd[15542]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 910.529667][T15580] tipc: Enabling of bearer rejected, failed to enable media [ 912.677911][ T9403] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 913.941145][ T9403] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 913.941166][ T9403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.941176][ T9403] usb 5-1: Product: syz [ 913.941184][ T9403] usb 5-1: Manufacturer: syz [ 913.941191][ T9403] usb 5-1: SerialNumber: syz [ 913.978386][ T9403] usb 5-1: config 0 descriptor?? [ 914.067902][T14046] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 914.280719][T14046] usb 1-1: config 7 has an invalid interface number: 101 but max is 0 [ 914.280799][T14046] usb 1-1: config 7 has no interface number 0 [ 914.283270][T14046] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 914.283291][T14046] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.283342][T14046] usb 1-1: Product: syz [ 914.283350][T14046] usb 1-1: Manufacturer: syz [ 914.283357][T14046] usb 1-1: SerialNumber: syz [ 915.308549][ T9403] airspy 5-1:0.0: usb_control_msg() failed -110 request 0a [ 915.308568][ T9403] airspy 5-1:0.0: Could not detect board [ 915.308669][ T9403] airspy 5-1:0.0: probe with driver airspy failed with error -110 [ 916.277435][T14046] as10x_usb: device has been detected [ 916.281941][T14046] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 916.306502][T14046] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 916.363195][T14046] as10x_usb: error during firmware upload part1 [ 916.363585][T14046] Registered device Elgato EyeTV DTT Deluxe [ 916.384917][T14046] usb 1-1: USB disconnect, device number 56 [ 916.522859][T14046] Unregistered device Elgato EyeTV DTT Deluxe [ 916.525063][T14046] as10x_usb: device has been disconnected [ 917.952572][ T9743] usb 5-1: USB disconnect, device number 47 [ 918.497936][T14046] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 919.029910][T14046] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 919.029938][T14046] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 919.036575][T14046] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 919.036606][T14046] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.036625][T14046] usb 1-1: Product: syz [ 919.036639][T14046] usb 1-1: Manufacturer: syz [ 919.036653][T14046] usb 1-1: SerialNumber: syz [ 919.746666][T14046] usb 1-1: cannot find UAC_HEADER [ 920.071265][T14046] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 920.074949][T14046] usb 1-1: USB disconnect, device number 57 [ 920.143502][T15542] udevd[15542]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 921.907927][ T9715] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 921.987339][T15663] EXT4-fs: Conflicting test_dummy_encryption options [ 922.067954][ T9715] usb 1-1: Using ep0 maxpacket: 16 [ 922.070805][ T9715] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 922.070821][ T9715] usb 1-1: config 0 has no interface number 0 [ 922.070849][ T9715] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 922.075013][ T9715] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 922.075032][ T9715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.075043][ T9715] usb 1-1: Product: syz [ 922.075050][ T9715] usb 1-1: Manufacturer: syz [ 922.075057][ T9715] usb 1-1: SerialNumber: syz [ 922.078833][ T9715] usb 1-1: config 0 descriptor?? [ 922.307997][ T9403] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 922.607891][ T9715] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 922.629559][ T9715] usb 1-1: USB disconnect, device number 58 [ 922.629941][ T9403] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 922.629955][ T9403] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 922.629966][ T9403] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 922.629997][ T9403] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 922.630011][ T9403] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 922.638825][ T9403] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 922.638853][ T9403] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 922.638872][ T9403] usb 2-1: Product: syz [ 922.638886][ T9403] usb 2-1: Manufacturer: syz [ 922.927451][ T9403] cdc_wdm 2-1:1.0: skipping garbage [ 922.927464][ T9403] cdc_wdm 2-1:1.0: skipping garbage [ 922.942420][ T9403] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 922.942435][ T9403] cdc_wdm 2-1:1.0: Unknown control protocol [ 925.775683][ T9176] usb 2-1: USB disconnect, device number 34 [ 926.172049][T15695] fuse: Unknown parameter '00000000000000000006' [ 926.457909][ T9176] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 926.612815][ T9176] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 926.612845][ T9176] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 926.612864][ T9176] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 926.612916][ T9176] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 926.612942][ T9176] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 926.615212][ T9176] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 926.615230][ T9176] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 926.615240][ T9176] usb 2-1: Product: syz [ 926.615248][ T9176] usb 2-1: Manufacturer: syz [ 926.634019][ T9176] cdc_wdm 2-1:1.0: skipping garbage [ 926.634033][ T9176] cdc_wdm 2-1:1.0: skipping garbage [ 926.689598][ T9176] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 926.689620][ T9176] cdc_wdm 2-1:1.0: Unknown control protocol [ 927.282364][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE [ 927.933018][ T9176] usb 2-1: USB disconnect, device number 35 [ 930.214979][T15721] 8021q: adding VLAN 0 to HW filter on device bond4 [ 930.397918][ T9176] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 930.721395][ T9176] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 930.721423][ T9176] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 930.802354][ T9176] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 930.802384][ T9176] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 930.802403][ T9176] usb 1-1: SerialNumber: syz [ 931.236792][T15730] 8021q: adding VLAN 0 to HW filter on device bond1 [ 931.334320][ T9715] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 931.515039][ T9715] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 931.515067][ T9715] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 931.559499][ T9715] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 931.559532][ T9715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 931.559552][ T9715] usb 5-1: SerialNumber: syz [ 931.643164][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.643227][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.695711][ T9176] usb 1-1: 0:2 : does not exist [ 931.741485][ T9176] usb 1-1: USB disconnect, device number 59 [ 931.946691][T15542] udevd[15542]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 932.021187][ T9715] usb 5-1: 0:2 : does not exist [ 932.118148][ T9715] usb 5-1: USB disconnect, device number 48 [ 932.631011][T15542] udevd[15542]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 934.106329][ T5806] Bluetooth: hci5: command 0x0406 tx timeout [ 935.072551][ T5957] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 935.220255][ T5957] usb 5-1: config 7 has an invalid interface number: 101 but max is 0 [ 935.220285][ T5957] usb 5-1: config 7 has no interface number 0 [ 935.224235][ T5957] usb 5-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 935.224264][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.224283][ T5957] usb 5-1: Product: syz [ 935.224296][ T5957] usb 5-1: Manufacturer: syz [ 935.224309][ T5957] usb 5-1: SerialNumber: syz [ 937.099817][ T5957] as10x_usb: device has been detected [ 937.116442][ T5957] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 937.201770][ T5957] usb 5-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 937.223751][ T5957] as10x_usb: error during firmware upload part1 [ 937.224150][ T5957] Registered device Elgato EyeTV DTT Deluxe [ 937.236009][ T5957] usb 5-1: USB disconnect, device number 49 [ 937.279975][ T5957] Unregistered device Elgato EyeTV DTT Deluxe [ 937.282404][ T5957] as10x_usb: device has been disconnected [ 939.885772][ T9743] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 940.079316][ T9743] usb 2-1: Using ep0 maxpacket: 32 [ 940.112995][ T9743] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 940.113030][ T9743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.113139][ T9743] usb 2-1: Product: syz [ 940.113155][ T9743] usb 2-1: Manufacturer: syz [ 940.113169][ T9743] usb 2-1: SerialNumber: syz [ 940.125279][ T9743] usb 2-1: config 0 descriptor?? [ 940.174056][ T9743] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 941.191609][T15802] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2901'. [ 941.418225][ T9743] gspca_ov534_9: reg_w failed -110 [ 941.708782][ T9743] gspca_ov534_9: Unknown sensor 0000 [ 941.710410][ T9743] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 943.238423][ T5957] usb 2-1: USB disconnect, device number 36 [ 943.974110][T15830] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 946.810933][T15858] lo speed is unknown, defaulting to 1000 [ 948.998213][ T9715] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 949.153834][ T9715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 949.153865][ T9715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 949.153888][ T9715] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 949.153900][ T9715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.201647][ T9715] usb 1-1: config 0 descriptor?? [ 950.387156][ T9715] usbhid 1-1:0.0: can't add hid device: -71 [ 950.425318][ T9715] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 950.477468][ T9715] usb 1-1: USB disconnect, device number 60 [ 951.928505][ T9743] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 952.724797][ T5806] Bluetooth: hci5: command 0x0406 tx timeout [ 952.757550][ T9743] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 952.757581][ T9743] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.757598][ T9743] usb 5-1: Product: syz [ 952.757611][ T9743] usb 5-1: Manufacturer: syz [ 952.757626][ T9743] usb 5-1: SerialNumber: syz [ 952.787103][T15900] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 952.805860][T15900] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 952.807667][T15900] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 952.810442][T15900] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 952.812160][T15900] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 952.903081][ T9743] usb 5-1: config 0 descriptor?? [ 953.487430][ T9743] airspy 5-1:0.0: usb_control_msg() failed -32 request 09 [ 953.487457][ T9743] airspy 5-1:0.0: Could not detect board [ 953.487565][ T9743] airspy 5-1:0.0: probe with driver airspy failed with error -32 [ 953.506931][T15898] lo speed is unknown, defaulting to 1000 [ 953.945064][T15909] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input42 [ 954.754975][T15919] 8021q: adding VLAN 0 to HW filter on device bond1 [ 954.846784][ T61] Bluetooth: hci3: command tx timeout [ 955.116566][ T9715] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 955.289430][ T9715] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 955.289448][ T9715] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 955.291944][ T9715] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 955.291971][ T9715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 955.291991][ T9715] usb 3-1: SerialNumber: syz [ 955.477986][ T9743] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 955.718625][ T9743] usb 1-1: Using ep0 maxpacket: 32 [ 955.728008][ T9743] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 955.728038][ T9743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.728057][ T9743] usb 1-1: Product: syz [ 955.728071][ T9743] usb 1-1: Manufacturer: syz [ 955.728084][ T9743] usb 1-1: SerialNumber: syz [ 955.785058][ T9743] usb 1-1: config 0 descriptor?? [ 955.804259][ T9743] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 955.908350][ T9715] usb 3-1: 0:2 : does not exist [ 955.935882][T15922] lo speed is unknown, defaulting to 1000 [ 956.048198][ T9715] usb 3-1: USB disconnect, device number 39 [ 956.135260][T15542] udevd[15542]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 956.537107][ T9715] usb 5-1: USB disconnect, device number 50 [ 956.818652][ T9743] gspca_ov534_9: reg_w failed -110 [ 956.964015][ T61] Bluetooth: hci3: command tx timeout [ 957.168558][ T9743] gspca_ov534_9: Unknown sensor 0000 [ 957.169473][ T9743] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 958.001412][T15552] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 958.001558][ T9715] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 958.199341][T15552] usb 5-1: config 7 has an invalid interface number: 101 but max is 0 [ 958.199371][T15552] usb 5-1: config 7 has no interface number 0 [ 958.201864][T15552] usb 5-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 958.201892][T15552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.201911][T15552] usb 5-1: Product: syz [ 958.201926][T15552] usb 5-1: Manufacturer: syz [ 958.201940][T15552] usb 5-1: SerialNumber: syz [ 958.293239][ T9715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.293261][ T9715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.293285][ T9715] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 958.293305][ T9715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.369877][ T9715] usb 3-1: config 0 descriptor?? [ 958.783566][ T9715] usbhid 3-1:0.0: can't add hid device: -71 [ 958.783685][ T9715] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 958.794326][ T9715] usb 3-1: USB disconnect, device number 40 [ 959.006027][ T61] Bluetooth: hci3: command tx timeout [ 959.915888][T15552] as10x_usb: device has been detected [ 959.916468][T15552] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 959.956914][T15552] usb 5-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 959.994485][T15552] as10x_usb: error during firmware upload part1 [ 959.995211][T15552] Registered device Elgato EyeTV DTT Deluxe [ 960.036190][T15552] usb 5-1: USB disconnect, device number 51 [ 960.108920][T15552] Unregistered device Elgato EyeTV DTT Deluxe [ 960.121766][T15552] as10x_usb: device has been disconnected [ 961.159758][ T61] Bluetooth: hci3: command tx timeout [ 961.186707][ T9715] usb 1-1: USB disconnect, device number 61 [ 961.252690][T15898] chnl_net:caif_netlink_parms(): no params data found [ 962.711119][ T1386] bridge_slave_1: left allmulticast mode [ 962.711148][ T1386] bridge_slave_1: left promiscuous mode [ 962.711398][ T1386] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.809576][ T1386] bridge_slave_0: left allmulticast mode [ 962.809606][ T1386] bridge_slave_0: left promiscuous mode [ 962.809887][ T1386] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.678013][ T9176] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 965.849805][ T9176] usb 1-1: config 7 has an invalid interface number: 101 but max is 0 [ 965.849943][ T9176] usb 1-1: config 7 has no interface number 0 [ 965.854232][ T9176] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 965.854261][ T9176] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.854281][ T9176] usb 1-1: Product: syz [ 965.854295][ T9176] usb 1-1: Manufacturer: syz [ 965.854309][ T9176] usb 1-1: SerialNumber: syz [ 967.498770][ T1386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.566109][ T1386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 967.599019][ T1386] bond0 (unregistering): Released all slaves [ 968.391062][ T1386] bond1 (unregistering): Released all slaves [ 969.200652][ T1386] bond2 (unregistering): Released all slaves [ 970.013786][ T1386] bond3 (unregistering): Released all slaves [ 970.137554][T15900] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 970.155422][T15900] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 970.167131][T15900] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 970.173777][T15900] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 970.176368][T15900] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 971.009576][ T1386] bond4 (unregistering): Released all slaves [ 971.023495][ T9176] as10x_usb: device has been detected [ 971.024488][ T9176] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 971.034270][ T9176] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 971.093426][ T9176] as10x_usb: error during firmware upload part1 [ 971.094150][ T9176] Registered device Elgato EyeTV DTT Deluxe [ 971.113895][ T9176] usb 1-1: USB disconnect, device number 62 [ 971.184507][ T9176] Unregistered device Elgato EyeTV DTT Deluxe [ 971.186886][ T9176] as10x_usb: device has been disconnected [ 971.302839][T15898] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.302968][T15898] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.303185][T15898] bridge_slave_0: entered allmulticast mode [ 971.306329][T15898] bridge_slave_0: entered promiscuous mode [ 971.394399][T15973] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2946'. [ 971.394744][T15898] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.394942][T15898] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.395448][T15898] bridge_slave_1: entered allmulticast mode [ 971.420229][T15898] bridge_slave_1: entered promiscuous mode [ 971.423504][T15975] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2946'. [ 972.309601][ T61] Bluetooth: hci0: command tx timeout [ 972.628590][ T1386] tipc: Disabling bearer [ 972.629910][ T1386] tipc: Left network mode [ 973.121567][T15898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 973.124328][T15898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.142138][T15993] lo speed is unknown, defaulting to 1000 [ 974.597644][ T61] Bluetooth: hci0: command tx timeout [ 974.700269][T15898] team0: Port device team_slave_0 added [ 974.754977][T15898] team0: Port device team_slave_1 added [ 976.606452][T16053] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2963'. [ 976.672397][ T61] Bluetooth: hci0: command tx timeout [ 978.079459][T15898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.079481][T15898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.079496][T15898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.144526][T15898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.144538][T15898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.144552][T15898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.750143][ T61] Bluetooth: hci0: command tx timeout [ 979.699907][ T9403] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 979.782763][T15898] hsr_slave_0: entered promiscuous mode [ 979.783610][T15898] hsr_slave_1: entered promiscuous mode [ 979.793211][T15898] debugfs: 'hsr0' already exists in 'hsr' [ 979.793239][T15898] Cannot create hsr debugfs directory [ 979.848072][ T9403] usb 5-1: Using ep0 maxpacket: 32 [ 979.852213][ T9403] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 979.852243][ T9403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.852261][ T9403] usb 5-1: Product: syz [ 979.852275][ T9403] usb 5-1: Manufacturer: syz [ 979.852287][ T9403] usb 5-1: SerialNumber: syz [ 979.857731][ T9403] usb 5-1: config 0 descriptor?? [ 979.883450][ T9403] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 980.040684][ T1386] hsr_slave_0: left promiscuous mode [ 980.098074][ T1386] hsr_slave_1: left promiscuous mode [ 980.103053][ T1386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 980.938281][ T9403] gspca_ov534_9: reg_w failed -110 [ 981.278639][ T9403] gspca_ov534_9: Unknown sensor 0000 [ 981.279553][ T9403] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 982.181898][T15610] usb 5-1: USB disconnect, device number 52 [ 983.917281][T16091] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2974'. [ 985.728601][ T1386] team0 (unregistering): Port device team_slave_1 removed [ 986.038750][ T1386] team0 (unregistering): Port device team_slave_0 removed [ 990.418988][T16120] EXT4-fs: Conflicting test_dummy_encryption options [ 990.433581][T15993] chnl_net:caif_netlink_parms(): no params data found [ 990.780955][ T5885] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 990.942362][ T5885] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 990.942392][ T5885] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 990.942411][ T5885] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 990.942542][ T5885] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 990.942569][ T5885] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 990.945712][ T5885] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 990.945740][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 990.945759][ T5885] usb 5-1: Product: syz [ 990.945773][ T5885] usb 5-1: Manufacturer: syz [ 991.044501][ T5885] cdc_wdm 5-1:1.0: skipping garbage [ 991.044524][ T5885] cdc_wdm 5-1:1.0: skipping garbage [ 991.078497][ T5885] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 991.078514][ T5885] cdc_wdm 5-1:1.0: Unknown control protocol [ 993.364052][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.364122][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.171838][ T1386] IPVS: stop unused estimator thread 0... [ 994.287549][ T9403] usb 5-1: USB disconnect, device number 53 [ 995.545884][T16152] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2985'. [ 995.828723][T15993] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.828853][T15993] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.829025][T15993] bridge_slave_0: entered allmulticast mode [ 995.850701][T15993] bridge_slave_0: entered promiscuous mode [ 995.876001][T15993] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.876140][T15993] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.876371][T15993] bridge_slave_1: entered allmulticast mode [ 995.879996][T15993] bridge_slave_1: entered promiscuous mode [ 998.463637][T15993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.480619][T15993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.558990][ T1386] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.990239][T15993] team0: Port device team_slave_0 added [ 1000.232604][ T1386] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.320021][T15993] team0: Port device team_slave_1 added [ 1001.089684][ T1386] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.194963][T15993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.194981][T15993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.195005][T15993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.258914][T15993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.258931][T15993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.258956][T15993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.327960][ T9403] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1001.608574][ T9403] usb 5-1: Using ep0 maxpacket: 32 [ 1001.687972][ T9403] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1001.688011][ T9403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.688030][ T9403] usb 5-1: Product: syz [ 1001.688043][ T9403] usb 5-1: Manufacturer: syz [ 1001.688057][ T9403] usb 5-1: SerialNumber: syz [ 1001.949991][ T9403] usb 5-1: config 0 descriptor?? [ 1001.955775][ T9403] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1002.226403][ T1386] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.572114][T16223] bond1: option mode: unable to set because the bond device is up [ 1002.673870][T16224] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1002.684635][T16224] bond1: (slave macvlan3): Enslaving as a backup interface with an up link [ 1002.738856][ T3554] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1002.859070][ T3554] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1002.998150][ T9403] gspca_ov534_9: reg_w failed -110 [ 1003.288229][ T9403] gspca_ov534_9: Unknown sensor 0000 [ 1003.289185][ T9403] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 1003.349992][ T3539] bond1: (slave macvlan3): link status up again after 0 ms [ 1003.374011][ T3539] bond1: (slave macvlan3): link status up again after 0 ms [ 1003.396426][ T3539] bond1: (slave macvlan3): link status up again after 0 ms [ 1003.408210][ T3539] bond1: (slave macvlan3): link status up again after 0 ms [ 1004.005158][ T3539] bond1: (slave macvlan3): link status up again after 0 ms [ 1004.018015][ T3514] bond1: (slave macvlan3): link status up again after 0 ms [ 1004.038011][ T3514] bond1: (slave macvlan3): link status up again after 0 ms [ 1004.058431][ T3514] bond1: (slave macvlan3): link status up again after 0 ms [ 1004.103406][T15993] hsr_slave_0: entered promiscuous mode [ 1004.104912][T15993] hsr_slave_1: entered promiscuous mode [ 1004.108196][T15993] debugfs: 'hsr0' already exists in 'hsr' [ 1004.108221][T15993] Cannot create hsr debugfs directory [ 1004.185038][T15898] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1004.341846][T15898] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1004.616473][ T9403] usb 5-1: USB disconnect, device number 54 [ 1004.831892][T15898] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1005.476078][T15898] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1007.468534][ T1386] bridge_slave_1: left allmulticast mode [ 1007.468554][ T1386] bridge_slave_1: left promiscuous mode [ 1007.468704][ T1386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.841786][ T43] net_ratelimit: 102 callbacks suppressed [ 1007.841806][ T43] bond1: (slave macvlan3): link status up again after 0 ms [ 1007.877557][ T12] bond1: (slave macvlan3): link status up again after 0 ms [ 1007.890108][ T1360] bond1: (slave macvlan3): link status up again after 0 ms [ 1007.918043][ T3539] bond1: (slave macvlan3): link status up again after 0 ms [ 1008.045538][T16273] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input43 [ 1008.620990][ T3539] bond1: (slave macvlan3): link status up again after 0 ms [ 1008.638915][ T1437] bond1: (slave macvlan3): link status up again after 0 ms [ 1008.661631][ T12] bond1: (slave macvlan3): link status up again after 0 ms [ 1008.678053][ T1437] bond1: (slave macvlan3): link status up again after 0 ms [ 1008.697980][ T1437] bond1: (slave macvlan3): link status up again after 0 ms [ 1008.724643][ T1437] bond1: (slave macvlan3): link status up again after 0 ms [ 1010.872590][T16290] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3016'. [ 1011.015740][T15900] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1011.031793][T15900] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1011.033100][T15900] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1011.075666][T15900] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1011.085741][T15900] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1011.389128][ T1386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1011.470483][ T1386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1011.494067][ T1386] bond0 (unregistering): Released all slaves [ 1012.341439][ T1386] bond1 (unregistering): Released all slaves [ 1012.866572][ T3554] net_ratelimit: 160 callbacks suppressed [ 1012.866593][ T3554] bond1: (slave macvlan3): link status up again after 0 ms [ 1012.877998][ T3554] bond1: (slave macvlan3): link status up again after 0 ms [ 1012.898204][ T3554] bond1: (slave macvlan3): link status up again after 0 ms [ 1012.948213][T16051] bond1: (slave macvlan3): link status up again after 0 ms [ 1012.968111][ T3539] bond1: (slave macvlan3): link status up again after 0 ms [ 1012.997099][ T3539] bond1: (slave macvlan3): link status up again after 0 ms [ 1013.008091][ T3539] bond1: (slave macvlan3): link status up again after 0 ms [ 1013.028055][ T3539] bond1: (slave macvlan3): link status up again after 0 ms [ 1013.055409][ T3539] bond1: (slave macvlan3): link status up again after 0 ms [ 1013.096860][ T3554] bond1: (slave macvlan3): link status up again after 0 ms [ 1013.209886][ T1386] bond2 (unregistering): Released all slaves [ 1013.246513][ T61] Bluetooth: hci4: command tx timeout [ 1014.090669][ T1386] bond3 (unregistering): Released all slaves [ 1014.682607][ T1386] tipc: Disabling bearer [ 1014.683054][ T1386] tipc: Left network mode [ 1015.315163][ T61] Bluetooth: hci4: command tx timeout [ 1015.644001][T16291] lo speed is unknown, defaulting to 1000 [ 1017.388415][ T61] Bluetooth: hci4: command tx timeout [ 1017.641768][T16326] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3023'. [ 1018.453263][T16343] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3025'. [ 1018.467942][ T58] net_ratelimit: 95 callbacks suppressed [ 1018.467972][ T58] bond1: (slave macvlan3): failed to get link speed/duplex [ 1018.578596][ T3539] bond1: (slave macvlan3): failed to get link speed/duplex [ 1018.631741][T15993] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1019.232520][T15993] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1019.467921][ T61] Bluetooth: hci4: command tx timeout [ 1019.497933][ T1386] hsr_slave_0: left promiscuous mode [ 1019.539170][ T1386] hsr_slave_1: left promiscuous mode [ 1019.540233][ T1386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1019.540578][ T1386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1019.755572][ T1386] veth1_macvtap: left promiscuous mode [ 1019.755965][ T1386] veth1_vlan: left promiscuous mode [ 1019.756225][ T1386] veth0_vlan: left promiscuous mode [ 1023.115525][T16380] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input44 [ 1024.498016][ T9176] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 1024.679851][ T9176] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 1024.679891][ T9176] usb 5-1: config 0 has no interface number 0 [ 1024.679917][ T9176] usb 5-1: config 0 interface 29 has no altsetting 0 [ 1024.682093][ T9176] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1024.682117][ T9176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.682127][ T9176] usb 5-1: Product: syz [ 1024.682135][ T9176] usb 5-1: Manufacturer: syz [ 1024.682142][ T9176] usb 5-1: SerialNumber: syz [ 1024.688221][ T9176] usb 5-1: config 0 descriptor?? [ 1024.758512][ T1386] team0 (unregistering): Port device team_slave_1 removed [ 1025.049106][ T1386] team0 (unregistering): Port device team_slave_0 removed [ 1028.702307][T13382] smc: removing ib device syz1 [ 1028.771264][T15993] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1028.921685][ T5885] lo speed is unknown, defaulting to 1000 [ 1028.921726][ T5885] syz1: Port: 1 Link DOWN [ 1028.993337][T15993] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1029.006669][ T9176] peak_usb 5-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 1029.006696][ T9176] peak_usb 5-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 1030.553062][T15993] kthread_run failed with err -4 [ 1030.667406][T16291] chnl_net:caif_netlink_parms(): no params data found [ 1030.708352][ T9176] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71 [ 1030.798593][ T9176] usb 5-1: USB disconnect, device number 55 [ 1031.184626][T15900] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1031.246342][T15900] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1031.249138][T15900] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1031.251060][T15900] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1031.251903][T15900] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1033.572416][ T61] Bluetooth: hci3: command tx timeout [ 1034.956145][ T37] audit: type=1326 audit(1765198736.377:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16446 comm="syz.2.3047" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe88e26f749 code=0x0 [ 1035.628068][ T61] Bluetooth: hci3: command tx timeout [ 1036.179526][T16291] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.179655][T16291] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.179829][T16291] bridge_slave_0: entered allmulticast mode [ 1036.181440][T16291] bridge_slave_0: entered promiscuous mode [ 1036.218910][T16291] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.228158][T16291] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.228412][T16291] bridge_slave_1: entered allmulticast mode [ 1036.231656][T16291] bridge_slave_1: entered promiscuous mode [ 1036.933673][T16291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1036.967141][T16291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1037.145803][ T1386] IPVS: stop unused estimator thread 0... [ 1037.347956][ T5885] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1037.369358][T16291] team0: Port device team_slave_0 added [ 1037.383437][T16291] team0: Port device team_slave_1 added [ 1037.663377][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1037.663411][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1037.663438][ T5885] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1037.663450][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.667942][ T5885] usb 3-1: config 0 descriptor?? [ 1037.707931][ T61] Bluetooth: hci3: command tx timeout [ 1039.141613][ T5885] hid-led 0003:1D34:000A.0020: unknown main item tag 0x0 [ 1039.141648][ T5885] hid-led 0003:1D34:000A.0020: unknown main item tag 0x0 [ 1039.141676][ T5885] hid-led 0003:1D34:000A.0020: unknown main item tag 0x0 [ 1039.154561][ T5885] hid-led 0003:1D34:000A.0020: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 1039.245972][ T5885] hid-led 0003:1D34:000A.0020: Dream Cheeky Webmail Notifier initialized [ 1039.363245][ T9403] usb 3-1: USB disconnect, device number 41 [ 1039.504360][T16291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.504378][T16291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.504401][T16291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1039.596634][T16291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1039.596646][T16291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.596662][T16291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1039.940919][ T9403] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1039.985405][T16502] bond1: option mode: unable to set because the bond device is up [ 1040.429663][ T9403] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.429699][ T9403] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1040.431343][ T9403] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1040.431369][ T9403] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1040.431388][ T9403] usb 5-1: SerialNumber: syz [ 1040.509615][ T61] Bluetooth: hci3: command tx timeout [ 1040.736296][T16502] bond_slave_0: entered promiscuous mode [ 1040.736372][T16502] bond_slave_1: entered promiscuous mode [ 1040.737070][T16502] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1040.793527][T16502] bond1: (slave macvlan3): Enslaving as a backup interface with an up link [ 1040.906933][ T9403] usb 5-1: 0:2 : does not exist [ 1040.963032][ T9403] usb 5-1: USB disconnect, device number 56 [ 1041.025837][T16383] udevd[16383]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1041.167940][ T5885] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 1041.323170][ T5885] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 1041.323198][ T5885] usb 3-1: config 0 has no interface number 0 [ 1041.323235][ T5885] usb 3-1: config 0 interface 29 has no altsetting 0 [ 1041.347980][ T5885] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1041.348010][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.348029][ T5885] usb 3-1: Product: syz [ 1041.348043][ T5885] usb 3-1: Manufacturer: syz [ 1041.348056][ T5885] usb 3-1: SerialNumber: syz [ 1041.388306][ T5885] usb 3-1: config 0 descriptor?? [ 1041.549124][T16291] hsr_slave_0: entered promiscuous mode [ 1041.554749][T16291] hsr_slave_1: entered promiscuous mode [ 1041.585532][T16291] debugfs: 'hsr0' already exists in 'hsr' [ 1041.585551][T16291] Cannot create hsr debugfs directory [ 1041.602042][ T5885] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 1041.805148][ T5885] peak_usb 3-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 1041.805177][ T5885] peak_usb 3-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 1042.169997][T16419] chnl_net:caif_netlink_parms(): no params data found [ 1042.248728][ T5885] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -71 [ 1042.254159][ T5885] usb 3-1: USB disconnect, device number 42 [ 1042.350954][T16517] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3059'. [ 1042.763575][T16519] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3059'. [ 1044.607318][T16419] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.607469][T16419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.607652][T16419] bridge_slave_0: entered allmulticast mode [ 1044.657935][T16419] bridge_slave_0: entered promiscuous mode [ 1045.058330][T16419] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.058466][T16419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.058729][T16419] bridge_slave_1: entered allmulticast mode [ 1045.066020][T16419] bridge_slave_1: entered promiscuous mode [ 1046.058032][ T9403] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 1046.211910][ T9403] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 1046.211938][ T9403] usb 3-1: config 7 has no interface number 0 [ 1046.358753][ T9403] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1046.358786][ T9403] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.358806][ T9403] usb 3-1: Product: syz [ 1046.358820][ T9403] usb 3-1: Manufacturer: syz [ 1046.358834][ T9403] usb 3-1: SerialNumber: syz [ 1049.134328][ T9403] as10x_usb: device has been detected [ 1049.134937][ T9403] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1049.192425][ T9403] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1049.216269][ T9403] as10x_usb: error during firmware upload part1 [ 1049.217017][ T9403] Registered device Elgato EyeTV DTT Deluxe [ 1049.285965][ T9403] usb 3-1: USB disconnect, device number 43 [ 1049.435423][ T9403] Unregistered device Elgato EyeTV DTT Deluxe [ 1049.451641][ T9403] as10x_usb: device has been disconnected [ 1049.496920][T16419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1049.582872][T16419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1051.062321][T16419] team0: Port device team_slave_0 added [ 1052.439598][ T9403] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1052.731095][ T9403] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 1052.731278][ T9403] usb 3-1: config 7 has no interface number 0 [ 1052.835859][ T9403] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1052.835995][ T9403] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.836119][ T9403] usb 3-1: Product: syz [ 1052.836242][ T9403] usb 3-1: Manufacturer: syz [ 1052.836282][ T9403] usb 3-1: SerialNumber: syz [ 1052.991385][T16419] team0: Port device team_slave_1 added [ 1054.396062][T16419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.396075][T16419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.396090][T16419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.458256][T16419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.458269][T16419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.458328][T16419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.530132][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.530208][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.038522][ T9403] as10x_usb: device has been detected [ 1055.039296][ T9403] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1055.061515][ T9403] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1055.087392][ T9403] as10x_usb: error during firmware upload part1 [ 1055.088933][ T9403] Registered device Elgato EyeTV DTT Deluxe [ 1055.099805][ T9403] usb 3-1: USB disconnect, device number 44 [ 1055.199598][ T9403] Unregistered device Elgato EyeTV DTT Deluxe [ 1055.202623][ T9403] as10x_usb: device has been disconnected [ 1056.012087][T16419] hsr_slave_0: entered promiscuous mode [ 1056.024261][T16419] hsr_slave_1: entered promiscuous mode [ 1056.031509][T16419] debugfs: 'hsr0' already exists in 'hsr' [ 1056.031640][T16419] Cannot create hsr debugfs directory [ 1056.801853][T16620] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3083'. [ 1056.988263][ T1386] bridge_slave_1: left allmulticast mode [ 1056.988285][ T1386] bridge_slave_1: left promiscuous mode [ 1056.988464][ T1386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.738804][ T1386] bridge_slave_0: left allmulticast mode [ 1059.738827][ T1386] bridge_slave_0: left promiscuous mode [ 1059.739003][ T1386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.809750][ T1386] bridge_slave_1: left allmulticast mode [ 1059.809772][ T1386] bridge_slave_1: left promiscuous mode [ 1059.809922][ T1386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.200114][ T1386] bridge_slave_0: left allmulticast mode [ 1060.200136][ T1386] bridge_slave_0: left promiscuous mode [ 1060.200297][ T1386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.358618][ T9176] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 1061.408553][ T1386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1061.488785][ T1386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1061.509762][ T9176] usb 5-1: config 7 has an invalid interface number: 101 but max is 0 [ 1061.509790][ T9176] usb 5-1: config 7 has no interface number 0 [ 1061.512007][ T9176] usb 5-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1061.512029][ T9176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.512039][ T9176] usb 5-1: Product: syz [ 1061.512046][ T9176] usb 5-1: Manufacturer: syz [ 1061.512054][ T9176] usb 5-1: SerialNumber: syz [ 1061.591342][ T1386] bond0 (unregistering): Released all slaves [ 1061.919471][ T1386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1061.998773][ T1386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1062.089834][ T1386] bond0 (unregistering): Released all slaves [ 1063.448453][ T9176] as10x_usb: device has been detected [ 1063.449534][ T9176] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1063.480111][ T9176] usb 5-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1063.488577][ T9176] as10x_usb: error during firmware upload part1 [ 1063.489309][ T9176] Registered device Elgato EyeTV DTT Deluxe [ 1063.506960][ T9176] usb 5-1: USB disconnect, device number 57 [ 1063.847503][ T9176] Unregistered device Elgato EyeTV DTT Deluxe [ 1063.850406][ T9176] as10x_usb: device has been disconnected [ 1064.488075][ T1386] hsr_slave_0: left promiscuous mode [ 1064.528802][ T1386] hsr_slave_1: left promiscuous mode [ 1064.529572][ T1386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1064.558940][ T1386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1064.677986][ T1386] hsr_slave_0: left promiscuous mode [ 1064.698362][ T1386] hsr_slave_1: left promiscuous mode [ 1064.699093][ T1386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1064.724177][ T1386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1068.078668][ T1386] team0 (unregistering): Port device team_slave_1 removed [ 1068.231200][ T1386] team0 (unregistering): Port device team_slave_0 removed [ 1069.518622][ T1386] team0 (unregistering): Port device team_slave_1 removed [ 1069.669474][ T1386] team0 (unregistering): Port device team_slave_0 removed [ 1070.507063][T16682] EXT4-fs: Conflicting test_dummy_encryption options [ 1071.297965][ T9403] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1071.451137][ T9403] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1071.451168][ T9403] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1071.451184][ T9403] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1071.451233][ T9403] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1071.451260][ T9403] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1071.453185][ T9403] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1071.453214][ T9403] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1071.453234][ T9403] usb 1-1: Product: syz [ 1071.453247][ T9403] usb 1-1: Manufacturer: syz [ 1071.703663][ T9403] cdc_wdm 1-1:1.0: skipping garbage [ 1071.703684][ T9403] cdc_wdm 1-1:1.0: skipping garbage [ 1071.707243][ T9403] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1071.707265][ T9403] cdc_wdm 1-1:1.0: Unknown control protocol [ 1071.975386][T15900] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1072.004544][T15900] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1072.005991][T15900] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1072.056456][T15900] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1072.057639][T15900] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1072.238033][ T3554] bond1: (slave macvlan3): failed to get link speed/duplex [ 1072.774351][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -EPIPE [ 1073.125911][ T9176] usb 1-1: USB disconnect, device number 63 [ 1074.124345][T15900] Bluetooth: hci0: command tx timeout [ 1075.781121][T16723] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3107'. [ 1076.188518][T15900] Bluetooth: hci0: command tx timeout [ 1077.608119][T16051] bond1: (slave macvlan3): failed to get link speed/duplex [ 1077.718050][ T1360] bond1: (slave macvlan3): failed to get link speed/duplex [ 1077.980272][ T1360] bond1: (slave macvlan3): failed to get link speed/duplex [ 1079.228054][T15900] Bluetooth: hci0: command tx timeout [ 1079.693531][T16760] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3117'. [ 1080.897988][ T13] bond1: (slave macvlan3): failed to get link speed/duplex [ 1081.050023][ T3539] bond1: (slave macvlan3): failed to get link speed/duplex [ 1081.075082][T16419] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1081.105462][T16696] chnl_net:caif_netlink_parms(): no params data found [ 1081.136231][T16419] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1081.308477][T15900] Bluetooth: hci0: command tx timeout [ 1081.788712][T16419] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1082.306180][T16419] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1083.736229][T16811] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3127'. [ 1083.912340][T16814] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3128'. [ 1084.246088][T16696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.248136][T16696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.248380][T16696] bridge_slave_0: entered allmulticast mode [ 1084.268155][T16696] bridge_slave_0: entered promiscuous mode [ 1084.307276][T16696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.307616][T16696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.308680][T16696] bridge_slave_1: entered allmulticast mode [ 1084.338079][T16696] bridge_slave_1: entered promiscuous mode [ 1084.488050][T14046] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1084.659469][T14046] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 1084.659498][T14046] usb 3-1: config 0 has no interface number 0 [ 1084.659534][T14046] usb 3-1: config 0 interface 29 has no altsetting 0 [ 1084.688998][T14046] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1084.689031][T14046] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.689050][T14046] usb 3-1: Product: syz [ 1084.689063][T14046] usb 3-1: Manufacturer: syz [ 1084.689078][T14046] usb 3-1: SerialNumber: syz [ 1084.694942][T14046] usb 3-1: config 0 descriptor?? [ 1084.843239][T16696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1084.952670][T14046] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 1084.966557][T16696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.170272][T14046] peak_usb 3-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 1085.170292][T14046] peak_usb 3-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 1085.438900][T14046] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -71 [ 1085.482586][T14046] usb 3-1: USB disconnect, device number 45 [ 1086.432937][T16696] team0: Port device team_slave_0 added [ 1086.438997][ T1360] bond1: (slave macvlan3): failed to get link speed/duplex [ 1086.529723][T16696] team0: Port device team_slave_1 added [ 1087.298068][T16696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1087.298081][T16696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1087.298096][T16696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1087.350736][T16696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1087.350756][T16696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1087.350781][T16696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1087.736823][T16844] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3137'. [ 1087.904049][T16696] hsr_slave_0: entered promiscuous mode [ 1087.906275][T16696] hsr_slave_1: entered promiscuous mode [ 1087.908797][T16696] debugfs: 'hsr0' already exists in 'hsr' [ 1087.908824][T16696] Cannot create hsr debugfs directory [ 1089.818076][T14046] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1089.871942][T16419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1089.901306][ T1386] bridge_slave_1: left allmulticast mode [ 1089.901327][ T1386] bridge_slave_1: left promiscuous mode [ 1089.901511][ T1386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.970310][T14046] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.970333][T14046] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1089.970357][T14046] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1089.970369][T14046] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.973630][T14046] usb 3-1: config 0 descriptor?? [ 1090.032682][ T1386] bridge_slave_0: left allmulticast mode [ 1090.032703][ T1386] bridge_slave_0: left promiscuous mode [ 1090.032898][ T1386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.511837][ T1386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1090.618429][ T1386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1090.668843][ T1386] bond0 (unregistering): Released all slaves [ 1090.767951][T14046] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1090.917992][T14046] usb 1-1: Using ep0 maxpacket: 16 [ 1090.919593][T14046] usb 1-1: config 0 has no interfaces? [ 1090.921409][T14046] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1090.921426][T14046] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.921437][T14046] usb 1-1: Product: syz [ 1090.921444][T14046] usb 1-1: Manufacturer: syz [ 1090.921452][T14046] usb 1-1: SerialNumber: syz [ 1090.924826][T14046] usb 1-1: config 0 descriptor?? [ 1091.129966][ T9403] usb 1-1: USB disconnect, device number 64 [ 1091.281419][ T1386] hsr_slave_0: left promiscuous mode [ 1091.298653][ T1386] hsr_slave_1: left promiscuous mode [ 1091.336659][ T1386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1091.364964][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1091.385849][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1091.394216][ T1386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1091.395365][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1091.396971][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1091.403847][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1092.711139][ T9403] usb 3-1: USB disconnect, device number 46 [ 1092.887912][ T9176] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1093.078478][ T9176] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.078506][ T9176] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1093.089182][ T9176] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1093.089212][ T9176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1093.089232][ T9176] usb 5-1: SerialNumber: syz [ 1093.549084][T15900] Bluetooth: hci4: command tx timeout [ 1093.597732][ T1386] team0 (unregistering): Port device team_slave_1 removed [ 1094.018630][ T1386] team0 (unregistering): Port device team_slave_0 removed [ 1095.628436][T15900] Bluetooth: hci4: command tx timeout [ 1095.976708][T16888] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 1096.302705][ T1360] bond1: (slave macvlan3): failed to get link speed/duplex [ 1096.451816][ T9176] usb 5-1: 0:2 : does not exist [ 1097.708368][T15900] Bluetooth: hci4: command tx timeout [ 1097.791446][ T9176] usb 5-1: USB disconnect, device number 58 [ 1098.288130][ T1360] bond1: (slave macvlan3): failed to get link speed/duplex [ 1098.306227][T16709] udevd[16709]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1099.793360][T15900] Bluetooth: hci4: command tx timeout [ 1099.968047][ T1410] bond1: (slave macvlan3): failed to get link speed/duplex [ 1100.748096][T14046] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1100.937161][T14046] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.937187][T14046] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1100.937220][T14046] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1100.937243][T14046] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.984893][T14046] usb 1-1: config 0 descriptor?? [ 1101.955061][T16950] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1103.191470][T16957] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1103.257316][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 1104.464560][T15552] usb 1-1: USB disconnect, device number 65 [ 1105.128111][ T9176] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1105.216586][T16876] chnl_net:caif_netlink_parms(): no params data found [ 1105.280657][ T9176] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.280684][ T9176] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1105.282057][ T9176] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1105.282085][ T9176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1105.282105][ T9176] usb 3-1: SerialNumber: syz [ 1106.137058][T16984] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input45 [ 1107.717020][T16968] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 1108.145945][ T9176] usb 3-1: 0:2 : does not exist [ 1109.231337][ T9176] usb 3-1: USB disconnect, device number 47 [ 1109.426131][T16709] udevd[16709]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1109.528058][ T1470] bond1: (slave macvlan3): failed to get link speed/duplex [ 1109.627987][ T9403] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 1109.786363][ T9403] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.786381][ T9403] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1109.830122][ T9403] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1109.830149][ T9403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.830162][ T9403] usb 5-1: Product: syz [ 1109.830174][ T9403] usb 5-1: Manufacturer: syz [ 1109.830187][ T9403] usb 5-1: SerialNumber: syz [ 1110.553790][T16696] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1110.628520][T16876] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.631545][T16876] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.631804][T16876] bridge_slave_0: entered allmulticast mode [ 1110.634963][T16876] bridge_slave_0: entered promiscuous mode [ 1110.927249][T16696] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1110.964007][T16876] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.964083][T16876] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.964230][T16876] bridge_slave_1: entered allmulticast mode [ 1110.966243][T16876] bridge_slave_1: entered promiscuous mode [ 1111.272129][T16696] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1111.633323][T16696] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1111.781257][T17035] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input46 [ 1112.519868][ C0] [ 1112.519881][ C0] ====================================================== [ 1112.519889][ C0] WARNING: possible circular locking dependency detected [ 1112.519906][ C0] syzkaller #0 Not tainted [ 1112.519916][ C0] ------------------------------------------------------ [ 1112.519923][ C0] syz.0.3170/17035 is trying to acquire lock: [ 1112.519933][ C0] ffff8880b8824358 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: tasklet_action_common+0x130/0x650 [ 1112.519995][ C0] [ 1112.519995][ C0] but task is already holding lock: [ 1112.520001][ C0] ffff88805f738270 (&dev->event_lock#2){+.+.}-{3:3}, at: input_inject_event+0xa5/0x330 [ 1112.520046][ C0] [ 1112.520046][ C0] which lock already depends on the new lock. [ 1112.520046][ C0] [ 1112.520052][ C0] [ 1112.520052][ C0] the existing dependency chain (in reverse order) is: [ 1112.520058][ C0] [ 1112.520058][ C0] -> #1 (&dev->event_lock#2){+.+.}-{3:3}: [ 1112.520107][ C0] rt_spin_lock+0x88/0x3e0 [ 1112.520125][ C0] input_inject_event+0xa5/0x330 [ 1112.520143][ C0] led_trigger_event+0x13b/0x220 [ 1112.520165][ C0] kbd_bh+0x1ec/0x300 [ 1112.520195][ C0] tasklet_action_common+0x36b/0x650 [ 1112.520217][ C0] handle_softirqs+0x226/0x6d0 [ 1112.520237][ C0] run_ktimerd+0xcf/0x190 [ 1112.520257][ C0] smpboot_thread_fn+0x542/0xa60 [ 1112.520283][ C0] kthread+0x711/0x8a0 [ 1112.520303][ C0] ret_from_fork+0x599/0xb30 [ 1112.520317][ C0] ret_from_fork_asm+0x1a/0x30 [ 1112.520339][ C0] [ 1112.520339][ C0] -> #0 (tasklet_sync_callback.cb_lock){+...}-{3:3}: [ 1112.520355][ C0] __lock_acquire+0x15a6/0x2cf0 [ 1112.520368][ C0] lock_acquire+0x117/0x340 [ 1112.520379][ C0] rt_spin_lock+0x88/0x3e0 [ 1112.520387][ C0] tasklet_action_common+0x130/0x650 [ 1112.520398][ C0] handle_softirqs+0x226/0x6d0 [ 1112.520408][ C0] __local_bh_enable_ip+0x1a0/0x2e0 [ 1112.520418][ C0] __alloc_skb+0x224/0x430 [ 1112.520430][ C0] hidp_send_message+0xb5/0x230 [ 1112.520444][ C0] hidp_input_event+0x290/0x370 [ 1112.520456][ C0] input_event_dispose+0x80/0x6b0 [ 1112.520466][ C0] input_inject_event+0x1d8/0x330 [ 1112.520475][ C0] kbd_led_trigger_activate+0xbc/0x100 [ 1112.520487][ C0] led_trigger_set+0x533/0x950 [ 1112.520497][ C0] led_trigger_set_default+0x266/0x2a0 [ 1112.520508][ C0] led_classdev_register_ext+0x73d/0x960 [ 1112.520518][ C0] input_leds_connect+0x517/0x790 [ 1112.520534][ C0] input_register_device+0xd00/0x1170 [ 1112.520545][ C0] hidp_session_probe+0x1a8/0x8a0 [ 1112.520556][ C0] l2cap_register_user+0xf4/0x200 [ 1112.520568][ C0] hidp_connection_add+0x158b/0x1a20 [ 1112.520579][ C0] hidp_sock_ioctl+0x3a8/0x5c0 [ 1112.520591][ C0] sock_do_ioctl+0xdc/0x300 [ 1112.520601][ C0] sock_ioctl+0x579/0x790 [ 1112.520610][ C0] __se_sys_ioctl+0xff/0x170 [ 1112.520622][ C0] do_syscall_64+0xfa/0xf80 [ 1112.520634][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.520643][ C0] [ 1112.520643][ C0] other info that might help us debug this: [ 1112.520643][ C0] [ 1112.520647][ C0] Possible unsafe locking scenario: [ 1112.520647][ C0] [ 1112.520650][ C0] CPU0 CPU1 [ 1112.520654][ C0] ---- ---- [ 1112.520657][ C0] lock(&dev->event_lock#2); [ 1112.520667][ C0] lock(tasklet_sync_callback.cb_lock); [ 1112.520675][ C0] lock(&dev->event_lock#2); [ 1112.520685][ C0] lock(tasklet_sync_callback.cb_lock); [ 1112.520692][ C0] [ 1112.520692][ C0] *** DEADLOCK *** [ 1112.520692][ C0] [ 1112.520694][ C0] 10 locks held by syz.0.3170/17035: [ 1112.520701][ C0] #0: ffff8880582340b0 (&hdev->lock){+.+.}-{4:4}, at: l2cap_register_user+0x67/0x200 [ 1112.520726][ C0] #1: ffffffff8ea34f80 (hidp_session_sem){++++}-{4:4}, at: hidp_session_probe+0x99/0x8a0 [ 1112.520752][ C0] #2: ffffffff8e31c658 (input_mutex){+.+.}-{4:4}, at: input_register_device+0xa76/0x1170 [ 1112.520777][ C0] #3: ffff888059fee860 (&led_cdev->led_access){+.+.}-{4:4}, at: led_classdev_register_ext+0x43d/0x960 [ 1112.520801][ C0] #4: ffffffff8dd08160 (triggers_list_lock){++++}-{4:4}, at: led_trigger_set_default+0x77/0x2a0 [ 1112.520825][ C0] #5: ffff888059fee788 (&led_cdev->trigger_lock){+.+.}-{4:4}, at: led_trigger_set_default+0x87/0x2a0 [ 1112.520850][ C0] #6: ffff88805f738270 (&dev->event_lock#2){+.+.}-{3:3}, at: input_inject_event+0xa5/0x330 [ 1112.520876][ C0] #7: ffffffff8d5ae880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 1112.520897][ C0] #8: ffffffff8d5ae880 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb1/0x330 [ 1112.520921][ C0] #9: ffffffff8d5ae880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0xa1/0x530 [ 1112.520945][ C0] [ 1112.520945][ C0] stack backtrace: [ 1112.520962][ C0] CPU: 0 UID: 0 PID: 17035 Comm: syz.0.3170 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1112.520975][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1112.520987][ C0] Call Trace: [ 1112.520996][ C0] [ 1112.521001][ C0] dump_stack_lvl+0x189/0x250 [ 1112.521014][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1112.521026][ C0] ? __pfx__printk+0x10/0x10 [ 1112.521036][ C0] ? print_lock_name+0xde/0x100 [ 1112.521051][ C0] print_circular_bug+0x2e2/0x300 [ 1112.521062][ C0] check_noncircular+0x12e/0x150 [ 1112.521073][ C0] __lock_acquire+0x15a6/0x2cf0 [ 1112.521097][ C0] ? tasklet_action_common+0x130/0x650 [ 1112.521109][ C0] lock_acquire+0x117/0x340 [ 1112.521120][ C0] ? tasklet_action_common+0x130/0x650 [ 1112.521135][ C0] rt_spin_lock+0x88/0x3e0 [ 1112.521144][ C0] ? tasklet_action_common+0x130/0x650 [ 1112.521156][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 1112.521166][ C0] ? tasklet_action_common+0xf2/0x650 [ 1112.521179][ C0] tasklet_action_common+0x130/0x650 [ 1112.521190][ C0] ? reacquire_held_locks+0x121/0x1c0 [ 1112.521204][ C0] ? rt_spin_lock+0x1c1/0x3e0 [ 1112.521214][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1112.521223][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 1112.521235][ C0] ? rt_spin_unlock+0x150/0x200 [ 1112.521246][ C0] handle_softirqs+0x226/0x6d0 [ 1112.521260][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1112.521273][ C0] __local_bh_enable_ip+0x1a0/0x2e0 [ 1112.521284][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1112.521294][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1112.521306][ C0] ? rt_spin_unlock+0x161/0x200 [ 1112.521320][ C0] ? napi_skb_cache_get+0x2e4/0x410 [ 1112.521334][ C0] ? __alloc_skb+0x200/0x430 [ 1112.521348][ C0] __alloc_skb+0x224/0x430 [ 1112.521361][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 1112.521374][ C0] ? add_timer_randomness+0x358/0x570 [ 1112.521387][ C0] hidp_send_message+0xb5/0x230 [ 1112.521401][ C0] hidp_input_event+0x290/0x370 [ 1112.521414][ C0] ? __pfx_hidp_input_event+0x10/0x10 [ 1112.521429][ C0] ? input_handle_event+0xc35/0xf30 [ 1112.521439][ C0] ? __pfx_hidp_input_event+0x10/0x10 [ 1112.521452][ C0] input_event_dispose+0x80/0x6b0 [ 1112.521464][ C0] input_inject_event+0x1d8/0x330 [ 1112.521474][ C0] ? input_inject_event+0xb1/0x330 [ 1112.521485][ C0] kbd_led_trigger_activate+0xbc/0x100 [ 1112.521497][ C0] led_trigger_set+0x533/0x950 [ 1112.521510][ C0] ? __pfx_led_trigger_set+0x10/0x10 [ 1112.521520][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1112.521533][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1112.521546][ C0] led_trigger_set_default+0x266/0x2a0 [ 1112.521559][ C0] led_classdev_register_ext+0x73d/0x960 [ 1112.521571][ C0] ? __pfx_led_classdev_register_ext+0x10/0x10 [ 1112.521585][ C0] ? input_open_device+0x2a9/0x390 [ 1112.521596][ C0] input_leds_connect+0x517/0x790 [ 1112.521610][ C0] input_register_device+0xd00/0x1170 [ 1112.521624][ C0] hidp_session_probe+0x1a8/0x8a0 [ 1112.521637][ C0] ? __pfx_hidp_session_probe+0x10/0x10 [ 1112.521652][ C0] ? l2cap_register_user+0x67/0x200 [ 1112.521664][ C0] l2cap_register_user+0xf4/0x200 [ 1112.521676][ C0] ? hidp_connection_add+0x1577/0x1a20 [ 1112.521689][ C0] hidp_connection_add+0x158b/0x1a20 [ 1112.521703][ C0] hidp_sock_ioctl+0x3a8/0x5c0 [ 1112.521717][ C0] ? __pfx___schedule+0x10/0x10 [ 1112.521728][ C0] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 1112.521745][ C0] ? preempt_schedule_irq+0xde/0x150 [ 1112.521756][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1112.521775][ C0] sock_do_ioctl+0xdc/0x300 [ 1112.521786][ C0] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1112.521797][ C0] ? smk_tskacc+0x2fc/0x370 [ 1112.521812][ C0] ? smack_file_ioctl+0x24d/0x340 [ 1112.521827][ C0] sock_ioctl+0x579/0x790 [ 1112.521837][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 1112.521848][ C0] ? security_file_ioctl+0x19/0x2d0 [ 1112.521860][ C0] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1112.521875][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 1112.521885][ C0] __se_sys_ioctl+0xff/0x170 [ 1112.521898][ C0] do_syscall_64+0xfa/0xf80 [ 1112.521910][ C0] ? rcu_is_watching+0x15/0xb0 [ 1112.521919][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.521929][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1112.521939][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.521949][ C0] RIP: 0033:0x7f6b7032f749 [ 1112.521965][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1112.521975][ C0] RSP: 002b:00007f6b6e554038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1112.521986][ C0] RAX: ffffffffffffffda RBX: 00007f6b70586180 RCX: 00007f6b7032f749 [ 1112.521994][ C0] RDX: 0000200000000280 RSI: 00000000400448c8 RDI: 000000000000000a [ 1112.522001][ C0] RBP: 00007f6b703b3f91 R08: 0000000000000000 R09: 0000000000000000 [ 1112.522007][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1112.522014][ C0] R13: 00007f6b70586218 R14: 00007f6b70586180 R15: 00007ffdc2f85848 [ 1112.522025][ C0] [ 1112.609180][T14046] usb 5-1: USB disconnect, device number 59 [ 1114.103936][T16876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1114.133953][T16876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1114.228698][ T1386] bridge_slave_1: left allmulticast mode [ 1114.228715][ T1386] bridge_slave_1: left promiscuous mode [ 1114.228818][ T1386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.308472][ T1386] bridge_slave_0: left allmulticast mode [ 1114.308493][ T1386] bridge_slave_0: left promiscuous mode [ 1114.308618][ T1386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.448840][ T1386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1115.558331][ T1386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1115.619435][ T1386] bond0 (unregistering): Released all slaves [ 1115.751929][T16876] team0: Port device team_slave_0 added [ 1115.756161][T16876] team0: Port device team_slave_1 added [ 1115.950931][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.950979][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.028016][ T1386] hsr_slave_0: left promiscuous mode [ 1116.068815][ T1386] hsr_slave_1: left promiscuous mode [ 1116.069257][ T1386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1116.108876][ T1386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1116.548357][ T1386] team0 (unregistering): Port device team_slave_1 removed [ 1116.620593][ T1386] team0 (unregistering): Port device team_slave_0 removed [ 1117.099379][T16876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1117.099397][T16876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1117.099411][T16876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1117.102617][T16876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1117.102633][T16876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1117.102656][T16876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1117.371246][T16876] hsr_slave_0: entered promiscuous mode [ 1117.371814][T16876] hsr_slave_1: entered promiscuous mode [ 1117.372154][T16876] debugfs: 'hsr0' already exists in 'hsr' [ 1117.372165][T16876] Cannot create hsr debugfs directory [ 1117.741201][T16696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1117.930048][T16696] 8021q: adding VLAN 0 to HW filter on device team0 [ 1117.947031][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.947177][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1118.039825][ T1524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.039880][ T1524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1118.178004][ T1014] bond1: (slave macvlan3): failed to get link speed/duplex [ 1118.322207][T16696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1118.337949][ T13] bond1: (slave macvlan3): failed to get link speed/duplex [ 1118.352781][T16696] veth0_vlan: entered promiscuous mode [ 1118.357250][T16696] veth1_vlan: entered promiscuous mode [ 1118.404457][T16696] veth0_macvtap: entered promiscuous mode [ 1118.409317][T16696] veth1_macvtap: entered promiscuous mode [ 1118.421724][T16696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1118.431385][T16696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1118.437658][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.438186][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.438219][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.438247][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.649405][T16696] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 1118.675299][T16876] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1118.711670][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.711693][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.713837][T16876] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1118.772253][T16696] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 1118.776410][T16876] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1118.832772][T16876] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1118.879442][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.879463][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.996627][T16876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1119.014237][T16876] 8021q: adding VLAN 0 to HW filter on device team0 [ 1119.017459][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.017540][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1119.029180][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.029303][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1119.059122][ T13] bond1: (slave macvlan3): failed to get link speed/duplex [ 1119.166873][T16876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1119.168053][ T58] bond1: (slave macvlan3): failed to get link speed/duplex [ 1119.278386][ T1437] bond1: (slave macvlan3): failed to get link speed/duplex [ 1119.311567][T16876] veth0_vlan: entered promiscuous mode [ 1119.317637][T16876] veth1_vlan: entered promiscuous mode [ 1119.337715][T16876] veth0_macvtap: entered promiscuous mode [ 1119.344357][T16876] veth1_macvtap: entered promiscuous mode [ 1119.354633][T16876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1119.369578][T16876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1119.373929][ T1437] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.374070][ T1437] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.374100][ T1437] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.374128][ T1437] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.516913][T16876] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 1119.540382][ T1386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1119.540405][ T1386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1119.542891][T16876] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht' [ 1119.587469][ T1437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1119.587492][ T1437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1119.638026][ T1437] bond1: (slave macvlan3): failed to get link speed/duplex [ 1119.758066][ T1524] bond1: (slave macvlan3): failed to get link speed/duplex [ 1119.888134][ T1437] bond1: (slave macvlan3): failed to get link speed/duplex [ 1119.997998][ T1437] bond1: (slave macvlan3): failed to get link speed/duplex [ 1120.128329][ T1437] bond1: (slave macvlan3): failed to get link speed/duplex