last executing test programs: 19m12.100299364s ago: executing program 2 (id=551): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000040)={0xffffffffffffff01, 0x0}, 0x10) 19m11.177852568s ago: executing program 2 (id=553): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = eventfd2(0x101, 0x80801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 19m6.33636547s ago: executing program 2 (id=557): syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) inotify_init() utime(0x0, 0xfffffffffffffffd) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000580)={0x20000008}) r5 = fanotify_init(0x1, 0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000100)={0x2}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000040)={0xa0000001}) r6 = fsopen(&(0x7f00000000c0)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x6) fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r8, &(0x7f0000000140)=""/46, 0x2e) 19m3.436898643s ago: executing program 2 (id=560): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 19m0.941008853s ago: executing program 2 (id=563): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) r1 = socket(0x28, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x76, &(0x7f0000000140)=@assoc_value, 0x8) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000300)={0x0, 0x0, 0x0, @raw}) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.origin\x00', &(0x7f0000000080)='/dev/cec#\x00', 0xa, 0x2) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000180)=0xd0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x5abe, 0xc, 0x6}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x73, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0xc595, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2002d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x9, 0x4000000000, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x29, 0x40, 0x6, 0x0, 0x8000000bdb], 0xd000, 0x43102}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000480)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x7, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x6, 0x9, 0x3, 0x3ff, 0x7], 0xeeee8000, 0x2c2}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x4000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x10, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xfec00000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x54000, 0x58000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xeeee0000, 0x9, 0xa0, 0x4, 0x8, 0x5, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0x26000, 0x4, 0x5, 0xf3, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x9, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x19, 0xb0, 0x9}, {0x25000, 0x30}, {0x2, 0x7}, 0xc0010000, 0x0, 0x0, 0x2024, 0x0, 0x4400, 0x8080000, [0x9, 0x100000000000202, 0x1000, 0xb]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 18m53.298322995s ago: executing program 2 (id=572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4f, &(0x7f0000000100)=0xfffffffffffffffa) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setgid(0xee00) syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042"], 0x14}}, 0x44014) recvmmsg(r3, &(0x7f0000004480), 0x0, 0x12, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r3) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x1037000, 0x1000, 0x9, 0x1}, 0x20) timerfd_gettime(0xffffffffffffffff, 0x0) 18m38.134228151s ago: executing program 32 (id=572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4f, &(0x7f0000000100)=0xfffffffffffffffa) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setgid(0xee00) syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042"], 0x14}}, 0x44014) recvmmsg(r3, &(0x7f0000004480), 0x0, 0x12, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r3) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x1037000, 0x1000, 0x9, 0x1}, 0x20) timerfd_gettime(0xffffffffffffffff, 0x0) 15m25.321149911s ago: executing program 0 (id=924): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000480), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000004c0)={0x0, 0x2, 0x7, "19891509647a61095f296dc5f646cc67c8942867bdca001d2c6965a27dac88e5", 0x494e4f4b}) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getrlimit(0x6, &(0x7f0000000040)) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffff9c, &(0x7f0000000080), 0x200, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) r4 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, 0x0, 0xfffffffffffffffd, {0x0, 0x1, 0x3}, 0xfe}, 0x18) close(r3) socket$phonet_pipe(0x23, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0xa8, @private2={0xfc, 0x2, '\x00', 0x1}, 0xc1d}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 15m21.173563325s ago: executing program 0 (id=932): ppoll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x1000}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000400)=0x30007) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, 0xffffffffffffffff, 0x0) 15m17.197705838s ago: executing program 0 (id=935): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x100000) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000008c0)=""/195, 0xc3}], 0x1}, 0x0) 15m15.325880342s ago: executing program 0 (id=939): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000000000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000810}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a310000"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 15m15.092033791s ago: executing program 0 (id=940): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x8, 0x0, {}, {0xee00}, 0x390239d7, 0xe03e}) socket$alg(0x26, 0x5, 0x0) msgget$private(0x0, 0x1f3) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0), 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800), 0x0, 0x0, 0x40000000000003e0}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80402, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r2 = syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x40, 0x3, 0x8, 0x409, 0x8, 0x80, 0x11, 0x4, 0x8000000000000000, 0x6, 0x0, 0x3, 0x2, 0x3, 0xb], 0x0, 0x194d40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = fsmount(r0, 0x0, 0x86) fchdir(r3) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x70bd29, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8, 0x1b, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000180)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x64010101, @multicast2}, "0018630100000003"}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0xc}}, 0x14}}, 0x24000004) 15m13.617477356s ago: executing program 0 (id=944): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x12}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = io_uring_setup(0x15c0, &(0x7f00000000c0)={0x0, 0x5e7, 0x10000, 0x2, 0x158}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000040)={0x100, 0xffffffffffffffff, 0x0, {0xc5, 0xfc}, 0x4}, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x31) 14m57.81285466s ago: executing program 33 (id=944): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x12}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = io_uring_setup(0x15c0, &(0x7f00000000c0)={0x0, 0x5e7, 0x10000, 0x2, 0x158}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000040)={0x100, 0xffffffffffffffff, 0x0, {0xc5, 0xfc}, 0x4}, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x31) 2m39.660687744s ago: executing program 1 (id=2149): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000100000000000000000037000004d232000000fc020000000000000000000000000000050000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000030000800000000043050000000000000400000000000000ffffffffffffff7f000100000000000001000000000000000000000000000000000000002cbd70000535004002000400500000000000000060001200726663343130362867636d28616573292900"/235, @ANYRES32=r2, @ANYRES16=r0], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 2m37.686717077s ago: executing program 1 (id=2150): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 2m34.137583956s ago: executing program 1 (id=2151): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f00000000c0)={0x20, 0x16, 0x2, "b60c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m31.59047686s ago: executing program 4 (id=2154): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket(0x40000000015, 0x5, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002300090425bd7000ffdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x24044811}, 0x0) 2m30.514203068s ago: executing program 3 (id=2155): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb635773f06ebbeeb, 0x2010, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f00000009c0), 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000fc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000e40), 0x0, 0x0, 0x0, 0x4000495}}], 0x2, 0x480c5) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0xd) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r5, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r4, 0x407, 0x100004) write$eventfd(r4, &(0x7f0000000240), 0xffffff14) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000280)='*', 0x1}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1e) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r1], 0x48) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1) 2m30.263963552s ago: executing program 4 (id=2156): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019300)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_emit_vhci(&(0x7f0000004e40)=ANY=[@ANYBLOB], 0x17) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000001040)=0x8aa760e3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) 2m29.240485456s ago: executing program 4 (id=2157): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x4004) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000e00)={0x1, [{0x1, 0x478, 0x1, &(0x7f0000000440)="483c80cc44f39beec7cab2bdc6603f651417396074ccd7b44d5df38b9b70b46b6825db709bf2d15b561bbe04dee581862f0bc0da7a9205505215c76fb6d67821b0194cb27af1bdd6feac183aca483abd460fd022b47857532df6bafb9a207ca35ea1a0a01d5a93a9f753ddbab3f268a9b919390eafd4dad98a983eca7aa61f95f3a488c8f06b98a6f7a5a637e740d8"}, {0x1, 0x600, 0x8001, &(0x7f0000000640)="af1bb3f9994dcf10e8bbcaf06a0d2ce21bf7a0f3c8c9adee08ce6077cbd045520aec31d3de4aa9a2831a7541c1d88ea9a75e148f335e815bcb3a89c23400f6102fd4ece450135f807a455b9a738e8704ad90405e0ed7a36128b3239536cfc2765893411a37f7a976941e971025c2be26ee68b316e2f3caaac7a2d38f94ad16c9e68e98ce8eac72e3437af92c591f26bc99c543598102cf949b4ac76bdfd1bf857b815efc3ae809e77f3a636f54f0c8d45bd681faa8a579f7727eb5ce3ffc6221"}, {0x1, 0x2f8, 0x1, &(0x7f0000000700)="cc351cbb6e5a0e7c70f8a364be879d618025b8336b8ffa438a49f6f1ea3d4b04479434fd07d0e82ef513952ec1a099be2103baddf982098aa50a7f845347a1d9699b64b3c74abaf3b361f7c7ce97a2c34556febd9d7df79168e6683f2198da"}, {0x0, 0x8, 0x1, &(0x7f00000007c0)=' '}, {0x1, 0x310, 0x0, &(0x7f0000000800)="60f6f4c9a7beb8c0519e56345dde3e13357fdf5c530a1e6e95ed965b00ac5d8fab345582554736c77e242d28c2ed41b51e4e42d96ca271047d1dbd952779c2fc4d01040000d0b131f72ad09356ddec9437f6c77f5ac755650a503ef467ca47eedfa0"}, {0x2, 0x6a8, 0x80000001, &(0x7f0000000c00)="daa2d6d17f1d09eb006048a30a2408943e05da44ce2985608649418ce9bc3bba3bc4625c7d9a9f641d4f01d2610dfa934112557deca89cc1d28deb9006981149e3db49a246656e63290ede0de658801b82ba385f86aac9503827913662b5a3eaba896de774df657a6bd96f2536877fd21be519574efffa4659155ba05530e1df007fab649a74a5837d073778600831a26ad56d458d8cca7b2396eae803df9b0e2fdc93afca4689b72ee2983351a724c9b47b0a68480ccfa2075b24b414a23e9760d8eacdd16a7118923edabb1496e6a253a26fa9f4"}, {0x3, 0x408, 0x2, &(0x7f0000000900)="a9ae869af3e33e14ce06363e419d6b2bd82e011377e5dd043c53a368dd61b71f45a831c9ed8c6b30814973fc48b502cf8c9262f1b3b52c707e81142c26e53b9556949ab3ed7f0cb99b0317859a994c6cef48411cec8eba4445a0ab19e99129226928f59ffd55bd4d59dfbd6d4c044c067a43203b6a7b9ceb2a6bd5c9d76f155c95"}, {0x1, 0x3c8, 0x2, &(0x7f00000009c0)="78f85c1361b1c5c8d12ad97ebbbf41b7fc371c5dd7d0611c30060c4b84de3fd16cc6c85ecec3d7fb240cb975f1aa18a4fa926f9b0eb43141a8f8ad2000c84b315cc8afb6b8402f6ed9bf63cd5652d7fc74c4ee756666697d6a0a84ea5dc26cd761e86e8099b344a212d7be5e8eafa654353737e63b512b25a4"}, {0x1, 0x0, 0x1, 0x0}, {0x2, 0x10, 0x71375cd3, &(0x7f0000000a80)="1add"}, {0x1, 0x168, 0x1, &(0x7f0000000ac0)="69dda148ba18a344128661139d54a2703c2219a5d36b2ec9c69a117931490c4f3afff5e8bb8f5184a1d321ca92"}, {0x3, 0x460, 0x0, &(0x7f0000000b00)="78bf8a264d182d874a0bad9ba5cd042e1ed75619d434456d8ed23b2ca959f5c30bed53c59bcd8afa8769b4ce5f08a45a3f0f12b6af8850d1e30109e2875a86bdbfd0676ba3fbc4fd865be063e564aaef9447b89d1913818881b69a88ce04eeeb0ffbc2a4b2a75f84c0c545d387ec250fa37e7a5868360ee0efb5d259a11639e7fcdc6e87cdd4702022692eb6"}, {0x3, 0x150, 0x1, &(0x7f0000000bc0)="beaa1bdd0b2ee7533a3ba9ba6e2f342e545e7d2e4ea94cb51bfceddb53e1f0c1c80319662e836450005d"}, {0x3, 0x0, 0x6, &(0x7f0000000c00)}, {0x0, 0x3c0, 0x1ff, &(0x7f0000000340)="058e03c8fa973b8609516eae9b6a816ef06e3a50f44cf00aad7fd83a7cbe4939c9d09478ca7a8d5030c4345399f0c55d37a5a0310f7869dd6c1fb11d5d3c56818f5b090300aa7ce177ad448a1090e8e775429392453a8cbe00ce7ba900217d9485fb240c0769bf7620c96eefb0ba29027f3bc6672bcc4fd0"}, {0x3, 0x7f8, 0x2c4, &(0x7f0000000d00)="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"}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ed) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r3, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r3, &(0x7f0000001f00)={0x2, 0x0, {&(0x7f0000004b00)=""/110, 0x6e, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r3, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000540)=""/224, 0xe0, 0x0, 0x2, 0x2}}, 0x48) 2m28.978797954s ago: executing program 3 (id=2158): write(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB="000000006e42d2000000", @ANYRES32=0x0], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ff030000000000000000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mq_notify(0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="e5", 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendmmsg$inet(r2, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0xe, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) 2m28.201768171s ago: executing program 1 (id=2159): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_ublk_setup_queues(r1, 0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x200, 0x1000002, 0x92}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa8b0, 0x8, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000002400)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e20000000000000000000000000000000000000000000000000000000045ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b8460000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x0, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r3, &(0x7f0000009b80)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0xfffffffffffffff5, 0x0, {0x800}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fallocate(r5, 0x0, 0x460e, 0x3) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) creat(&(0x7f0000000200)='./file0\x00', 0x1d4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 2m28.013206462s ago: executing program 3 (id=2160): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001540)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/182, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2m27.635564697s ago: executing program 3 (id=2161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x101}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4024000) 2m27.34538369s ago: executing program 3 (id=2162): r0 = syz_io_uring_setup(0xefd, &(0x7f00000002c0)={0x0, 0x0, 0x10000, 0x3, 0x2cf}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r5, 0x400, 0x1) fcntl$getflags(r5, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r8) sendmsg$NLBL_CIPSOV4_C_REMOVE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) syncfs(r0) r10 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x400000) r11 = dup(r10) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x64, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebd}, 0x0, 0x80000080, 0x1}) r12 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0xff03, 0x260, 0xffffffff, 0x130, 0x130, 0x98, 0x98, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0x98, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010100, @multicast1, 0xffffffff, 0xff, 'ipvlan1\x00', 'sit0\x00', {}, {}, 0x62, 0x1c6a0dc5b9630812, 0x30}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'macsec0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) io_uring_enter(r0, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x9, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000c084}, 0x4040) 2m27.288735269s ago: executing program 4 (id=2163): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) accept4(r0, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) 2m25.866692573s ago: executing program 4 (id=2164): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket(0x40000000015, 0x5, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002300090425bd7000ffdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x24044811}, 0x0) 2m25.797731922s ago: executing program 3 (id=2165): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019300)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_emit_vhci(&(0x7f0000004e40)=ANY=[@ANYBLOB], 0x17) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000001040)=0x8aa760e3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) 2m24.166811398s ago: executing program 4 (id=2166): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x57) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000200)={0x1d, r7}, 0x10) sendmsg$can_bcm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r8, @ANYRES64=r7, @ANYRES64=r6, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r8, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000000)={0x401, 0x8, 0x2, 0x3, 0x2, 0x0, [{0x6e, 0xc, 0x7, '\x00', 0x2801}, {0x2, 0x373, 0x7, '\x00', 0xa}]}) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000380)={0x631, {{0x2, 0x4e23, @remote}}, 0x1}, 0x90) 2m23.993344495s ago: executing program 1 (id=2167): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a7379e18bd02030303034303030303030303030eefc2ab2b0393300", @ANYRESOCT=r0], 0x2a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x1, 0x0) setreuid(0xee00, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x280a00, 0x0) file_getattr(r2, 0x0, &(0x7f0000000000), 0x18, 0x1000) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='scalable', 0x8) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f00000006c0)=[{&(0x7f0000032680)=""/102361, 0x18fd9}, {0x0}, {&(0x7f0000000600)=""/175, 0x9a}, {&(0x7f0000000300)=""/109}, {&(0x7f0000000500)=""/229}], 0x3, 0xff, 0x400006) 2m22.838283593s ago: executing program 1 (id=2168): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f00000000c0)={0x20, 0x16, 0x3, "b60cbd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m42.460991717s ago: executing program 34 (id=2168): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f00000000c0)={0x20, 0x16, 0x3, "b60cbd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.14909563s ago: executing program 35 (id=2165): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019300)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_emit_vhci(&(0x7f0000004e40)=ANY=[@ANYBLOB], 0x17) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000001040)=0x8aa760e3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) 0s ago: executing program 36 (id=2166): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x57) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000200)={0x1d, r7}, 0x10) sendmsg$can_bcm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r8, @ANYRES64=r7, @ANYRES64=r6, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r8, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000000)={0x401, 0x8, 0x2, 0x3, 0x2, 0x0, [{0x6e, 0xc, 0x7, '\x00', 0x2801}, {0x2, 0x373, 0x7, '\x00', 0xa}]}) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000380)={0x631, {{0x2, 0x4e23, @remote}}, 0x1}, 0x90) kernel console output (not intermixed with test programs): ][ T8771] usb 4-1: 0:2 : does not exist [ 943.429388][ T8771] usb 4-1: unit 0 not found! [ 943.980918][ T5700] usb 5-1: USB disconnect, device number 56 [ 944.050085][ T150] bridge_slave_1: left allmulticast mode [ 944.050124][ T150] bridge_slave_1: left promiscuous mode [ 944.050378][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.244736][ T4912] Bluetooth: hci5: command tx timeout [ 945.417691][ T8771] usb 4-1: USB disconnect, device number 57 [ 945.448354][T12199] udevd[12199]: setting mode of /dev/bus/usb/004/057 to 020664 failed: No such file or directory [ 945.448760][T12199] udevd[12199]: setting owner of /dev/bus/usb/004/057 to uid=0, gid=0 failed: No such file or directory [ 945.558735][ T150] bridge_slave_0: left allmulticast mode [ 945.558773][ T150] bridge_slave_0: left promiscuous mode [ 945.589217][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.611988][T12206] udevd[12206]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 947.229599][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 947.318831][ T4912] Bluetooth: hci5: command tx timeout [ 947.415475][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 947.461041][ T150] bond0 (unregistering): Released all slaves [ 947.509902][T12362] vlan2: entered allmulticast mode [ 947.509926][T12362] macsec0: entered allmulticast mode [ 947.851473][T12055] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.851622][T12055] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.851839][T12055] bridge_slave_0: entered allmulticast mode [ 947.858917][T12055] bridge_slave_0: entered promiscuous mode [ 947.948632][ T8771] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 948.344262][T12055] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.597106][T12055] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.692561][ T8771] usb 5-1: unable to get BOS descriptor or descriptor too short [ 948.695818][T12055] bridge_slave_1: entered allmulticast mode [ 948.695943][ T8771] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 948.695996][ T8771] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.696023][ T8771] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.696047][ T8771] usb 5-1: config 1 interface 0 has no altsetting 0 [ 948.741507][ T8771] usb 5-1: string descriptor 0 read error: -22 [ 948.741881][ T8771] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 948.741954][ T8771] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.781161][T12055] bridge_slave_1: entered promiscuous mode [ 949.162150][ T10] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 949.419903][ T4912] Bluetooth: hci5: command tx timeout [ 949.709405][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 949.710159][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 949.711741][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 949.711827][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 949.717208][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 949.717238][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.717259][ T10] usb 4-1: Product: syz [ 949.717273][ T10] usb 4-1: Manufacturer: syz [ 949.717347][ T10] usb 4-1: SerialNumber: syz [ 949.915100][ T8771] usbhid 5-1:1.0: can't add hid device: -71 [ 949.915195][ T8771] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 950.157349][ T8771] usb 5-1: USB disconnect, device number 57 [ 950.198069][ T10] usb 4-1: 0:2 : does not exist [ 950.198168][ T10] usb 4-1: unit 0 not found! [ 951.394192][T12055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.472099][ T4912] Bluetooth: hci5: command tx timeout [ 951.532253][T12055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.056462][ T10] usb 4-1: USB disconnect, device number 58 [ 954.201135][ T150] hsr_slave_0: left promiscuous mode [ 954.270255][ T150] hsr_slave_1: left promiscuous mode [ 954.271340][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.319897][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.361259][T12206] udevd[12206]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 956.701548][ T150] team0 (unregistering): Port device team_slave_1 removed [ 956.759452][ T150] team0 (unregistering): Port device team_slave_0 removed [ 956.968717][ T5814] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 956.973881][T12055] team0: Port device team_slave_0 added [ 957.175396][ T5814] usb 4-1: unable to get BOS descriptor or descriptor too short [ 957.176946][ T5814] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 957.177002][ T5814] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.177030][ T5814] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.177053][ T5814] usb 4-1: config 1 interface 0 has no altsetting 0 [ 957.223338][ T5814] usb 4-1: string descriptor 0 read error: -22 [ 957.223734][ T5814] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 957.223785][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.373381][T12055] team0: Port device team_slave_1 added [ 957.753376][ T5853] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 958.124727][ T5814] usbhid 4-1:1.0: can't add hid device: -71 [ 958.124889][ T5814] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 958.147380][ T5814] usb 4-1: USB disconnect, device number 59 [ 958.186706][ T5853] usb 5-1: unable to get BOS descriptor or descriptor too short [ 958.206191][ T5853] usb 5-1: not running at top speed; connect to a high speed hub [ 958.207614][ T5853] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 958.207639][ T5853] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 958.241098][ T5853] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 958.241123][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.241138][ T5853] usb 5-1: Product: syz [ 958.241148][ T5853] usb 5-1: Manufacturer: syz [ 958.241159][ T5853] usb 5-1: SerialNumber: syz [ 958.509394][T12055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.509412][T12055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.509442][T12055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.511976][T12055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.511991][T12055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.512020][T12055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.666903][T12334] lo speed is unknown, defaulting to 1000 [ 958.698343][ T5853] usb 5-1: 0:2 : does not exist [ 958.698429][ T5853] usb 5-1: unit 0 not found! [ 959.467148][ T5853] usb 5-1: USB disconnect, device number 58 [ 961.445773][T12206] udevd[12206]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 962.303015][T12055] hsr_slave_0: entered promiscuous mode [ 962.404961][T12055] hsr_slave_1: entered promiscuous mode [ 963.055364][T12334] netdevsim0 speed is unknown, defaulting to 1000 [ 964.022279][T12491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1602'. [ 967.751172][ T5853] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 968.028424][ T5853] usb 2-1: unable to get BOS descriptor or descriptor too short [ 968.037006][ T5853] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 968.037038][ T5853] usb 2-1: can't read configurations, error -71 [ 970.184026][T12334] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.184300][T12334] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.184506][T12334] bridge_slave_0: entered allmulticast mode [ 970.187563][T12334] bridge_slave_0: entered promiscuous mode [ 970.213888][T12334] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.214516][T12334] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.215216][T12334] bridge_slave_1: entered allmulticast mode [ 970.222824][T12334] bridge_slave_1: entered promiscuous mode [ 970.389353][T12334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 970.393247][T12334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 970.443298][T12334] team0: Port device team_slave_0 added [ 970.447028][T12334] team0: Port device team_slave_1 added [ 970.496254][T12334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 970.496276][T12334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 970.496296][T12334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 970.497984][T12334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 970.498003][T12334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 970.498023][T12334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 970.646804][T12334] hsr_slave_0: entered promiscuous mode [ 970.648126][T12334] hsr_slave_1: entered promiscuous mode [ 970.661454][T12334] debugfs: 'hsr0' already exists in 'hsr' [ 970.661480][T12334] Cannot create hsr debugfs directory [ 971.078360][ T5603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 971.122032][ T5603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 971.126622][ T5603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 971.128405][ T5603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 971.160195][ T5603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 971.786509][T12529] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1611'. [ 972.090922][T12532] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 972.746638][T12542] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 973.005470][T12544] fuse: root generation should be zero [ 973.308758][ T4912] Bluetooth: hci0: command tx timeout [ 973.667623][ T150] bridge_slave_1: left allmulticast mode [ 973.667671][ T150] bridge_slave_1: left promiscuous mode [ 973.667975][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.850081][ T150] bridge_slave_0: left allmulticast mode [ 973.850119][ T150] bridge_slave_0: left promiscuous mode [ 973.850386][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.890949][ T5700] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 974.055746][ T5700] usb 2-1: unable to get BOS descriptor or descriptor too short [ 974.069294][ T5700] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 974.069335][ T5700] usb 2-1: can't read configurations, error -71 [ 974.710631][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 974.849899][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 974.947906][ T150] bond0 (unregistering): Released all slaves [ 975.233473][T12513] lo speed is unknown, defaulting to 1000 [ 975.410912][T12567] fuse: Bad value for 'fd' [ 975.412117][ T4912] Bluetooth: hci0: command tx timeout [ 977.530676][ T4912] Bluetooth: hci0: command tx timeout [ 977.822435][ T31] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 977.987985][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 978.000520][ T31] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 978.000562][ T31] usb 2-1: can't read configurations, error -71 [ 978.167995][T12513] netdevsim0 speed is unknown, defaulting to 1000 [ 979.167662][ T150] hsr_slave_0: left promiscuous mode [ 979.207074][ T150] hsr_slave_1: left promiscuous mode [ 979.208206][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 979.255238][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 979.548758][ T4912] Bluetooth: hci0: command tx timeout [ 986.430634][ T5814] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 986.461098][ T150] team0 (unregistering): Port device team_slave_1 removed [ 986.539841][ T150] team0 (unregistering): Port device team_slave_0 removed [ 986.584038][ T5814] usb 2-1: unable to get BOS descriptor or descriptor too short [ 986.584644][ T5814] usb 2-1: not running at top speed; connect to a high speed hub [ 986.585891][ T5814] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 986.585915][ T5814] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 986.630634][ T5814] usb 2-1: string descriptor 0 read error: -22 [ 986.630734][ T5814] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 986.630751][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.679755][ T5814] usb 2-1: 0:2 : does not exist [ 986.961867][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9 [ 987.391974][ T5814] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 987.414050][ T5814] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 987.427735][ T5814] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 987.647947][T12643] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 987.792350][ T5814] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 987.821653][ T5814] usb 2-1: USB disconnect, device number 57 [ 989.708969][ T5603] Bluetooth: hci3: command 0x1003 tx timeout [ 989.741642][ T4912] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 990.913785][T12513] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.913917][T12513] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.948314][T12513] bridge_slave_0: entered allmulticast mode [ 990.966253][T12513] bridge_slave_0: entered promiscuous mode [ 990.983121][T12513] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.005205][T12513] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.014076][T12513] bridge_slave_1: entered allmulticast mode [ 991.041104][T12513] bridge_slave_1: entered promiscuous mode [ 991.345090][ T5813] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 991.438810][ T10] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 991.469275][T12513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.473731][T12513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 991.488833][ T5813] usb 2-1: Using ep0 maxpacket: 16 [ 991.504810][ T5813] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 991.504844][ T5813] usb 2-1: config 0 interface 0 has no altsetting 0 [ 991.504879][ T5813] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 991.504896][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.604733][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 991.605498][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 991.608341][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 991.608368][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 991.688995][ T5813] usb 2-1: config 0 descriptor?? [ 991.690463][T12688] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 991.715565][ T10] usb 5-1: string descriptor 0 read error: -22 [ 991.715710][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 991.715735][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.977518][ T10] usb 5-1: 0:2 : does not exist [ 992.214805][ T5813] corsair 0003:1B1C:1B3E.0014: collection stack underflow [ 992.214833][ T5813] corsair 0003:1B1C:1B3E.0014: item 0 2 0 12 parsing failed [ 992.228765][ T5813] corsair 0003:1B1C:1B3E.0014: parse failed [ 992.228941][ T5813] corsair 0003:1B1C:1B3E.0014: probe with driver corsair failed with error -22 [ 992.350163][T12513] team0: Port device team_slave_0 added [ 992.355780][T12513] team0: Port device team_slave_1 added [ 992.358287][ T5813] usb 2-1: USB disconnect, device number 58 [ 992.561436][ T10] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 992.592959][ T10] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 992.618698][ T10] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 992.724265][ T10] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 992.799418][T12513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.799438][T12513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.799458][T12513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.867409][ T10] usb 5-1: USB disconnect, device number 59 [ 992.934694][T12513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.934711][T12513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.934736][T12513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 993.185330][T12706] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 993.708811][T12334] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 994.606008][T12334] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 994.656131][T12715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1659'. [ 994.656159][T12715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1659'. [ 995.363343][ T4912] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 995.848125][T12334] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 996.201383][T12334] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 996.571942][T12334] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 997.858217][T12334] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 997.914375][T12334] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 997.965804][T12334] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 998.174025][T12513] hsr_slave_0: entered promiscuous mode [ 998.175189][T12513] hsr_slave_1: entered promiscuous mode [ 998.175994][T12513] debugfs: 'hsr0' already exists in 'hsr' [ 998.176014][T12513] Cannot create hsr debugfs directory [ 998.275127][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.275195][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1001.710417][ T150] bridge_slave_1: left allmulticast mode [ 1001.710456][ T150] bridge_slave_1: left promiscuous mode [ 1001.710727][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.879909][ T150] bridge_slave_0: left allmulticast mode [ 1001.879938][ T150] bridge_slave_0: left promiscuous mode [ 1001.880218][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.482799][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1669'. [ 1002.482826][T12775] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1669'. [ 1003.260507][T12777] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1003.419437][ T8966] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1003.467594][ T8966] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1003.483762][ T8966] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1003.486862][ T8966] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1003.487791][ T8966] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1003.869687][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1003.999355][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1004.081916][ T150] bond0 (unregistering): Released all slaves [ 1005.396764][ T4912] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1005.628901][ T4912] Bluetooth: hci5: command tx timeout [ 1007.718775][ T4912] Bluetooth: hci5: command tx timeout [ 1008.488871][ T150] hsr_slave_0: left promiscuous mode [ 1008.532419][ T150] hsr_slave_1: left promiscuous mode [ 1008.533466][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1008.594171][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1008.650536][T12809] kvm: kvm [12808]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 1009.788933][ T4912] Bluetooth: hci5: command tx timeout [ 1010.398730][ T5700] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 1010.719149][ T5700] usb 4-1: not running at top speed; connect to a high speed hub [ 1010.743490][ T5700] usb 4-1: config 1 interface 0 altsetting 67 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1010.743569][ T5700] usb 4-1: config 1 interface 0 altsetting 67 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1010.743633][ T5700] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1010.917273][ T5700] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1010.917361][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.917422][ T5700] usb 4-1: Product: syz [ 1010.917439][ T5700] usb 4-1: Manufacturer: syz [ 1010.917455][ T5700] usb 4-1: SerialNumber: syz [ 1011.273470][T12809] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1011.273669][T12809] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1011.561880][ T150] team0 (unregistering): Port device team_slave_1 removed [ 1011.624907][ T150] team0 (unregistering): Port device team_slave_0 removed [ 1011.651185][T12827] Bluetooth: MGMT ver 1.23 [ 1011.868890][ T4912] Bluetooth: hci5: command tx timeout [ 1012.588736][T12701] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1012.740657][T12701] usb 5-1: Using ep0 maxpacket: 16 [ 1012.744957][T12701] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.745014][T12701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1012.745043][T12701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1012.745066][T12701] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1012.745091][T12701] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1012.748083][T12701] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1012.748114][T12701] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1012.748135][T12701] usb 5-1: Manufacturer: syz [ 1012.807717][T12701] usb 5-1: config 0 descriptor?? [ 1013.130091][T12701] rc_core: IR keymap rc-hauppauge not found [ 1013.130116][T12701] Registered IR keymap rc-empty [ 1013.130279][T12701] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1013.156081][T12701] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1013.260704][T12701] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1013.266525][T12701] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input38 [ 1013.301801][T12779] lo speed is unknown, defaulting to 1000 [ 1013.316739][T12701] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1013.339723][T12701] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1013.359104][T12701] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1013.379702][T12701] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1013.406270][T12701] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1013.418649][T12701] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1013.438717][T12701] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1013.463928][T12701] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1013.535015][T12701] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1013.548743][T12701] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1013.625325][T12701] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1013.625366][T12701] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1013.717532][T12701] usb 5-1: USB disconnect, device number 60 [ 1014.800233][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1014.870651][T12779] netdevsim0 speed is unknown, defaulting to 1000 [ 1014.878890][T12701] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1015.032008][T12701] usb 5-1: Using ep0 maxpacket: 32 [ 1015.034161][T12701] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 1015.034188][T12701] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.034208][T12701] usb 5-1: config 0 has no interface number 0 [ 1015.034235][T12701] usb 5-1: config 0 interface 196 has no altsetting 0 [ 1015.104448][T12701] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1015.104477][T12701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.104494][T12701] usb 5-1: Product: syz [ 1015.104506][T12701] usb 5-1: Manufacturer: syz [ 1015.104518][T12701] usb 5-1: SerialNumber: syz [ 1015.149844][T12701] usb 5-1: config 0 descriptor?? [ 1016.150764][T12701] usb 5-1: USB disconnect, device number 61 [ 1016.399309][ T5700] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -32 [ 1016.771553][T12701] usb 4-1: USB disconnect, device number 60 [ 1023.709367][ T8966] Bluetooth: hci3: command 0x1003 tx timeout [ 1023.718550][ T4912] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1024.651728][T12513] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1024.703362][T12513] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1027.042605][T12513] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1027.104540][T12513] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1027.144568][T12513] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1027.240313][T12513] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1027.320074][T12513] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1027.365900][T12513] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1027.487705][T12779] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.487934][T12779] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.488180][T12779] bridge_slave_0: entered allmulticast mode [ 1027.521310][T12779] bridge_slave_0: entered promiscuous mode [ 1027.574289][T12779] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.574428][T12779] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.574692][T12779] bridge_slave_1: entered allmulticast mode [ 1027.607213][T12779] bridge_slave_1: entered promiscuous mode [ 1027.806371][T12779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1027.874045][T12779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1028.684842][T12952] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1028.714444][T12952] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1028.861869][T12779] team0: Port device team_slave_0 added [ 1028.952294][T12779] team0: Port device team_slave_1 added [ 1029.192998][T12779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.193158][T12779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.193188][T12779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.283032][T12779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.283050][T12779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.283081][T12779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1029.665929][ T31] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1030.000970][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.001037][ T31] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1030.001062][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.007280][ T31] usb 4-1: config 0 descriptor?? [ 1030.050302][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 1030.470169][ T31] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1030.588392][ T31] pwc: recv_control_msg error -32 req 02 val 2700 [ 1030.631475][ T31] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1031.124387][ T31] pwc: recv_control_msg error -32 req 04 val 1000 [ 1031.227838][ T31] pwc: recv_control_msg error -32 req 04 val 1300 [ 1031.235628][ T31] pwc: recv_control_msg error -32 req 04 val 1400 [ 1031.249553][ T31] pwc: recv_control_msg error -32 req 02 val 2000 [ 1031.265060][ T31] pwc: recv_control_msg error -32 req 02 val 2100 [ 1031.267065][ T31] pwc: recv_control_msg error -32 req 04 val 1500 [ 1031.275195][ T31] pwc: recv_control_msg error -32 req 02 val 2500 [ 1031.277523][ T31] pwc: recv_control_msg error -32 req 02 val 2400 [ 1031.280744][ T31] pwc: recv_control_msg error -32 req 02 val 2600 [ 1031.283057][ T31] pwc: recv_control_msg error -32 req 02 val 2900 [ 1031.285202][ T31] pwc: recv_control_msg error -32 req 02 val 2800 [ 1031.489980][ T31] pwc: recv_control_msg error -71 req 04 val 1200 [ 1031.553486][ T31] pwc: Registered as video103. [ 1031.558419][ T31] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input40 [ 1031.590279][ T31] usb 4-1: USB disconnect, device number 61 [ 1031.854392][T12963] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input39 [ 1032.060967][T12779] hsr_slave_0: entered promiscuous mode [ 1032.098079][T12779] hsr_slave_1: entered promiscuous mode [ 1032.298835][ T150] bridge_slave_1: left allmulticast mode [ 1032.298867][ T150] bridge_slave_1: left promiscuous mode [ 1032.299087][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.431414][ T150] bridge_slave_0: left allmulticast mode [ 1032.431453][ T150] bridge_slave_0: left promiscuous mode [ 1032.434401][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.964254][T12977] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1033.927074][ T8966] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1033.974888][ T8966] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1034.005717][ T8966] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1034.023168][ T8966] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1034.036580][ T8966] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1036.110286][ T4912] Bluetooth: hci0: command tx timeout [ 1036.917063][T13009] Can't find ip_set type hash:ma [ 1037.508868][T13007] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1038.795638][ T8966] Bluetooth: hci0: command tx timeout [ 1039.029621][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1039.109822][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1039.156547][ T10] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1039.192014][ T150] bond0 (unregistering): Released all slaves [ 1039.341105][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.341166][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1039.341201][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.378261][ T10] usb 4-1: config 0 descriptor?? [ 1039.394236][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 1039.628659][ T4912] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1039.859588][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1039.860299][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 1039.861095][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1039.861927][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 1039.864671][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 1039.865368][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 1039.865900][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 1039.866435][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 1039.866956][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 1039.867487][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 1039.868014][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 1039.868990][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 1039.869967][ T10] pwc: recv_control_msg error -32 req 02 val 2900 [ 1039.870670][ T10] pwc: recv_control_msg error -32 req 02 val 2800 [ 1040.091462][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 1040.130408][ T10] pwc: Registered as video103. [ 1040.136814][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input41 [ 1040.157539][ T10] usb 4-1: USB disconnect, device number 62 [ 1040.828598][ T4912] Bluetooth: hci0: command tx timeout [ 1041.548872][T13036] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1042.431652][T12987] lo speed is unknown, defaulting to 1000 [ 1042.807624][ T150] hsr_slave_0: left promiscuous mode [ 1042.908674][ T4912] Bluetooth: hci0: command tx timeout [ 1043.028679][ T150] hsr_slave_1: left promiscuous mode [ 1043.029743][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1043.079608][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1044.788025][ T150] team0 (unregistering): Port device team_slave_1 removed [ 1045.691497][ T150] team0 (unregistering): Port device team_slave_0 removed [ 1048.266993][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1048.277874][T12987] netdevsim0 speed is unknown, defaulting to 1000 [ 1048.490850][T13081] binder_alloc: 13080: binder_alloc_buf, no vma [ 1049.722588][T13085] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1733' sets config #-1 [ 1055.896769][T13134] rdma_rxe: rxe_newlink: failed to add lo [ 1057.082179][T13141] Bluetooth: MGMT ver 1.23 [ 1057.269577][T13146] binder: BINDER_SET_CONTEXT_MGR already set [ 1057.269594][T13146] binder: 13144:13146 ioctl 4018620d 200000000240 returned -16 [ 1057.602580][T13149] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1058.647296][ T7926] Bluetooth: hci3: Frame reassembly failed (-84) [ 1059.745956][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.746492][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.790643][ T4912] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1061.543795][T12987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.543948][T12987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.544206][T12987] bridge_slave_0: entered allmulticast mode [ 1061.585404][T12987] bridge_slave_0: entered promiscuous mode [ 1061.681145][T12987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.681274][T12987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.681859][T12987] bridge_slave_1: entered allmulticast mode [ 1061.722303][T12987] bridge_slave_1: entered promiscuous mode [ 1062.125169][T12987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1062.166725][T12987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1062.308691][ T8771] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1062.424648][T12987] team0: Port device team_slave_0 added [ 1062.442489][T12987] team0: Port device team_slave_1 added [ 1062.458626][ T8771] usb 2-1: Using ep0 maxpacket: 32 [ 1062.464862][ T8771] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1062.464892][ T8771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.492986][ T8771] usb 2-1: config 0 descriptor?? [ 1062.722031][ T8771] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1062.794964][ T8771] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1062.797225][ T8771] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1062.797407][ T8771] usb 2-1: media controller created [ 1062.945907][ T8771] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1063.133894][ T8771] az6027: usb out operation failed. (-71) [ 1063.135433][ T8771] az6027: usb out operation failed. (-71) [ 1063.135451][ T8771] stb0899_attach: Driver disabled by Kconfig [ 1063.135462][ T8771] az6027: no front-end attached [ 1063.135462][ T8771] [ 1063.135903][ T8771] az6027: usb out operation failed. (-71) [ 1063.135993][ T8771] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1063.185311][ T8771] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input42 [ 1063.201780][ T8771] dvb-usb: schedule remote query interval to 400 msecs. [ 1063.201815][ T8771] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1063.207651][ T8771] usb 2-1: USB disconnect, device number 59 [ 1065.004543][ T8771] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1065.096043][ T8966] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1065.144440][ T8966] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1065.150922][ T8966] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1065.159514][ T8966] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1065.319436][ T8966] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1065.580234][T12987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1065.580254][T12987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1065.580284][T12987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.583875][ T8771] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1065.736290][ T8771] usb 2-1: Using ep0 maxpacket: 32 [ 1065.748743][ T8771] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1065.748773][ T8771] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.748803][ T8771] usb 2-1: config 0 has no interface number 0 [ 1065.748849][ T8771] usb 2-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1065.748873][ T8771] usb 2-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1065.748901][ T8771] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1065.754138][ T8771] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1065.754172][ T8771] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.754193][ T8771] usb 2-1: Product: syz [ 1065.754208][ T8771] usb 2-1: Manufacturer: syz [ 1065.754222][ T8771] usb 2-1: SerialNumber: syz [ 1065.850290][ T8771] usb 2-1: config 0 descriptor?? [ 1065.871958][ T8771] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1065.900175][ T8771] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 1065.957503][T12987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.957524][T12987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1065.957557][T12987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1066.441413][T13240] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1067.557462][ T8966] Bluetooth: hci3: command tx timeout [ 1069.327500][ T8966] Bluetooth: hci6: command 0x1003 tx timeout [ 1069.377126][ T4912] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1069.565313][ T5700] usb 2-1: USB disconnect, device number 60 [ 1070.123518][ T4912] Bluetooth: hci3: command tx timeout [ 1072.261087][ T8966] Bluetooth: hci3: command tx timeout [ 1074.404666][ T8966] Bluetooth: hci3: command tx timeout [ 1074.635409][T12987] hsr_slave_0: entered promiscuous mode [ 1074.657012][T12987] hsr_slave_1: entered promiscuous mode [ 1074.669978][T12987] debugfs: 'hsr0' already exists in 'hsr' [ 1074.670007][T12987] Cannot create hsr debugfs directory [ 1075.419882][T13287] fuse: Bad value for 'fd' [ 1077.595133][T13296] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1079.709246][ T8966] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1082.030539][ T5813] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1082.411716][ T5813] usb 4-1: Using ep0 maxpacket: 16 [ 1082.811953][ T5813] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 1082.811992][ T5813] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1082.812028][ T5813] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 1082.812052][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.856015][ T5813] usb 4-1: config 0 descriptor?? [ 1082.856871][T13307] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1083.381430][T13223] lo speed is unknown, defaulting to 1000 [ 1083.481314][ T5813] usbhid 4-1:0.0: can't add hid device: -71 [ 1083.481425][ T5813] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1083.797870][ T5813] usb 4-1: USB disconnect, device number 63 [ 1084.945479][T13319] fuse: Bad value for 'fd' [ 1085.816478][T13223] netdevsim0 speed is unknown, defaulting to 1000 [ 1088.435163][ T150] bridge_slave_1: left allmulticast mode [ 1088.435308][ T150] bridge_slave_1: left promiscuous mode [ 1088.436380][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.493024][ T150] bridge_slave_0: left allmulticast mode [ 1089.493063][ T150] bridge_slave_0: left promiscuous mode [ 1089.493341][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.366384][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1092.609935][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1092.795109][ T150] bond0 (unregistering): Released all slaves [ 1093.020846][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1094.551732][ T150] hsr_slave_0: left promiscuous mode [ 1094.589225][ T150] hsr_slave_1: left promiscuous mode [ 1094.592939][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1094.617129][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1094.773569][ T4912] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1094.815210][ T4912] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1094.831121][ T4912] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1094.855797][ T4912] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1094.856591][ T4912] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1094.955985][ T31] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 1095.646450][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1095.649198][ T31] usb 5-1: not running at top speed; connect to a high speed hub [ 1095.656448][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.656477][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1095.674570][ T31] usb 5-1: string descriptor 0 read error: -22 [ 1095.674726][ T31] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1095.674751][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.898039][ T31] usb 5-1: 0:2 : does not exist [ 1096.601139][ T150] team0 (unregistering): Port device team_slave_1 removed [ 1096.716830][ T31] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1096.723743][ T150] team0 (unregistering): Port device team_slave_0 removed [ 1096.738027][ T31] usb 5-1: Warning! Unlikely big volume step count (=16213), linear volume or wrong cval->res? [ 1096.738046][ T31] usb 5-1: [5] FU [Mic Capture Volume] ch = 1, val = -31830/-15617/1 [ 1096.782442][ T31] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1097.021231][ T31] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 1097.101525][ T8966] Bluetooth: hci5: command tx timeout [ 1098.563625][ T31] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1098.752050][ T31] usb 5-1: USB disconnect, device number 62 [ 1099.055400][T13422] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1099.055422][T13422] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1099.148874][ T8966] Bluetooth: hci5: command tx timeout [ 1099.547782][T13422] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1099.547809][T13422] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1099.995145][T13422] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1099.995171][T13422] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1100.459515][T13422] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1100.459542][T13422] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1100.975323][T13422] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1100.975341][T13422] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1101.229866][ T8966] Bluetooth: hci5: command tx timeout [ 1101.236716][T13422] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1101.236742][T13422] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1103.824309][T13399] lo speed is unknown, defaulting to 1000 [ 1103.918714][T13223] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.919065][T13223] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.919268][T13223] bridge_slave_0: entered allmulticast mode [ 1103.921559][T13223] bridge_slave_0: entered promiscuous mode [ 1103.924394][T13223] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.924588][T13223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.924786][T13223] bridge_slave_1: entered allmulticast mode [ 1103.927177][T13223] bridge_slave_1: entered promiscuous mode [ 1104.049294][T13223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.131981][T13223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1104.456864][T13223] team0: Port device team_slave_0 added [ 1104.583951][T13223] team0: Port device team_slave_1 added [ 1106.508590][T12701] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 1106.660930][T12701] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1106.661495][T12701] usb 4-1: not running at top speed; connect to a high speed hub [ 1106.662563][T12701] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.662585][T12701] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1106.665789][T12701] usb 4-1: string descriptor 0 read error: -22 [ 1106.665913][T12701] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1106.665936][T12701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.807162][T12701] usb 4-1: 0:2 : does not exist [ 1106.991320][T13223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.991334][T13223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1106.991354][T13223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.992645][T13399] netdevsim0 speed is unknown, defaulting to 1000 [ 1107.050065][T13223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1107.050142][T13223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1107.050171][T13223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1107.669046][ T31] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1108.649114][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 1108.663956][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1108.663990][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1108.667129][ T31] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1108.667160][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.667181][ T31] usb 2-1: Product: syz [ 1108.667196][ T31] usb 2-1: Manufacturer: syz [ 1108.667209][ T31] usb 2-1: SerialNumber: syz [ 1108.757896][T12701] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1108.779907][T12701] usb 4-1: Warning! Unlikely big volume step count (=16213), linear volume or wrong cval->res? [ 1108.779937][T12701] usb 4-1: [5] FU [Mic Capture Volume] ch = 1, val = -31830/-15617/1 [ 1108.787789][T12701] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1108.817199][ T31] usb 2-1: config 0 descriptor?? [ 1108.830160][T12701] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 1108.882270][ T31] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1108.882305][ T31] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1108.912106][T13509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1817'. [ 1108.912135][T13509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1817'. [ 1109.031082][T12701] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1109.076838][T12701] usb 4-1: USB disconnect, device number 64 [ 1109.227746][T13223] hsr_slave_0: entered promiscuous mode [ 1109.244474][T13223] hsr_slave_1: entered promiscuous mode [ 1109.257418][T13223] debugfs: 'hsr0' already exists in 'hsr' [ 1109.257448][T13223] Cannot create hsr debugfs directory [ 1109.580670][ T31] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1109.582293][ T31] em28xx 2-1:0.0: Config register raw data: 0x29 [ 1109.582316][ T31] em28xx 2-1:0.0: I2S Audio (1 sample rate(s)) [ 1109.582331][ T31] em28xx 2-1:0.0: No AC97 audio processor [ 1110.124405][ T31] usb 2-1: USB disconnect, device number 61 [ 1110.454996][T13531] lo speed is unknown, defaulting to 1000 [ 1111.281566][T13531] netdevsim0 speed is unknown, defaulting to 1000 [ 1111.610435][T12701] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1111.763388][T12701] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.763455][T12701] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1111.763480][T12701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.802429][T12701] usb 5-1: config 0 descriptor?? [ 1111.827285][T12701] pwc: Askey VC010 type 2 USB webcam detected. [ 1112.221665][T12701] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1112.222858][T12701] pwc: recv_control_msg error -32 req 02 val 2700 [ 1112.223924][T12701] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1112.224792][T12701] pwc: recv_control_msg error -32 req 04 val 1000 [ 1112.225631][T12701] pwc: recv_control_msg error -32 req 04 val 1300 [ 1112.228271][T12701] pwc: recv_control_msg error -32 req 04 val 1400 [ 1112.229258][T12701] pwc: recv_control_msg error -32 req 02 val 2000 [ 1112.230006][T12701] pwc: recv_control_msg error -32 req 02 val 2100 [ 1112.230776][T12701] pwc: recv_control_msg error -32 req 04 val 1500 [ 1112.470014][T12701] pwc: recv_control_msg error -32 req 02 val 2500 [ 1112.470929][T12701] pwc: recv_control_msg error -32 req 02 val 2400 [ 1112.482118][T12701] pwc: recv_control_msg error -32 req 02 val 2600 [ 1112.482824][T12701] pwc: recv_control_msg error -32 req 02 val 2900 [ 1112.503255][T12701] pwc: recv_control_msg error -32 req 02 val 2800 [ 1112.712934][T12701] pwc: recv_control_msg error -71 req 04 val 1200 [ 1112.716866][T12701] pwc: Registered as video103. [ 1112.740868][T12701] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input43 [ 1112.811856][T12701] usb 5-1: USB disconnect, device number 63 [ 1114.285440][T13563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1826'. [ 1114.285467][T13563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1826'. [ 1114.513320][T13399] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.513539][T13399] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.513749][T13399] bridge_slave_0: entered allmulticast mode [ 1114.516770][T13399] bridge_slave_0: entered promiscuous mode [ 1114.547237][T13399] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.547423][T13399] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.547658][T13399] bridge_slave_1: entered allmulticast mode [ 1114.571192][T13399] bridge_slave_1: entered promiscuous mode [ 1114.632933][T13399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1114.636800][T13399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1114.856318][T13399] team0: Port device team_slave_0 added [ 1114.875612][T13399] team0: Port device team_slave_1 added [ 1114.959977][T13399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1114.959997][T13399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.960466][T13399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1114.966649][T13399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1114.966667][T13399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.966697][T13399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.490558][T13399] hsr_slave_0: entered promiscuous mode [ 1115.503256][T13399] hsr_slave_1: entered promiscuous mode [ 1115.525804][T13399] debugfs: 'hsr0' already exists in 'hsr' [ 1115.525834][T13399] Cannot create hsr debugfs directory [ 1118.285485][ T8966] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1118.308946][T13596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1836'. [ 1118.309064][T13596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1836'. [ 1118.366114][ T150] bridge_slave_1: left allmulticast mode [ 1118.366153][ T150] bridge_slave_1: left promiscuous mode [ 1118.366437][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.573775][ T150] bridge_slave_0: left allmulticast mode [ 1118.573813][ T150] bridge_slave_0: left promiscuous mode [ 1118.574083][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.165505][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.165668][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.374715][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1121.482807][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1121.588131][ T150] bond0 (unregistering): Released all slaves [ 1121.666567][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1123.098645][ T5700] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1123.253574][ T5700] usb 2-1: Using ep0 maxpacket: 32 [ 1123.257549][ T5700] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 1123.257578][ T5700] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.257598][ T5700] usb 2-1: config 0 has no interface number 0 [ 1123.257630][ T5700] usb 2-1: config 0 interface 196 has no altsetting 0 [ 1123.304626][ T5700] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1123.304657][ T5700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.304678][ T5700] usb 2-1: Product: syz [ 1123.304693][ T5700] usb 2-1: Manufacturer: syz [ 1123.304707][ T5700] usb 2-1: SerialNumber: syz [ 1123.393460][ T5700] usb 2-1: config 0 descriptor?? [ 1123.650980][ T5730] usb 2-1: USB disconnect, device number 62 [ 1123.998667][ T150] hsr_slave_0: left promiscuous mode [ 1124.038825][ T150] hsr_slave_1: left promiscuous mode [ 1124.039672][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1124.082380][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1125.185035][ T4912] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1125.249341][ T4912] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1125.261469][ T4912] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1125.266102][ T4912] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1125.281567][ T4912] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1125.397598][ T8966] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1125.401348][ T8966] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1125.403156][ T8966] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1125.429085][ T8966] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1125.429874][ T8966] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1126.010575][T13679] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1126.010601][T13679] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1127.342845][ T150] team0 (unregistering): Port device team_slave_1 removed [ 1127.450036][ T150] team0 (unregistering): Port device team_slave_0 removed [ 1127.628606][ T8966] Bluetooth: hci0: command tx timeout [ 1127.678919][ T5258] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1127.700266][T12961] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1127.869100][T12961] usb 2-1: Using ep0 maxpacket: 32 [ 1127.872374][T12961] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 1127.872404][T12961] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.872422][T12961] usb 2-1: config 0 has no interface number 0 [ 1127.872455][T12961] usb 2-1: config 0 interface 196 has no altsetting 0 [ 1127.876737][T12961] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1127.876759][T12961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.876779][T12961] usb 2-1: Product: syz [ 1127.876789][T12961] usb 2-1: Manufacturer: syz [ 1127.876799][T12961] usb 2-1: SerialNumber: syz [ 1127.909798][T12961] usb 2-1: config 0 descriptor?? [ 1128.226887][T12961] usb 2-1: USB disconnect, device number 63 [ 1128.268678][ T4912] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 1130.667062][ T4912] Bluetooth: hci0: command tx timeout [ 1132.669183][ T4912] Bluetooth: hci0: command tx timeout [ 1133.495206][T13740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1871'. [ 1133.506746][T13740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1871'. [ 1134.572967][T13667] lo speed is unknown, defaulting to 1000 [ 1135.670105][ T8966] Bluetooth: hci0: command tx timeout [ 1137.109784][T13759] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1137.109813][T13759] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1138.601236][T13667] netdevsim0 speed is unknown, defaulting to 1000 [ 1138.620004][ T5813] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1138.768667][ T5813] usb 4-1: Using ep0 maxpacket: 16 [ 1138.771152][ T5813] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1138.771186][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1138.774156][ T5813] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1138.774185][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.774207][ T5813] usb 4-1: Product: syz [ 1138.774223][ T5813] usb 4-1: Manufacturer: syz [ 1138.774239][ T5813] usb 4-1: SerialNumber: syz [ 1138.863934][ T5813] usb 4-1: config 0 descriptor?? [ 1138.915295][ T5813] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1138.915332][ T5813] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1140.014202][T13399] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1140.091534][T13399] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1141.666854][ T8966] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1141.704075][ T5813] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1141.728798][ T5813] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1141.729327][ T5813] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1141.729346][ T5813] em28xx 4-1:0.0: No AC97 audio processor [ 1141.841907][ T5730] usb 4-1: USB disconnect, device number 65 [ 1141.847551][ T5730] em28xx 4-1:0.0: Disconnecting em28xx [ 1141.929936][ T5730] em28xx 4-1:0.0: Freeing device [ 1142.148721][ T150] bridge_slave_1: left allmulticast mode [ 1142.148761][ T150] bridge_slave_1: left promiscuous mode [ 1142.149043][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.870515][ T150] bridge_slave_0: left allmulticast mode [ 1142.870553][ T150] bridge_slave_0: left promiscuous mode [ 1142.870832][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.068641][ T5700] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1143.158694][ T150] bridge_slave_1: left allmulticast mode [ 1143.158734][ T150] bridge_slave_1: left promiscuous mode [ 1143.158993][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.228548][ T5700] usb 4-1: Using ep0 maxpacket: 32 [ 1143.231218][ T5700] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 1143.231247][ T5700] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.231266][ T5700] usb 4-1: config 0 has no interface number 0 [ 1143.231299][ T5700] usb 4-1: config 0 interface 196 has no altsetting 0 [ 1143.237787][ T5700] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1143.237819][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.237840][ T5700] usb 4-1: Product: syz [ 1143.237856][ T5700] usb 4-1: Manufacturer: syz [ 1143.237871][ T5700] usb 4-1: SerialNumber: syz [ 1143.324231][ T5700] usb 4-1: config 0 descriptor?? [ 1143.384777][ T150] bridge_slave_0: left allmulticast mode [ 1143.384813][ T150] bridge_slave_0: left promiscuous mode [ 1143.385064][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.606658][ T5813] usb 4-1: USB disconnect, device number 66 [ 1144.639490][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1146.120093][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1146.178008][T13837] binder: BINDER_SET_CONTEXT_MGR already set [ 1146.178020][T13837] binder: 13836:13837 ioctl 4018620d 200000000240 returned -16 [ 1146.195917][ T150] bond0 (unregistering): Released all slaves [ 1146.218603][ T821] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 1146.551216][ T821] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1146.551253][ T821] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1146.551272][ T821] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.551288][ T821] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1146.551308][ T821] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1146.551332][ T821] usb 4-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 1146.551348][ T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.786204][ T821] usb 4-1: config 0 descriptor?? [ 1147.856877][T13845] syz.4.1893 uses obsolete (PF_INET,SOCK_PACKET) [ 1148.644772][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1148.768757][ T821] usbhid 4-1:0.0: can't add hid device: -71 [ 1148.768895][ T821] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1148.870715][ T821] usb 4-1: USB disconnect, device number 67 [ 1148.934639][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1149.022781][ T150] bond0 (unregistering): Released all slaves [ 1149.108248][T13399] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1149.255733][T13399] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1149.353968][T13399] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1149.465825][T13399] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1149.510777][T13399] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1149.778767][T13845] netlink: 'syz.4.1893': attribute type 10 has an invalid length. [ 1149.778785][T13845] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1893'. [ 1149.868204][T13399] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1149.878215][T13845] team0: Port device geneve1 added [ 1150.406993][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1896'. [ 1150.407016][T13864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1896'. [ 1151.019101][ T5813] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1151.079386][ T4912] Bluetooth: hci3: command 0xfc11 tx timeout [ 1151.083950][ T8966] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1151.178606][ T5813] usb 2-1: Using ep0 maxpacket: 32 [ 1151.187895][ T5813] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 1151.187925][ T5813] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.187945][ T5813] usb 2-1: config 0 has no interface number 0 [ 1151.187978][ T5813] usb 2-1: config 0 interface 196 has no altsetting 0 [ 1151.242200][ T5813] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1151.242269][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.242340][ T5813] usb 2-1: Product: syz [ 1151.242357][ T5813] usb 2-1: Manufacturer: syz [ 1151.242372][ T5813] usb 2-1: SerialNumber: syz [ 1153.103870][ T5813] usb 2-1: config 0 descriptor?? [ 1153.377667][ T5813] usb 2-1: USB disconnect, device number 64 [ 1153.382034][T13399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1154.898609][ T5730] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1154.960826][ T150] hsr_slave_0: left promiscuous mode [ 1154.978964][ T150] hsr_slave_1: left promiscuous mode [ 1154.979792][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1155.019916][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1155.049396][ T5730] usb 5-1: no configurations [ 1155.049412][ T5730] usb 5-1: can't read configurations, error -22 [ 1155.168744][ T150] hsr_slave_0: left promiscuous mode [ 1155.184261][ T5730] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1155.196373][ T150] hsr_slave_1: left promiscuous mode [ 1155.197208][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1155.239361][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1155.329754][ T5730] usb 5-1: no configurations [ 1155.329777][ T5730] usb 5-1: can't read configurations, error -22 [ 1155.330395][ T5730] usb usb5-port1: attempt power cycle [ 1155.668686][ T5730] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1155.695441][ T5730] usb 5-1: no configurations [ 1155.695458][ T5730] usb 5-1: can't read configurations, error -22 [ 1155.719292][ T150] team0 (unregistering): Port device team_slave_1 removed [ 1155.769447][ T150] team0 (unregistering): Port device team_slave_0 removed [ 1155.818635][ T5730] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1155.840235][ T5730] usb 5-1: no configurations [ 1155.840252][ T5730] usb 5-1: can't read configurations, error -22 [ 1155.840620][ T5730] usb usb5-port1: unable to enumerate USB device [ 1156.231545][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1905'. [ 1156.231571][T13890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1905'. [ 1156.532075][ T4912] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1156.575301][ T4912] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1156.583576][ T4912] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1156.624121][ T4912] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1156.625749][ T4912] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1156.701709][ T150] team0 (unregistering): Port device team_slave_1 removed [ 1156.767503][ T8966] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1156.772044][ T8966] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1156.774614][ T8966] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1156.795128][ T8966] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1156.796339][ T8966] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1157.343020][ T150] team0 (unregistering): Port device team_slave_0 removed [ 1159.388596][ T8966] Bluetooth: hci3: command tx timeout [ 1160.719997][T13667] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.727009][T13667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.727269][T13667] bridge_slave_0: entered allmulticast mode [ 1160.737452][T13667] bridge_slave_0: entered promiscuous mode [ 1160.758619][T12961] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1160.784861][T13667] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.785000][T13667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.785226][T13667] bridge_slave_1: entered allmulticast mode [ 1160.810808][T13667] bridge_slave_1: entered promiscuous mode [ 1160.940072][T12961] usb 2-1: Using ep0 maxpacket: 32 [ 1160.944484][T12961] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 1160.944513][T12961] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.944533][T12961] usb 2-1: config 0 has no interface number 0 [ 1160.944565][T12961] usb 2-1: config 0 interface 196 has no altsetting 0 [ 1160.948178][T12961] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1160.948210][T12961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.948232][T12961] usb 2-1: Product: syz [ 1160.948248][T12961] usb 2-1: Manufacturer: syz [ 1160.948263][T12961] usb 2-1: SerialNumber: syz [ 1161.025346][T12961] usb 2-1: config 0 descriptor?? [ 1161.258963][ T5730] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1161.269203][T13667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1161.296596][T13667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1161.362273][T13667] team0: Port device team_slave_0 added [ 1161.365921][T13667] team0: Port device team_slave_1 added [ 1161.414107][T13667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1161.414122][T13667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.414144][T13667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1161.416166][T13667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.416179][T13667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.416202][T13667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1161.504133][ T8966] Bluetooth: hci3: command tx timeout [ 1161.522615][ T5813] usb 2-1: USB disconnect, device number 65 [ 1161.535929][ T5730] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.535957][ T5730] usb 5-1: config 0 has no interfaces? [ 1161.535988][ T5730] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1161.536036][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.712554][ T5730] usb 5-1: config 0 descriptor?? [ 1161.982627][T13667] hsr_slave_0: entered promiscuous mode [ 1161.984107][T13667] hsr_slave_1: entered promiscuous mode [ 1163.643012][ T8966] Bluetooth: hci3: command tx timeout [ 1163.882670][T13893] lo speed is unknown, defaulting to 1000 [ 1164.144536][ T5813] usb 5-1: USB disconnect, device number 68 [ 1164.188657][T12961] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1164.358514][T12961] usb 4-1: device descriptor read/64, error -71 [ 1164.659661][T12961] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1164.788522][T12961] usb 4-1: device descriptor read/64, error -71 [ 1164.910420][T12961] usb usb4-port1: attempt power cycle [ 1165.276465][T12961] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1165.292197][T12961] usb 4-1: device descriptor read/8, error -71 [ 1165.306054][T13893] netdevsim0 speed is unknown, defaulting to 1000 [ 1165.406853][T13953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1921'. [ 1165.406876][T13953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1921'. [ 1165.528716][T12961] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1165.550081][T12961] usb 4-1: device descriptor read/8, error -71 [ 1165.701011][T12961] usb usb4-port1: unable to enumerate USB device [ 1165.892502][ T8966] Bluetooth: hci3: command tx timeout [ 1168.022233][T13667] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1168.095143][T13667] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1168.163706][T13667] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1168.362076][T13667] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1168.407695][T13982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1930'. [ 1168.407727][T13982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1930'. [ 1168.411070][T13667] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1168.473928][T13667] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1168.530940][T13667] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1168.652003][T13667] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1174.511073][ T5813] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1174.672901][ T5813] usb 2-1: Using ep0 maxpacket: 32 [ 1174.673907][ T5813] usb 2-1: no configurations [ 1174.673920][ T5813] usb 2-1: can't read configurations, error -22 [ 1174.798640][ T5813] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1174.950608][ T5813] usb 2-1: Using ep0 maxpacket: 32 [ 1174.951399][ T5813] usb 2-1: no configurations [ 1174.951411][ T5813] usb 2-1: can't read configurations, error -22 [ 1174.951701][ T5813] usb usb2-port1: attempt power cycle [ 1175.288610][ T5813] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1175.309997][ T5813] usb 2-1: Using ep0 maxpacket: 32 [ 1175.315228][ T5813] usb 2-1: no configurations [ 1175.315266][ T5813] usb 2-1: can't read configurations, error -22 [ 1175.438763][ T5813] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1175.466679][ T5813] usb 2-1: Using ep0 maxpacket: 32 [ 1175.467222][ T5813] usb 2-1: no configurations [ 1175.467234][ T5813] usb 2-1: can't read configurations, error -22 [ 1175.467751][ T5813] usb usb2-port1: unable to enumerate USB device [ 1175.678562][T14023] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1175.678589][T14023] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1175.926165][T13667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1176.174115][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1940'. [ 1176.174134][T14027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1940'. [ 1177.885564][T13893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.886263][T13893] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.886503][T13893] bridge_slave_0: entered allmulticast mode [ 1177.912822][T13893] bridge_slave_0: entered promiscuous mode [ 1177.934794][T13893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.934936][T13893] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.935193][T13893] bridge_slave_1: entered allmulticast mode [ 1177.959741][T13893] bridge_slave_1: entered promiscuous mode [ 1177.976041][T13667] 8021q: adding VLAN 0 to HW filter on device team0 [ 1178.056953][T13893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1178.754026][ T3418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.754175][ T3418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1178.838003][T13893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1181.583710][ T7928] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.583932][ T7928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1181.758629][T12961] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1181.893477][T13893] team0: Port device team_slave_0 added [ 1181.922858][T12961] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.922919][T12961] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1181.922945][T12961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.926927][T13893] team0: Port device team_slave_1 added [ 1181.977163][T12961] usb 5-1: config 0 descriptor?? [ 1182.012267][T12961] pwc: Askey VC010 type 2 USB webcam detected. [ 1182.388271][T13893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1182.388292][T13893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1182.388323][T13893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1182.445267][T12961] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1182.463369][T12961] pwc: recv_control_msg error -32 req 02 val 2700 [ 1182.467031][T12961] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1182.468061][T12961] pwc: recv_control_msg error -32 req 04 val 1000 [ 1182.468968][T12961] pwc: recv_control_msg error -32 req 04 val 1300 [ 1182.504060][T12961] pwc: recv_control_msg error -32 req 04 val 1400 [ 1182.505450][T12961] pwc: recv_control_msg error -32 req 02 val 2000 [ 1182.521719][T12961] pwc: recv_control_msg error -32 req 02 val 2100 [ 1182.538206][T12961] pwc: recv_control_msg error -32 req 04 val 1500 [ 1182.562529][T12961] pwc: recv_control_msg error -32 req 02 val 2500 [ 1182.566086][T13893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1182.566104][T13893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1182.566133][T13893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1182.566296][T12961] pwc: recv_control_msg error -32 req 02 val 2400 [ 1182.569171][T12961] pwc: recv_control_msg error -32 req 02 val 2600 [ 1182.570061][T12961] pwc: recv_control_msg error -32 req 02 val 2900 [ 1182.573073][T12961] pwc: recv_control_msg error -32 req 02 val 2800 [ 1182.583250][T12961] pwc: recv_control_msg error -32 req 04 val 1100 [ 1183.131361][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.131434][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.301224][T12961] pwc: recv_control_msg error -71 req 04 val 1200 [ 1183.376238][T12961] pwc: Registered as video103. [ 1183.389313][T12961] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input44 [ 1183.397343][T12961] usb 5-1: USB disconnect, device number 69 [ 1184.234292][T13893] hsr_slave_0: entered promiscuous mode [ 1184.235721][T13893] hsr_slave_1: entered promiscuous mode [ 1184.236752][T13893] debugfs: 'hsr0' already exists in 'hsr' [ 1184.236779][T13893] Cannot create hsr debugfs directory [ 1185.200744][ T150] bridge_slave_1: left allmulticast mode [ 1185.200783][ T150] bridge_slave_1: left promiscuous mode [ 1185.201058][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.390579][ T150] bridge_slave_0: left allmulticast mode [ 1185.390619][ T150] bridge_slave_0: left promiscuous mode [ 1185.390879][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.746384][ T4912] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1189.848675][ T4912] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1189.881424][ T4912] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1189.918795][ T4912] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1189.945359][ T4912] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1190.021210][ T8966] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1190.023265][ T8966] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1190.025676][ T8966] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1190.028025][ T8966] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1190.029891][ T8966] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1190.210716][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1190.269912][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1190.804333][ T150] bond0 (unregistering): Released all slaves [ 1192.117157][ T8966] Bluetooth: hci0: command tx timeout [ 1192.118069][ T31] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1192.479745][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 1193.312737][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.312800][ T31] usb 5-1: config 0 has no interfaces? [ 1193.312834][ T31] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1193.312858][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.313206][T14141] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1968'. [ 1193.503004][ T31] usb 5-1: config 0 descriptor?? [ 1193.608567][ T8771] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1193.759102][ T8771] usb 2-1: Using ep0 maxpacket: 16 [ 1193.765223][ T8771] usb 2-1: config 0 has no interfaces? [ 1193.765264][ T8771] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1193.765290][ T8771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.811732][ T8771] usb 2-1: config 0 descriptor?? [ 1193.902120][ T5730] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1194.108565][ T5730] usb 4-1: Using ep0 maxpacket: 16 [ 1194.122014][ T5730] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1194.122049][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1194.175317][ T5730] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1194.175349][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.175378][ T5730] usb 4-1: Product: syz [ 1194.175393][ T5730] usb 4-1: Manufacturer: syz [ 1194.175408][ T5730] usb 4-1: SerialNumber: syz [ 1194.198664][ T8966] Bluetooth: hci0: command tx timeout [ 1194.215871][ T5730] usb 4-1: config 0 descriptor?? [ 1194.285499][ T5730] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1194.285536][ T5730] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1194.308191][T14107] lo speed is unknown, defaulting to 1000 [ 1194.705085][ T5813] usb 2-1: USB disconnect, device number 70 [ 1194.845334][ T5730] em28xx 4-1:0.0: unknown em28xx chip ID (41) [ 1195.170039][ T5730] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1195.171181][ T5730] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1195.171211][ T5730] em28xx 4-1:0.0: No AC97 audio processor [ 1196.041311][ T5813] usb 5-1: USB disconnect, device number 70 [ 1196.210146][ T5730] usb 4-1: USB disconnect, device number 72 [ 1196.303316][ T8966] Bluetooth: hci0: command tx timeout [ 1197.313549][ T5730] em28xx 4-1:0.0: Disconnecting em28xx [ 1197.381282][T14107] netdevsim0 speed is unknown, defaulting to 1000 [ 1198.012090][T14187] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1198.116421][ T5730] em28xx 4-1:0.0: Freeing device [ 1198.348516][ T8966] Bluetooth: hci0: command tx timeout [ 1200.428361][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1200.534515][T14202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1203.538563][ T821] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1203.678600][ T821] usb 4-1: device descriptor read/64, error -71 [ 1204.018707][ T821] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1204.059121][ T150] hsr_slave_0: left promiscuous mode [ 1204.218684][ T821] usb 4-1: device descriptor read/64, error -71 [ 1204.229932][ T150] hsr_slave_1: left promiscuous mode [ 1204.248614][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1204.401476][ T821] usb usb4-port1: attempt power cycle [ 1204.888979][ T821] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1204.898121][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1204.911558][ T821] usb 4-1: device descriptor read/8, error -71 [ 1209.869379][ T10] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1210.178087][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.178147][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1210.178173][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.343372][ T10] usb 4-1: config 0 descriptor?? [ 1210.362183][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 1210.764736][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1210.765677][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 1210.766520][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1210.767325][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 1210.768172][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 1210.802505][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 1210.808313][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 1210.827140][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 1210.827839][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 1210.830413][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 1210.835635][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 1210.837900][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 1210.839434][ T10] pwc: recv_control_msg error -32 req 02 val 2900 [ 1210.843108][ T10] pwc: recv_control_msg error -32 req 02 val 2800 [ 1210.850066][T14236] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1210.872203][ T10] pwc: recv_control_msg error -32 req 04 val 1100 [ 1210.931528][ T10] pwc: Registered as video103. [ 1210.958879][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input45 [ 1211.079548][ T31] usb 4-1: USB disconnect, device number 77 [ 1211.451082][ T150] team0 (unregistering): Port device team_slave_1 removed [ 1211.510223][ T150] team0 (unregistering): Port device team_slave_0 removed [ 1218.606537][T14107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.606660][T14107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.606883][T14107] bridge_slave_0: entered allmulticast mode [ 1218.632691][T14107] bridge_slave_0: entered promiscuous mode [ 1218.637827][T14107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.637976][T14107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.638184][T14107] bridge_slave_1: entered allmulticast mode [ 1218.675032][T14107] bridge_slave_1: entered promiscuous mode [ 1218.807947][T14107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1218.835409][T14107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1219.194010][ T4912] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1219.321741][ T4912] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1219.324737][ T4912] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1219.375808][ T4912] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1219.376521][ T4912] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1221.597943][ T8966] Bluetooth: hci3: command tx timeout [ 1224.084839][ T8966] Bluetooth: hci3: command tx timeout [ 1224.533808][T14327] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1224.847328][T14327] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1225.197730][T14107] team0: Port device team_slave_0 added [ 1225.325096][T14107] team0: Port device team_slave_1 added [ 1226.188796][ T8966] Bluetooth: hci3: command tx timeout [ 1226.246124][T14107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1226.246144][T14107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1226.246173][T14107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1226.332789][T14107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1226.332809][T14107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1226.332837][T14107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1226.418542][ T8771] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 1226.800379][ T8771] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1226.800430][ T8771] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1226.800458][ T8771] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1226.800482][ T8771] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1226.800510][ T8771] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1226.800544][ T8771] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 1226.800567][ T8771] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.177340][ T8771] usb 5-1: config 0 descriptor?? [ 1228.268555][ T8966] Bluetooth: hci3: command tx timeout [ 1231.579239][ T8771] usbhid 5-1:0.0: can't add hid device: -71 [ 1231.579353][ T8771] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1231.621700][ T8771] usb 5-1: USB disconnect, device number 71 [ 1231.777462][T14107] hsr_slave_0: entered promiscuous mode [ 1231.787460][T14107] hsr_slave_1: entered promiscuous mode [ 1231.810609][T14107] debugfs: 'hsr0' already exists in 'hsr' [ 1231.810637][T14107] Cannot create hsr debugfs directory [ 1232.282886][T14380] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1232.287572][T14380] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1234.612085][T14297] lo speed is unknown, defaulting to 1000 [ 1234.623820][T14395] overlayfs: failed to resolve './file0': -2 [ 1237.168226][T14412] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1237.168253][T14412] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1237.326557][T14297] netdevsim0 speed is unknown, defaulting to 1000 [ 1237.398264][T14412] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1237.398290][T14412] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1240.083866][T14428] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1240.092725][T14428] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1240.937349][T14434] overlayfs: failed to resolve './file0': -2 [ 1242.048575][ T821] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1242.200549][ T821] usb 2-1: Using ep0 maxpacket: 32 [ 1242.205914][ T821] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1242.205947][ T821] usb 2-1: config 0 has no interface number 0 [ 1242.206011][ T821] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1242.243745][ T821] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1242.243778][ T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.243800][ T821] usb 2-1: Product: syz [ 1242.243816][ T821] usb 2-1: Manufacturer: syz [ 1242.243832][ T821] usb 2-1: SerialNumber: syz [ 1242.350378][ T821] usb 2-1: config 0 descriptor?? [ 1242.428747][ T150] bridge_slave_1: left allmulticast mode [ 1242.428778][ T150] bridge_slave_1: left promiscuous mode [ 1242.429091][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.770911][ T150] bridge_slave_0: left allmulticast mode [ 1242.770965][ T150] bridge_slave_0: left promiscuous mode [ 1242.792319][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.816941][ T821] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1242.816977][ T821] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1242.816998][ T821] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1242.838505][ T821] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 1244.169187][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.169283][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.752087][ T5813] usb 2-1: USB disconnect, device number 71 [ 1246.529240][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1246.609353][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1246.630897][ T150] bond0 (unregistering): Released all slaves [ 1246.685201][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1247.712900][T14489] overlayfs: failed to resolve './file0': -2 [ 1248.378007][T14487] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1248.603971][ T150] hsr_slave_0: left promiscuous mode [ 1248.679295][ T150] hsr_slave_1: left promiscuous mode [ 1248.680103][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1248.683932][ T4912] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1248.743150][ T4912] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1248.755018][ T4912] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1248.773419][ T4912] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1248.775706][ T4912] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1248.831990][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1248.836957][ T8966] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1248.847705][ T8966] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1248.868148][ T8966] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1248.887542][ T8966] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1248.900501][ T8966] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1250.424133][ T150] team0 (unregistering): Port device team_slave_1 removed [ 1250.529327][ T150] team0 (unregistering): Port device team_slave_0 removed [ 1251.148866][ T8966] Bluetooth: hci5: command tx timeout [ 1251.668810][T14297] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.668950][T14297] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.669193][T14297] bridge_slave_0: entered allmulticast mode [ 1251.720019][T14297] bridge_slave_0: entered promiscuous mode [ 1251.764314][T14297] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.764455][T14297] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.764694][T14297] bridge_slave_1: entered allmulticast mode [ 1251.808083][T14297] bridge_slave_1: entered promiscuous mode [ 1252.443567][T14297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1252.482498][T14297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1253.228608][ T8966] Bluetooth: hci5: command tx timeout [ 1254.386508][T14535] overlayfs: failed to resolve './file0': -2 [ 1254.639351][T14542] trusted_key: encrypted_key: master key parameter 'c0‚:ØHû*N”Ê…™ÐfïeúÂ<‘5Ž•w€èê^n0&À–±š8çÉJÍ' is invalid [ 1255.178604][ T10] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1255.180401][T14297] team0: Port device team_slave_0 added [ 1255.206836][T14297] team0: Port device team_slave_1 added [ 1255.328669][ T8966] Bluetooth: hci5: command tx timeout [ 1255.378584][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1255.467295][ T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1255.467326][ T10] usb 5-1: config 0 has no interface number 0 [ 1255.467377][ T10] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1255.492955][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1255.492988][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.493009][ T10] usb 5-1: Product: syz [ 1255.493025][ T10] usb 5-1: Manufacturer: syz [ 1255.493040][ T10] usb 5-1: SerialNumber: syz [ 1255.543072][ T10] usb 5-1: config 0 descriptor?? [ 1255.944125][T14297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1255.944145][T14297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1255.944319][T14297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1256.016866][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1256.016901][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1256.016922][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1256.017165][ T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 1256.195978][T14297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1256.195998][T14297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1256.196078][T14297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1257.084154][T14297] hsr_slave_0: entered promiscuous mode [ 1257.096403][T14297] hsr_slave_1: entered promiscuous mode [ 1257.174542][T14495] lo speed is unknown, defaulting to 1000 [ 1257.388584][ T8966] Bluetooth: hci5: command tx timeout [ 1257.551232][ T10] usb 5-1: USB disconnect, device number 72 [ 1259.764177][T14589] overlayfs: failed to resolve './file0': -2 [ 1260.895040][T14593] fuse: Unknown parameter 'group_id00000000000000000000' [ 1261.185353][T14495] netdevsim0 speed is unknown, defaulting to 1000 [ 1262.801182][ T150] bridge_slave_1: left allmulticast mode [ 1262.801220][ T150] bridge_slave_1: left promiscuous mode [ 1262.801523][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.054893][T14607] netlink: 'syz.4.2072': attribute type 10 has an invalid length. [ 1263.054910][T14607] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2072'. [ 1263.210249][ T150] bridge_slave_0: left allmulticast mode [ 1263.210289][ T150] bridge_slave_0: left promiscuous mode [ 1263.210559][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.948758][ T150] bridge_slave_1: left allmulticast mode [ 1263.948788][ T150] bridge_slave_1: left promiscuous mode [ 1263.948974][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.050328][ T150] bridge_slave_0: left allmulticast mode [ 1264.050368][ T150] bridge_slave_0: left promiscuous mode [ 1264.050626][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.581080][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1264.710463][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1264.790402][ T150] bond0 (unregistering): Released all slaves [ 1265.049862][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1265.169466][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1265.251437][ T150] bond0 (unregistering): Released all slaves [ 1266.117861][T14633] overlayfs: failed to resolve './file0': -2 [ 1271.953328][T14658] netlink: 'syz.1.2085': attribute type 10 has an invalid length. [ 1271.953355][T14658] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2085'. [ 1272.014192][T14658] team0: Port device geneve1 added [ 1272.205595][ T1398] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.235916][ T1398] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.236017][ T1398] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.404094][ T1398] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.830563][T14672] overlayfs: failed to resolve './file0': -2 [ 1273.698669][ T150] hsr_slave_0: left promiscuous mode [ 1273.720729][ T150] hsr_slave_1: left promiscuous mode [ 1273.721844][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1273.759760][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1273.868742][ T5730] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1273.918724][ T150] hsr_slave_0: left promiscuous mode [ 1273.959347][ T150] hsr_slave_1: left promiscuous mode [ 1273.960906][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1273.991326][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1274.001893][ T5730] usb 2-1: device descriptor read/64, error -71 [ 1274.238596][ T5730] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1274.538572][ T5730] usb 2-1: device descriptor read/64, error -71 [ 1274.649076][ T5730] usb usb2-port1: attempt power cycle [ 1274.880762][ T150] team0 (unregistering): Port device team_slave_1 removed [ 1276.288235][ T5730] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1277.233563][ T5730] usb 2-1: device descriptor read/8, error -71 [ 1277.235151][ T150] team0 (unregistering): Port device team_slave_0 removed [ 1277.578539][ T5730] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1277.683822][ T5730] usb 2-1: device descriptor read/8, error -71 [ 1277.788927][ T5730] usb usb2-port1: unable to enumerate USB device [ 1278.848645][T14709] trusted_key: encrypted_key: master key parameter 'c0‚:ØHû*N”Ê…™ÐfïeúÂ<‘5Ž•w€èê^n0&À–±š8çÉJÍ' is invalid [ 1279.219669][ T150] team0 (unregistering): Port device team_slave_1 removed [ 1279.279284][ T150] team0 (unregistering): Port device team_slave_0 removed [ 1279.678597][T14495] bridge0: port 1(bridge_slave_0) entered blocking state [ 1279.678714][T14495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.678891][T14495] bridge_slave_0: entered allmulticast mode [ 1279.681231][T14495] bridge_slave_0: entered promiscuous mode [ 1279.684735][T14495] bridge0: port 2(bridge_slave_1) entered blocking state [ 1279.684917][T14495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.685097][T14495] bridge_slave_1: entered allmulticast mode [ 1279.687634][T14495] bridge_slave_1: entered promiscuous mode [ 1279.863714][T14495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1279.885233][T14495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1280.051022][T14495] team0: Port device team_slave_0 added [ 1280.053787][T14495] team0: Port device team_slave_1 added [ 1280.094940][T14495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1280.094955][T14495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1280.094978][T14495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1280.097771][T14495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1280.097796][T14495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1280.097819][T14495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1280.300062][T14495] hsr_slave_0: entered promiscuous mode [ 1280.301125][T14495] hsr_slave_1: entered promiscuous mode [ 1280.302002][T14495] debugfs: 'hsr0' already exists in 'hsr' [ 1280.302038][T14495] Cannot create hsr debugfs directory [ 1280.840153][T14716] overlayfs: failed to resolve './file0': -2 [ 1280.971950][ T4912] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1281.198501][ T821] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1281.226016][ T4912] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1281.242400][ T4912] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1281.298649][ T8771] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1281.437498][ T4912] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1281.446009][ T4912] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1281.484331][ T8771] usb 4-1: Using ep0 maxpacket: 32 [ 1281.489701][ T8771] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1281.489732][ T8771] usb 4-1: config 0 has no interface number 0 [ 1281.489795][ T8771] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1281.492888][ T8771] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1281.492920][ T8771] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.492942][ T8771] usb 4-1: Product: syz [ 1281.492957][ T8771] usb 4-1: Manufacturer: syz [ 1281.492973][ T8771] usb 4-1: SerialNumber: syz [ 1281.518455][ T821] usb 2-1: Using ep0 maxpacket: 32 [ 1281.528918][ T821] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.528944][ T821] usb 2-1: config 0 has no interfaces? [ 1281.542863][ T821] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1281.542936][ T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.542985][ T821] usb 2-1: Product: syz [ 1281.543013][ T821] usb 2-1: Manufacturer: syz [ 1281.543029][ T821] usb 2-1: SerialNumber: syz [ 1281.622533][ T8771] usb 4-1: config 0 descriptor?? [ 1281.688451][ T821] usb 2-1: config 0 descriptor?? [ 1281.921896][ T821] usb 2-1: USB disconnect, device number 76 [ 1282.261830][ T8771] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1282.261865][ T8771] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1282.263048][ T8771] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1282.263077][ T8771] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1282.263097][ T8771] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1282.263115][ T8771] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1282.263422][ T8771] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 1283.958923][ T8966] Bluetooth: hci0: command tx timeout [ 1285.351882][T14749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2106'. [ 1285.352001][T14749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1285.352016][T14749] IPv6: NLM_F_CREATE should be set when creating new route [ 1285.352807][T14749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2106'. [ 1285.352907][T14749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1285.575316][ T5700] usb 4-1: USB disconnect, device number 78 [ 1286.093968][ T8966] Bluetooth: hci0: command tx timeout [ 1287.139563][T14764] trusted_key: encrypted_key: master key parameter 'c0‚:ØHû*N”Ê…™ÐfïeúÂ<‘5Ž•w€èê^n0&À–±š8çÉJÍ' is invalid [ 1287.197184][T14721] lo speed is unknown, defaulting to 1000 [ 1287.330328][T14769] overlayfs: failed to resolve './file0': -2 [ 1288.847896][ T8966] Bluetooth: hci0: command tx timeout [ 1289.428593][T12701] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1289.620776][T12701] usb 5-1: device descriptor read/64, error -71 [ 1289.655692][T14495] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1290.064854][T12701] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1290.592624][T12701] usb 5-1: device descriptor read/64, error -71 [ 1290.967372][T14495] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1290.969145][T14787] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1290.969171][T14787] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1290.970797][T14721] netdevsim0 speed is unknown, defaulting to 1000 [ 1290.970835][T14495] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1291.188665][T12701] usb usb5-port1: attempt power cycle [ 1291.221697][ T8966] Bluetooth: hci0: command tx timeout [ 1291.313370][T14495] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1291.360329][T14495] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1291.395041][T14794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2117'. [ 1291.395165][T14794] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1291.395179][T14794] IPv6: NLM_F_CREATE should be set when creating new route [ 1291.396542][T14794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2117'. [ 1291.396647][T14794] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1292.272881][ T8966] Bluetooth: hci5: command 0x0c1a tx timeout [ 1292.655621][T14495] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1292.672196][T14495] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1292.731580][T14495] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1292.747929][T14787] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1292.747954][T14787] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1294.301232][ T5700] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1294.631328][T14820] trusted_key: encrypted_key: master key parameter 'c0‚:ØHû*N”Ê…™ÐfïeúÂ<‘5Ž•w€èê^n0&À–±š8çÉJÍ' is invalid [ 1294.648172][ T5700] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1294.648206][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.648251][ T5700] usb 4-1: Product: syz [ 1294.648320][ T5700] usb 4-1: Manufacturer: syz [ 1294.648583][ T5700] usb 4-1: SerialNumber: syz [ 1296.687266][ T5700] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1296.687354][ T5700] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1296.974611][ T5700] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1297.160651][ T5700] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1299.308647][ T5813] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1299.504986][ T821] usb 4-1: USB disconnect, device number 79 [ 1299.516947][ T5813] usb 5-1: device descriptor read/64, error -71 [ 1299.562314][T14838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2126'. [ 1299.563057][T14838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2126'. [ 1300.003172][ T5813] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1300.884712][ T5813] usb 5-1: device descriptor read/64, error -71 [ 1300.989414][ T5813] usb usb5-port1: attempt power cycle [ 1301.836514][T14850] vlan3: entered allmulticast mode [ 1301.836539][T14850] macsec0: entered allmulticast mode [ 1301.836555][T14850] veth1_macvtap: entered allmulticast mode [ 1303.098862][T14495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1303.099584][T14721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.099832][T14721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.100064][T14721] bridge_slave_0: entered allmulticast mode [ 1303.104951][T14721] bridge_slave_0: entered promiscuous mode [ 1304.208778][T14875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2136'. [ 1304.208909][T14875] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1304.211275][T14875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2136'. [ 1304.211391][T14875] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1304.347007][T14721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.347163][T14721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.347414][T14721] bridge_slave_1: entered allmulticast mode [ 1304.364313][T14721] bridge_slave_1: entered promiscuous mode [ 1304.606980][T14721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1305.114286][T14721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1305.230088][T14495] 8021q: adding VLAN 0 to HW filter on device team0 [ 1305.234650][T14721] team0: Port device team_slave_0 added [ 1305.256310][T14721] team0: Port device team_slave_1 added [ 1305.452953][T14883] trusted_key: encrypted_key: master key parameter 'c0‚:ØHû*N”Ê…™ÐfïeúÂ<‘5Ž•w€èê^n0&À–±š8çÉJÍ' is invalid [ 1305.656506][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.657568][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.551756][ T1231] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.551978][ T1231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1306.576347][T14721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1306.576366][T14721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1306.576395][T14721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1306.598537][T12701] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1306.705367][T14721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1306.705385][T14721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1306.705416][T14721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1306.769717][ T5813] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1306.779075][T12701] usb 2-1: Using ep0 maxpacket: 32 [ 1306.793370][T12701] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1306.793400][T12701] usb 2-1: config 0 has no interface number 0 [ 1306.793443][T12701] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1306.795816][T12701] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1306.795845][T12701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.795866][T12701] usb 2-1: Product: syz [ 1306.795876][T12701] usb 2-1: Manufacturer: syz [ 1306.795886][T12701] usb 2-1: SerialNumber: syz [ 1306.842692][ T7926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.843033][ T7926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1306.877765][T12701] usb 2-1: config 0 descriptor?? [ 1306.898613][ T5813] usb 4-1: device descriptor read/64, error -71 [ 1307.105314][T14721] hsr_slave_0: entered promiscuous mode [ 1307.106848][T14721] hsr_slave_1: entered promiscuous mode [ 1307.107835][T14721] debugfs: 'hsr0' already exists in 'hsr' [ 1307.107860][T14721] Cannot create hsr debugfs directory [ 1307.138644][ T5813] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1307.241254][T14890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2140'. [ 1307.268546][ T5813] usb 4-1: device descriptor read/64, error -71 [ 1307.379231][ T5813] usb usb4-port1: attempt power cycle [ 1307.557451][T12701] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1307.557477][T12701] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1307.560007][T12701] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1307.560091][T12701] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1307.560144][T12701] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1307.560195][T12701] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1307.560973][T12701] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 1307.723692][ T5813] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1307.742525][ T5813] usb 4-1: device descriptor read/8, error -71 [ 1307.761834][ T5700] usb 2-1: USB disconnect, device number 77 [ 1307.988541][ T5813] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1308.012843][ T5813] usb 4-1: device descriptor read/8, error -71 [ 1308.125429][ T5813] usb usb4-port1: unable to enumerate USB device [ 1308.892506][ T4912] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1309.417558][ T4912] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1309.675741][ T7389] bridge_slave_1: left allmulticast mode [ 1309.675779][ T7389] bridge_slave_1: left promiscuous mode [ 1309.676042][ T7389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.697754][ T4912] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1309.706069][ T4912] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1309.730657][ T4912] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1309.969740][ T8966] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1309.980753][ T8966] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1309.987463][ T8966] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1310.081642][ T8966] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1310.082469][ T8966] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1310.552672][ T7389] bridge_slave_0: left allmulticast mode [ 1310.552701][ T7389] bridge_slave_0: left promiscuous mode [ 1310.552936][ T7389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.636075][T14911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2145'. [ 1310.636174][T14911] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1310.643629][T14911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2145'. [ 1310.643997][T14911] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1312.672531][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1313.529311][T14928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2149'. [ 1319.085115][ T8966] Bluetooth: hci3: command tx timeout [ 1319.759368][ T7389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1320.649344][ T7389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1320.678498][ T5730] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1320.878750][ T7389] bond0 (unregistering): Released all slaves [ 1321.239021][ T5730] usb 2-1: Using ep0 maxpacket: 32 [ 1321.647431][ T4912] Bluetooth: hci3: command tx timeout [ 1321.962044][ T5730] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1321.962076][ T5730] usb 2-1: config 0 has no interface number 0 [ 1321.962125][ T5730] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1321.966786][ T5730] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1321.966816][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.966837][ T5730] usb 2-1: Product: syz [ 1321.966852][ T5730] usb 2-1: Manufacturer: syz [ 1321.966877][ T5730] usb 2-1: SerialNumber: syz [ 1322.048458][ T5730] usb 2-1: config 0 descriptor?? [ 1322.800620][ T5730] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1322.800663][ T5730] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1322.802439][ T5730] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1322.802468][ T5730] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1322.802488][ T5730] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1322.802507][ T5730] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1322.802816][ T5730] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 1323.067146][ T5813] usb 2-1: USB disconnect, device number 78 [ 1323.759219][ T4912] Bluetooth: hci3: command tx timeout [ 1323.949868][T14971] overlayfs: failed to resolve './file0': -2 [ 1326.361378][ T4912] Bluetooth: hci3: command tx timeout [ 1328.097348][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1328.314495][ T7389] hsr_slave_0: left promiscuous mode [ 1328.358659][ T7389] hsr_slave_1: left promiscuous mode [ 1328.359663][ T7389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1328.411900][ T7389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1329.708515][ T5813] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1330.829550][ T5813] usb 2-1: Using ep0 maxpacket: 32 [ 1330.838397][ T5813] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1330.838426][ T5813] usb 2-1: config 0 has no interface number 0 [ 1330.838474][ T5813] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1330.843269][ T5813] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1330.843292][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.843307][ T5813] usb 2-1: Product: syz [ 1330.843317][ T5813] usb 2-1: Manufacturer: syz [ 1330.843327][ T5813] usb 2-1: SerialNumber: syz [ 1338.778559][ C0] sched: DL replenish lagged too much [ 1366.989261][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.989338][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1415.805079][ T5813] usb 2-1: config 0 descriptor?? [ 1416.808351][ T5813] usb 2-1: can't set config #0, error -71 [ 1429.557704][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1429.557778][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1433.490919][ T5813] usb 2-1: USB disconnect, device number 79 [ 1437.628643][ T4912] Bluetooth: hci3: command 0x0406 tx timeout [ 1463.614293][ T7389] team0 (unregistering): Port device team_slave_1 removed [ 1467.551652][ T7389] team0 (unregistering): Port device team_slave_0 removed [ 1472.508584][ T39] INFO: task dhcpcd:5258 blocked for more than 144 seconds. [ 1472.508630][ T39] Tainted: G L syzkaller #0 [ 1472.508643][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1472.508652][ T39] task:dhcpcd state:D stack:21864 pid:5258 tgid:5258 ppid:5257 task_flags:0x400140 flags:0x00080000 [ 1472.508731][ T39] Call Trace: [ 1472.508739][ T39] [ 1472.508753][ T39] __schedule+0x16dc/0x5500 [ 1472.509017][ T39] ? __pfx___schedule+0x10/0x10 [ 1472.509082][ T39] rt_mutex_schedule+0x76/0xf0 [ 1472.509206][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 1472.509284][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 1472.509319][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 1472.509352][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1472.509404][ T39] ? rtnl_dump_ifinfo+0xa74/0x14b0 [ 1472.509543][ T39] ? rtnl_dump_ifinfo+0xa74/0x14b0 [ 1472.509586][ T39] ? rtnl_dump_ifinfo+0xa74/0x14b0 [ 1472.509620][ T39] mutex_lock_nested+0x168/0x1d0 [ 1472.509657][ T39] rtnl_dump_ifinfo+0xa74/0x14b0 [ 1472.509697][ T39] ? unwind_get_return_address+0x4d/0x90 [ 1472.509771][ T39] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 1472.509809][ T39] ? stack_trace_save+0xa9/0x100 [ 1472.509976][ T39] ? __pfx_stack_trace_save+0x10/0x10 [ 1472.510018][ T39] ? stack_depot_save_flags+0x33/0x800 [ 1472.510134][ T39] ? __lock_acquire+0x683/0x2ce0 [ 1472.510242][ T39] ? trace_kmalloc+0x2a/0xf0 [ 1472.510333][ T39] ? __kmalloc_node_track_caller_noprof+0x59d/0x7c0 [ 1472.510361][ T39] ? netlink_dump+0x1e7/0xee0 [ 1472.510448][ T39] ? netlink_dump+0x1e7/0xee0 [ 1472.510476][ T39] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 1472.510513][ T39] rtnl_dumpit+0xcc/0x200 [ 1472.510553][ T39] netlink_dump+0x711/0xee0 [ 1472.510579][ T39] ? __netlink_lookup+0xc6/0x8b0 [ 1472.510634][ T39] ? __pfx_netlink_dump+0x10/0x10 [ 1472.513827][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1472.513871][ T39] __netlink_dump_start+0x589/0x7b0 [ 1472.513907][ T39] rtnetlink_rcv_msg+0xa48/0xc00 [ 1472.513942][ T39] ? kmem_cache_alloc_node_noprof+0x3eb/0x670 [ 1472.514041][ T39] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 1472.514078][ T39] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1472.514113][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1472.514149][ T39] ? __pfx_rtnl_dumpit+0x10/0x10 [ 1472.514195][ T39] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 1472.514245][ T39] netlink_rcv_skb+0x226/0x4a0 [ 1472.514272][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1472.514308][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1472.514348][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 1472.514381][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 1472.514413][ T39] netlink_unicast+0x7f5/0x990 [ 1472.514462][ T39] netlink_sendmsg+0x813/0xb40 [ 1472.514500][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1472.516024][ T39] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1472.516157][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1472.516182][ T39] sock_sendmsg_nosec+0x13a/0x180 [ 1472.516337][ T39] __sys_sendto+0x41e/0x5d0 [ 1472.516375][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 1472.516411][ T39] ? __pfx___sys_getsockname+0x10/0x10 [ 1472.516472][ T39] __x64_sys_sendto+0xde/0x100 [ 1472.516494][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.516549][ T39] do_syscall_64+0x174/0x580 [ 1472.516577][ T39] ? clear_bhb_loop+0x40/0x90 [ 1472.516614][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.516644][ T39] RIP: 0033:0x7f1ff692d407 [ 1472.516670][ T39] RSP: 002b:00007fffd6d42800 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1472.516695][ T39] RAX: ffffffffffffffda RBX: 00007f1ff68a3780 RCX: 00007f1ff692d407 [ 1472.516712][ T39] RDX: 0000000000000014 RSI: 00007fffd6d42890 RDI: 0000000000000008 [ 1472.516727][ T39] RBP: 00007fffd6d42874 R08: 00007fffd6d42874 R09: 000000000000000c [ 1472.516743][ T39] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffd6d63180 [ 1472.516758][ T39] R13: 00007f1ff68a3708 R14: 00007fffd6d42970 R15: 00007fffd6d52f50 [ 1472.516795][ T39] [ 1472.516831][ T39] INFO: task kworker/0:5:5730 blocked for more than 144 seconds. [ 1472.516853][ T39] Tainted: G L syzkaller #0 [ 1472.516866][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1472.516876][ T39] task:kworker/0:5 state:D stack:20608 pid:5730 tgid:5730 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1472.516937][ T39] Workqueue: events netdev_work_proc [ 1472.517029][ T39] Call Trace: [ 1472.517037][ T39] [ 1472.517051][ T39] __schedule+0x16dc/0x5500 [ 1472.517116][ T39] ? __pfx___schedule+0x10/0x10 [ 1472.517169][ T39] rt_mutex_schedule+0x76/0xf0 [ 1472.517194][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 1472.517244][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 1472.517279][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 1472.517311][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1472.517354][ T39] ? netdev_work_proc+0x72/0x7f0 [ 1472.517396][ T39] ? netdev_work_proc+0x72/0x7f0 [ 1472.517429][ T39] ? netdev_work_proc+0x72/0x7f0 [ 1472.812160][ T39] mutex_lock_nested+0x168/0x1d0 [ 1472.812219][ T39] ? process_scheduled_works+0xa20/0x14e0 [ 1472.812341][ T39] netdev_work_proc+0x72/0x7f0 [ 1472.812375][ T39] ? process_scheduled_works+0xa20/0x14e0 [ 1472.812407][ T39] ? process_scheduled_works+0xa20/0x14e0 [ 1472.812437][ T39] ? __pfx_netdev_work_proc+0x10/0x10 [ 1472.812471][ T39] ? rcu_is_watching+0x15/0xb0 [ 1472.812544][ T39] ? process_scheduled_works+0xa20/0x14e0 [ 1472.812573][ T39] process_scheduled_works+0xa8e/0x14e0 [ 1472.812638][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 1472.812675][ T39] ? assign_work+0x3cf/0x5d0 [ 1472.812712][ T39] worker_thread+0xa47/0xfb0 [ 1472.812760][ T39] ? __kthread_parkme+0x71/0x1f0 [ 1472.812837][ T39] kthread+0x388/0x470 [ 1472.812876][ T39] ? __pfx_worker_thread+0x10/0x10 [ 1472.812914][ T39] ? __pfx_kthread+0x10/0x10 [ 1472.812953][ T39] ret_from_fork+0x514/0xb70 [ 1472.813070][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1472.813109][ T39] ? __switch_to+0xc89/0x1420 [ 1472.813229][ T39] ? __pfx_kthread+0x10/0x10 [ 1472.813269][ T39] ret_from_fork_asm+0x1a/0x30 [ 1472.813337][ T39] [ 1472.813374][ T39] INFO: task syz-executor:14721 blocked for more than 144 seconds. [ 1472.813399][ T39] Tainted: G L syzkaller #0 [ 1472.813413][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1472.813425][ T39] task:syz-executor state:D stack:22744 pid:14721 tgid:14721 ppid:1 task_flags:0x480140 flags:0x00080002 [ 1472.813492][ T39] Call Trace: [ 1472.813500][ T39] [ 1472.813516][ T39] __schedule+0x16dc/0x5500 [ 1472.958502][ T39] ? __pfx___schedule+0x10/0x10 [ 1472.958577][ T39] rt_mutex_schedule+0x76/0xf0 [ 1472.958606][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 1472.958661][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 1472.958701][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 1472.958739][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1472.958795][ T39] ? rtnl_net_dev_lock+0x257/0x2f0 [ 1472.958975][ T39] ? rtnl_net_dev_lock+0x257/0x2f0 [ 1472.959012][ T39] mutex_lock_nested+0x168/0x1d0 [ 1472.959044][ T39] ? rtnl_net_dev_lock+0x36/0x2f0 [ 1472.959083][ T39] ? rtnl_net_dev_lock+0x36/0x2f0 [ 1472.959121][ T39] rtnl_net_dev_lock+0x257/0x2f0 [ 1472.959164][ T39] unregister_netdevice_notifier_dev_net+0x96/0x450 [ 1472.959209][ T39] ? nsim_destroy+0xbc/0x800 [ 1472.959344][ T39] ? __pfx_unregister_netdevice_notifier_dev_net+0x10/0x10 [ 1472.959388][ T39] ? __pfx_mntput_no_expire_slowpath+0x10/0x10 [ 1472.959497][ T39] ? mntput_no_expire+0x1c/0x1c0 [ 1472.959540][ T39] nsim_destroy+0x105/0x800 [ 1472.959586][ T39] __nsim_dev_port_del+0x14e/0x200 [ 1472.959632][ T39] nsim_dev_reload_destroy+0x288/0x490 [ 1472.959660][ T39] ? nsim_drv_remove+0x50/0x160 [ 1472.959690][ T39] nsim_drv_remove+0x58/0x160 [ 1472.959718][ T39] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1472.959779][ T39] device_release_driver_internal+0x48b/0x880 [ 1473.096019][ T39] bus_remove_device+0x449/0x560 [ 1473.096067][ T39] ? __pfx_bus_remove_device+0x10/0x10 [ 1473.096096][ T39] ? up_read+0x34/0x180 [ 1473.096131][ T39] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1473.096271][ T39] device_del+0x528/0x8f0 [ 1473.096350][ T39] ? __pfx_device_del+0x10/0x10 [ 1473.096383][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 1473.096410][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1473.096443][ T39] device_unregister+0x21/0xf0 [ 1473.096476][ T39] del_device_store+0x2b5/0x370 [ 1473.096521][ T39] ? __pfx_del_device_store+0x10/0x10 [ 1473.096560][ T39] ? sysfs_file_kobj+0x1e4/0x230 [ 1473.096630][ T39] ? sysfs_kf_write+0x166/0x260 [ 1473.096673][ T39] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1473.096710][ T39] kernfs_fop_write_iter+0x3a5/0x540 [ 1473.096749][ T39] vfs_write+0x61e/0xbb0 [ 1473.096828][ T39] ? __pfx_vfs_write+0x10/0x10 [ 1473.096872][ T39] ? do_sys_openat2+0x14e/0x200 [ 1473.096897][ T39] ? kmem_cache_free+0x187/0x6c0 [ 1473.096945][ T39] ksys_write+0x156/0x270 [ 1473.096980][ T39] ? __pfx_ksys_write+0x10/0x10 [ 1473.097022][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.097050][ T39] do_syscall_64+0x174/0x580 [ 1473.097077][ T39] ? trace_irq_disable+0x3b/0x140 [ 1473.097200][ T39] ? clear_bhb_loop+0x40/0x90 [ 1473.097234][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.097261][ T39] RIP: 0033:0x7f110d89e6ce [ 1473.097285][ T39] RSP: 002b:00007ffe778dc2e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1473.097312][ T39] RAX: ffffffffffffffda RBX: 000055557d40d500 RCX: 00007f110d89e6ce [ 1473.097331][ T39] RDX: 0000000000000001 RSI: 00007ffe778dc370 RDI: 0000000000000005 [ 1473.097348][ T39] RBP: 00007f110d974732 R08: 0000000000000000 R09: 0000000000000000 [ 1473.097364][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1473.097379][ T39] R13: 00007ffe778dc370 R14: 00007f110e694620 R15: 0000000000000003 [ 1473.214743][ T39] [ 1473.214771][ T39] INFO: task syz-executor:14901 blocked for more than 144 seconds. [ 1473.214796][ T39] Tainted: G L syzkaller #0 [ 1473.214811][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1473.214823][ T39] task:syz-executor state:D stack:25800 pid:14901 tgid:14901 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1473.214907][ T39] Call Trace: [ 1473.214916][ T39] [ 1473.214931][ T39] __schedule+0x16dc/0x5500 [ 1473.214982][ T39] ? kernel_text_address+0xa5/0xe0 [ 1473.215037][ T39] ? __pfx___schedule+0x10/0x10 [ 1473.215095][ T39] rt_mutex_schedule+0x76/0xf0 [ 1473.215123][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 1473.215178][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 1473.215218][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 1473.215254][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1473.215315][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1473.215347][ T39] ? register_netdevice_notifier_net+0x1a/0xa0 [ 1473.215388][ T39] mutex_lock_nested+0x168/0x1d0 [ 1473.215422][ T39] ? register_netdevice_notifier_net+0x1a/0xa0 [ 1473.215468][ T39] register_netdevice_notifier_net+0x1a/0xa0 [ 1473.215512][ T39] ops_init+0x35d/0x5d0 [ 1473.215640][ T39] setup_net+0x118/0x350 [ 1473.215682][ T39] ? __pfx_setup_net+0x10/0x10 [ 1473.215726][ T39] ? preinit_net+0x4b5/0x7d0 [ 1473.215767][ T39] copy_net_ns+0x4f9/0x720 [ 1473.215811][ T39] create_new_namespaces+0x3f0/0x6b0 [ 1473.215886][ T39] ? security_capable+0x7e/0x2c0 [ 1473.215960][ T39] unshare_nsproxy_namespaces+0x149/0x190 [ 1473.215996][ T39] ksys_unshare+0x57d/0xa00 [ 1473.216082][ T39] ? __pfx_ksys_unshare+0x10/0x10 [ 1473.216130][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.388564][ T39] __x64_sys_unshare+0x38/0x50 [ 1473.388608][ T39] do_syscall_64+0x174/0x580 [ 1473.388633][ T39] ? trace_irq_disable+0x3b/0x140 [ 1473.388669][ T39] ? clear_bhb_loop+0x40/0x90 [ 1473.388698][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.388722][ T39] RIP: 0033:0x7fc7c26df167 [ 1473.388743][ T39] RSP: 002b:00007ffd599c2548 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1473.388769][ T39] RAX: ffffffffffffffda RBX: 00007fc7c2965f40 RCX: 00007fc7c26df167 [ 1473.388786][ T39] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1473.388801][ T39] RBP: 00007fc7c29667b8 R08: 0000000000000000 R09: 0000000000000000 [ 1473.388816][ T39] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 1473.388830][ T39] R13: 0000000000000003 R14: 00007ffd599c2788 R15: 0000000000000000 [ 1473.388864][ T39] [ 1473.388902][ T39] [ 1473.388902][ T39] Showing all locks held in the system: [ 1473.388917][ T39] 6 locks held by ktimers/0/16: [ 1473.388932][ T39] 4 locks held by pr/legacy/17: [ 1473.388947][ T39] 1 lock held by khungtaskd/39: [ 1473.388959][ T39] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1473.389056][ T39] 6 locks held by kworker/u8:8/1231: [ 1473.389069][ T39] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1473.389152][ T39] #1: ffffc90006287c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1473.389230][ T39] #2: ffff88803e08a310 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1473.389293][ T39] #3: ffff88806117c120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1473.389361][ T39] #4: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1473.389422][ T39] #5: ffff88813fffc358 (&zone->lock){+.+.}-{3:3}, at: get_page_from_freelist+0xcc4/0x26a0 [ 1473.389552][ T39] 3 locks held by kworker/u8:14/3418: [ 1473.389565][ T39] #0: ffff8880326a6138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1473.389622][ T39] #1: ffffc9000f0bfc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1473.389681][ T39] #2: ffffffff8f5b15b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1473.389813][ T39] 1 lock held by klogd/4952: [ 1473.389826][ T39] 2 locks held by dhcpcd/5258: [ 1473.389839][ T39] #0: ffff888029d8e928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 1473.389894][ T39] #1: ffffffff8f5b15b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa74/0x14b0 [ 1473.458388][ T39] 2 locks held by getty/5353: [ 1473.458414][ T39] #0: ffff8880366430a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1473.599860][ T39] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1473.600024][ T39] 1 lock held by syz-executor/5597: [ 1473.600039][ T39] #0: ffffffff8f5b15b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1473.600161][ T39] 1 lock held by syz-executor/5599: [ 1473.600179][ T39] 2 locks held by kworker/1:6/5727: [ 1473.600192][ T39] #0: ffff88813ff1f938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1473.600250][ T39] #1: ffffc900059cfc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1473.600250][ T39] #1: ffffc900059cfc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1473.600305][ T39] 3 locks held by kworker/0:5/5730: [ 1473.600318][ T39] #0: ffff88813ff1f938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1473.600373][ T39] #1: ffffc90005a0fc40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1473.600428][ T39] #2: ffffffff8f5b15b8 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x72/0x7f0 [ 1473.600486][ T39] 1 lock held by kworker/0:7/5813: [ 1473.600500][ T39] 3 locks held by kworker/1:9/5853: [ 1473.600512][ T39] 6 locks held by kworker/u8:16/7320: [ 1473.600525][ T39] 6 locks held by kworker/u8:17/7389: [ 1473.600538][ T39] 6 locks held by kworker/u8:19/7926: [ 1473.600551][ T39] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1473.600607][ T39] #1: ffffc90007957c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1473.600664][ T39] #2: ffff88805f036310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1473.600730][ T39] #3: ffff88805eaa4520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1473.600789][ T39] #4: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1473.600850][ T39] #5: ffff88813fffc358 (&zone->lock){+.+.}-{3:3}, at: get_page_from_freelist+0xcc4/0x26a0 [ 1473.600906][ T39] 6 locks held by kworker/u8:20/7928: [ 1473.600918][ T39] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1473.600981][ T39] #1: ffffc90007947c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1473.601039][ T39] #2: ffff888024aac310 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1473.601102][ T39] #3: ffff88805f1ca920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1473.601161][ T39] #4: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1473.601220][ T39] #5: ffff88813fffc358 (&zone->lock){+.+.}-{3:3}, at: get_page_from_freelist+0xcc4/0x26a0 [ 1473.711958][ T39] 5 locks held by kworker/u8:1/14038: [ 1473.711978][ T39] 7 locks held by syz-executor/14721: [ 1473.711991][ T39] #0: ffff888036804500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1473.712063][ T39] #1: ffff888028aee878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1473.712125][ T39] #2: ffff8880295060f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1473.712191][ T39] #3: ffffffff8ee269d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1473.712257][ T39] #4: ffff88806086d160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1473.712319][ T39] #5: ffff8880383b4310 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1473.712377][ T39] #6: ffffffff8f5b15b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 1473.712444][ T39] 2 locks held by syz-executor/14901: [ 1473.712457][ T39] #0: ffffffff8f5a2a00 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 1473.712521][ T39] #1: ffffffff8f5b15b8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1473.712587][ T39] 1 lock held by syz.4.2166/15022: [ 1473.712600][ T39] #0: ffffffff8f5b15b8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xe95/0x2e30 [ 1473.712784][ T39] 1 lock held by syz.4.2166/15023: [ 1473.712798][ T39] #0: ffffffff8f5b15b8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xe95/0x2e30 [ 1473.712862][ T39] 1 lock held by syz-executor/15026: [ 1473.712875][ T39] #0: ffff88813ff67238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0x9e/0x650 [ 1473.712939][ T39] 5 locks held by kworker/u8:5/15027: [ 1473.721432][ T39] 3 locks held by kworker/1:3/15028: [ 1473.721451][ T39] 1 lock held by syz-executor/15029: [ 1473.721464][ T39] #0: ffff88813ff67238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0x9e/0x650 [ 1473.721531][ T39] 1 lock held by udevd/15030: [ 1473.721543][ T39] #0: ffff88813ff67238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0x9e/0x650 [ 1473.721601][ T39] 1 lock held by syz-executor/15031: [ 1473.721614][ T39] #0: ffff88813ff67238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0x9e/0x650 [ 1473.721672][ T39] 1 lock held by udevd/15032: [ 1473.721684][ T39] #0: ffff88813ff67238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0x9e/0x650 [ 1473.721742][ T39] 1 lock held by syz-executor/15033: [ 1473.721755][ T39] #0: ffff88813ff67238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0x9e/0x650 [ 1473.842364][ T39] 1 lock held by udevd/15034: [ 1473.842386][ T39] #0: ffff88813ff67238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0x9e/0x650 [ 1473.842464][ T39] [ 1473.842470][ T39] ============================================= [ 1473.842470][ T39] [ 1473.842480][ T39] NMI backtrace for cpu 1 [ 1473.842518][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1473.842547][ T39] Tainted: [L]=SOFTLOCKUP [ 1473.842554][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1473.842568][ T39] Call Trace: [ 1473.842577][ T39] [ 1473.842587][ T39] dump_stack_lvl+0xe8/0x150 [ 1473.842624][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 1473.842725][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1473.842826][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1473.842863][ T39] sys_info+0x135/0x170 [ 1473.842914][ T39] watchdog+0xfd7/0x1030 [ 1473.843008][ T39] ? watchdog+0x1c7/0x1030 [ 1473.843048][ T39] kthread+0x388/0x470 [ 1473.843082][ T39] ? __pfx_watchdog+0x10/0x10 [ 1473.843113][ T39] ? __pfx_kthread+0x10/0x10 [ 1473.843146][ T39] ret_from_fork+0x514/0xb70 [ 1473.843184][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1473.843217][ T39] ? __switch_to+0xc89/0x1420 [ 1473.843247][ T39] ? __pfx_kthread+0x10/0x10 [ 1473.843281][ T39] ret_from_fork_asm+0x1a/0x30 [ 1473.843321][ T39] [ 1473.843335][ T39] Sending NMI from CPU 1 to CPUs 0: [ 1473.843367][ C0] NMI backtrace for cpu 0 [ 1473.843389][ C0] CPU: 0 UID: 0 PID: 5813 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1473.843415][ C0] Tainted: [L]=SOFTLOCKUP [ 1473.843421][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1473.843433][ C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 1473.843530][ C0] RIP: 0010:lock_acquire+0x0/0x350 [ 1473.843550][ C0] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa b0 01 e9 15 98 a5 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 60 4d 89 ce 45 [ 1473.843567][ C0] RSP: 0018:ffffc90005ccf938 EFLAGS: 00000046 [ 1473.843581][ C0] RAX: 1ffff11005cc52bd RBX: 0000000000000246 RCX: 0000000000000000 [ 1473.843594][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8ecf24f8 [ 1473.843606][ C0] RBP: ffffc90005ccfa60 R08: 0000000000000001 R09: 0000000000000000 [ 1473.843618][ C0] R10: dffffc0000000000 R11: fffffbfff1f5f17f R12: dffffc0000000000 [ 1473.843632][ C0] R13: 1ffff92000b99f34 R14: ffffffff8ecf24e0 R15: dffffc0000000000 [ 1473.843646][ C0] FS: 0000000000000000(0000) GS:ffff888125c46000(0000) knlGS:0000000000000000 [ 1473.843661][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1473.843674][ C0] CR2: 00007ffc641a2b7f CR3: 000000007854e000 CR4: 00000000003526f0 [ 1473.843690][ C0] Call Trace: [ 1473.843696][ C0] [ 1473.843703][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 1473.843721][ C0] ? rt_mutex_slowunlock+0xbf/0xa20 [ 1473.843746][ C0] rt_mutex_slowunlock+0xbf/0xa20 [ 1473.843776][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1473.843803][ C0] ? rt_spin_lock+0x1e0/0x400 [ 1473.843832][ C0] ? wg_ratelimiter_gc_entries+0x3a6/0x470 [ 1473.843858][ C0] rt_spin_unlock+0x10d/0x200 [ 1473.843884][ C0] wg_ratelimiter_gc_entries+0x3a6/0x470 [ 1473.843910][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1473.843931][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1473.843969][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1473.843994][ C0] ? assign_work+0x3cf/0x5d0 [ 1473.844017][ C0] worker_thread+0xa47/0xfb0 [ 1473.844055][ C0] kthread+0x388/0x470 [ 1473.844081][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1473.844101][ C0] ? __pfx_kthread+0x10/0x10 [ 1473.844128][ C0] ret_from_fork+0x514/0xb70 [ 1473.844156][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1473.844183][ C0] ? __switch_to+0xc89/0x1420 [ 1473.844207][ C0] ? __pfx_kthread+0x10/0x10 [ 1473.844233][ C0] ret_from_fork_asm+0x1a/0x30 [ 1473.844260][ C0] [ 1474.108467][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 1474.108495][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1474.108528][ T39] Tainted: [L]=SOFTLOCKUP [ 1474.108536][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1474.108551][ T39] Call Trace: [ 1474.108560][ T39] [ 1474.108570][ T39] vpanic+0x56c/0xa60 [ 1474.108600][ T39] ? __pfx___schedule+0x10/0x10 [ 1474.108637][ T39] ? __pfx_vpanic+0x10/0x10 [ 1474.108669][ T39] panic+0xc5/0xd0 [ 1474.108690][ T39] ? __pfx_panic+0x10/0x10 [ 1474.108709][ T39] ? preempt_schedule_common+0x82/0xd0 [ 1474.108747][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 1474.108778][ T39] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1474.108814][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1474.108851][ T39] watchdog+0x1030/0x1030 [ 1474.108894][ T39] ? watchdog+0x1c7/0x1030 [ 1474.108934][ T39] kthread+0x388/0x470 [ 1474.108968][ T39] ? __pfx_watchdog+0x10/0x10 [ 1474.109001][ T39] ? __pfx_kthread+0x10/0x10 [ 1474.109036][ T39] ret_from_fork+0x514/0xb70 [ 1474.109072][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1474.109107][ T39] ? __switch_to+0xc89/0x1420 [ 1474.109139][ T39] ? __pfx_kthread+0x10/0x10 [ 1474.109173][ T39] ret_from_fork_asm+0x1a/0x30 [ 1474.109219][ T39] [ 1474.109824][ T39] Kernel Offset: disabled