last executing test programs: 14.956672472s ago: executing program 3 (id=299): ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0xd8eb) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_usb_connect(0x2, 0x3f, &(0x7f0000004040)={{0x12, 0x1, 0x110, 0xe, 0xbb, 0x8c, 0x8, 0x10b8, 0x1f9c, 0x6c4c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0xe6, 0xf7, 0x40, 0x8, "", [{{0x9, 0x4, 0xd9, 0xc9, 0x2, 0x99, 0x95, 0xd7, 0x7, [], [{{0x9, 0x5, 0xd, 0x10, 0x40, 0x7d, 0x37, 0x9, [@generic={0x9, 0x4, "ecafa275a3b8bc"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x8, 0x2e, 0xe5}}]}}]}}]}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') read$FUSE(r0, &(0x7f0000004140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2d, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c7132fd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116b489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664020000001b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e3933e879144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a00", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x8, {0x4, 0x1, 0x8000000000, 0x9, 0xebd, 0x0, {0x5, 0x0, 0x4, 0x0, 0x20000, 0x20000, 0x3, 0x0, 0x8001, 0x4000, 0x80000001, r2, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.640840358s ago: executing program 3 (id=310): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x8000) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00\x00'], 0x0, 0x0, 0x0}, 0x0) syz_usb_disconnect(r1) 11.618536989s ago: executing program 4 (id=311): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f0000000380)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000000000000000000000200000008000000000000006400"/36], 0x80}, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000cd5000/0x1000)=nil, 0x1000}}) r4 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) fallocate(r4, 0x3, 0x5, 0xffffffff) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) syz_emit_ethernet(0x4c, &(0x7f0000000440)={@random="e33110495bfd", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x16, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @loopback, [{0x1}]}}}}}}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0xd3, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 10.375230609s ago: executing program 0 (id=313): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x34, r1, 0x205, 0xffffffec, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}]}, 0x34}}, 0x0) 10.30701732s ago: executing program 4 (id=315): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020"], 0xfe33) landlock_restrict_self(0xffffffffffffffff, 0x9) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x2, @win={{0xe369, 0x5, 0xfffff9b6, 0x4}, 0x0, 0xffffffa5, 0x0, 0xd, 0x0, 0x62}}) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0x4) copy_file_range(r3, &(0x7f00000008c0)=0x4, r2, &(0x7f0000000100), 0x8, 0x0) mkdirat(r2, &(0x7f0000000280)='./file0\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000040)={0x11080}) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100107010340b804020240000102030109021b000101fbb00c0904000001e7ff01000905010220"], 0x0) syz_usb_control_io$printer(r5, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r6, &(0x7f00000007c0)='\v', 0x1) syz_usb_ep_read(r5, 0x1, 0xa1, &(0x7f0000000000)=""/161) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) 10.106733827s ago: executing program 0 (id=316): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[], 0x0) write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2) 9.891897154s ago: executing program 2 (id=319): signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xd]}, 0x8, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8085) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1000, 0x2bc}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = userfaultfd(0x80801) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'X\x00\b\x00'}}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="07000000010001", 0x7) open_tree(0xffffffffffffff9c, 0x0, 0x1902) 8.720071442s ago: executing program 2 (id=320): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 8.709501191s ago: executing program 1 (id=321): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, 0x0, 0x0, 0x200) shmget$private(0x0, 0x4000, 0x780008c0, &(0x7f0000a02000/0x4000)=nil) ioctl$SNDCTL_TMR_START(r0, 0x5402) r3 = socket(0x29, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, 0x0, &(0x7f0000000080)) 8.520225877s ago: executing program 2 (id=322): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6305"], 0x20}, 0x41) 7.674840804s ago: executing program 3 (id=323): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000005d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20, 0x4000001}}], 0x1, 0x0) 7.600901727s ago: executing program 1 (id=324): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', 0x0}) 7.392995733s ago: executing program 3 (id=325): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8) close(r2) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000400)) r5 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r5, &(0x7f0000000340)={0x38, 0x6, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0x2, 0x3, 0x5507}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r7 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r8 = fcntl$dupfd(r7, 0x0, r7) write$binfmt_script(r8, 0x0, 0x0) write$binfmt_script(r8, &(0x7f0000001b00), 0xfffffd9d) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3a, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb359bb6539865fb0d8f60bb06000000000000002c0002000000059078ac1414ff0a0101004402000000014e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078dadf"], 0x0) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 7.353927205s ago: executing program 2 (id=326): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f0000000380)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000000000000000000000200000008000000000000006400"/36], 0x80}, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000cd5000/0x1000)=nil, 0x1000}}) r5 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) fallocate(r5, 0x3, 0x5, 0xffffffff) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup3(r6, r2, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000440)={@random="e33110495bfd", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x16, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @loopback, [{0x1}]}}}}}}, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd3, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 6.26659332s ago: executing program 1 (id=327): syz_open_dev$sg(0x0, 0x0, 0x1a3c82) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 6.108585625s ago: executing program 0 (id=328): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xe4b, 0x8, 0x8000, 0x1, 0x10, 0x1, 0xe}, 0x9c) sendto$inet6(r4, &(0x7f0000000080)='I', 0x1, 0xc0, &(0x7f0000000000)={0xa, 0x4e20, 0xd5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80a}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x10, 0x40, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x67, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2}}}}) r5 = socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) r6 = socket(0x1e, 0x4, 0x0) recvmmsg$unix(r6, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001bc0)=""/207, 0xcf}, {&(0x7f00000004c0)=""/90, 0x5a}, {&(0x7f0000001cc0)=""/187, 0xbb}], 0x3}}, {{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000001ec0)=""/194, 0xc2}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000000800)=""/135, 0x87}], 0x3}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000b40)=""/52, 0x34}, {&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000009c0)=""/143, 0x8f}, {&(0x7f0000005940)=""/4083, 0xff3}], 0x4}}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000000040)=""/26, 0x1a}, {&(0x7f00000002c0)=""/17, 0x11}, {&(0x7f00000008c0)=""/240, 0xf0}, {&(0x7f00000034c0)=""/110, 0x6e}], 0x4}}, {{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000003a80)=""/234, 0xea}, {0x0}, {&(0x7f0000000440)=""/75, 0x4b}, {&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f0000004fc0)=""/230, 0xe6}, {&(0x7f00000051c0)=""/181, 0xb5}, {&(0x7f0000005280)}], 0x7}}, {{0x0, 0x0, &(0x7f0000003f80)=[{0x0}], 0x1}}], 0x6, 0x400123a0, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_int(r5, 0x29, 0x46, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4048aecb, &(0x7f0000000240)={0x3, 0x0, [{0x3, 0x0, 0x0, 0x8, 0x200000, 0xfffffffd, 0x1}, {0x0, 0x6, 0x6, 0x0, 0x7}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x333, 0x4, 0x80000001, 0x8}]}) 6.106825225s ago: executing program 4 (id=329): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r1, 0xffffffffffffffff, 0x0) 6.023610057s ago: executing program 2 (id=330): socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0xd3, 0x8000d7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="340000002100010000000000000000000a000000000000"], 0x20}], 0x1}, 0x0) r3 = syz_ublk_setup_io_uring(0x6114, &(0x7f0000000180)={0x0, 0xde24, 0x20, 0x3, 0x319, 0x0, r0}, 0x0, &(0x7f0000000440), 0x0) io_uring_setup(0x1783, &(0x7f0000000500)={0x0, 0xa640, 0x800, 0x1, 0x3e3, 0x0, r3}) io_submit(0x0, 0x0, &(0x7f00000008c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001540)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000940)={'wlan1\x00'}) sendmsg$NL80211_CMD_VENDOR(r4, 0x0, 0x4000000) 4.610580342s ago: executing program 4 (id=331): signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xd]}, 0x8, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8085) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1000, 0x2bc}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = userfaultfd(0x80801) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'X\x00\b\x00'}}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="07000000010001", 0x7) open_tree(0xffffffffffffff9c, 0x0, 0x1902) 4.609567422s ago: executing program 2 (id=341): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_procfs(0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x8) sendmsg(r3, &(0x7f0000000340)={0x0, 0x5f, 0x0, 0x5e, 0x0, 0x0, 0x2c}, 0x48d5) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000600)=""/243, 0xf3}], 0x2}, 0x0) syz_open_dev$loop(&(0x7f00000002c0), 0x9d, 0x10d502) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') pread64(r0, &(0x7f0000000100)=""/253, 0xfffffd58, 0x8) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) socket$netlink(0x10, 0x3, 0x4) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x84) openat$zero(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.520693237s ago: executing program 0 (id=332): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f00000000c0)='attr/current\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 3.43393854s ago: executing program 4 (id=333): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 3.1329415s ago: executing program 0 (id=334): socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x3, 0x82040) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0x1) 2.610435626s ago: executing program 3 (id=335): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0xfd, 0xcdb9}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000008d00), 0x0) 2.572987548s ago: executing program 4 (id=336): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x22688e, &(0x7f0000000340)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@barrier}, {@data_err_ignore}, {@usrjquota}]}, 0x43, 0x468, &(0x7f0000000c00)="$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") syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = gettid() kcmp(r2, r1, 0x0, r0, r0) 2.463144371s ago: executing program 1 (id=337): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 1.217994251s ago: executing program 1 (id=338): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r3, 0x80, 0x7e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, 0x0}, 0x48043) socket$can_j1939(0x1d, 0x2, 0x7) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x4, &(0x7f00000000c0)=[{0x6, 0xff, 0x7, 0x1}, {0x9, 0x1, 0x1, 0x174}, {0x401, 0x80, 0x5, 0x3}, {0xcd9, 0x4, 0x7, 0x80000000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r6, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, 0x1410, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20001051}, 0x40040c0) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0xffff, 0x1, 0xaf25, 0x1000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd09000192ea797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f787900"], 0xcc}}, 0x0) fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) r8 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2002) ioctl$SG_BLKTRACESTART(r8, 0x1274, 0x0) socket(0x10, 0x80000, 0xf) 109.981336ms ago: executing program 0 (id=339): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2) 70.538097ms ago: executing program 1 (id=340): syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000004200), 0x0, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ace will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.256669][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.275732][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.282888][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.309645][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.333051][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.340061][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.367726][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.386866][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.393952][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.420435][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.441862][ T4296] Bluetooth: hci1: command 0x0409 tx timeout [ 84.442339][ T4284] Bluetooth: hci4: command 0x0409 tx timeout [ 84.448196][ T4296] Bluetooth: hci0: command 0x0409 tx timeout [ 84.454783][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 84.460379][ T4286] Bluetooth: hci3: command 0x0409 tx timeout [ 84.513430][ T4275] device hsr_slave_0 entered promiscuous mode [ 84.520221][ T4275] device hsr_slave_1 entered promiscuous mode [ 84.527405][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.535564][ T4275] Cannot create hsr debugfs directory [ 84.566124][ T4283] device hsr_slave_0 entered promiscuous mode [ 84.574281][ T4283] device hsr_slave_1 entered promiscuous mode [ 84.580983][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.588841][ T4283] Cannot create hsr debugfs directory [ 84.657378][ T4280] device hsr_slave_0 entered promiscuous mode [ 84.664771][ T4280] device hsr_slave_1 entered promiscuous mode [ 84.671709][ T4280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.679335][ T4280] Cannot create hsr debugfs directory [ 84.688482][ T4278] device hsr_slave_0 entered promiscuous mode [ 84.695381][ T4278] device hsr_slave_1 entered promiscuous mode [ 84.702371][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.709983][ T4278] Cannot create hsr debugfs directory [ 85.076030][ T4273] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.093051][ T4273] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.113508][ T4273] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.127715][ T4273] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.177556][ T4283] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.203780][ T4283] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.219186][ T4283] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.237607][ T4275] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.253533][ T4283] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.271400][ T4275] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.280672][ T4275] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.290856][ T4275] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.427973][ T4278] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.474521][ T4278] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.489575][ T4278] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.507743][ T4278] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.545771][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.577296][ T4280] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.606675][ T4280] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.627554][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.639928][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.654872][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.663072][ T4280] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.675741][ T4280] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.687644][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.719819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.730903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.740608][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.748054][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.761703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.774139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.785826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.810561][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.819977][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.839582][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.849273][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.858798][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.865998][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.874450][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.928861][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.939150][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.956233][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.963393][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.971334][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.980067][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.989260][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.996405][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.007159][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.016298][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.025255][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.035612][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.045313][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.054404][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.063622][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.072266][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.080726][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.089330][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.098243][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.106596][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.131133][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.148057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.160332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.169169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.187501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.197753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.223167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.232180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.242311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.260294][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.288157][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.308403][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.320824][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.336595][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.348228][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.360265][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.374718][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.386696][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.393908][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.409141][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.422849][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.457959][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.477382][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.518639][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.525874][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.533437][ T4296] Bluetooth: hci0: command 0x041b tx timeout [ 86.539597][ T4296] Bluetooth: hci3: command 0x041b tx timeout [ 86.551286][ T4286] Bluetooth: hci2: command 0x041b tx timeout [ 86.551311][ T4284] Bluetooth: hci4: command 0x041b tx timeout [ 86.557353][ T4286] Bluetooth: hci1: command 0x041b tx timeout [ 86.566402][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.592855][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.612706][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.620790][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.645603][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.660442][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.673453][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.684481][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.707037][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.733489][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.742979][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.754529][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.764084][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.776301][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.810040][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.858428][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.866750][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.897722][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.918194][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.942231][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.949396][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.981645][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.002410][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.010417][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.029342][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.038712][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.045932][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.138483][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.152528][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.182715][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.203303][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.210458][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.228318][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.237704][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.250217][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.266248][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.278205][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.286837][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.297128][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.307320][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.324186][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.331423][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.346094][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.356743][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.370702][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.380058][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.399772][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.472402][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.500231][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.532515][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.550102][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.559615][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.573791][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.585523][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.596794][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.609294][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.620783][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.649611][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.686767][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.699942][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.719257][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.735596][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.755885][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.767712][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.789245][ T4280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.808840][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.828325][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.852474][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.896465][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.943766][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.034655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.071784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.087229][ T4275] device veth0_vlan entered promiscuous mode [ 88.132780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.140717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.210287][ T4275] device veth1_vlan entered promiscuous mode [ 88.274135][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.301855][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.309414][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.395471][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.405631][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.447050][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.484300][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.534132][ T4275] device veth0_macvtap entered promiscuous mode [ 88.566161][ T4283] device veth0_vlan entered promiscuous mode [ 88.602279][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 88.604275][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 88.608358][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 88.615618][ T4296] Bluetooth: hci2: command 0x040f tx timeout [ 88.622285][ T4276] Bluetooth: hci0: command 0x040f tx timeout [ 88.638241][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.647417][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.669638][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.702826][ T4275] device veth1_macvtap entered promiscuous mode [ 88.717699][ T4283] device veth1_vlan entered promiscuous mode [ 88.755465][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.772263][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.780362][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.790473][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.819929][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.847477][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.859723][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.869109][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.878576][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.887851][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.906931][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.935528][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.945075][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.954044][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.962313][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.976057][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.985359][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.996138][ T4275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.006627][ T4275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.016881][ T4275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.025908][ T4275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.045395][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.072973][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.094146][ T4273] device veth0_vlan entered promiscuous mode [ 89.101533][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.110003][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.124728][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.134696][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.145119][ T4283] device veth0_macvtap entered promiscuous mode [ 89.156377][ T4283] device veth1_macvtap entered promiscuous mode [ 89.196793][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.207199][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.216487][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.226263][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.235072][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.244786][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.264265][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.275496][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.295186][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.310198][ T4273] device veth1_vlan entered promiscuous mode [ 89.342971][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.353254][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.375280][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.387007][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.400137][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.418959][ T4278] device veth0_vlan entered promiscuous mode [ 89.445473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.454900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.464381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.473825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.484461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.493581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.505138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.513695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.526694][ T4283] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.535694][ T4283] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.548807][ T4283] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.557771][ T4283] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.582632][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.590692][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.616103][ T4278] device veth1_vlan entered promiscuous mode [ 89.630716][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.644761][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.670682][ T4280] device veth0_vlan entered promiscuous mode [ 89.688144][ T4280] device veth1_vlan entered promiscuous mode [ 89.709159][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.719104][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.728820][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.737535][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.746864][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.764170][ T4273] device veth0_macvtap entered promiscuous mode [ 89.794589][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.805364][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.814657][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.824503][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.846050][ T4273] device veth1_macvtap entered promiscuous mode [ 89.855940][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.867772][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.912564][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.921002][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.933348][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.943068][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.955515][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.970619][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.988459][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.998937][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.009789][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.026326][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.046184][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.059150][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.073945][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.088998][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.102698][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.116628][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.127564][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.138719][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.147672][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.158381][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.167448][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.178354][ T4280] device veth0_macvtap entered promiscuous mode [ 90.189377][ T4278] device veth0_macvtap entered promiscuous mode [ 90.202340][ T4273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.211138][ T4273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.222727][ T4273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.231897][ T4273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.259358][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.292252][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.306400][ T4278] device veth1_macvtap entered promiscuous mode [ 90.319111][ T4280] device veth1_macvtap entered promiscuous mode [ 90.343054][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.350948][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.369478][ T4369] mmap: syz.2.3 (4369) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.401882][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.435332][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.446548][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.457009][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.467970][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.478890][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.489900][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.502712][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.521083][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.536687][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.547737][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.560796][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.570814][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.584484][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.596231][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.608336][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.620855][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.630889][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.642395][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.652346][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.663334][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.673786][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.683352][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 90.686137][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 90.690326][ T4294] Bluetooth: hci2: command 0x0419 tx timeout [ 90.696292][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 90.707851][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 90.712049][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.729287][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.742928][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.744533][ T4342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.753832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.768952][ T4342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.776415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.783266][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.793989][ T38] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.802546][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.814326][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.824936][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.848256][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.860946][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.873022][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.884977][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.894904][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.905532][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.915783][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.927148][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.939429][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.954067][ T4278] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.963690][ T4278] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.973507][ T4278] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.983024][ T4278] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.991783][ T38] usb 3-1: Using ep0 maxpacket: 32 [ 90.998962][ T38] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.018744][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.021593][ T38] usb 3-1: config 0 has no interfaces? [ 91.032713][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.047177][ T38] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 91.057559][ T38] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.067423][ T38] usb 3-1: Product: syz [ 91.072091][ T38] usb 3-1: Manufacturer: syz [ 91.077785][ T4280] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.086625][ T38] usb 3-1: SerialNumber: syz [ 91.099952][ T4280] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.106634][ T38] usb 3-1: config 0 descriptor?? [ 91.115089][ T4280] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.126950][ T4280] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.309044][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.324120][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.366550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.378000][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.396476][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.410580][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.459678][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.469587][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.499920][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.529640][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.539170][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.547756][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.558203][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.584702][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.592352][ T4329] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.600160][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.633136][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.645472][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.664199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.971720][ T4376] loop1: detected capacity change from 0 to 32768 [ 91.979416][ T4376] ======================================================= [ 91.979416][ T4376] WARNING: The mand mount option has been deprecated and [ 91.979416][ T4376] and is ignored by this kernel. Remove the mand [ 91.979416][ T4376] option from the mount to silence this warning. [ 91.979416][ T4376] ======================================================= [ 92.017511][ T4329] usb 4-1: Using ep0 maxpacket: 8 [ 92.023907][ T128] cfg80211: failed to load regulatory.db [ 92.036020][ T4329] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 92.045957][ T4329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.054100][ T4329] usb 4-1: Product: syz [ 92.058322][ T4329] usb 4-1: Manufacturer: syz [ 92.063056][ T4329] usb 4-1: SerialNumber: syz [ 92.105329][ T4376] JBD2: Ignoring recovery information on journal [ 92.160745][ T4376] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 92.842198][ T4329] usb 4-1: clock source 0 is not valid, cannot use [ 92.941194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 93.013573][ T4387] device syzkaller0 entered promiscuous mode [ 93.047190][ T4371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 93.052868][ T4385] loop0: detected capacity change from 0 to 2048 [ 93.087810][ T4385] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 93.117901][ T4371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 93.118025][ T4385] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.155927][ T4371] 8021q: VLANs not supported on gre0 [ 93.204740][ T4388] tipc: Enabling of bearer rejected, failed to enable media [ 93.260275][ T4371] netlink: 15292 bytes leftover after parsing attributes in process `syz.3.4'. [ 93.549281][ T4393] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7'. [ 93.564525][ T4329] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 93.584133][ T1172] usb 3-1: USB disconnect, device number 2 [ 93.595113][ T4329] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 93.605407][ T4393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7'. [ 93.634969][ T4395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7'. [ 93.636703][ T4329] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 93.660675][ T4329] usb 4-1: clock source 0 is not valid, cannot use [ 93.668853][ T4329] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 93.688635][ T4329] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 93.847748][ T4329] usb 4-1: USB disconnect, device number 2 [ 93.893671][ T4278] ocfs2: Unmounting device (7,1) on (node local) [ 93.945876][ T4402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 93.956897][ T4402] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11'. [ 94.179207][ T4405] udevd[4405]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.290123][ T4410] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.13'. [ 94.469771][ T4416] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.662291][ T4329] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 94.866235][ T4329] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 94.888617][ T4329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.916025][ T4329] usb 5-1: Product: syz [ 94.923355][ T4329] usb 5-1: Manufacturer: syz [ 94.934163][ T4329] usb 5-1: SerialNumber: syz [ 95.376243][ T4329] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 96.681357][ T1172] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.901257][ T1172] usb 1-1: Using ep0 maxpacket: 32 [ 96.908412][ T1172] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.965809][ T1172] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.008822][ T1172] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 97.043260][ T4507] device syzkaller0 entered promiscuous mode [ 97.050142][ T1172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.108205][ T1172] usb 1-1: config 0 descriptor?? [ 97.142568][ T1172] hub 1-1:0.0: USB hub found [ 97.160352][ T4507] tipc: Enabling of bearer rejected, failed to enable media [ 97.315581][ T4290] usb 5-1: USB disconnect, device number 2 [ 97.328278][ T1172] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 97.372078][ T4290] usblp0: removed [ 97.743746][ T1172] hid-generic 0003:046D:C31C.0001: unknown main item tag 0x0 [ 97.779778][ T4513] loop4: detected capacity change from 0 to 32768 [ 97.807976][ T4513] JBD2: Ignoring recovery information on journal [ 97.868642][ T4513] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 98.003110][ T1172] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 98.113730][ T1172] usb 1-1: USB disconnect, device number 2 [ 98.374215][ T4273] ocfs2: Unmounting device (7,4) on (node local) [ 98.550919][ T4527] fido_id[4527]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 98.571434][ T1172] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.598816][ T4532] blktrace: Concurrent blktraces are not allowed on sg0 [ 98.684331][ T4533] netlink: 16 bytes leftover after parsing attributes in process `syz.2.26'. [ 98.771264][ T1172] usb 1-1: Using ep0 maxpacket: 32 [ 98.783113][ T1172] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.861916][ T1172] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.913555][ T1172] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 98.965848][ T1172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.038479][ T1172] usb 1-1: config 0 descriptor?? [ 99.078721][ T1172] hub 1-1:0.0: USB hub found [ 99.266628][ T1172] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 99.287633][ T1172] usbhid 1-1:0.0: can't add hid device: -71 [ 99.298763][ T1172] usbhid: probe of 1-1:0.0 failed with error -71 [ 99.342147][ T1172] usb 1-1: USB disconnect, device number 3 [ 99.361785][ T4290] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 99.483705][ T4328] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 99.561101][ T4290] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 99.578581][ T4290] usb 3-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 99.589441][ T4290] usb 3-1: config 53 has no interfaces? [ 99.598576][ T4290] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 99.620079][ T4290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.678075][ T4328] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 99.713595][ T4328] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.737935][ T4328] usb 4-1: config 0 has no interfaces? [ 99.748613][ T4328] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 99.759668][ T4328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.784957][ T4328] usb 4-1: config 0 descriptor?? [ 100.059378][ T4332] usb 4-1: USB disconnect, device number 3 [ 100.187063][ T4549] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.31'. [ 100.211969][ T38] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.401234][ T38] usb 2-1: Using ep0 maxpacket: 16 [ 100.418353][ T38] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 100.439458][ T38] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.459333][ T38] usb 2-1: Product: syz [ 100.466861][ T38] usb 2-1: Manufacturer: syz [ 100.477965][ T38] usb 2-1: SerialNumber: syz [ 100.490346][ T38] usb 2-1: config 0 descriptor?? [ 100.509631][ T38] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 100.518491][ T4329] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 100.735264][ T4329] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 100.764190][ T4329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.803766][ T4552] capability: warning: `syz.3.32' uses 32-bit capabilities (legacy support in use) [ 100.839241][ T4329] usb 1-1: Product: syz [ 100.892541][ T4329] usb 1-1: Manufacturer: syz [ 100.920290][ T4329] usb 1-1: SerialNumber: syz [ 101.381526][ T4329] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 101.528571][ T38] ssu100: probe of 2-1:0.0 failed with error -32 [ 101.892362][ T4290] usb 3-1: string descriptor 0 read error: -71 [ 101.925286][ T4290] usb 3-1: USB disconnect, device number 3 [ 101.999853][ T4559] netlink: 68 bytes leftover after parsing attributes in process `syz.4.34'. [ 102.012161][ T4559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.34'. [ 102.903924][ T4559] netlink: 20 bytes leftover after parsing attributes in process `syz.4.34'. [ 102.979856][ T4329] usb 2-1: USB disconnect, device number 2 [ 103.217802][ T38] usb 1-1: USB disconnect, device number 4 [ 103.248816][ T38] usblp0: removed [ 104.367853][ T4585] kvm: pic: non byte write [ 104.581482][ T38] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 104.773570][ T38] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 104.790474][ T38] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.815554][ T38] usb 3-1: config 0 has no interfaces? [ 104.821103][ T38] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 104.849901][ T38] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.873147][ T38] usb 3-1: config 0 descriptor?? [ 105.021449][ T4328] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.086992][ T4290] usb 3-1: USB disconnect, device number 4 [ 105.211331][ T4328] usb 4-1: Using ep0 maxpacket: 32 [ 105.223605][ T4328] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 105.232999][ T4328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.241036][ T4328] usb 4-1: Product: syz [ 105.246106][ T38] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 105.255711][ T4328] usb 4-1: Manufacturer: syz [ 105.260384][ T4328] usb 4-1: SerialNumber: syz [ 105.268278][ T4328] usb 4-1: config 0 descriptor?? [ 105.441322][ T38] usb 5-1: Using ep0 maxpacket: 16 [ 105.454151][ T38] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 105.463470][ T38] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.474890][ T38] usb 5-1: Product: syz [ 105.479255][ T38] usb 5-1: Manufacturer: syz [ 105.486238][ T38] usb 5-1: SerialNumber: syz [ 105.499061][ T38] usb 5-1: config 0 descriptor?? [ 105.507870][ T38] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 105.700698][ T4328] airspy 4-1:0.0: Board ID: 00 [ 105.710117][ T4605] netlink: 68 bytes leftover after parsing attributes in process `syz.2.49'. [ 105.719539][ T4605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.49'. [ 105.727194][ T4328] airspy 4-1:0.0: Firmware version: [ 105.734027][ T4605] netlink: 20 bytes leftover after parsing attributes in process `syz.2.49'. [ 105.893620][ T4328] airspy 4-1:0.0: usb_control_msg() failed -32 request 11 [ 105.919155][ T4328] airspy 4-1:0.0: Registered as swradio24 [ 105.933915][ T4328] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 106.531740][ T38] ssu100: probe of 5-1:0.0 failed with error -32 [ 107.757950][ T4328] usb 4-1: USB disconnect, device number 4 [ 108.076013][ T1172] usb 5-1: USB disconnect, device number 3 [ 108.195886][ T4636] blktrace: Concurrent blktraces are not allowed on sg0 [ 108.204466][ T4636] relay: one or more items not logged [item size (48) > sub-buffer size (1)] [ 108.344632][ T4639] device syzkaller0 entered promiscuous mode [ 108.432797][ T4640] Zero length message leads to an empty skb [ 108.723332][ T4647] netlink: 80 bytes leftover after parsing attributes in process `syz.2.61'. [ 108.931874][ T38] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 109.124011][ T38] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 109.141252][ T38] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.163782][ T38] usb 5-1: config 0 has no interfaces? [ 109.169345][ T38] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 109.219516][ T38] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.247596][ T38] usb 5-1: config 0 descriptor?? [ 109.464596][ T1172] usb 5-1: USB disconnect, device number 4 [ 109.688655][ T4673] process 'syz.0.69' launched './file0' with NULL argv: empty string added [ 109.870733][ T4676] device syzkaller0 entered promiscuous mode [ 110.161315][ T4328] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 110.327584][ T4683] netlink: 80 bytes leftover after parsing attributes in process `syz.4.73'. [ 110.373958][ T4328] usb 1-1: config 0 has an invalid interface number: 205 but max is 0 [ 110.391939][ T4328] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.458262][ T4328] usb 1-1: config 0 has no interface number 0 [ 110.530458][ T4328] usb 1-1: config 0 interface 205 has no altsetting 0 [ 110.587527][ T4328] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 110.610663][ T4328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.636837][ T4328] usb 1-1: Product: syz [ 110.655982][ T4328] usb 1-1: Manufacturer: syz [ 110.660669][ T4328] usb 1-1: SerialNumber: syz [ 110.698822][ T4328] usb 1-1: config 0 descriptor?? [ 110.717103][ T4328] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 110.743458][ T4328] dvb-usb: bulk message failed: -22 (3/0) [ 110.790534][ T4328] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 110.813253][ T4328] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 110.826220][ T4328] usb 1-1: media controller created [ 110.834783][ T4328] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.846536][ T4696] netlink: 16 bytes leftover after parsing attributes in process `syz.4.77'. [ 110.874850][ T4328] dvb-usb: bulk message failed: -22 (6/0) [ 110.889455][ T4328] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 110.930773][ T4328] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 110.950051][ T4673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.975154][ T4328] dvb-usb: schedule remote query interval to 150 msecs. [ 110.990976][ T4328] dvb-usb: bulk message failed: -22 (3/0) [ 110.993120][ T4673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.061542][ T4328] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 111.177495][ T4328] dvb-usb: bulk message failed: -22 (1/0) [ 111.212829][ T4328] dvb-usb: error while querying for an remote control event. [ 111.311677][ T1172] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 111.402349][ T38] dvb-usb: bulk message failed: -22 (1/0) [ 111.408385][ T38] dvb-usb: error while querying for an remote control event. [ 111.520366][ T1172] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 111.535060][ T1172] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.566071][ T1172] usb 5-1: config 0 has no interfaces? [ 111.581314][ T38] dvb-usb: bulk message failed: -22 (1/0) [ 111.589720][ T38] dvb-usb: error while querying for an remote control event. [ 111.607490][ T1172] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 111.641215][ T1172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.686653][ T1172] usb 5-1: config 0 descriptor?? [ 111.791224][ T4328] dvb-usb: bulk message failed: -22 (1/0) [ 111.797130][ T4328] dvb-usb: error while querying for an remote control event. [ 112.021286][ T4328] dvb-usb: bulk message failed: -22 (1/0) [ 112.027327][ T4328] dvb-usb: error while querying for an remote control event. [ 112.221502][ T4328] dvb-usb: bulk message failed: -22 (1/0) [ 112.228619][ T4328] dvb-usb: error while querying for an remote control event. [ 112.411275][ T4328] dvb-usb: bulk message failed: -22 (1/0) [ 112.420841][ T4328] dvb-usb: error while querying for an remote control event. [ 112.581466][ T4328] dvb-usb: bulk message failed: -22 (1/0) [ 112.587796][ T4328] dvb-usb: error while querying for an remote control event. [ 112.651325][ T4332] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.751236][ T4328] dvb-usb: bulk message failed: -22 (1/0) [ 112.760581][ T4328] dvb-usb: error while querying for an remote control event. [ 112.841669][ T4332] usb 2-1: Using ep0 maxpacket: 32 [ 112.866389][ T4332] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 112.886800][ T4332] usb 2-1: config 0 has no interface number 0 [ 112.893255][ T4332] usb 2-1: config 0 interface 12 has no altsetting 0 [ 112.929478][ T4332] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 112.965324][ T4332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.981365][ T4328] dvb-usb: bulk message failed: -22 (1/0) [ 112.991484][ T4328] dvb-usb: error while querying for an remote control event. [ 112.999870][ T4332] usb 2-1: Product: syz [ 113.020347][ T4332] usb 2-1: Manufacturer: syz [ 113.035734][ T4332] usb 2-1: SerialNumber: syz [ 113.078348][ T4332] usb 2-1: config 0 descriptor?? [ 113.211209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 113.221227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 113.231208][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 113.241197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 113.251212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 113.261203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 113.271208][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 113.281200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 113.291192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 113.374932][ T4328] dvb-usb: bulk message failed: -22 (1/0) [ 113.380796][ T4328] dvb-usb: error while querying for an remote control event. [ 113.541283][ T4325] dvb-usb: bulk message failed: -22 (1/0) [ 113.547287][ T4325] dvb-usb: error while querying for an remote control event. [ 113.791290][ T4325] dvb-usb: bulk message failed: -22 (1/0) [ 113.797280][ T4325] dvb-usb: error while querying for an remote control event. [ 114.051907][ T4325] dvb-usb: bulk message failed: -22 (1/0) [ 114.058226][ T4325] dvb-usb: error while querying for an remote control event. [ 114.254097][ T4325] dvb-usb: bulk message failed: -22 (1/0) [ 114.260654][ T4325] dvb-usb: error while querying for an remote control event. [ 114.441609][ T4325] dvb-usb: bulk message failed: -22 (1/0) [ 114.447432][ T4325] dvb-usb: error while querying for an remote control event. [ 114.701291][ T4325] usb 1-1: USB disconnect, device number 5 [ 114.872762][ T4325] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 114.895051][ T4332] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 114.938258][ T4332] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 114.993653][ T4332] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 115.038403][ T4332] f81534: probe of 2-1:0.12 failed with error -71 [ 115.090269][ T4332] usb 2-1: USB disconnect, device number 3 [ 115.445650][ T1172] usb 5-1: string descriptor 0 read error: -71 [ 115.473570][ T1172] usb 5-1: USB disconnect, device number 5 [ 115.826178][ T4742] device syzkaller0 entered promiscuous mode [ 116.063567][ T4742] tipc: Enabling of bearer rejected, failed to enable media [ 116.733515][ T4758] blktrace: Concurrent blktraces are not allowed on sg0 [ 118.454900][ T4332] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 118.673385][ T4332] usb 2-1: config 0 has an invalid interface number: 205 but max is 0 [ 118.687454][ T4332] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.731317][ T4332] usb 2-1: config 0 has no interface number 0 [ 118.796041][ T4332] usb 2-1: config 0 interface 205 has no altsetting 0 [ 118.882378][ T4332] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 118.945711][ T4332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.010866][ T4332] usb 2-1: Product: syz [ 119.015731][ T4332] usb 2-1: Manufacturer: syz [ 119.059557][ T4332] usb 2-1: SerialNumber: syz [ 119.086845][ T4332] usb 2-1: config 0 descriptor?? [ 119.131489][ T4332] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 119.193487][ T4332] dvb-usb: bulk message failed: -22 (3/0) [ 119.257896][ T4332] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 119.298055][ T4332] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 119.319042][ T4806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.331650][ T4806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.395625][ T4332] usb 2-1: media controller created [ 119.461224][ T4332] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.531800][ T4332] dvb-usb: bulk message failed: -22 (6/0) [ 119.560544][ T4332] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 119.634508][ T4332] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 119.672740][ T4332] dvb-usb: schedule remote query interval to 150 msecs. [ 119.679926][ T4332] dvb-usb: bulk message failed: -22 (3/0) [ 119.721462][ T4332] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 119.841357][ T4332] dvb-usb: bulk message failed: -22 (1/0) [ 119.851514][ T4332] dvb-usb: error while querying for an remote control event. [ 120.024955][ T4290] dvb-usb: bulk message failed: -22 (1/0) [ 120.030774][ T4290] dvb-usb: error while querying for an remote control event. [ 120.205658][ T4834] netlink: 16 bytes leftover after parsing attributes in process `syz.2.99'. [ 120.224903][ T4290] dvb-usb: bulk message failed: -22 (1/0) [ 120.230674][ T4290] dvb-usb: error while querying for an remote control event. [ 120.411462][ T4290] dvb-usb: bulk message failed: -22 (1/0) [ 120.417417][ T4290] dvb-usb: error while querying for an remote control event. [ 120.476274][ T4290] usb 2-1: USB disconnect, device number 4 [ 120.561451][ T38] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 120.589642][ T4290] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 120.826711][ T38] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 120.846991][ T38] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.906842][ T4836] netlink: 68 bytes leftover after parsing attributes in process `syz.1.100'. [ 120.929152][ T38] usb 3-1: config 0 has no interfaces? [ 120.971761][ T4836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.100'. [ 121.788090][ T38] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 121.855017][ T4837] netlink: 20 bytes leftover after parsing attributes in process `syz.1.100'. [ 121.878227][ T38] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.976339][ T38] usb 3-1: config 0 descriptor?? [ 122.271486][ T4365] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 122.297100][ T4849] device syzkaller0 entered promiscuous mode [ 122.460931][ T4849] tipc: Enabling of bearer rejected, failed to enable media [ 122.472077][ T4365] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 122.498196][ T4365] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.547566][ T4365] usb 5-1: config 0 has no interfaces? [ 122.570204][ T4365] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 122.610517][ T4365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.683467][ T4365] usb 5-1: config 0 descriptor?? [ 122.905140][ T4290] usb 5-1: USB disconnect, device number 6 [ 123.205355][ T4861] netlink: 80 bytes leftover after parsing attributes in process `syz.0.106'. [ 123.603873][ T4868] device syzkaller0 entered promiscuous mode [ 124.369115][ T4878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.111'. [ 124.774492][ T38] usb 3-1: string descriptor 0 read error: -71 [ 124.865090][ T38] usb 3-1: USB disconnect, device number 5 [ 125.401052][ T4894] loop4: detected capacity change from 0 to 512 [ 125.424939][ T4328] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 125.604653][ T4894] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 125.642647][ T4894] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.677875][ T4328] usb 1-1: config 0 has an invalid interface number: 205 but max is 0 [ 125.703407][ T4901] blktrace: Concurrent blktraces are not allowed on sg0 [ 125.721278][ T4328] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.845878][ T4328] usb 1-1: config 0 has no interface number 0 [ 125.931953][ T4290] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 125.989392][ T4328] usb 1-1: config 0 interface 205 has no altsetting 0 [ 126.008581][ T4905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.118'. [ 126.046568][ T4332] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 126.078736][ T4328] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 126.160914][ T4290] usb 2-1: unable to get BOS descriptor or descriptor too short [ 126.191611][ T4328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.217886][ T4290] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 126.233145][ T4328] usb 1-1: Product: syz [ 126.237984][ T4328] usb 1-1: Manufacturer: syz [ 126.244837][ T4332] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.279846][ T4328] usb 1-1: SerialNumber: syz [ 126.298109][ T4332] usb 5-1: config 0 has no interfaces? [ 126.321809][ T4328] usb 1-1: config 0 descriptor?? [ 126.331330][ T4290] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 126.368379][ T4332] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 126.380878][ T4328] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 126.406458][ T4332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.421325][ T4290] usb 2-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 126.430710][ T4328] dvb-usb: bulk message failed: -22 (3/0) [ 126.462817][ T4328] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 126.490197][ T4328] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 126.525400][ T4290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.539798][ T4332] usb 5-1: config 0 descriptor?? [ 126.557747][ T4290] usb 2-1: Product: syz [ 126.568743][ T4290] usb 2-1: Manufacturer: syz [ 126.577683][ T4879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.589823][ T4290] usb 2-1: SerialNumber: syz [ 126.591474][ T4325] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 126.611587][ T4328] usb 1-1: media controller created [ 126.639498][ T4328] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.652261][ T4879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.760290][ T4367] usb 5-1: USB disconnect, device number 7 [ 126.813375][ T4325] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 126.849961][ T4325] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.881547][ T4328] dvb-usb: bulk message failed: -22 (6/0) [ 126.921784][ T4328] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 126.933525][ T4325] usb 3-1: config 0 has no interfaces? [ 126.971402][ T4325] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 127.021746][ T4328] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 127.039224][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.121375][ T4325] usb 3-1: config 0 descriptor?? [ 127.126942][ T4328] dvb-usb: schedule remote query interval to 150 msecs. [ 127.216761][ T4328] dvb-usb: bulk message failed: -22 (3/0) [ 127.331438][ T4328] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 127.372568][ T4328] dvb-usb: bulk message failed: -22 (1/0) [ 127.402534][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 127.417745][ T4328] dvb-usb: error while querying for an remote control event. [ 127.441991][ T4328] usb 3-1: USB disconnect, device number 6 [ 127.591464][ T4325] dvb-usb: bulk message failed: -22 (1/0) [ 127.597677][ T4325] dvb-usb: error while querying for an remote control event. [ 127.624515][ T4911] device syzkaller0 entered promiscuous mode [ 127.771258][ T4328] dvb-usb: bulk message failed: -22 (1/0) [ 127.799023][ T4328] dvb-usb: error while querying for an remote control event. [ 128.031458][ T4328] dvb-usb: bulk message failed: -22 (1/0) [ 128.037478][ T4328] dvb-usb: error while querying for an remote control event. [ 128.233426][ T4328] dvb-usb: bulk message failed: -22 (1/0) [ 128.273235][ T4328] dvb-usb: error while querying for an remote control event. [ 128.590371][ T4921] loop3: detected capacity change from 0 to 32768 [ 128.627203][ T4921] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.123 (4921) [ 128.642301][ T38] dvb-usb: bulk message failed: -22 (1/0) [ 128.648115][ T38] dvb-usb: error while querying for an remote control event. [ 128.668378][ T4921] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 128.679323][ T4921] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 128.688134][ T4921] BTRFS info (device loop3): enabling disk space caching [ 128.695973][ T4921] BTRFS info (device loop3): force clearing of disk cache [ 128.703327][ T4921] BTRFS info (device loop3): turning off barriers [ 128.709808][ T4921] BTRFS info (device loop3): enabling ssd optimizations [ 128.716911][ T4921] BTRFS info (device loop3): disabling disk space caching [ 128.724162][ T4921] BTRFS info (device loop3): not using ssd optimizations [ 128.811375][ T38] dvb-usb: bulk message failed: -22 (1/0) [ 128.818929][ T38] dvb-usb: error while querying for an remote control event. [ 128.965207][ T9] BTRFS warning (device loop3): checksum verify failed on logical 5267456 mirror 1 wanted 0xb8512a1d2916df35de1eb979e5409d57680a9623aa14e80f6c4e3536403d44d6 found 0x07d290f0ee7cd095decd24b6acaa757b1ed5185e7875d78e22d4c52a0a45cfa1 level 0 [ 128.992085][ T38] dvb-usb: bulk message failed: -22 (1/0) [ 129.001395][ T38] dvb-usb: error while querying for an remote control event. [ 129.080882][ T4921] BTRFS warning (device loop3): failed to read fs tree: -5 [ 129.136803][ T4921] BTRFS error (device loop3): open_ctree failed: -5 [ 129.211397][ T4939] netlink: 16 bytes leftover after parsing attributes in process `syz.4.124'. [ 129.653451][ T4951] dvb-usb: bulk message failed: -22 (1/0) [ 129.661107][ T4951] dvb-usb: error while querying for an remote control event. [ 129.781408][ T4367] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 129.818621][ T4366] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by udevd (4366) [ 129.851299][ T4952] dvb-usb: bulk message failed: -22 (1/0) [ 129.861532][ T4365] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 129.891270][ T4952] dvb-usb: error while querying for an remote control event. [ 130.023351][ T4367] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 130.043053][ T4367] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.055226][ T4365] usb 3-1: config 230 has an invalid interface number: 217 but max is 0 [ 130.061697][ T4952] dvb-usb: bulk message failed: -22 (1/0) [ 130.069462][ T4952] dvb-usb: error while querying for an remote control event. [ 130.084948][ T4365] usb 3-1: config 230 has an invalid interface number: 236 but max is 0 [ 130.135066][ T4367] usb 5-1: config 0 has no interfaces? [ 130.155375][ T4365] usb 3-1: config 230 has 2 interfaces, different from the descriptor's value: 1 [ 130.185158][ T4367] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 130.229935][ T4365] usb 3-1: config 230 has no interface number 0 [ 130.251314][ T4367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.293688][ T4365] usb 3-1: config 230 has no interface number 1 [ 130.301494][ T4952] dvb-usb: bulk message failed: -22 (1/0) [ 130.307300][ T4952] dvb-usb: error while querying for an remote control event. [ 130.322000][ T4290] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 130.375056][ T4367] usb 5-1: config 0 descriptor?? [ 130.383361][ T4365] usb 3-1: config 230 interface 217 altsetting 201 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.390186][ T4949] usb 1-1: USB disconnect, device number 6 [ 130.469393][ T4290] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 130.481261][ T4365] usb 3-1: too many endpoints for config 230 interface 236 altsetting 175: 162, using maximum allowed: 30 [ 130.507950][ T4949] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 130.564353][ T4290] usb 2-1: USB disconnect, device number 5 [ 130.587669][ T4365] usb 3-1: config 230 interface 236 altsetting 175 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 130.655349][ T4403] udevd[4403]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.674551][ T4365] usb 3-1: config 230 interface 236 altsetting 175 has 1 endpoint descriptor, different from the interface descriptor's value: 162 [ 130.709618][ T4365] usb 3-1: config 230 interface 217 has no altsetting 0 [ 130.750525][ T4365] usb 3-1: config 230 interface 236 has no altsetting 0 [ 130.788379][ T4365] usb 3-1: New USB device found, idVendor=10b8, idProduct=1f9c, bcdDevice=6c.4c [ 130.812529][ T4365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.831080][ T4365] usb 3-1: Product: syz [ 130.852870][ T4365] usb 3-1: Manufacturer: syz [ 130.858717][ T4365] usb 3-1: SerialNumber: syz [ 131.041284][ T4290] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 131.101308][ T4949] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 131.231254][ T4290] usb 2-1: Using ep0 maxpacket: 32 [ 131.241324][ T4290] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 131.289457][ T4290] usb 2-1: config 0 has no interface number 0 [ 131.319465][ T4949] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 131.336734][ T4949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.355989][ T4290] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 131.381924][ T4949] usb 1-1: Product: syz [ 131.390821][ T4949] usb 1-1: Manufacturer: syz [ 131.404627][ T4290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.427904][ T4949] usb 1-1: SerialNumber: syz [ 131.475059][ T4290] usb 2-1: Product: syz [ 131.523609][ T4290] usb 2-1: Manufacturer: syz [ 131.559621][ T4290] usb 2-1: SerialNumber: syz [ 131.616913][ T4290] usb 2-1: config 0 descriptor?? [ 131.690829][ T4290] smsc95xx v2.0.0 [ 131.863571][ T4949] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 131.897634][ T4955] netlink: 'syz.1.126': attribute type 3 has an invalid length. [ 131.923191][ T4955] netlink: 46 bytes leftover after parsing attributes in process `syz.1.126'. [ 132.099501][ T4365] dvb-usb: found a 'DiBcom TFE8096P reference design' in cold state, will try to load a firmware [ 132.239578][ T4290] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 132.285399][ T4365] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 132.329550][ T4290] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 132.371369][ T4365] dib0700: firmware download failed at 7 with -8 [ 132.409008][ T4365] dvb-usb: found a 'DiBcom TFE8096P reference design' in cold state, will try to load a firmware [ 132.432716][ T4365] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 132.460038][ T4365] dib0700: firmware download failed at 7 with -8 [ 132.497398][ T4365] usb 3-1: USB disconnect, device number 7 [ 132.579945][ T4290] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 132.616256][ T4290] smsc95xx: probe of 2-1:0.67 failed with error -32 [ 132.740653][ T4968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.129'. [ 132.804158][ T4367] usb 5-1: string descriptor 0 read error: -71 [ 132.827927][ T4367] usb 5-1: USB disconnect, device number 8 [ 132.846029][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.852872][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.116179][ T4975] netlink: 68 bytes leftover after parsing attributes in process `syz.2.130'. [ 133.154814][ T4975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.130'. [ 133.171666][ T4978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.130'. [ 133.193268][ T4977] device syzkaller0 entered promiscuous mode [ 133.709139][ T4951] usb 1-1: USB disconnect, device number 7 [ 133.719528][ T4367] usb 2-1: USB disconnect, device number 6 [ 133.752450][ T4951] usblp0: removed [ 133.978587][ T4991] loop0: detected capacity change from 0 to 164 [ 135.044783][ T5000] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 136.531245][ T4365] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 136.912374][ T4365] usb 1-1: unable to get BOS descriptor or descriptor too short [ 136.941900][ T4365] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 137.001459][ T4365] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 137.092402][ T4365] usb 1-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 137.113034][ T4365] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.161494][ T4365] usb 1-1: Product: syz [ 137.223472][ T4365] usb 1-1: Manufacturer: syz [ 137.264993][ T4365] usb 1-1: SerialNumber: syz [ 137.351402][ T4949] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 137.614290][ T4949] usb 5-1: config 230 has an invalid interface number: 217 but max is 0 [ 137.673599][ T4949] usb 5-1: config 230 has an invalid interface number: 236 but max is 0 [ 137.746960][ T4949] usb 5-1: config 230 has 2 interfaces, different from the descriptor's value: 1 [ 137.831234][ T4949] usb 5-1: config 230 has no interface number 0 [ 137.881033][ T4949] usb 5-1: config 230 has no interface number 1 [ 137.910940][ T4949] usb 5-1: config 230 interface 217 altsetting 201 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.987525][ T4949] usb 5-1: too many endpoints for config 230 interface 236 altsetting 175: 162, using maximum allowed: 30 [ 138.065116][ T4949] usb 5-1: config 230 interface 236 altsetting 175 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 138.092948][ T4949] usb 5-1: config 230 interface 236 altsetting 175 has 1 endpoint descriptor, different from the interface descriptor's value: 162 [ 139.011233][ T4949] usb 5-1: config 230 interface 217 has no altsetting 0 [ 139.018490][ T4949] usb 5-1: config 230 interface 236 has no altsetting 0 [ 139.029540][ T4949] usb 5-1: New USB device found, idVendor=10b8, idProduct=1f9c, bcdDevice=6c.4c [ 139.039810][ T4949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.048297][ T4949] usb 5-1: Product: syz [ 139.052933][ T4949] usb 5-1: Manufacturer: syz [ 139.057639][ T4949] usb 5-1: SerialNumber: syz [ 139.759099][ T5026] netlink: 80 bytes leftover after parsing attributes in process `syz.3.143'. [ 140.070628][ T5030] netlink: 68 bytes leftover after parsing attributes in process `syz.1.144'. [ 140.119819][ T5030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.144'. [ 140.184659][ T5030] netlink: 20 bytes leftover after parsing attributes in process `syz.1.144'. [ 140.511496][ T5033] device syzkaller0 entered promiscuous mode [ 140.585607][ T4949] dvb-usb: found a 'DiBcom TFE8096P reference design' in cold state, will try to load a firmware [ 140.608108][ T4949] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 140.619140][ T4949] dib0700: firmware download failed at 7 with -8 [ 140.696443][ T4949] dvb-usb: found a 'DiBcom TFE8096P reference design' in cold state, will try to load a firmware [ 140.779300][ T4949] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 140.859646][ T4949] dib0700: firmware download failed at 7 with -8 [ 140.951233][ T4949] usb 5-1: USB disconnect, device number 9 [ 141.491469][ T4949] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 141.800340][ T4365] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 141.834944][ T4949] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 141.874829][ T4365] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 141.887045][ T4949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.925806][ T4949] usb 5-1: Product: syz [ 141.948383][ T4365] usb 1-1: USB disconnect, device number 8 [ 141.954359][ T4949] usb 5-1: Manufacturer: syz [ 141.959134][ T4949] usb 5-1: SerialNumber: syz [ 141.967104][ T5046] device syzkaller0 entered promiscuous mode [ 142.233394][ T4403] udevd[4403]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.430922][ T4949] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 142.735830][ T5060] program syz.3.154 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.870984][ T5066] netlink: 80 bytes leftover after parsing attributes in process `syz.2.156'. [ 142.881276][ T4365] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 143.101266][ T4365] usb 2-1: Using ep0 maxpacket: 32 [ 143.108554][ T4365] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.278382][ T4365] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.301312][ T4365] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 143.310938][ T4365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.333183][ T4365] usb 2-1: config 0 descriptor?? [ 143.344269][ T4365] hub 2-1:0.0: USB hub found [ 143.909113][ T4365] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 143.971374][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 144.144957][ T4367] usb 5-1: USB disconnect, device number 10 [ 144.171407][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 144.178015][ T4367] usblp0: removed [ 144.183184][ T7] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 144.268702][ T7] usb 3-1: config 0 has no interface number 0 [ 144.295402][ T7] usb 3-1: config 0 interface 12 has no altsetting 0 [ 144.327394][ T4365] hid-generic 0003:046D:C31C.0002: unknown main item tag 0x0 [ 144.339688][ T7] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 144.382744][ T4365] hid-generic 0003:046D:C31C.0002: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 144.394669][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.420917][ T7] usb 3-1: Product: syz [ 144.458876][ T7] usb 3-1: Manufacturer: syz [ 144.510012][ T7] usb 3-1: SerialNumber: syz [ 144.576520][ T5082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.585470][ T7] usb 3-1: config 0 descriptor?? [ 144.681849][ T5082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.003641][ T4951] usb 2-1: USB disconnect, device number 7 [ 145.348580][ T5086] device syzkaller0 entered promiscuous mode [ 146.591703][ T5097] device syzkaller0 entered promiscuous mode [ 146.691267][ T4949] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 146.816970][ T7] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 146.828119][ T7] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 146.851244][ T7] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 146.885611][ T7] f81534: probe of 3-1:0.12 failed with error -71 [ 146.918540][ T4949] usb 2-1: unable to get BOS descriptor or descriptor too short [ 146.990311][ T7] usb 3-1: USB disconnect, device number 8 [ 147.003601][ T4949] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 147.162388][ T4949] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 147.206502][ T4949] usb 2-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 147.271384][ T4949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.293778][ T4949] usb 2-1: Product: syz [ 147.298024][ T4949] usb 2-1: Manufacturer: syz [ 147.314371][ T4949] usb 2-1: SerialNumber: syz [ 147.517263][ T5103] netlink: 16 bytes leftover after parsing attributes in process `syz.4.165'. [ 148.432860][ T5115] blktrace: Concurrent blktraces are not allowed on sg0 [ 148.532350][ T4951] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 149.305025][ T4951] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 149.334413][ T4951] usb 5-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 149.408390][ T4951] usb 5-1: config 53 has no interfaces? [ 149.431102][ T4951] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 149.521676][ T4951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.341077][ T4949] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 151.457460][ T4949] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 151.554057][ T4949] usb 2-1: USB disconnect, device number 8 [ 151.609201][ T4403] udevd[4403]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.001296][ T4949] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 152.201295][ T4949] usb 2-1: Using ep0 maxpacket: 32 [ 152.208947][ T4949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.244432][ T4949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.300842][ T4949] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 153.090657][ T4949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.137265][ T4949] usb 2-1: config 0 descriptor?? [ 153.213540][ T4949] hub 2-1:0.0: USB hub found [ 153.297072][ T4951] usb 5-1: string descriptor 0 read error: -71 [ 153.315352][ T4951] usb 5-1: USB disconnect, device number 11 [ 153.431535][ T4949] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 153.507719][ T5136] netlink: 68 bytes leftover after parsing attributes in process `syz.4.175'. [ 153.598566][ T5136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.175'. [ 153.636617][ T5138] device syzkaller0 entered promiscuous mode [ 153.662805][ T5136] netlink: 20 bytes leftover after parsing attributes in process `syz.4.175'. [ 153.834844][ T4949] hid-generic 0003:046D:C31C.0003: unknown main item tag 0x0 [ 153.885523][ T4949] hid-generic 0003:046D:C31C.0003: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 154.102120][ T5146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.147885][ T5146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.406884][ T4367] usb 2-1: USB disconnect, device number 9 [ 154.442772][ T4949] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 154.583008][ T5149] 9pnet_fd: Insufficient options for proto=fd [ 154.641263][ T4949] usb 5-1: Using ep0 maxpacket: 32 [ 154.650671][ T4949] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 154.680021][ T4949] usb 5-1: config 0 has no interface number 0 [ 154.696621][ T4949] usb 5-1: config 0 interface 12 has no altsetting 0 [ 154.722834][ T4949] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 154.751188][ T4949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.759448][ T4949] usb 5-1: Product: syz [ 154.781353][ T4949] usb 5-1: Manufacturer: syz [ 154.786048][ T4949] usb 5-1: SerialNumber: syz [ 154.819400][ T4949] usb 5-1: config 0 descriptor?? [ 155.271237][ T4367] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 155.479092][ T5168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.185'. [ 155.494735][ T4367] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 155.511214][ T4367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.529724][ T4367] usb 1-1: Product: syz [ 155.550052][ T4367] usb 1-1: Manufacturer: syz [ 155.560191][ T4367] usb 1-1: SerialNumber: syz [ 155.995991][ T4367] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 156.011282][ T4951] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 156.213137][ T4951] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 156.268970][ T4951] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.289630][ T4951] usb 2-1: config 0 has no interfaces? [ 156.299746][ T4951] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 156.330187][ T4951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.393200][ T4951] usb 2-1: config 0 descriptor?? [ 157.078852][ T4949] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 157.098137][ T4949] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 157.144086][ T4949] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 157.179054][ T4949] f81534: probe of 5-1:0.12 failed with error -71 [ 157.227603][ T4949] usb 5-1: USB disconnect, device number 12 [ 157.868023][ T5187] device syzkaller0 entered promiscuous mode [ 158.101382][ T4365] usb 1-1: USB disconnect, device number 9 [ 158.126271][ T4365] usblp0: removed [ 158.410555][ T5195] blktrace: Concurrent blktraces are not allowed on sg0 [ 161.492567][ T4951] usb 2-1: string descriptor 0 read error: -32 [ 162.660624][ T4951] usb 2-1: USB disconnect, device number 10 [ 163.013666][ T5220] netlink: 20 bytes leftover after parsing attributes in process `syz.4.202'. [ 163.101484][ T4365] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 163.258002][ T5222] device syzkaller0 entered promiscuous mode [ 163.306082][ T4365] usb 3-1: Using ep0 maxpacket: 32 [ 163.311036][ T5209] loop0: detected capacity change from 0 to 32768 [ 163.319525][ T4365] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 163.349501][ T5209] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.197 (5209) [ 163.371295][ T4365] usb 3-1: config 0 has no interface number 0 [ 163.388237][ T4365] usb 3-1: config 0 interface 12 has no altsetting 0 [ 163.421561][ T4365] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 163.481405][ T4365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.532251][ T4365] usb 3-1: Product: syz [ 163.556054][ T4365] usb 3-1: Manufacturer: syz [ 163.581307][ T4365] usb 3-1: SerialNumber: syz [ 163.641397][ T4365] usb 3-1: config 0 descriptor?? [ 163.663855][ T5209] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 163.680245][ T5209] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 163.710299][ T5209] BTRFS info (device loop0): turning on sync discard [ 163.760789][ T5209] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 163.831315][ T5209] BTRFS info (device loop0): use zstd compression, level 3 [ 163.831385][ T5209] BTRFS info (device loop0): turning on async discard [ 163.831408][ T5209] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 163.831428][ T5209] BTRFS info (device loop0): trying to use backup root at mount time [ 163.831450][ T5209] BTRFS info (device loop0): enabling auto defrag [ 163.831516][ T5209] BTRFS info (device loop0): using free space tree [ 164.086052][ T5209] BTRFS error (device loop0): open_ctree failed: -12 [ 164.656202][ T5245] loop3: detected capacity change from 0 to 32768 [ 164.724560][ T5245] JBD2: Ignoring recovery information on journal [ 164.892109][ T5245] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 165.373086][ T4283] ocfs2: Unmounting device (7,3) on (node local) [ 165.975104][ T4365] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 166.001640][ T4365] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 166.019153][ T4365] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 166.044758][ T4365] f81534: probe of 3-1:0.12 failed with error -71 [ 166.095474][ T4365] usb 3-1: USB disconnect, device number 9 [ 166.871684][ T5267] fuse: Bad value for 'fd' [ 167.318765][ T5278] netlink: 16 bytes leftover after parsing attributes in process `syz.2.212'. [ 167.644650][ T5286] device syzkaller0 entered promiscuous mode [ 167.945618][ T4365] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 168.229534][ T4365] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 168.248621][ T4365] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.326123][ T4365] usb 3-1: config 0 has no interfaces? [ 168.404802][ T4365] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 168.514349][ T4365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.624402][ T4365] usb 3-1: config 0 descriptor?? [ 168.751380][ T4951] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 169.001361][ T4367] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 169.090514][ T4951] usb 4-1: config 0 has an invalid interface number: 205 but max is 0 [ 169.101924][ T4951] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.165145][ T4951] usb 4-1: config 0 has no interface number 0 [ 169.214343][ T4951] usb 4-1: config 0 interface 205 has no altsetting 0 [ 169.239420][ T4367] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 169.277590][ T4367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.383622][ T4951] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 169.386300][ T4367] usb 5-1: config 0 descriptor?? [ 169.408016][ T4951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.436649][ T4951] usb 4-1: Product: syz [ 169.447916][ T4951] usb 4-1: Manufacturer: syz [ 169.471246][ T4951] usb 4-1: SerialNumber: syz [ 169.508406][ T4951] usb 4-1: config 0 descriptor?? [ 169.531051][ T4951] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 169.593115][ T4951] dvb-usb: bulk message failed: -22 (3/0) [ 169.614012][ T4367] cp210x 5-1:0.0: cp210x converter detected [ 169.633501][ T4951] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 169.672901][ T4951] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 169.738891][ T4951] usb 4-1: media controller created [ 169.777889][ T4367] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 169.779661][ T4951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.832449][ T5287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.840963][ T4367] cp210x 5-1:0.0: querying part number failed [ 169.873000][ T5287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.903600][ T4367] usb 5-1: cp210x converter now attached to ttyUSB0 [ 169.990605][ T4951] dvb-usb: bulk message failed: -22 (6/0) [ 170.020825][ T4951] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 170.084700][ T4951] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 170.158172][ T4951] dvb-usb: schedule remote query interval to 150 msecs. [ 170.193675][ T4951] dvb-usb: bulk message failed: -22 (3/0) [ 170.233179][ T4951] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 170.351339][ T4951] dvb-usb: bulk message failed: -22 (1/0) [ 170.357150][ T4951] dvb-usb: error while querying for an remote control event. [ 170.621292][ T4951] dvb-usb: bulk message failed: -22 (1/0) [ 170.627209][ T4951] dvb-usb: error while querying for an remote control event. [ 170.811291][ T4951] dvb-usb: bulk message failed: -22 (1/0) [ 170.817282][ T4951] dvb-usb: error while querying for an remote control event. [ 171.031507][ T4951] dvb-usb: bulk message failed: -22 (1/0) [ 171.037348][ T4951] dvb-usb: error while querying for an remote control event. [ 171.242044][ T4951] dvb-usb: bulk message failed: -22 (1/0) [ 171.247882][ T4951] dvb-usb: error while querying for an remote control event. [ 171.318734][ T7] usb 5-1: USB disconnect, device number 13 [ 171.443194][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 171.511917][ T7] cp210x 5-1:0.0: device disconnected [ 171.541279][ T4951] dvb-usb: bulk message failed: -22 (1/0) [ 171.547109][ T4951] dvb-usb: error while querying for an remote control event. [ 171.791384][ T4951] dvb-usb: bulk message failed: -22 (1/0) [ 171.797389][ T4951] dvb-usb: error while querying for an remote control event. [ 172.021389][ T22] dvb-usb: bulk message failed: -22 (1/0) [ 172.027209][ T22] dvb-usb: error while querying for an remote control event. [ 172.061273][ T4365] usb 3-1: string descriptor 0 read error: -71 [ 172.121959][ T4365] usb 3-1: USB disconnect, device number 10 [ 172.231359][ T4951] dvb-usb: bulk message failed: -22 (1/0) [ 172.237179][ T4951] dvb-usb: error while querying for an remote control event. [ 172.333628][ T5313] netlink: 'syz.2.223': attribute type 1 has an invalid length. [ 172.373369][ T5312] netlink: 20 bytes leftover after parsing attributes in process `syz.4.222'. [ 172.421385][ T4951] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 172.442112][ T22] dvb-usb: bulk message failed: -22 (1/0) [ 172.447919][ T22] dvb-usb: error while querying for an remote control event. [ 172.497634][ T5313] device bond1 entered promiscuous mode [ 172.541796][ T5313] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.641326][ T22] dvb-usb: bulk message failed: -22 (1/0) [ 172.647407][ T22] dvb-usb: error while querying for an remote control event. [ 172.676354][ T4951] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 172.727125][ T4951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.745926][ T4951] usb 2-1: Product: syz [ 172.750171][ T4951] usb 2-1: Manufacturer: syz [ 172.771746][ T5315] bond1: (slave bridge2): making interface the new active one [ 172.807104][ T5315] device bridge2 entered promiscuous mode [ 172.809254][ T4951] usb 2-1: SerialNumber: syz [ 172.833170][ T5315] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 172.887848][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 172.901279][ T22] dvb-usb: bulk message failed: -22 (1/0) [ 172.909977][ T22] dvb-usb: error while querying for an remote control event. [ 173.121297][ T4943] dvb-usb: bulk message failed: -22 (1/0) [ 173.127604][ T4943] dvb-usb: error while querying for an remote control event. [ 173.269515][ T4943] usb 4-1: USB disconnect, device number 5 [ 173.328153][ T4951] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 173.343667][ T4943] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 174.738944][ T5327] loop3: detected capacity change from 0 to 32768 [ 174.945031][ T5327] JBD2: Ignoring recovery information on journal [ 175.017255][ T5327] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 175.201434][ T4943] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 175.295032][ T4283] ocfs2: Unmounting device (7,3) on (node local) [ 175.433110][ T4943] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 175.469602][ T4943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.529853][ T4943] usb 3-1: config 0 descriptor?? [ 175.566711][ T4943] cp210x 3-1:0.0: cp210x converter detected [ 175.766939][ T4943] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 175.784016][ T4943] cp210x 3-1:0.0: querying part number failed [ 175.849964][ T4943] usb 3-1: cp210x converter now attached to ttyUSB0 [ 175.942190][ T4365] usb 2-1: USB disconnect, device number 11 [ 175.966932][ T4365] usblp0: removed [ 177.281368][ T4365] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 177.505025][ T4365] usb 1-1: config 230 has an invalid interface number: 217 but max is 0 [ 177.535556][ T4365] usb 1-1: config 230 has an invalid interface number: 236 but max is 0 [ 177.579727][ T4365] usb 1-1: config 230 has 2 interfaces, different from the descriptor's value: 1 [ 177.611387][ T4365] usb 1-1: config 230 has no interface number 0 [ 177.632801][ T4365] usb 1-1: config 230 has no interface number 1 [ 177.656879][ T4365] usb 1-1: config 230 interface 217 altsetting 201 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.695168][ T4365] usb 1-1: too many endpoints for config 230 interface 236 altsetting 175: 162, using maximum allowed: 30 [ 177.731095][ T4365] usb 1-1: config 230 interface 236 altsetting 175 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 177.767910][ T4365] usb 1-1: config 230 interface 236 altsetting 175 has 1 endpoint descriptor, different from the interface descriptor's value: 162 [ 177.810021][ T4365] usb 1-1: config 230 interface 217 has no altsetting 0 [ 177.830807][ T4365] usb 1-1: config 230 interface 236 has no altsetting 0 [ 177.862785][ T4365] usb 1-1: New USB device found, idVendor=10b8, idProduct=1f9c, bcdDevice=6c.4c [ 177.891293][ T4365] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.913540][ T4365] usb 1-1: Product: syz [ 177.917808][ T4365] usb 1-1: Manufacturer: syz [ 177.951261][ T4365] usb 1-1: SerialNumber: syz [ 178.155691][ T4943] usb 3-1: USB disconnect, device number 11 [ 178.288823][ T4943] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 178.336367][ T4943] cp210x 3-1:0.0: device disconnected [ 178.345037][ T4365] dvb-usb: found a 'DiBcom TFE8096P reference design' in cold state, will try to load a firmware [ 178.412640][ T4365] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 178.476924][ T4365] dib0700: firmware download failed at 7 with -8 [ 178.535946][ T4365] dvb-usb: found a 'DiBcom TFE8096P reference design' in cold state, will try to load a firmware [ 178.597706][ T4365] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 178.625150][ T4365] dib0700: firmware download failed at 7 with -8 [ 178.667607][ T4365] usb 1-1: USB disconnect, device number 10 [ 180.651313][ T4943] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 181.067922][ T5424] loop0: detected capacity change from 0 to 32768 [ 181.105219][ T4943] usb 4-1: config 0 has an invalid interface number: 205 but max is 0 [ 181.121986][ T5424] JBD2: Ignoring recovery information on journal [ 181.185894][ T4943] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.284847][ T5427] loop4: detected capacity change from 0 to 128 [ 181.406741][ T5424] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 181.487115][ T5427] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 181.499790][ T4943] usb 4-1: config 0 has no interface number 0 [ 181.536184][ T4943] usb 4-1: config 0 interface 205 has no altsetting 0 [ 181.569649][ T5427] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.765234][ T4280] ocfs2: Unmounting device (7,0) on (node local) [ 181.931267][ T4290] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 182.174667][ T4290] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 182.221281][ T4290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.286169][ T4290] usb 2-1: Product: syz [ 182.290410][ T4290] usb 2-1: Manufacturer: syz [ 182.351261][ T4290] usb 2-1: SerialNumber: syz [ 182.471551][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 182.854442][ T4290] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 183.701385][ T4290] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 183.891321][ T4290] usb 1-1: Using ep0 maxpacket: 32 [ 183.909906][ T4290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.944696][ T4290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.969119][ T4290] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 183.997263][ T4290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.011907][ T4943] usb 4-1: string descriptor 0 read error: -71 [ 184.029702][ T4943] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 184.067600][ T4290] usb 1-1: config 0 descriptor?? [ 184.104170][ T4290] hub 1-1:0.0: USB hub found [ 184.124193][ T4943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.178920][ T4943] usb 4-1: config 0 descriptor?? [ 184.189830][ T4943] usb 4-1: can't set config #0, error -71 [ 184.213172][ T4943] usb 4-1: USB disconnect, device number 6 [ 184.329213][ T4290] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 184.603865][ T4365] usb 2-1: USB disconnect, device number 12 [ 184.615776][ T4365] usblp0: removed [ 184.740095][ T4290] usbhid 1-1:0.0: can't add hid device: -71 [ 184.750793][ T4290] usbhid: probe of 1-1:0.0 failed with error -71 [ 185.816731][ T4290] usb 1-1: reset high-speed USB device number 11 using dummy_hcd [ 186.567558][ T5489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.257'. [ 186.921245][ T4943] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 187.111216][ T4943] usb 5-1: Using ep0 maxpacket: 8 [ 187.119041][ T4943] usb 5-1: unable to get BOS descriptor or descriptor too short [ 187.151500][ T4943] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.193615][ T4943] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 187.235204][ T4943] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 187.271018][ T4943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.300910][ T4943] usb 5-1: Product: syz [ 187.305515][ T4943] usb 5-1: Manufacturer: syz [ 187.330912][ T4943] usb 5-1: SerialNumber: syz [ 187.367246][ T4943] usb 5-1: config 0 descriptor?? [ 187.631002][ T4943] usb 5-1: USB disconnect, device number 14 [ 187.946723][ T4290] usb 1-1: USB disconnect, device number 11 [ 187.990073][ T5497] netlink: 68 bytes leftover after parsing attributes in process `syz.2.261'. [ 188.010001][ T5497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.261'. [ 188.068124][ T5497] netlink: 20 bytes leftover after parsing attributes in process `syz.2.261'. [ 188.101338][ T5501] blktrace: Concurrent blktraces are not allowed on sg0 [ 189.981263][ T22] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 190.209301][ T22] usb 1-1: unable to get BOS descriptor or descriptor too short [ 190.306580][ T22] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 190.338048][ T22] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 190.367098][ T22] usb 1-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 190.412062][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.437362][ T22] usb 1-1: Product: syz [ 190.450408][ T22] usb 1-1: Manufacturer: syz [ 190.475437][ T22] usb 1-1: SerialNumber: syz [ 190.771518][ T4943] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 190.991328][ T4943] usb 3-1: Using ep0 maxpacket: 32 [ 191.002938][ T4943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.579986][ T4943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.801314][ T4943] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 192.085739][ T4943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.301397][ T4943] usb 3-1: config 0 descriptor?? [ 192.431252][ T4943] hub 3-1:0.0: USB hub found [ 192.627110][ T4943] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 193.041365][ T4943] usbhid 3-1:0.0: can't add hid device: -71 [ 193.059766][ T4943] usbhid: probe of 3-1:0.0 failed with error -71 [ 193.133735][ T4943] usb 3-1: USB disconnect, device number 12 [ 193.631339][ T4943] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 193.747223][ T22] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 193.830283][ T22] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 193.839024][ T4943] usb 3-1: Using ep0 maxpacket: 32 [ 193.848194][ T4943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.892244][ T4943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.932938][ T22] usb 1-1: USB disconnect, device number 12 [ 193.957360][ T4943] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 193.967323][ T4949] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 194.000618][ T4943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.139376][ T5595] loop0: detected capacity change from 0 to 32768 [ 194.173749][ T5595] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.275 (5595) [ 194.203091][ T5595] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 194.213516][ T5595] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 194.222290][ T5595] BTRFS info (device loop0): turning on sync discard [ 194.229005][ T5595] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 194.238965][ T5595] BTRFS info (device loop0): use zstd compression, level 3 [ 194.241659][ T4949] usb 4-1: device descriptor read/64, error -71 [ 194.247025][ T5595] BTRFS info (device loop0): turning on async discard [ 194.259402][ T5595] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 194.270079][ T5595] BTRFS info (device loop0): trying to use backup root at mount time [ 194.278253][ T5595] BTRFS info (device loop0): enabling auto defrag [ 194.286942][ T5595] BTRFS info (device loop0): using free space tree [ 194.286970][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.300017][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.308960][ T4943] usb 3-1: config 0 descriptor?? [ 194.372508][ T4403] udevd[4403]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.498327][ T4943] usb 3-1: can't set config #0, error -71 [ 194.511299][ T5608] netlink: 68 bytes leftover after parsing attributes in process `syz.1.276'. [ 194.570794][ T4943] usb 3-1: USB disconnect, device number 13 [ 194.605558][ T4493] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 194.618782][ T5614] netlink: 20 bytes leftover after parsing attributes in process `syz.1.276'. [ 194.633436][ T5608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.276'. [ 194.697194][ T5595] BTRFS error (device loop0): failed to load root extent [ 194.702390][ T4949] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 194.704787][ T5595] BTRFS warning (device loop0): try to load backup roots slot 1 [ 194.722090][ T4350] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 194.747724][ T5595] BTRFS warning (device loop0): couldn't read tree root [ 194.754827][ T5595] BTRFS warning (device loop0): try to load backup roots slot 2 [ 194.782169][ T5595] BTRFS error (device loop0): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 194.794604][ T5595] BTRFS warning (device loop0): couldn't read tree root [ 194.801674][ T5595] BTRFS warning (device loop0): try to load backup roots slot 3 [ 194.867324][ T5595] BTRFS info (device loop0): enabling ssd optimizations [ 194.879037][ T5595] BTRFS info (device loop0): rebuilding free space tree [ 194.895613][ T4949] usb 4-1: device descriptor read/64, error -71 [ 194.924047][ T5595] BTRFS info (device loop0): checking UUID tree [ 195.031513][ T4949] usb usb4-port1: attempt power cycle [ 195.210824][ T4280] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 195.444043][ T4949] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 195.490982][ T4949] usb 4-1: device descriptor read/8, error -71 [ 195.749191][ T5639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.281'. [ 195.771364][ T4949] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 195.823715][ T4949] usb 4-1: device descriptor read/8, error -71 [ 195.954190][ T4949] usb usb4-port1: unable to enumerate USB device [ 196.081281][ T4290] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 196.317423][ T4290] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 196.335811][ T4290] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.361272][ T4290] usb 1-1: config 0 has no interfaces? [ 196.387305][ T4290] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 196.391401][ T4949] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 196.421220][ T4290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.486211][ T4290] usb 1-1: config 0 descriptor?? [ 196.613330][ T4949] usb 5-1: config 230 has an invalid interface number: 217 but max is 0 [ 196.645752][ T4949] usb 5-1: config 230 has an invalid interface number: 236 but max is 0 [ 196.645784][ T4949] usb 5-1: config 230 has 2 interfaces, different from the descriptor's value: 1 [ 196.645806][ T4949] usb 5-1: config 230 has no interface number 0 [ 196.645825][ T4949] usb 5-1: config 230 has no interface number 1 [ 196.645872][ T4949] usb 5-1: config 230 interface 217 altsetting 201 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.645903][ T4949] usb 5-1: too many endpoints for config 230 interface 236 altsetting 175: 162, using maximum allowed: 30 [ 196.645927][ T4949] usb 5-1: config 230 interface 236 altsetting 175 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 196.645966][ T4949] usb 5-1: config 230 interface 236 altsetting 175 has 1 endpoint descriptor, different from the interface descriptor's value: 162 [ 196.645995][ T4949] usb 5-1: config 230 interface 217 has no altsetting 0 [ 196.646014][ T4949] usb 5-1: config 230 interface 236 has no altsetting 0 [ 196.670082][ T4949] usb 5-1: New USB device found, idVendor=10b8, idProduct=1f9c, bcdDevice=6c.4c [ 196.670116][ T4949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.670138][ T4949] usb 5-1: Product: syz [ 196.670267][ T4949] usb 5-1: Manufacturer: syz [ 196.670296][ T4949] usb 5-1: SerialNumber: syz [ 198.067429][ T4949] dvb-usb: found a 'DiBcom TFE8096P reference design' in cold state, will try to load a firmware [ 198.115439][ T4949] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 198.159696][ T4949] dib0700: firmware download failed at 7 with -8 [ 198.246365][ T4949] dvb-usb: found a 'DiBcom TFE8096P reference design' in cold state, will try to load a firmware [ 198.287593][ T4949] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 198.308715][ T4949] dib0700: firmware download failed at 7 with -8 [ 198.351871][ T4949] usb 5-1: USB disconnect, device number 15 [ 198.651399][ T4338] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 198.751962][ T4290] usb 1-1: string descriptor 0 read error: -71 [ 198.781464][ T4290] usb 1-1: USB disconnect, device number 13 [ 198.851345][ T4338] usb 3-1: Using ep0 maxpacket: 32 [ 198.858140][ T4338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.920381][ T4338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.955628][ T5662] netlink: 68 bytes leftover after parsing attributes in process `syz.4.289'. [ 198.996614][ T4338] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 199.027701][ T5662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.289'. [ 199.039758][ T4338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.078864][ T5668] netlink: 20 bytes leftover after parsing attributes in process `syz.4.289'. [ 199.106247][ T4338] usb 3-1: config 0 descriptor?? [ 199.142067][ T4338] hub 3-1:0.0: USB hub found [ 199.334671][ T4338] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 199.750296][ T4338] usbhid 3-1:0.0: can't add hid device: -71 [ 199.765885][ T4338] usbhid: probe of 3-1:0.0 failed with error -71 [ 199.842185][ T4338] usb 3-1: USB disconnect, device number 14 [ 200.321281][ T4338] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 200.541380][ T4338] usb 3-1: Using ep0 maxpacket: 32 [ 200.549060][ T4338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.591337][ T4338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.673513][ T4338] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 200.700502][ T4338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.771348][ T4338] usb 3-1: config 0 descriptor?? [ 200.802120][ T4338] hub 3-1:0.0: USB hub found [ 200.978772][ T4338] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 201.184312][ T4338] usbhid 3-1:0.0: can't add hid device: -71 [ 201.190400][ T4338] usbhid: probe of 3-1:0.0 failed with error -71 [ 201.272488][ T4338] usb 3-1: USB disconnect, device number 15 [ 201.282029][ T4290] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 202.114997][ T5696] loop0: detected capacity change from 0 to 256 [ 202.190903][ T5696] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x22de60d6, utbl_chksum : 0xe619d30d) [ 202.221249][ T4290] usb 2-1: device descriptor read/64, error -71 [ 202.398028][ T5700] blktrace: Concurrent blktraces are not allowed on sg0 [ 202.438738][ T5700] relay: one or more items not logged [item size (48) > sub-buffer size (1)] [ 202.768638][ T4290] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 202.859792][ T5709] netlink: 16 bytes leftover after parsing attributes in process `syz.0.300'. [ 202.941431][ T4290] usb 2-1: device descriptor read/64, error -71 [ 202.948115][ T4959] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 203.071434][ T4290] usb usb2-port1: attempt power cycle [ 203.153077][ T4959] usb 4-1: config 230 has an invalid interface number: 217 but max is 0 [ 203.191570][ T4959] usb 4-1: config 230 has an invalid interface number: 236 but max is 0 [ 203.220603][ T4959] usb 4-1: config 230 has 2 interfaces, different from the descriptor's value: 1 [ 203.250569][ T4959] usb 4-1: config 230 has no interface number 0 [ 203.262668][ T4944] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 203.270819][ T4959] usb 4-1: config 230 has no interface number 1 [ 203.282476][ T4959] usb 4-1: config 230 interface 217 altsetting 201 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.296218][ T4959] usb 4-1: too many endpoints for config 230 interface 236 altsetting 175: 162, using maximum allowed: 30 [ 203.308076][ T4959] usb 4-1: config 230 interface 236 altsetting 175 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 203.319850][ T4959] usb 4-1: config 230 interface 236 altsetting 175 has 1 endpoint descriptor, different from the interface descriptor's value: 162 [ 203.336046][ T4959] usb 4-1: config 230 interface 217 has no altsetting 0 [ 203.346460][ T4959] usb 4-1: config 230 interface 236 has no altsetting 0 [ 203.358701][ T4959] usb 4-1: New USB device found, idVendor=10b8, idProduct=1f9c, bcdDevice=6c.4c [ 203.373241][ T4959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.385187][ T4959] usb 4-1: Product: syz [ 203.389996][ T4959] usb 4-1: Manufacturer: syz [ 203.396621][ T4959] usb 4-1: SerialNumber: syz [ 203.491410][ T4290] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 203.504150][ T5718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.301'. [ 204.261316][ T4290] usb 2-1: device descriptor read/8, error -71 [ 204.322122][ T4944] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 204.340581][ T4944] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.376979][ T4944] usb 1-1: config 0 has no interfaces? [ 204.397982][ T4944] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 204.415887][ T5722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.303'. [ 204.430199][ T4944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.474145][ T4944] usb 1-1: config 0 descriptor?? [ 204.597698][ T5727] netlink: 20 bytes leftover after parsing attributes in process `syz.4.305'. [ 204.821262][ T4949] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 205.011278][ T4949] usb 3-1: Using ep0 maxpacket: 8 [ 205.020041][ T4949] usb 3-1: unable to get BOS descriptor or descriptor too short [ 205.048153][ T4949] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.083252][ T4949] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 205.110155][ T4949] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 205.129823][ T4949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.144767][ T4949] usb 3-1: Product: syz [ 205.150021][ T4949] usb 3-1: Manufacturer: syz [ 205.157657][ T4949] usb 3-1: SerialNumber: syz [ 205.168693][ T4949] usb 3-1: config 0 descriptor?? [ 205.220160][ T5736] loop4: detected capacity change from 0 to 1024 [ 205.280502][ T5736] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 205.294263][ T5736] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.347971][ T26] audit: type=1800 audit(1781320653.157:2): pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.309" name="file3" dev="loop4" ino=16 res=0 errno=0 [ 205.380896][ T5736] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.309: bg 0: block 112: padding at end of block bitmap is not set [ 205.473796][ T38] usb 3-1: USB disconnect, device number 16 [ 205.564606][ T4959] dvb-usb: found a 'DiBcom TFE8096P reference design' in cold state, will try to load a firmware [ 205.605877][ T4959] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 205.633934][ T4959] dib0700: firmware download failed at 7 with -8 [ 205.656919][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 205.689070][ T4959] dvb-usb: found a 'DiBcom TFE8096P reference design' in cold state, will try to load a firmware [ 205.709053][ T4959] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 205.718874][ T4959] dib0700: firmware download failed at 7 with -8 [ 205.769534][ T4959] usb 4-1: USB disconnect, device number 11 [ 206.601250][ T4284] Bluetooth: hci3: command 0x0406 tx timeout [ 206.611852][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 206.612870][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 206.612894][ T4294] Bluetooth: hci4: command 0x0406 tx timeout [ 206.619245][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 206.864933][ T4944] usb 1-1: string descriptor 0 read error: -71 [ 206.902338][ T4944] usb 1-1: USB disconnect, device number 14 [ 207.011276][ T4959] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 207.077316][ T5752] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.315'. [ 207.221228][ T4959] usb 4-1: Using ep0 maxpacket: 32 [ 207.228956][ T4959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.248655][ T4959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.268400][ T4959] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 207.284039][ T4959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.306599][ T4959] usb 4-1: config 0 descriptor?? [ 207.335552][ T4959] hub 4-1:0.0: USB hub found [ 207.361674][ T7] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 207.527549][ T5762] Bluetooth: MGMT ver 1.22 [ 207.550930][ T4959] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 207.701193][ T4290] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 208.419212][ T7] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 208.430953][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.441628][ T7] usb 5-1: Product: syz [ 208.446065][ T4959] usbhid 4-1:0.0: can't add hid device: -71 [ 208.452249][ T7] usb 5-1: Manufacturer: syz [ 208.456915][ T7] usb 5-1: SerialNumber: syz [ 208.461719][ T4959] usbhid: probe of 4-1:0.0 failed with error -71 [ 208.581449][ T4290] usb 1-1: device descriptor read/64, error -71 [ 208.627308][ T5764] 9pnet_fd: Insufficient options for proto=fd [ 208.703223][ T4959] usb 4-1: reset high-speed USB device number 12 using dummy_hcd [ 208.851439][ T4290] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 208.956807][ T7] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 209.071610][ T4290] usb 1-1: device descriptor read/64, error -71 [ 209.252592][ T4290] usb usb1-port1: attempt power cycle [ 209.577966][ T4959] usb 4-1: device descriptor read/all, error -71 [ 209.821273][ T4290] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 209.871390][ T4290] usb 1-1: device descriptor read/8, error -71 [ 210.191254][ T4290] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 210.899518][ T4959] usb 4-1: USB disconnect, device number 12 [ 211.103010][ T4290] usb 1-1: device descriptor read/8, error -71 [ 211.136914][ T38] usb 5-1: USB disconnect, device number 16 [ 211.158768][ T38] usblp0: removed [ 211.221502][ T4290] usb usb1-port1: unable to enumerate USB device [ 211.246841][ T5789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.327'. [ 212.501253][ T4959] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 212.691259][ T4959] usb 2-1: Using ep0 maxpacket: 8 [ 212.709599][ T4959] usb 2-1: unable to get BOS descriptor or descriptor too short [ 212.749951][ T4959] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.780552][ T4959] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 212.803495][ T4959] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 212.831685][ T4959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.744735][ T4959] usb 2-1: Product: syz [ 213.749927][ T4959] usb 2-1: Manufacturer: syz [ 213.810491][ T4959] usb 2-1: SerialNumber: syz [ 213.864811][ T4959] usb 2-1: config 0 descriptor?? [ 214.121998][ T4959] usb 2-1: USB disconnect, device number 17 [ 214.511336][ T4290] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 214.716353][ T4290] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 214.752461][ T4290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.760816][ T4290] usb 1-1: Product: syz [ 214.857127][ T4290] usb 1-1: Manufacturer: syz [ 214.881333][ T4290] usb 1-1: SerialNumber: syz [ 214.888385][ T4290] usb 1-1: config 0 descriptor?? [ 215.919036][ T5828] loop4: detected capacity change from 0 to 512 [ 215.961384][ T4290] usb 1-1: USB disconnect, device number 19 [ 216.996785][ T4366] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 217.213613][ T4405] udevd[4405]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.492273][ T5843] [ 217.494675][ T5843] ============================================ [ 217.500951][ T5843] WARNING: possible recursive locking detected [ 217.507253][ T5843] syzkaller #0 Not tainted [ 217.512140][ T5843] -------------------------------------------- [ 217.518492][ T5843] syz.3.342/5843 is trying to acquire lock: [ 217.524590][ T5843] ffffffff8d3f4f98 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0x114/0xf00 [ 217.536152][ T5843] [ 217.536152][ T5843] but task is already holding lock: [ 217.543631][ T5843] ffffffff8d3f4f98 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0x114/0xf00 [ 217.553864][ T5843] [ 217.553864][ T5843] other info that might help us debug this: [ 217.561975][ T5843] Possible unsafe locking scenario: [ 217.561975][ T5843] [ 217.569480][ T5843] CPU0 [ 217.572901][ T5843] ---- [ 217.576337][ T5843] lock(qp_broker_list.mutex); [ 217.581703][ T5843] lock(qp_broker_list.mutex); [ 217.586610][ T5843] [ 217.586610][ T5843] *** DEADLOCK *** [ 217.586610][ T5843] [ 217.594789][ T5843] May be due to missing lock nesting notation [ 217.594789][ T5843] [ 217.603141][ T5843] 1 lock held by syz.3.342/5843: [ 217.608401][ T5843] #0: ffffffff8d3f4f98 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0x114/0xf00 [ 217.620032][ T5843] [ 217.620032][ T5843] stack backtrace: [ 217.626178][ T5843] CPU: 1 PID: 5843 Comm: syz.3.342 Not tainted syzkaller #0 [ 217.633475][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 217.643646][ T5843] Call Trace: [ 217.646945][ T5843] [ 217.649889][ T5843] dump_stack_lvl+0x188/0x24e [ 217.654586][ T5843] ? show_regs_print_info+0x12/0x12 [ 217.659921][ T5843] ? load_image+0x400/0x400 [ 217.664833][ T5843] __lock_acquire+0x123e/0x7d10 [ 217.669750][ T5843] ? __lock_acquire+0x7d10/0x7d10 [ 217.674906][ T5843] ? verify_lock_unused+0x140/0x140 [ 217.680336][ T5843] ? mark_lock+0x94/0x320 [ 217.684799][ T5843] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 217.690902][ T5843] ? lock_chain_count+0x20/0x20 [ 217.695825][ T5843] lock_acquire+0x1bb/0x4a0 [ 217.700406][ T5843] ? vmci_qp_broker_detach+0x114/0xf00 [ 217.705985][ T5843] ? __might_sleep+0xd0/0xd0 [ 217.710594][ T5843] ? read_lock_is_recursive+0x10/0x10 [ 217.716005][ T5843] ? kasan_set_track+0x60/0x70 [ 217.720811][ T5843] ? kasan_save_free_info+0x2d/0x50 [ 217.726051][ T5843] ? ____kasan_slab_free+0x126/0x1e0 [ 217.731452][ T5843] ? slab_free_freelist_hook+0x131/0x1a0 [ 217.737137][ T5843] __mutex_lock+0x12d/0xaf0 [ 217.741690][ T5843] ? vmci_qp_broker_detach+0x114/0xf00 [ 217.747176][ T5843] ? exit_to_user_mode_loop+0xe6/0x110 [ 217.752690][ T5843] ? exit_to_user_mode_prepare+0xee/0x180 [ 217.758811][ T5843] ? do_syscall_64+0x58/0xa0 [ 217.763421][ T5843] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.769691][ T5843] ? vmci_qp_broker_detach+0x114/0xf00 [ 217.775176][ T5843] ? mutex_lock_nested+0x10/0x10 [ 217.780148][ T5843] ? mark_lock+0x94/0x320 [ 217.784533][ T5843] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 217.790602][ T5843] vmci_qp_broker_detach+0x114/0xf00 [ 217.796055][ T5843] ? kasan_quarantine_put+0xd4/0x220 [ 217.801390][ T5843] ? lockdep_hardirqs_on+0x94/0x140 [ 217.806628][ T5843] ? qp_notify_peer+0x1f0/0x1f0 [ 217.811509][ T5843] ? slab_free_freelist_hook+0x131/0x1a0 [ 217.817592][ T5843] ? vmci_ctx_put+0x5ca/0xc40 [ 217.822287][ T5843] ? __kmem_cache_free+0xb6/0x1f0 [ 217.827325][ T5843] vmci_ctx_put+0x629/0xc40 [ 217.831850][ T5843] ? vmci_ctx_put+0x13e/0xc40 [ 217.836552][ T5843] ? preempt_schedule_common+0xa5/0xd0 [ 217.842052][ T5843] ? vmci_ctx_destroy+0xf0/0xf0 [ 217.846927][ T5843] ? preempt_schedule+0xbc/0xd0 [ 217.851791][ T5843] ? schedule_preempt_disabled+0x20/0x20 [ 217.857460][ T5843] ? __lock_acquire+0x7d10/0x7d10 [ 217.862502][ T5843] ? __rwlock_init+0x140/0x140 [ 217.867472][ T5843] vmci_ctx_enqueue_datagram+0x3a7/0x420 [ 217.873295][ T5843] vmci_datagram_dispatch+0x449/0xc10 [ 217.878695][ T5843] ? vmci_is_context_owner+0xd0/0xd0 [ 217.884323][ T5843] vmci_qp_broker_detach+0x8ca/0xf00 [ 217.890098][ T5843] ? qp_notify_peer+0x1f0/0x1f0 [ 217.895023][ T5843] ? vmci_ctx_put+0x5ca/0xc40 [ 217.899746][ T5843] ? __kmem_cache_free+0xb6/0x1f0 [ 217.904800][ T5843] vmci_ctx_put+0x629/0xc40 [ 217.909318][ T5843] ? vmci_ctx_put+0x13e/0xc40 [ 217.914014][ T5843] ? vmci_ctx_destroy+0xf0/0xf0 [ 217.918881][ T5843] ? do_raw_spin_lock+0x128/0x2f0 [ 217.923920][ T5843] ? __rwlock_init+0x140/0x140 [ 217.928698][ T5843] ? do_raw_spin_unlock+0x11d/0x230 [ 217.933929][ T5843] vmci_host_close+0x97/0x160 [ 217.938797][ T5843] ? vmci_host_open+0xe0/0xe0 [ 217.943497][ T5843] __fput+0x22c/0x920 [ 217.947493][ T5843] task_work_run+0x1d0/0x260 [ 217.952101][ T5843] ? task_work_cancel+0x220/0x220 [ 217.957135][ T5843] ? exit_to_user_mode_loop+0x3b/0x110 [ 217.962611][ T5843] exit_to_user_mode_loop+0xe6/0x110 [ 217.967915][ T5843] exit_to_user_mode_prepare+0xee/0x180 [ 217.973577][ T5843] syscall_exit_to_user_mode+0x16/0x40 [ 217.979078][ T5843] do_syscall_64+0x58/0xa0 [ 217.983595][ T5843] ? clear_bhb_loop+0x60/0xb0 [ 217.988557][ T5843] ? clear_bhb_loop+0x60/0xb0 [ 217.993289][ T5843] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.999727][ T5843] RIP: 0033:0x7fc0acd9ce59 [ 218.004195][ T5843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.025059][ T5843] RSP: 002b:00007fc0add19028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 218.033765][ T5843] RAX: 0000000000000000 RBX: 00007fc0ad016090 RCX: 00007fc0acd9ce59 [ 218.041893][ T5843] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000008 [ 218.049876][ T5843] RBP: 00007fc0ace32d6f R08: 0000000000000000 R09: 0000000000000000 [ 218.057873][ T5843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.065898][ T5843] R13: 00007fc0ad016128 R14: 00007fc0ad016090 R15: 00007ffe8ad95a18 [ 218.074278][ T5843] [ 218.151171][ T4338] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 218.311187][ T4338] usb 1-1: device descriptor read/64, error -71 [ 218.511198][ T4949] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 218.601246][ T4338] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 218.713105][ T4949] usb 5-1: config 230 has an invalid interface number: 217 but max is 0 [ 218.723189][ T4949] usb 5-1: config 230 has an invalid interface number: 236 but max is 0 [ 218.732731][ T4949] usb 5-1: config 230 has 2 interfaces, different from the descriptor's value: 1 [ 218.744071][ T4949] usb 5-1: config 230 has no interface number 0 [ 218.750550][ T4949] usb 5-1: config 230 has no interface number 1 [ 218.758742][ T4949] usb 5-1: config 230 interface 217 altsetting 201 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.772794][ T4338] usb 1-1: device descriptor read/64, error -71 [ 218.779542][ T4949] usb 5-1: too many endpoints for config 230 interface 236 altsetting 175: 162, using maximum allowed: 30 [ 218.791518][ T4949] usb 5-1: config 230 interface 236 altsetting 175 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 218.803784][ T4949] usb 5-1: config 230 interface 236 altsetting 175 has 1 endpoint descriptor, different from the interface descriptor's value: 162 [ 218.819344][ T4949] usb 5-1: config 230 interface 217 has no altsetting 0 [ 218.826697][ T4949] usb 5-1: config 230 interface 236 has no altsetting 0 [ 218.836448][ T4949] usb 5-1: New USB device found, idVendor=10b8, idProduct=1f9c, bcdDevice=6c.4c [ 218.846018][ T4949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.854390][ T4949] usb 5-1: Product: syz [ 218.858805][ T4949] usb 5-1: Manufacturer: syz [ 218.864383][ T4949] usb 5-1: SerialNumber: syz [ 218.911408][ T4338] usb usb1-port1: attempt power cycle [ 219.321373][ T4338] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 219.363325][ T4338] usb 1-1: device descriptor read/8, error -71 [ 219.631239][ T4338] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 219.662155][ T4338] usb 1-1: device descriptor read/8, error -71 [ 219.781979][ T4338] usb usb1-port1: unable to enumerate USB device [ 220.493781][ T4949] dvb-usb: found a 'DiBcom TFE8096P reference design' in cold state, will try to load a firmware [ 220.505482][ T4949] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 220.514337][ T4949] dib0700: firmware download failed at 7 with -8 [ 220.525535][ T4949] dvb-usb: found a 'DiBcom TFE8096P reference design' in cold state, will try to load a firmware [ 220.537407][ T4949] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 220.545823][ T4949] dib0700: firmware download failed at 7 with -8 [ 220.556126][ T4949] usb 5-1: USB disconnect, device number 17