last executing test programs: 2m20.022915243s ago: executing program 3 (id=817): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0x3, &(0x7f0000000240)={0x0, 0x6109, 0x1, 0x0, 0x1a4}, 0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m19.73851856s ago: executing program 3 (id=820): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @remote}, 0x1c) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfea7) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000440)=0x100, 0x1002) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m15.858919587s ago: executing program 3 (id=825): socket$alg(0x26, 0x5, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x2}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000000300), 0x9}, {&(0x7f0000000840)=""/99, 0x63}, {&(0x7f00000008c0)=""/201, 0xc9}, {&(0x7f0000000640)=""/194, 0xc2}, {&(0x7f0000000280)=""/171, 0xa6}, {0x0}, {&(0x7f0000001000)=""/180, 0xffffffffffffff26}, {&(0x7f00000010c0)=""/201, 0xc9}], 0x9, &(0x7f0000001400)=""/249, 0xf9}, 0xffffffff}], 0x2, 0x60010000, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x14, r5, 0x705, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) 2m13.676168407s ago: executing program 3 (id=826): r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x3f, 0x4, 0x70bd28, 0x25dfdbff, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYBLOB="0500000000000000000002000000080003", @ANYRES32=r2], 0x80}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000700)) syz_emit_ethernet(0x4e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x20000004) setpgid(r3, 0x0) setpgid(0x0, r3) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001) 2m13.444131967s ago: executing program 3 (id=829): openat$sequencer(0xffffffffffffff9c, 0x0, 0x48c00, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x71d041) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f00000003c0)={0x0, 0x1, 0xe, 0x13, 0x200, &(0x7f0000000d80)="1ae19327aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a730900000000fdfd000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000005000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c536689a4a62f872f9ca3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e109029ae5380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f91ffffffffd51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6ece06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a2a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0600000000000000a1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe021c773a6664b66ae04aa62c564d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000004000000000f800"}) 2m12.156266183s ago: executing program 3 (id=834): socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) syz_usb_connect(0x0, 0xb6, &(0x7f0000000280)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932dc70000464040507250103"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1555555555555709}) syz_open_dev$midi(&(0x7f0000000040), 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x30) 2m8.59244337s ago: executing program 32 (id=834): socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) syz_usb_connect(0x0, 0xb6, &(0x7f0000000280)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932dc70000464040507250103"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1555555555555709}) syz_open_dev$midi(&(0x7f0000000040), 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x30) 18.943936559s ago: executing program 0 (id=1020): mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x10005}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100), 0x6) 16.873039264s ago: executing program 2 (id=1022): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x29ce9000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r4, 0x1, 0x60bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 15.273435869s ago: executing program 4 (id=1025): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x7, 0x402, 0x258}) 15.27186418s ago: executing program 0 (id=1026): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x141000, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="01000000030100"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000002000000cbfc0b9af540340c"], 0x48}, 0x1, 0x0, 0x0, 0x20040011}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x95) landlock_restrict_self(r3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) read$sequencer(r5, &(0x7f0000000780)=""/35, 0x23) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) 13.796214039s ago: executing program 4 (id=1027): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x2e, 0xe, 0x2}) 13.695138212s ago: executing program 4 (id=1028): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x1000000000005) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x50, r1, 0x5000) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) 13.691947373s ago: executing program 1 (id=1029): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x2c020400) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) pwritev(r2, 0x0, 0x0, 0x5, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000080)={{0xf, 0x1}, 0x1, 0x2, 0x2, {0x0, 0xb}, 0x6, 0x6}) r4 = syz_open_dev$mouse(0x0, 0x0, 0x2042) write$dsp(r4, 0x0, 0x58) socket$nl_route(0x10, 0x3, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c6}, 0x984e45ff733bc95) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_setup(0xa0, 0x0, 0x0, 0x0) 12.532178881s ago: executing program 2 (id=1030): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffe09}], 0x1}, 0x0) 10.340111843s ago: executing program 0 (id=1031): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f8666f2a665f0ff0f0fc73666ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x29}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10.246177485s ago: executing program 2 (id=1032): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000300)=""/118, 0x76, 0x10000, &(0x7f0000000380)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x80) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) 9.852104575s ago: executing program 1 (id=1033): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r4, 0xee01) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r5, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[], 0x6a) lsetxattr$system_posix_acl(0x0, &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [{}, {0x2, 0x6}], {}, [], {0x10, 0x2}}, 0x34, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r8}, &(0x7f0000000780)=0x7d8, &(0x7f0000000180)='%pK \x00'}, 0x20) signalfd(r2, &(0x7f00000001c0)={[0x901]}, 0x8) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r9, &(0x7f0000000380), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00', 0x4}, 0x1c) 9.851969645s ago: executing program 4 (id=1034): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdc00, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}]}]}, 0x24}}, 0x4040084) 8.738545268s ago: executing program 1 (id=1035): mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x10005}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100), 0x6) 8.689976774s ago: executing program 4 (id=1036): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x4480, 0x8, 0xe1}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)}, 0x0) preadv(r2, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f8666f2a665f0ff0f0fc73666ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x29}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.931808951s ago: executing program 1 (id=1037): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1) 7.819907296s ago: executing program 0 (id=1038): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r2, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10008801}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = syz_open_procfs$namespace(0x0, 0x0) open_by_handle_at(r6, &(0x7f0000000040)=ANY=[@ANYRES64=r5], 0x4000) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="000000bb78b949f828596421dc636400", @ANYBLOB], 0x1c}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001680)) r7 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000001c0)={0x0, r7}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/191, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)={0x0, r7}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) 7.583176927s ago: executing program 1 (id=1039): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x141000, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="01000000030100"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000002000000cbfc0b9af540340c"], 0x48}, 0x1, 0x0, 0x0, 0x20040011}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x95) landlock_restrict_self(r3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) read$sequencer(r5, &(0x7f0000000780)=""/35, 0x23) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) 6.032314095s ago: executing program 0 (id=1040): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffe09}], 0x1}, 0x0) 4.292129119s ago: executing program 4 (id=1041): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x1000000000005) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x50, r1, 0x5000) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) 3.710038333s ago: executing program 0 (id=1042): syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', r0}, 0x18) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) unshare(0x22020600) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x304}, "74b4b6f812818157", "fe0f232318769ac69f4d79a23999d0d2", "4110d24f", "9fee0dd3cddeb064"}, 0x28) sendto$inet6(r4, 0x0, 0x0, 0x8000, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0xb, 0x8, 0x5, 0x8, 0x4, 0x10000, 0xfffffff8]}) syz_emit_ethernet(0x66, &(0x7f0000000f80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x6c, 0x0, @private}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0xfffc}}}}}}, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) socket$inet(0x2, 0x3, 0x6) 2.934105423s ago: executing program 2 (id=1043): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x7, 0x402, 0x258}) 1.290767534s ago: executing program 2 (id=1044): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r4, 0xee01) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r5, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[], 0x6a) lsetxattr$system_posix_acl(0x0, &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [{}, {0x2, 0x6}], {}, [], {0x10, 0x2}}, 0x34, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r8}, &(0x7f0000000780)=0x7d8, &(0x7f0000000180)='%pK \x00'}, 0x20) signalfd(r2, &(0x7f00000001c0)={[0x901]}, 0x8) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r9, &(0x7f0000000380), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00', 0x4}, 0x1c) 1.289984994s ago: executing program 1 (id=1052): syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x28, 0x80000002, 0x0, 0x0, 0x800, 0x2, 0x1}}, 0x50) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 0s ago: executing program 2 (id=1045): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) kernel console output (not intermixed with test programs): : renamed from eth3 [ 90.479626][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.499290][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.511603][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.546378][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.605828][ T5766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.617305][ T5766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.629974][ T5766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.656962][ T5766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.731073][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.749296][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.763866][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.774352][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.900274][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.957925][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.977007][ T4534] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.984583][ T4534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.016871][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.033812][ T4534] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.040968][ T4534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.087961][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.157273][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.164457][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.192658][ T5765] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.203144][ T5765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.223806][ T4534] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.230998][ T4534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.310531][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.325071][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.403564][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.414495][ T5776] Bluetooth: hci3: command tx timeout [ 91.423355][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.455194][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.462400][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.489341][ T5776] Bluetooth: hci1: command tx timeout [ 91.553892][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.561185][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.568852][ T5776] Bluetooth: hci0: command tx timeout [ 91.574339][ T5776] Bluetooth: hci2: command tx timeout [ 91.586111][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.593346][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.615518][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.622771][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.745164][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.800559][ T5766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.913762][ T5765] veth0_vlan: entered promiscuous mode [ 91.970609][ T5765] veth1_vlan: entered promiscuous mode [ 92.028603][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.105135][ T5765] veth0_macvtap: entered promiscuous mode [ 92.125092][ T5765] veth1_macvtap: entered promiscuous mode [ 92.186537][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.199196][ T5767] veth0_vlan: entered promiscuous mode [ 92.226127][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.261910][ T5767] veth1_vlan: entered promiscuous mode [ 92.273543][ T5765] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.285970][ T5765] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.296156][ T5765] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.309690][ T5765] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.393933][ T5767] veth0_macvtap: entered promiscuous mode [ 92.404282][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.431295][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.446067][ T5767] veth1_macvtap: entered promiscuous mode [ 92.515798][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.527601][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.540258][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.583950][ T4534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.606426][ T4534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.621415][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.632424][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.645034][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.687008][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.703882][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.710297][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.715957][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.729752][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.738640][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.777499][ T5768] veth0_vlan: entered promiscuous mode [ 92.797388][ T5766] veth0_vlan: entered promiscuous mode [ 92.860643][ T5768] veth1_vlan: entered promiscuous mode [ 92.903483][ T5766] veth1_vlan: entered promiscuous mode [ 93.036747][ T5768] veth0_macvtap: entered promiscuous mode [ 93.059856][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.067724][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.103740][ T5768] veth1_macvtap: entered promiscuous mode [ 93.134261][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.148591][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.182094][ T5766] veth0_macvtap: entered promiscuous mode [ 93.192670][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.207036][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.218753][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.234365][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.247134][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.272824][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.283604][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.294068][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.306686][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.327412][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.342540][ T5766] veth1_macvtap: entered promiscuous mode [ 93.381915][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.400670][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.418255][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.427321][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.489838][ T5776] Bluetooth: hci3: command tx timeout [ 93.569186][ T5776] Bluetooth: hci1: command tx timeout [ 93.685455][ T5084] Bluetooth: hci0: command tx timeout [ 93.685480][ T5776] Bluetooth: hci2: command tx timeout [ 94.030568][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.061847][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.088295][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.105745][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.118319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 94.126900][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.150038][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.166631][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.209033][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.234983][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.253928][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.272551][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.284173][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.297724][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.312350][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.322715][ T5863] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3'. [ 94.405276][ T5766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.428602][ T5766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.437528][ T5766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.458543][ T5766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.508233][ T4534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.528806][ T4534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.607802][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.620774][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.629012][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.740906][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.774005][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.829009][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 94.932273][ T23] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 94.946939][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.510464][ T23] usb 4-1: Product: syz [ 95.748204][ T5084] Bluetooth: hci3: command tx timeout [ 95.753700][ T5084] Bluetooth: hci1: command tx timeout [ 95.759191][ T5084] Bluetooth: hci2: command tx timeout [ 95.764622][ T5084] Bluetooth: hci0: command tx timeout [ 96.461662][ T23] usb 4-1: Manufacturer: syz [ 96.466436][ T23] usb 4-1: SerialNumber: syz [ 96.614260][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.634992][ T23] usb 4-1: config 0 descriptor?? [ 96.661777][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.002815][ T23] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 002 [ 98.409776][ T28] cfg80211: failed to load regulatory.db [ 98.997595][ T5825] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.194741][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.216768][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.237330][ T5825] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 99.272243][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.324218][ T5825] usb 2-1: config 0 descriptor?? [ 99.425420][ T5905] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.437344][ T5825] usbhid 2-1:0.0: can't add hid device: -71 [ 100.451358][ T5825] usbhid: probe of 2-1:0.0 failed with error -71 [ 100.462061][ T5825] usb 2-1: USB disconnect, device number 2 [ 102.008466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.018712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 102.027333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 102.998453][ T5820] usb 4-1: USB disconnect, device number 2 [ 103.055489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 103.065394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 103.172278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 103.208627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.217210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.226634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.572862][ T5942] syz.3.20 (5942) used greatest stack depth: 17064 bytes left [ 104.844507][ T5941] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 104.874359][ T5941] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 105.308168][ T5757] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 105.459702][ T5951] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 105.466690][ T5951] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 105.576679][ T5757] usb 4-1: Using ep0 maxpacket: 32 [ 105.596196][ T5757] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 105.636697][ T5757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.666769][ T5757] usb 4-1: Product: syz [ 105.690332][ T5757] usb 4-1: Manufacturer: syz [ 105.711749][ T5757] usb 4-1: SerialNumber: syz [ 105.747389][ T5757] usb 4-1: config 0 descriptor?? [ 105.980352][ T5757] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 003 [ 112.375973][ T5820] usb 4-1: USB disconnect, device number 3 [ 115.119627][ T6000] process 'syz.2.38' launched './file0' with NULL argv: empty string added [ 115.232840][ T5988] vxcan1: entered promiscuous mode [ 115.787692][ T5988] team0: Device vxcan1 is of different type [ 116.125983][ T5776] Bluetooth: hci1: hcon ffff888078040000 sent 1 < count 9 [ 116.133271][ T5776] Bluetooth: hci1: hcon ffff888078040000 sent 0 < count 9 [ 119.270147][ T6019] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 119.278889][ T6019] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 119.298572][ T6030] netlink: 20 bytes leftover after parsing attributes in process `syz.0.47'. [ 119.319339][ T6030] netlink: 36 bytes leftover after parsing attributes in process `syz.0.47'. [ 119.858192][ T5757] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 120.048149][ T5757] usb 4-1: Using ep0 maxpacket: 16 [ 120.086248][ T5757] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 120.105258][ T5757] usb 4-1: config 0 has no interface number 0 [ 120.126742][ T5757] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 120.148397][ T5820] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 120.172263][ T5757] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 120.181595][ T5757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.189813][ T5757] usb 4-1: Product: syz [ 120.194691][ T5757] usb 4-1: Manufacturer: syz [ 120.199514][ T5757] usb 4-1: SerialNumber: syz [ 120.233498][ T5757] usb 4-1: config 0 descriptor?? [ 120.338325][ T5820] usb 3-1: Using ep0 maxpacket: 32 [ 120.350435][ T5820] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 120.359767][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.368618][ T5820] usb 3-1: Product: syz [ 120.372861][ T5820] usb 3-1: Manufacturer: syz [ 120.377528][ T5820] usb 3-1: SerialNumber: syz [ 120.386295][ T5820] usb 3-1: config 0 descriptor?? [ 120.702677][ T5757] usbtouchscreen: probe of 4-1:0.214 failed with error -32 [ 120.751260][ T5820] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 002 [ 120.778636][ T5757] usb 4-1: USB disconnect, device number 4 [ 120.945254][ T6044] block device autoloading is deprecated and will be removed. [ 121.445453][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'. [ 122.170462][ T6056] netlink: 44 bytes leftover after parsing attributes in process `syz.1.52'. [ 123.404665][ T6073] fuse: Bad value for 'fd' [ 123.695207][ T789] usb 3-1: USB disconnect, device number 2 [ 124.310210][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 124.538540][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 124.553396][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 124.580166][ T8] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 124.606868][ T8] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 124.642625][ T8] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 124.688279][ T8] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 124.726011][ T8] usb 4-1: config 1 interface 0 has no altsetting 0 [ 124.781123][ T8] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 124.872256][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.919955][ T8] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 125.078147][ T5757] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 125.125506][ T8] scsi host1: usb-storage 4-1:1.0 [ 125.271771][ T5757] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.283192][ T5757] usb 3-1: config 0 has no interface number 0 [ 125.288436][ T789] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 125.292658][ T5757] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 125.306376][ T5757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.330536][ T8] usb 4-1: USB disconnect, device number 5 [ 125.356620][ T5757] usb 3-1: config 0 descriptor?? [ 125.398990][ T5757] usb 3-1: selecting invalid altsetting 1 [ 125.407536][ T5757] dvb_ttusb_budget: ttusb_init_controller: error [ 125.415238][ T5757] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 125.488582][ T789] usb 1-1: Using ep0 maxpacket: 32 [ 125.524797][ T789] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 125.537757][ T789] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.548961][ T789] usb 1-1: config 0 has no interface number 0 [ 125.555134][ T789] usb 1-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 125.586520][ T789] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 125.623040][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.642818][ T789] usb 1-1: Product: syz [ 125.662016][ T789] usb 1-1: Manufacturer: syz [ 125.666728][ T789] usb 1-1: SerialNumber: syz [ 125.669037][ T5757] DVB: Unable to find symbol cx22700_attach() [ 125.692614][ T789] usb 1-1: config 0 descriptor?? [ 125.774205][ T5757] DVB: Unable to find symbol tda10046_attach() [ 125.783656][ T5757] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 125.796299][ T5757] usb 3-1: USB disconnect, device number 3 [ 126.292523][ T6102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.64'. [ 128.070576][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 128.416426][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 128.688155][ T8] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 128.697277][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.707649][ T8] usb 2-1: Product: syz [ 128.717446][ T8] usb 2-1: Manufacturer: syz [ 128.958198][ T8] usb 2-1: SerialNumber: syz [ 128.982588][ T8] usb 2-1: config 0 descriptor?? [ 129.202562][ T5757] usb 1-1: USB disconnect, device number 2 [ 131.118204][ T8] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate [ 131.126803][ T8] RobotFuzz Open Source InterFace, OSIF: probe of 2-1:0.0 failed with error -71 [ 131.225268][ T8] usb 2-1: USB disconnect, device number 3 [ 132.463773][ T6125] netlink: 108 bytes leftover after parsing attributes in process `syz.0.76'. [ 132.503963][ T6125] netlink: 92 bytes leftover after parsing attributes in process `syz.0.76'. [ 134.322201][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.329111][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.259261][ T6136] netlink: 9 bytes leftover after parsing attributes in process `syz.3.72'. [ 136.268363][ T6136] 0·: renamed from hsr0 (while UP) [ 136.292695][ T6136] 0·: entered allmulticast mode [ 136.297686][ T6136] hsr_slave_0: entered allmulticast mode [ 136.303413][ T6136] hsr_slave_1: entered allmulticast mode [ 136.309743][ T6136] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 138.088293][ T789] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 138.298178][ T789] usb 1-1: Using ep0 maxpacket: 32 [ 138.319877][ T789] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 138.353526][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.388876][ T789] usb 1-1: Product: syz [ 138.415162][ T789] usb 1-1: Manufacturer: syz [ 138.430959][ T789] usb 1-1: SerialNumber: syz [ 138.470776][ T789] usb 1-1: config 0 descriptor?? [ 138.686119][ T789] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 003 [ 142.496540][ T28] usb 1-1: USB disconnect, device number 3 [ 142.558145][ T5820] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 142.868207][ T5820] usb 4-1: Using ep0 maxpacket: 8 [ 142.882601][ T5820] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 142.905609][ T5820] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 142.916137][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.924377][ T5820] usb 4-1: Product: syz [ 142.979171][ T5820] usb 4-1: Manufacturer: syz [ 142.998366][ T5820] usb 4-1: SerialNumber: syz [ 143.034527][ T5820] usb 4-1: config 0 descriptor?? [ 143.107847][ T5820] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 143.116117][ T5820] usb 4-1: setting power ON [ 143.122009][ T5820] dvb-usb: bulk message failed: -22 (2/0) [ 143.163884][ T5820] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 143.179197][ T5820] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 143.187737][ T5820] usb 4-1: media controller created [ 143.276234][ T5820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.312222][ T6203] dvb-usb: bulk message failed: -22 (3/0) [ 143.328386][ T6203] cxusb: i2c wr: len=80 is too big! [ 143.328386][ T6203] [ 143.393345][ T5820] usb 4-1: selecting invalid altsetting 6 [ 143.435510][ T5820] usb 4-1: digital interface selection failed (-22) [ 143.453687][ T5820] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 143.477561][ T5820] usb 4-1: setting power OFF [ 143.485373][ T5820] dvb-usb: bulk message failed: -22 (2/0) [ 143.495371][ T5820] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 143.511510][ T5820] (NULL device *): no alternate interface [ 144.669517][ T5859] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 144.696409][ T5820] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 144.718964][ T5820] usb 4-1: USB disconnect, device number 6 [ 145.018176][ T5859] usb 1-1: Using ep0 maxpacket: 32 [ 145.027922][ T5859] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 145.045666][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.794849][ T5859] usb 1-1: Product: syz [ 145.799182][ T5859] usb 1-1: Manufacturer: syz [ 145.808308][ T5859] usb 1-1: SerialNumber: syz [ 145.816926][ T5859] usb 1-1: config 0 descriptor?? [ 146.516146][ T5859] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 004 [ 147.104971][ T6247] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 148.684240][ T5841] usb 1-1: USB disconnect, device number 4 [ 150.855527][ T6263] ntfs3: nullb0: Primary boot signature is not NTFS. [ 150.863245][ T6263] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 154.308548][ T5859] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 154.548413][ T5859] usb 1-1: Using ep0 maxpacket: 32 [ 154.560925][ T5859] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 154.579128][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.587202][ T5859] usb 1-1: Product: syz [ 154.592177][ T5859] usb 1-1: Manufacturer: syz [ 154.598344][ T5859] usb 1-1: SerialNumber: syz [ 154.618620][ T5859] usb 1-1: config 0 descriptor?? [ 154.907466][ T5859] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 005 [ 156.488149][ T6310] netlink: 28 bytes leftover after parsing attributes in process `syz.2.132'. [ 156.501761][ T6310] netlink: 28 bytes leftover after parsing attributes in process `syz.2.132'. [ 160.587755][ T789] usb 1-1: USB disconnect, device number 5 [ 162.548139][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 162.689504][ T6349] syz.0.143[6349]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 162.988140][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 163.013257][ T8] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 163.042569][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.095735][ T8] usb 2-1: Product: syz [ 163.128793][ T8] usb 2-1: Manufacturer: syz [ 163.133669][ T8] usb 2-1: SerialNumber: syz [ 163.378386][ T8] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 163.411811][ T8] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 163.428829][ T8] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 163.447613][ T8] usb 2-1: media controller created [ 163.494567][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.607569][ T8] zl10353_read_register: readreg error (reg=127, ret==-32) [ 163.782382][ T6358] ntfs3: nullb0: Primary boot signature is not NTFS. [ 163.793725][ T6358] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 163.812028][ T8] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 163.849398][ T8] usb 2-1: USB disconnect, device number 4 [ 165.948150][ T5859] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 166.130844][ T5859] usb 3-1: unable to get BOS descriptor or descriptor too short [ 166.392802][ T5859] usb 3-1: not running at top speed; connect to a high speed hub [ 166.430030][ T5859] usb 3-1: config 9 has an invalid interface number: 65 but max is 1 [ 166.456677][ T5859] usb 3-1: config 9 has an invalid interface number: 236 but max is 1 [ 166.486790][ T5859] usb 3-1: config 9 has no interface number 0 [ 166.510467][ T5859] usb 3-1: config 9 has no interface number 1 [ 166.528979][ T5859] usb 3-1: config 9 interface 65 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 166.558207][ T5859] usb 3-1: config 9 interface 65 has no altsetting 0 [ 166.761059][ T5859] usb 3-1: config 9 interface 236 has no altsetting 0 [ 166.771246][ T5859] usb 3-1: New USB device found, idVendor=2357, idProduct=0115, bcdDevice=3f.8b [ 166.792765][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.801329][ T5859] usb 3-1: Product: syz [ 166.805562][ T5859] usb 3-1: Manufacturer: syz [ 166.817274][ T5859] usb 3-1: SerialNumber: syz [ 167.710971][ T5859] usb 3-1: USB disconnect, device number 4 [ 168.476293][ T6391] netlink: 9 bytes leftover after parsing attributes in process `syz.2.157'. [ 168.485906][ T6391] 0·: renamed from hsr0 (while UP) [ 168.948417][ T6391] 0·: entered allmulticast mode [ 168.958263][ T6391] hsr_slave_0: entered allmulticast mode [ 168.964252][ T6391] hsr_slave_1: entered allmulticast mode [ 168.971444][ T6391] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 170.663077][ T6405] ntfs3: nullb0: Primary boot signature is not NTFS. [ 170.690236][ T6405] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 173.446340][ T6422] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 173.617630][ T8] IPVS: starting estimator thread 0... [ 174.898406][ T6427] IPVS: using max 17 ests per chain, 40800 per kthread [ 175.982852][ T6442] Zero length message leads to an empty skb [ 180.612169][ T6481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.183'. [ 184.924606][ T6533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.194'. [ 187.600204][ T6549] overlayfs: failed to get inode (-116) [ 187.606409][ T6549] overlayfs: failed to get inode (-116) [ 187.626826][ T6549] overlayfs: failed to get inode (-116) [ 187.633546][ T6549] overlayfs: failed to get inode (-116) [ 188.978402][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 189.335654][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 189.725975][ T8] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 189.737725][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.752774][ T8] usb 3-1: Product: syz [ 189.757470][ T8] usb 3-1: Manufacturer: syz [ 189.766243][ T8] usb 3-1: SerialNumber: syz [ 189.800498][ T8] usb 3-1: config 0 descriptor?? [ 190.054646][ T8] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 005 [ 191.688272][ T6591] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 191.752451][ T5820] IPVS: starting estimator thread 0... [ 191.868169][ T6592] IPVS: using max 25 ests per chain, 60000 per kthread [ 192.074123][ T9] usb 3-1: USB disconnect, device number 5 [ 194.696930][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.704368][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.590051][ T6626] binder: 6625:6626 unknown command 0 [ 195.622840][ T6626] binder: 6625:6626 ioctl c0306201 200000000a40 returned -22 [ 196.028115][ T5820] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 196.568090][ T5820] usb 2-1: Using ep0 maxpacket: 32 [ 196.653289][ T5820] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 196.709646][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.717933][ T5820] usb 2-1: Product: syz [ 196.727213][ T5820] usb 2-1: Manufacturer: syz [ 196.732594][ T5820] usb 2-1: SerialNumber: syz [ 196.849286][ T5820] usb 2-1: config 0 descriptor?? [ 196.927603][ T28] IPVS: starting estimator thread 0... [ 197.065358][ T6637] IPVS: using max 15 ests per chain, 36000 per kthread [ 197.251216][ T5820] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 005 [ 199.408274][ T8] usb 2-1: USB disconnect, device number 5 [ 203.200836][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 203.390986][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 203.418807][ T6668] ceph: No mds server is up or the cluster is laggy [ 204.161893][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 204.168118][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 204.721523][ T8] libceph: connect (1)[c::]:6789 error -101 [ 204.947675][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 205.139511][ T6667] ALSA: mixer_oss: invalid OSS volume '' [ 205.182419][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 205.192856][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 205.213216][ T6686] ceph: No mds server is up or the cluster is laggy [ 205.368303][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 205.710776][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 205.717105][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 205.764062][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 205.854773][ T9] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 205.871856][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.896425][ T9] usb 3-1: Product: syz [ 206.049456][ T9] usb 3-1: Manufacturer: syz [ 206.054620][ T9] usb 3-1: SerialNumber: syz [ 206.066998][ T6684] ALSA: mixer_oss: invalid OSS volume '' [ 206.081275][ T9] usb 3-1: config 0 descriptor?? [ 206.984593][ T6697] lo: entered allmulticast mode [ 207.043034][ T6697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.934312][ T9] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: failure sending bit rate [ 207.948809][ T6698] block device autoloading is deprecated and will be removed. [ 207.956305][ T9] RobotFuzz Open Source InterFace, OSIF: probe of 3-1:0.0 failed with error -71 [ 208.076009][ T9] usb 3-1: USB disconnect, device number 6 [ 208.656567][ T6698] syz.1.245: attempt to access beyond end of device [ 208.656567][ T6698] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 213.402036][ T5820] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 213.478095][ T5825] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 213.600347][ T5820] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 213.618091][ T5820] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.629722][ T5820] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 213.639690][ T5820] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.657661][ T5084] Bluetooth: hci1: command 0x0406 tx timeout [ 213.657689][ T5774] Bluetooth: hci2: command 0x0406 tx timeout [ 213.670840][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 213.708378][ T5825] usb 4-1: Using ep0 maxpacket: 32 [ 213.728798][ T5820] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 213.761111][ T5825] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 213.822432][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 213.845356][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.906454][ T5820] usb 3-1: Product: syz [ 213.971095][ T5825] usb 4-1: Product: syz [ 213.977627][ T5820] usb 3-1: Manufacturer: syz [ 213.994219][ T5825] usb 4-1: Manufacturer: syz [ 214.031304][ T5825] usb 4-1: SerialNumber: syz [ 214.233959][ T5820] cdc_wdm 3-1:1.0: skipping garbage [ 214.249681][ T5825] usb 4-1: config 0 descriptor?? [ 214.305235][ T5820] cdc_wdm 3-1:1.0: skipping garbage [ 214.771680][ T5820] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 214.884882][ T5820] cdc_wdm 3-1:1.0: Unknown control protocol [ 214.934887][ T5825] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 007 [ 214.958854][ T5820] usb 3-1: USB disconnect, device number 7 [ 217.979637][ T28] usb 4-1: USB disconnect, device number 7 [ 218.309897][ T6771] netlink: 32 bytes leftover after parsing attributes in process `syz.2.268'. [ 219.465074][ T6774] netlink: 20 bytes leftover after parsing attributes in process `syz.1.269'. [ 222.189665][ T6795] netlink: 830 bytes leftover after parsing attributes in process `syz.2.274'. [ 222.199097][ T6795] bond_slave_0: entered promiscuous mode [ 222.205156][ T6795] bond_slave_1: entered promiscuous mode [ 222.612243][ T6797] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 222.651485][ T6797] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 223.808255][ T5820] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 224.008632][ T5820] usb 2-1: Using ep0 maxpacket: 32 [ 224.039472][ T5820] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 224.088087][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.097493][ T5820] usb 2-1: Product: syz [ 224.104394][ T5820] usb 2-1: Manufacturer: syz [ 224.109233][ T5820] usb 2-1: SerialNumber: syz [ 224.117888][ T5820] usb 2-1: config 0 descriptor?? [ 224.366211][ T5820] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 006 [ 225.859790][ T6834] binder: 6832:6834 ioctl 400c620e 0 returned -14 [ 226.938785][ T6828] i2c i2c-1: failure reading status [ 227.039021][ T5841] usb 2-1: USB disconnect, device number 6 [ 231.868197][ T5825] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 232.788211][ T5825] usb 2-1: Using ep0 maxpacket: 32 [ 232.804123][ T5825] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 232.814201][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.838271][ T5825] usb 2-1: Product: syz [ 232.842561][ T5825] usb 2-1: Manufacturer: syz [ 232.847159][ T5825] usb 2-1: SerialNumber: syz [ 232.945494][ T5825] usb 2-1: config 0 descriptor?? [ 233.388707][ T5825] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 007 [ 234.427229][ T27] audit: type=1326 audit(1768581440.189:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.3.303" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd24e38f749 code=0x0 [ 235.571633][ T6907] netlink: 830 bytes leftover after parsing attributes in process `syz.0.306'. [ 235.581044][ T6907] bond_slave_0: entered promiscuous mode [ 235.586818][ T6907] bond_slave_1: entered promiscuous mode [ 236.292832][ T6886] i2c i2c-1: failure reading status [ 236.351862][ T5825] usb 2-1: USB disconnect, device number 7 [ 238.899717][ T6932] binder: 6929:6932 ioctl 400c620e 0 returned -14 [ 239.970207][ T6941] cgroup: fork rejected by pids controller in /syz2 [ 240.136628][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 240.348218][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 240.364913][ T8] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 240.379173][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.387364][ T8] usb 4-1: Product: syz [ 240.391713][ T8] usb 4-1: Manufacturer: syz [ 240.397597][ T6979] syz.2.319 uses obsolete (PF_INET,SOCK_PACKET) [ 240.404071][ T8] usb 4-1: SerialNumber: syz [ 240.415192][ T8] usb 4-1: config 0 descriptor?? [ 240.941979][ T6985] netlink: 830 bytes leftover after parsing attributes in process `syz.1.318'. [ 240.951929][ T6985] bond_slave_0: entered promiscuous mode [ 240.957780][ T6985] bond_slave_1: entered promiscuous mode [ 240.964946][ T8] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 008 [ 243.649072][ T6986] i2c i2c-1: failure reading status [ 244.481502][ T9] usb 4-1: USB disconnect, device number 8 [ 247.468076][ T7041] comedi comedi0: fl512: I/O port conflict (0x3,16) [ 247.568534][ T5841] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 247.838236][ T5841] usb 2-1: Using ep0 maxpacket: 32 [ 247.861686][ T5841] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 247.887103][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.906915][ T5841] usb 2-1: Product: syz [ 247.911395][ T5841] usb 2-1: Manufacturer: syz [ 247.916019][ T5841] usb 2-1: SerialNumber: syz [ 248.094610][ T5841] usb 2-1: config 0 descriptor?? [ 248.359590][ T7046] cgroup: fork rejected by pids controller in /syz0 [ 249.140576][ T5841] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 008 [ 250.518270][ T5841] usb 2-1: USB disconnect, device number 8 [ 252.428877][ T27] audit: type=1326 audit(1768581458.189:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.1.339" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e6158f749 code=0x0 [ 252.969589][ T7109] tipc: Started in network mode [ 252.978085][ T7109] tipc: Node identity 4, cluster identity 4711 [ 252.984304][ T7109] tipc: Node number set to 4 [ 254.442707][ T7128] netlink: 830 bytes leftover after parsing attributes in process `syz.2.348'. [ 254.879742][ T5881] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 255.348069][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 255.374907][ T5881] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 255.384659][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.416553][ T5881] usb 1-1: Product: syz [ 255.425385][ T5881] usb 1-1: Manufacturer: syz [ 255.441590][ T5881] usb 1-1: SerialNumber: syz [ 255.459879][ T5881] usb 1-1: config 0 descriptor?? [ 255.700474][ T5881] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 006 [ 256.190446][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.197559][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.771539][ T7156] sched: RT throttling activated [ 260.199188][ T7151] i2c i2c-1: failure reading status [ 260.460789][ T5881] usb 1-1: USB disconnect, device number 6 [ 260.665015][ T7163] netlink: 228 bytes leftover after parsing attributes in process `syz.0.356'. [ 261.302290][ T5881] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 261.392701][ T7175] netlink: 830 bytes leftover after parsing attributes in process `syz.2.359'. [ 261.680747][ T5881] usb 1-1: Using ep0 maxpacket: 8 [ 261.702193][ T5881] usb 1-1: unable to get BOS descriptor or descriptor too short [ 261.713594][ T5881] usb 1-1: config 8 has an invalid interface number: 255 but max is 0 [ 261.729913][ T5881] usb 1-1: config 8 has no interface number 0 [ 261.739994][ T5881] usb 1-1: config 8 interface 255 has no altsetting 0 [ 261.769980][ T5881] usb 1-1: string descriptor 0 read error: -22 [ 261.777534][ T5881] usb 1-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 261.799345][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.449307][ T7181] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 262.475530][ T5881] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.0-1, 00:00:00:00:00:00. [ 262.640361][ T7180] comedi comedi0: fl512: I/O port conflict (0x3,16) [ 262.679900][ T5881] usb 1-1: USB disconnect, device number 7 [ 262.930362][ T7192] syzkaller1: entered promiscuous mode [ 262.936056][ T7192] syzkaller1: entered allmulticast mode [ 263.990741][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 265.008528][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 265.022279][ T9] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 265.038052][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.107024][ T9] usb 2-1: Product: syz [ 265.191420][ T9] usb 2-1: Manufacturer: syz [ 265.260397][ T9] usb 2-1: SerialNumber: syz [ 265.376323][ T7213] trusted_key: syz.3.369 sent an empty control message without MSG_MORE. [ 265.449882][ T7213] netlink: 830 bytes leftover after parsing attributes in process `syz.3.369'. [ 265.464114][ T7213] bond_slave_0: entered promiscuous mode [ 265.470121][ T7213] bond_slave_1: entered promiscuous mode [ 265.639187][ T9] usb 2-1: config 0 descriptor?? [ 266.214125][ T9] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate [ 266.238080][ T9] RobotFuzz Open Source InterFace, OSIF: probe of 2-1:0.0 failed with error -71 [ 266.261743][ T9] usb 2-1: USB disconnect, device number 9 [ 266.867148][ T7223] ubi31: attaching mtd0 [ 266.888271][ T7223] ubi31: scanning is finished [ 266.893166][ T7223] ubi31: empty MTD device detected [ 267.937739][ T7223] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 269.612289][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 270.095861][ T7242] comedi comedi0: fl512: I/O port conflict (0x3,16) [ 270.108089][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 270.129878][ T9] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 270.138291][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 270.889511][ T9] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 270.900758][ T9] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 270.914018][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 270.923618][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 270.948011][ T9] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 270.956494][ T9] usb 3-1: Product: syz [ 270.982940][ T9] usb 3-1: Manufacturer: syz [ 270.987601][ T9] usb 3-1: SerialNumber: syz [ 271.007163][ T9] usb 3-1: config 0 descriptor?? [ 271.034828][ T9] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 271.139660][ T9] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 271.601420][ T9] usb 3-1: USB disconnect, device number 8 [ 271.627438][ T9] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 272.502601][ T7267] ubi31: attaching mtd0 [ 272.517999][ T7267] ubi31: scanning is finished [ 273.562360][ T5867] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 273.574686][ T7267] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 273.918063][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 273.987005][ T5867] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 274.018037][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.237340][ T5867] usb 1-1: Product: syz [ 274.258146][ T5867] usb 1-1: Manufacturer: syz [ 274.268855][ T5867] usb 1-1: SerialNumber: syz [ 274.299627][ T5867] usb 1-1: config 0 descriptor?? [ 275.468532][ T7278] netlink: 830 bytes leftover after parsing attributes in process `syz.2.383'. [ 275.507836][ T5867] usb 1-1: can't set config #0, error -71 [ 275.522556][ T5867] usb 1-1: USB disconnect, device number 8 [ 275.632028][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.385'. [ 277.793998][ T7290] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 278.926550][ T7303] ubi31: attaching mtd0 [ 278.942138][ T7303] ubi31: scanning is finished [ 279.971539][ T7303] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 280.083454][ T7302] usb usb8: usbfs: process 7302 (syz.1.390) did not claim interface 0 before use [ 280.988195][ T5825] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 282.902839][ T5825] usb 2-1: Using ep0 maxpacket: 32 [ 282.923981][ T5825] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 282.963215][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.010922][ T5825] usb 2-1: Product: syz [ 283.010937][ T5825] usb 2-1: Manufacturer: syz [ 283.010947][ T5825] usb 2-1: SerialNumber: syz [ 283.153261][ T5825] usb 2-1: config 0 descriptor?? [ 283.221047][ T7323] netlink: 830 bytes leftover after parsing attributes in process `syz.0.396'. [ 283.626613][ T5825] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate [ 283.659177][ T5825] RobotFuzz Open Source InterFace, OSIF: probe of 2-1:0.0 failed with error -71 [ 283.709385][ T5825] usb 2-1: USB disconnect, device number 10 [ 285.965136][ T7345] ubi31: attaching mtd0 [ 285.979434][ T7345] ubi31: scanning is finished [ 287.009665][ T7345] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 287.171821][ T5779] Bluetooth: hci3: unexpected event for opcode 0x2029 [ 287.999985][ T5881] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 288.258061][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 288.300051][ T5881] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 288.309357][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.317359][ T5881] usb 4-1: Product: syz [ 288.348336][ T5881] usb 4-1: Manufacturer: syz [ 288.364506][ T5881] usb 4-1: SerialNumber: syz [ 288.377043][ T5881] usb 4-1: config 0 descriptor?? [ 288.816409][ T7358] netlink: 830 bytes leftover after parsing attributes in process `syz.1.406'. [ 288.996003][ T5881] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 009 [ 289.179302][ T7359] i2c i2c-1: failure reading data [ 290.550431][ T7370] netlink: 'syz.1.410': attribute type 10 has an invalid length. [ 290.595544][ T7370] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 290.610873][ T5867] usb 4-1: USB disconnect, device number 9 [ 290.624679][ T7370] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 291.058422][ T5881] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 291.250649][ T5779] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 291.259633][ T5779] Bluetooth: hci3: Injecting HCI hardware error event [ 291.270250][ T5779] Bluetooth: hci3: hardware error 0x00 [ 291.434398][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 291.495487][ T5881] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 291.664938][ T5881] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 291.694632][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.704832][ T5881] usb 3-1: Product: syz [ 291.712302][ T5881] usb 3-1: Manufacturer: syz [ 291.716940][ T5881] usb 3-1: SerialNumber: syz [ 291.738159][ T5881] usb 3-1: config 0 descriptor?? [ 293.564290][ T5779] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 293.751680][ T5841] usb 3-1: USB disconnect, device number 9 [ 295.508104][ T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 295.712766][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 295.731141][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 295.845736][ T23] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 295.857856][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.871538][ T23] usb 2-1: Product: syz [ 295.880034][ T23] usb 2-1: Manufacturer: syz [ 296.327572][ T23] usb 2-1: SerialNumber: syz [ 296.598024][ T5881] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 296.621514][ T23] usb 2-1: config 0 descriptor?? [ 296.645974][ T23] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 296.658235][ T23] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 296.803243][ T5881] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 296.842401][ T5881] usb 3-1: config 0 has no interface number 0 [ 296.856259][ T5881] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 296.876305][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.906765][ T5881] usb 3-1: Product: syz [ 296.912658][ T5881] usb 3-1: Manufacturer: syz [ 296.917523][ T5881] usb 3-1: SerialNumber: syz [ 296.940071][ T5881] usb 3-1: config 0 descriptor?? [ 297.185151][ T5881] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 297.238340][ T23] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 297.267712][ T5881] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 297.384131][ T5881] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 297.465505][ T5881] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 297.545767][ T5881] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 297.688840][ T23] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 297.698714][ T5881] usb 3-1: USB disconnect, device number 10 [ 297.739115][ T23] em28xx 2-1:0.0: board has no eeprom [ 297.782020][ T5881] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 297.976849][ T5881] keyspan 3-1:0.133: device disconnected [ 299.079582][ T7413] em28xx 2-1:0.0: reading from i2c device at 0x1a4 failed (error=-5) [ 299.140507][ T23] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 299.190028][ T23] em28xx 2-1:0.0: dvb set to bulk mode. [ 299.196110][ T5825] em28xx 2-1:0.0: Binding DVB extension [ 299.254788][ T23] usb 2-1: USB disconnect, device number 11 [ 299.286568][ T23] em28xx 2-1:0.0: Disconnecting em28xx [ 300.997084][ T5825] em28xx 2-1:0.0: Registering input extension [ 301.019335][ T23] em28xx 2-1:0.0: Closing input extension [ 302.742750][ T23] em28xx 2-1:0.0: Freeing device [ 304.224651][ T7453] ubi31: attaching mtd0 [ 304.240069][ T7453] ubi31: scanning is finished [ 304.399229][ T7453] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 304.428116][ T7453] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 304.435497][ T7453] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 304.492994][ T7453] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 304.664984][ T7453] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 304.685241][ T7453] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 304.742638][ T7453] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1302290643 [ 305.397540][ T7453] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 305.449838][ T7456] ubi31: background thread "ubi_bgt31d" started, PID 7456 [ 305.825285][ T7462] netlink: 9 bytes leftover after parsing attributes in process `syz.2.441'. [ 305.834364][ T7462] 1·: renamed from 70· (while UP) [ 305.858484][ T7462] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 306.698478][ T5825] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 307.028755][ T5825] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 307.048050][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.091152][ T5825] usb 4-1: config 0 descriptor?? [ 307.279023][ T5825] cp210x 4-1:0.0: cp210x converter detected [ 308.112837][ T7487] netlink: 830 bytes leftover after parsing attributes in process `syz.0.446'. [ 308.329604][ T5825] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 308.700656][ T5825] usb 4-1: cp210x converter now attached to ttyUSB0 [ 308.989948][ T5881] usb 4-1: USB disconnect, device number 10 [ 309.057244][ T5881] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 309.783643][ T5881] cp210x 4-1:0.0: device disconnected [ 313.839479][ T7521] capability: warning: `syz.2.457' uses 32-bit capabilities (legacy support in use) [ 317.729019][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.735373][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.008366][ T7561] netlink: 830 bytes leftover after parsing attributes in process `syz.3.467'. [ 324.343511][ T7573] ubi31: detaching mtd0 [ 325.422911][ T7573] ubi31: mtd0 is detached [ 326.459230][ T5841] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 326.798168][ T5841] usb 4-1: Using ep0 maxpacket: 8 [ 326.810509][ T5841] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 326.840961][ T5841] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 326.864886][ T5841] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 326.888571][ T5841] usb 4-1: Product: syz [ 326.892811][ T5841] usb 4-1: Manufacturer: syz [ 326.914266][ T5841] usb 4-1: SerialNumber: syz [ 327.162208][ T5841] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 327.181478][ T5841] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 327.198157][ T5841] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 327.223995][ T5841] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 327.268269][ T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 329.138320][ T5841] usb 4-1: palm_os_3_probe - error -110 getting bytes available request [ 329.146806][ T5841] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 329.162977][ T5841] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 329.366961][ T5841] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 329.409873][ T5841] usb 4-1: USB disconnect, device number 11 [ 329.889767][ T23] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 329.983781][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.114094][ T23] usb 1-1: Product: syz [ 330.134291][ T23] usb 1-1: Manufacturer: syz [ 330.155523][ T23] usb 1-1: SerialNumber: syz [ 330.212492][ T23] usb 1-1: can't set config #1, error -71 [ 330.277359][ T23] usb 1-1: USB disconnect, device number 9 [ 330.499292][ T5841] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 330.719495][ T7601] input: syz0 as /devices/virtual/input/input8 [ 330.810434][ T5841] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 330.828225][ T23] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 330.839435][ T5841] visor 4-1:1.0: device disconnected [ 331.113215][ T23] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 331.124965][ T23] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 331.196071][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 331.295388][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 331.444975][ T23] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 331.455928][ T23] usb 1-1: Product: syz [ 331.460568][ T23] usb 1-1: Manufacturer: syz [ 331.465294][ T23] usb 1-1: SerialNumber: syz [ 331.630724][ T23] usb 1-1: config 0 descriptor?? [ 331.706807][ T23] usb 1-1: selecting invalid altsetting 0 [ 331.850733][ T7597] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 331.925805][ T23] usb 1-1: USB disconnect, device number 10 [ 332.037797][ T7613] netlink: 830 bytes leftover after parsing attributes in process `syz.1.478'. [ 333.339365][ T7620] ubi31: attaching mtd0 [ 333.355650][ T7620] ubi31: scanning is finished [ 334.609269][ T7620] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 335.878291][ T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 335.886127][ T5757] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 336.090908][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.107300][ T5757] usb 2-1: Using ep0 maxpacket: 32 [ 336.135850][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.148044][ T5757] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 336.156443][ T5757] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 336.179146][ T23] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 336.196891][ T5757] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.207128][ T23] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 336.215743][ T23] usb 1-1: Manufacturer: syz [ 336.221303][ T5757] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 336.239274][ T23] usb 1-1: config 0 descriptor?? [ 336.249119][ T5757] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 336.268209][ T5757] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 336.281639][ T5757] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 336.292386][ T5757] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.315703][ T5757] usb 2-1: config 0 descriptor?? [ 336.709091][ T23] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 336.716117][ T23] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 336.724081][ T23] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 336.732064][ T23] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 336.739361][ T23] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 336.746395][ T23] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 336.755785][ T23] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 336.792579][ T23] pyra 0003:1E7D:2CF6.0001: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 337.780166][ T23] pyra 0003:1E7D:2CF6.0001: couldn't init struct pyra_device [ 337.805045][ T23] pyra 0003:1E7D:2CF6.0001: couldn't install mouse [ 337.845133][ T23] pyra: probe of 0003:1E7D:2CF6.0001 failed with error -71 [ 337.887074][ T23] usb 1-1: USB disconnect, device number 11 [ 337.902237][ T5778] udevd[5778]: setting owner of /dev/bus/usb/001/011 to uid=0, gid=0 failed: No such file or directory [ 338.770386][ T7643] fido_id[7643]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 339.141350][ T5825] usb 2-1: USB disconnect, device number 12 [ 339.970318][ T7653] netlink: 830 bytes leftover after parsing attributes in process `syz.0.495'. [ 344.328639][ T7697] netlink: 830 bytes leftover after parsing attributes in process `syz.1.509'. [ 345.155862][ T7700] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 347.518179][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 347.888426][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 347.958519][ T9] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 348.083262][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.198145][ T9] usb 4-1: Product: syz [ 348.211111][ T9] usb 4-1: Manufacturer: syz [ 348.241621][ T9] usb 4-1: SerialNumber: syz [ 348.273987][ T9] usb 4-1: config 0 descriptor?? [ 348.520765][ T9] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 012 [ 349.706172][ T5820] usb 4-1: USB disconnect, device number 12 [ 351.058087][ T5825] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 351.448067][ T5825] usb 3-1: Using ep0 maxpacket: 16 [ 351.457707][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.457757][ T5825] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 351.457781][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.464572][ T5825] usb 3-1: config 0 descriptor?? [ 352.834765][ T5825] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 353.148410][ T5820] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 353.359136][ T5820] usb 1-1: Using ep0 maxpacket: 32 [ 353.535539][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.587701][ T5757] usb 3-1: USB disconnect, device number 11 [ 353.613419][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.665616][ T5820] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 353.713912][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.746958][ T5820] usb 1-1: config 0 descriptor?? [ 353.838162][ T5825] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 353.974274][ T7766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.993644][ T7766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.184175][ T5825] usb 4-1: Using ep0 maxpacket: 32 [ 354.203965][ T5825] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 354.219403][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.227589][ T5825] usb 4-1: Product: syz [ 354.236332][ T5825] usb 4-1: Manufacturer: syz [ 354.245609][ T5825] usb 4-1: SerialNumber: syz [ 354.259553][ T5825] usb 4-1: config 0 descriptor?? [ 354.553858][ T7779] warning: `syz.0.532' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 355.019533][ T5825] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 013 [ 356.664719][ T5841] usb 4-1: USB disconnect, device number 13 [ 356.837845][ T5820] usbhid 1-1:0.0: can't add hid device: -71 [ 356.845813][ T5820] usbhid: probe of 1-1:0.0 failed with error -71 [ 356.896034][ T5820] usb 1-1: USB disconnect, device number 12 [ 357.454669][ T7786] netlink: 830 bytes leftover after parsing attributes in process `syz.1.538'. [ 357.537750][ T7793] netlink: 96 bytes leftover after parsing attributes in process `syz.0.539'. [ 360.331159][ T7811] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 361.890090][ T5881] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 362.123196][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 362.161030][ T5881] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 362.197999][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.218132][ T5881] usb 2-1: Product: syz [ 362.222370][ T5881] usb 2-1: Manufacturer: syz [ 362.245576][ T5881] usb 2-1: SerialNumber: syz [ 362.263238][ T5881] usb 2-1: config 0 descriptor?? [ 362.682478][ T5881] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 013 [ 364.441044][ T5841] usb 2-1: USB disconnect, device number 13 [ 365.010870][ T7831] netlink: 830 bytes leftover after parsing attributes in process `syz.0.551'. [ 365.149833][ T7833] bridge_slave_0: left allmulticast mode [ 365.155552][ T7833] bridge_slave_0: left promiscuous mode [ 365.164275][ T7833] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.265726][ T7833] bridge_slave_1: left allmulticast mode [ 365.277181][ T7833] bridge_slave_1: left promiscuous mode [ 365.286516][ T7833] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.337878][ T7833] bond0: (slave bond_slave_0): Releasing backup interface [ 365.352412][ T7833] bond_slave_0: left promiscuous mode [ 365.396940][ T7833] bond0: (slave bond_slave_1): Releasing backup interface [ 365.417450][ T7833] bond_slave_1: left promiscuous mode [ 365.497368][ T7833] team0: Port device team_slave_0 removed [ 365.558217][ T7833] team0: Port device team_slave_1 removed [ 365.579429][ T7833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.597366][ T7833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.620938][ T7833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.632803][ T7833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.820788][ T23] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 366.084694][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 366.368520][ T23] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 366.412902][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.208916][ T23] usb 1-1: Product: syz [ 368.219672][ T23] usb 1-1: Manufacturer: syz [ 368.224576][ T23] usb 1-1: SerialNumber: syz [ 368.237184][ T23] usb 1-1: config 0 descriptor?? [ 368.502480][ T23] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: failure sending bit rate [ 368.518110][ T23] RobotFuzz Open Source InterFace, OSIF: probe of 1-1:0.0 failed with error -71 [ 368.542947][ T23] usb 1-1: USB disconnect, device number 13 [ 372.287465][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 372.302917][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 372.468666][ T7869] ceph: No mds server is up or the cluster is laggy [ 373.227767][ T7881] netlink: 32 bytes leftover after parsing attributes in process `syz.3.568'. [ 373.468206][ T5820] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 373.688190][ T5820] usb 2-1: Using ep0 maxpacket: 32 [ 373.797490][ T5820] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 373.807260][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.815525][ T5820] usb 2-1: Product: syz [ 373.819893][ T5820] usb 2-1: Manufacturer: syz [ 373.825383][ T5820] usb 2-1: SerialNumber: syz [ 373.854818][ T5820] usb 2-1: config 0 descriptor?? [ 374.120216][ T7885] netlink: 830 bytes leftover after parsing attributes in process `syz.0.564'. [ 374.166674][ T5820] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 014 [ 376.209225][ T5820] usb 2-1: USB disconnect, device number 14 [ 377.442267][ T7904] ksmbd: Unknown IPC event: 11, ignore. [ 378.502782][ T7909] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 379.310426][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.316998][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.933570][ T7917] usb usb7: usbfs: process 7917 (syz.3.576) did not claim interface 0 before use [ 380.319070][ T7925] netlink: 830 bytes leftover after parsing attributes in process `syz.0.580'. [ 380.458828][ T5881] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 380.757181][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 380.792303][ T5881] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 380.829116][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.837179][ T5881] usb 3-1: Product: syz [ 380.893489][ T5881] usb 3-1: Manufacturer: syz [ 380.911365][ T5881] usb 3-1: SerialNumber: syz [ 380.937164][ T5881] usb 3-1: config 0 descriptor?? [ 381.236671][ T5881] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 012 [ 381.990562][ T5820] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 382.179703][ T5820] usb 2-1: Using ep0 maxpacket: 8 [ 382.205375][ T5820] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 382.236405][ T5820] usb 2-1: config 0 has no interface number 0 [ 382.258027][ T5820] usb 2-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 382.289049][ T5820] usb 2-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 382.313542][ T5820] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 382.347456][ T5820] usb 2-1: New USB device found, idVendor=07c0, idProduct=1500, bcdDevice=b8.c5 [ 382.377537][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.385791][ T5820] usb 2-1: Product: syz [ 382.396825][ T5820] usb 2-1: Manufacturer: syz [ 382.402397][ T5820] usb 2-1: SerialNumber: syz [ 382.418487][ T5820] usb 2-1: config 0 descriptor?? [ 382.432636][ T5820] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 383.129355][ T5841] usb 3-1: USB disconnect, device number 12 [ 384.070855][ T7970] netlink: 830 bytes leftover after parsing attributes in process `syz.2.590'. [ 384.586792][ T7978] Trying to write to read-only block-device nullb0 [ 385.719383][ T7983] sctp: failed to load transform for md5: -2 [ 386.456965][ T5881] usb 2-1: USB disconnect, device number 15 [ 386.834961][ T7994] netlink: 'syz.3.597': attribute type 13 has an invalid length. [ 386.938664][ T7994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 387.138773][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 387.328175][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 387.340345][ T9] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 387.354329][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.363740][ T9] usb 2-1: Product: syz [ 387.372844][ T9] usb 2-1: Manufacturer: syz [ 387.377492][ T9] usb 2-1: SerialNumber: syz [ 387.389636][ T9] usb 2-1: config 0 descriptor?? [ 387.623004][ T9] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 016 [ 388.243658][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.600'. [ 389.998246][ T8009] ubi31: attaching mtd0 [ 390.003539][ T8009] ubi31: scanning is finished [ 390.314659][ T8009] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 390.737154][ T5881] usb 2-1: USB disconnect, device number 16 [ 390.936401][ T8015] netlink: 830 bytes leftover after parsing attributes in process `syz.2.601'. [ 391.612309][ T8028] ======================================================= [ 391.612309][ T8028] WARNING: The mand mount option has been deprecated and [ 391.612309][ T8028] and is ignored by this kernel. Remove the mand [ 391.612309][ T8028] option from the mount to silence this warning. [ 391.612309][ T8028] ======================================================= [ 391.649214][ T8028] 9pnet_virtio: no channels available for device 127.0.0.1 [ 392.094681][ T8028] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 392.304354][ T8026] nfs: Unknown parameter '&[#' [ 392.384537][ T8026] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 392.928278][ T5881] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 393.778307][ T8039] ubi31: attaching mtd0 [ 393.783659][ T8039] ubi31: scanning is finished [ 394.366205][ T8039] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 394.780892][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 396.649013][ T8056] netlink: 830 bytes leftover after parsing attributes in process `syz.1.616'. [ 397.437585][ T5881] usb 3-1: device descriptor read/all, error -71 [ 397.888092][ T5841] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 398.378141][ T5841] usb 4-1: Using ep0 maxpacket: 32 [ 398.693366][ T5841] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 398.714162][ T23] libceph: connect (1)[c::]:6789 error -101 [ 398.724020][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 398.731720][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.754583][ T5841] usb 4-1: Product: syz [ 398.765524][ T5841] usb 4-1: Manufacturer: syz [ 398.776494][ T5841] usb 4-1: SerialNumber: syz [ 399.638250][ T8074] ubi31: attaching mtd0 [ 399.643611][ T8074] ubi31: scanning is finished [ 399.939144][ T23] libceph: connect (1)[c::]:6789 error -101 [ 399.945241][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 399.976099][ T8062] ceph: No mds server is up or the cluster is laggy [ 399.985573][ T5841] usb 4-1: config 0 descriptor?? [ 400.019698][ T8074] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 400.276767][ T8079] netlink: 84 bytes leftover after parsing attributes in process `syz.1.623'. [ 400.298617][ T8079] nbd: must specify at least one socket [ 400.354033][ T5841] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 014 [ 401.731736][ T23] usb 4-1: USB disconnect, device number 14 [ 401.753648][ T8091] netlink: 830 bytes leftover after parsing attributes in process `syz.0.627'. [ 403.868223][ T8108] ubi31: attaching mtd0 [ 403.873635][ T8108] ubi31: scanning is finished [ 404.190858][ T8108] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 405.748362][ T5825] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 405.918026][ T5820] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 405.930004][ T8134] block nbd0: NBD_DISCONNECT [ 405.935339][ T8134] block nbd0: Send disconnect failed -32 [ 405.948052][ T5825] usb 3-1: Using ep0 maxpacket: 32 [ 405.963642][ T5825] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 405.976406][ T8132] block nbd0: Disconnected due to user request. [ 405.982990][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.995412][ T8132] block nbd0: shutting down sockets [ 406.002482][ T5825] usb 3-1: Product: syz [ 406.006781][ T5825] usb 3-1: Manufacturer: syz [ 406.022848][ T5825] usb 3-1: SerialNumber: syz [ 406.059512][ T5825] usb 3-1: config 0 descriptor?? [ 406.098092][ T5820] usb 2-1: Using ep0 maxpacket: 16 [ 406.199187][ T5820] usb 2-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config [ 406.201203][ T8137] netlink: 830 bytes leftover after parsing attributes in process `syz.0.638'. [ 406.218757][ T5820] usb 2-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 406.488416][ T5820] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 406.497982][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.506123][ T5820] usb 2-1: Product: syz [ 406.517035][ T5820] usb 2-1: Manufacturer: syz [ 406.521931][ T5820] usb 2-1: SerialNumber: syz [ 406.857438][ T5825] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 015 [ 407.161039][ T5867] usb 2-1: USB disconnect, device number 17 [ 409.944710][ T5825] usb 3-1: USB disconnect, device number 15 [ 410.002516][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 410.018071][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 410.040278][ T8156] ceph: No mds server is up or the cluster is laggy [ 410.468249][ T8147] ubi31: attaching mtd0 [ 410.473576][ T8147] ubi31: scanning is finished [ 410.798224][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 410.851866][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 410.867780][ T8147] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 411.493544][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 411.505481][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 411.564322][ T8155] ALSA: mixer_oss: invalid OSS volume '' [ 413.453782][ T8174] netlink: 830 bytes leftover after parsing attributes in process `syz.2.650'. [ 414.741354][ T8186] ubi31: attaching mtd0 [ 414.747274][ T8186] ubi31: scanning is finished [ 415.301423][ T8186] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 418.697441][ T8227] netlink: 830 bytes leftover after parsing attributes in process `syz.1.662'. [ 422.341823][ T8267] netlink: 830 bytes leftover after parsing attributes in process `syz.3.676'. [ 423.948036][ T5820] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 424.152186][ T5820] usb 1-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 424.163933][ T5820] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 424.214762][ T5820] usb 1-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 424.239756][ T5820] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 424.253406][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 424.261917][ T5820] usb 1-1: SerialNumber: syz [ 424.522474][ T5820] rndis_wlan: probe of 1-1:253.0 failed with error -22 [ 424.538322][ T5820] rndis_host: probe of 1-1:253.0 failed with error -22 [ 424.553613][ T5820] usb 1-1: USB disconnect, device number 14 [ 426.471381][ T8312] ubi31: attaching mtd0 [ 426.477361][ T8312] ubi31: scanning is finished [ 427.321196][ T8312] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 427.568333][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.690'. [ 427.898314][ T5867] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 428.131031][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 428.143999][ T5867] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 428.166374][ T5867] usb 3-1: config 0 has no interface number 0 [ 428.194712][ T5867] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 428.216539][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.239892][ T5867] usb 3-1: Product: syz [ 428.253112][ T5867] usb 3-1: Manufacturer: syz [ 428.267992][ T5867] usb 3-1: SerialNumber: syz [ 428.297576][ T5867] usb 3-1: config 0 descriptor?? [ 428.327244][ T5867] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 428.941782][ T5867] gspca_spca1528: reg_w err -71 [ 428.989345][ T5867] spca1528: probe of 3-1:0.1 failed with error -71 [ 429.032286][ T5867] usb 3-1: USB disconnect, device number 16 [ 429.182963][ T8336] netlink: 830 bytes leftover after parsing attributes in process `syz.0.691'. [ 432.689293][ T8358] netlink: 830 bytes leftover after parsing attributes in process `syz.1.703'. [ 433.249252][ T8367] syz.3.707: attempt to access beyond end of device [ 433.249252][ T8367] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 433.283910][ T8367] syz.3.707: attempt to access beyond end of device [ 433.283910][ T8367] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 433.324581][ T8367] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 433.335521][ T8367] syz.3.707: attempt to access beyond end of device [ 433.335521][ T8367] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 433.349612][ T8367] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 433.365034][ T8367] syz.3.707: attempt to access beyond end of device [ 433.365034][ T8367] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 433.998571][ T8367] syz.3.707: attempt to access beyond end of device [ 433.998571][ T8367] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 434.108174][ T8367] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 434.173211][ T8367] syz.3.707: attempt to access beyond end of device [ 434.173211][ T8367] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 434.195233][ T8367] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 434.210719][ T8367] syz.3.707: attempt to access beyond end of device [ 434.210719][ T8367] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 434.443086][ T8376] ubi31: attaching mtd0 [ 434.452027][ T8376] ubi31: scanning is finished [ 434.514533][ T8367] syz.3.707: attempt to access beyond end of device [ 434.514533][ T8367] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 434.654724][ T8376] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 434.662679][ T8376] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 434.670210][ T8376] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 434.677341][ T8376] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 434.685228][ T8376] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 434.692310][ T8376] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 434.700687][ T8376] ubi31: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1302290643 [ 434.711131][ T8376] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 434.745355][ T8378] ubi31: background thread "ubi_bgt31d" started, PID 8378 [ 434.762184][ T8367] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 434.779641][ T8367] syz.3.707: attempt to access beyond end of device [ 434.779641][ T8367] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 435.165717][ T8367] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 435.193024][ T8367] syz.3.707: attempt to access beyond end of device [ 435.193024][ T8367] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 435.234654][ T8367] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 435.293803][ T8367] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 437.028259][ T8367] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 438.750690][ T8397] netlink: 830 bytes leftover after parsing attributes in process `syz.2.713'. [ 439.558260][ T23] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 439.757961][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 439.781086][ T23] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 439.791506][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.805417][ T23] usb 3-1: Product: syz [ 439.813820][ T23] usb 3-1: Manufacturer: syz [ 439.821625][ T23] usb 3-1: SerialNumber: syz [ 439.837166][ T23] usb 3-1: config 0 descriptor?? [ 439.850539][ T23] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 439.862175][ T23] pctv452e: pctv452e_power_ctrl: 1 [ 439.862175][ T23] [ 439.903348][ T23] usb 3-1: selecting invalid altsetting 3 [ 439.924758][ T23] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 439.924758][ T23] [ 439.975555][ T23] dvb-usb: bulk message failed: -22 (5/0) [ 440.026165][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 440.053435][ T8404] dvb-usb: bulk message failed: -22 (7/0) [ 440.060976][ T23] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 440.077389][ T8404] pctv452e: I2C error -22; AA 01 00 00 00 -> aa 01 31 03 00 00 00 [ 440.088029][ T23] usb 3-1: media controller created [ 440.097538][ T23] dvb-usb: bulk message failed: -22 (8/0) [ 440.110406][ T23] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 440.126033][ T23] dvb-usb: MAC address reading failed. [ 440.172303][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 440.300276][ T23] DVB: Unable to find symbol stb0899_attach() [ 440.320460][ T23] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 441.954178][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.961081][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.158075][ T23] rc_core: IR keymap rc-tt-1500 not found [ 442.176532][ T23] Registered IR keymap rc-empty [ 442.212687][ T23] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 442.272764][ T23] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input9 [ 442.323996][ T23] dvb-usb: schedule remote query interval to 100 msecs. [ 442.335733][ T23] pctv452e: pctv452e_power_ctrl: 0 [ 442.335733][ T23] [ 442.364770][ T23] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 442.393101][ T23] usb 3-1: USB disconnect, device number 17 [ 444.260590][ T23] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 445.343099][ T8433] netlink: 830 bytes leftover after parsing attributes in process `syz.1.724'. [ 446.524666][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.727'. [ 448.318272][ T5757] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 448.508003][ T5757] usb 2-1: Using ep0 maxpacket: 16 [ 448.531279][ T5757] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 448.542969][ T5757] usb 2-1: config 0 has no interface number 0 [ 448.562269][ T5757] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 448.579180][ T5757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.598387][ T5757] usb 2-1: Product: syz [ 448.605061][ T5757] usb 2-1: Manufacturer: syz [ 448.615445][ T5757] usb 2-1: SerialNumber: syz [ 448.632134][ T5757] usb 2-1: config 0 descriptor?? [ 448.655660][ T5757] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 448.918154][ T5757] gspca_spca1528: reg_w err -71 [ 448.948080][ T5757] spca1528: probe of 2-1:0.1 failed with error -71 [ 448.993534][ T5757] usb 2-1: USB disconnect, device number 18 [ 449.796974][ T8465] netlink: 830 bytes leftover after parsing attributes in process `syz.1.734'. [ 453.910623][ T8493] ubi: mtd0 is already attached to ubi31 [ 459.070680][ T8518] netlink: 830 bytes leftover after parsing attributes in process `syz.2.744'. [ 460.948900][ T8535] ubi: mtd0 is already attached to ubi31 [ 462.711190][ T8544] bridge0: port 1(gretap0) entered blocking state [ 462.718813][ T8544] bridge0: port 1(gretap0) entered disabled state [ 462.726389][ T8544] gretap0: entered allmulticast mode [ 462.740407][ T8544] gretap0: entered promiscuous mode [ 462.750577][ T8544] bridge0: port 1(gretap0) entered blocking state [ 462.757230][ T8544] bridge0: port 1(gretap0) entered forwarding state [ 469.850387][ T8564] netlink: 830 bytes leftover after parsing attributes in process `syz.3.761'. [ 471.654742][ T8575] ubi: mtd0 is already attached to ubi31 [ 475.861663][ T8612] netlink: 830 bytes leftover after parsing attributes in process `syz.0.772'. [ 476.543020][ T8614] ubi: mtd0 is already attached to ubi31 [ 478.314736][ T8629] bridge0: port 3(gretap0) entered blocking state [ 478.321369][ T8629] bridge0: port 3(gretap0) entered disabled state [ 478.328110][ T8629] gretap0: entered allmulticast mode [ 478.335000][ T8629] gretap0: entered promiscuous mode [ 478.340990][ T8629] bridge0: port 3(gretap0) entered blocking state [ 478.347571][ T8629] bridge0: port 3(gretap0) entered forwarding state [ 484.089170][ T8658] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 484.238566][ T8658] netlink: 'syz.2.786': attribute type 1 has an invalid length. [ 484.248483][ T8658] netlink: 'syz.2.786': attribute type 4 has an invalid length. [ 485.336156][ T8667] bridge0: port 3(gretap0) entered blocking state [ 485.343786][ T8667] bridge0: port 3(gretap0) entered disabled state [ 485.352213][ T8667] gretap0: entered allmulticast mode [ 485.373202][ T8667] gretap0: entered promiscuous mode [ 485.382318][ T8667] bridge0: port 3(gretap0) entered blocking state [ 485.388931][ T8667] bridge0: port 3(gretap0) entered forwarding state [ 489.225363][ T8680] netlink: 9 bytes leftover after parsing attributes in process `syz.1.792'. [ 489.234461][ T8680] 0·: renamed from hsr0 (while UP) [ 489.736415][ T8680] 0·: entered allmulticast mode [ 489.921123][ T8680] hsr_slave_0: entered allmulticast mode [ 489.933585][ T8680] hsr_slave_1: entered allmulticast mode [ 489.968347][ T8680] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 494.109659][ T8722] bridge0: port 3(gretap0) entered blocking state [ 494.116292][ T8722] bridge0: port 3(gretap0) entered disabled state [ 494.123390][ T8722] gretap0: entered allmulticast mode [ 494.130216][ T8722] gretap0: entered promiscuous mode [ 494.137005][ T8722] bridge0: port 3(gretap0) entered blocking state [ 494.143618][ T8722] bridge0: port 3(gretap0) entered forwarding state [ 499.188059][ T5841] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 500.912772][ T5841] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 501.026842][ T8752] netlink: 36 bytes leftover after parsing attributes in process `syz.1.814'. [ 501.044387][ T8752] netlink: 16 bytes leftover after parsing attributes in process `syz.1.814'. [ 501.053918][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'. [ 501.071507][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'. [ 501.080910][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'. [ 501.153972][ T8752] bond_slave_0: left promiscuous mode [ 501.168314][ T8752] bond_slave_1: left promiscuous mode [ 501.174076][ T8752] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 501.188085][ T5841] usb 3-1: unable to read config index 4 descriptor/all [ 501.210975][ T5841] usb 3-1: can't read configurations, error -71 [ 501.892980][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.899438][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.567968][ T5820] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 505.838171][ T5820] usb 3-1: device descriptor read/64, error -71 [ 506.826029][ T8793] ubi: mtd0 is already attached to ubi31 [ 507.084974][ T5820] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 507.328558][ T5820] usb 3-1: device descriptor read/64, error -71 [ 508.118529][ T5820] usb usb3-port1: attempt power cycle [ 508.635176][ T8809] netlink: 830 bytes leftover after parsing attributes in process `syz.1.830'. [ 509.798673][ T8] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 510.127937][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 510.222250][ T8] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 510.349553][ T8] usb 2-1: config 0 has no interface number 0 [ 510.440581][ T8] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 510.599672][ T8] usb 2-1: config 0 interface 196 has no altsetting 0 [ 510.766086][ T8] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 510.917209][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.980454][ T1144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.030709][ T8] usb 2-1: Product: syz [ 511.082801][ T8] usb 2-1: Manufacturer: syz [ 511.140319][ T8] usb 2-1: SerialNumber: syz [ 511.347783][ T8] usb 2-1: config 0 descriptor?? [ 511.437124][ T8819] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 512.370899][ T1144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.772297][ T8] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 512.808707][ T8] ipheth: probe of 2-1:0.196 failed with error -71 [ 512.868940][ T8] usb 2-1: USB disconnect, device number 19 [ 512.933792][ T1144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.057246][ T1144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.310338][ T8842] netlink: 830 bytes leftover after parsing attributes in process `syz.1.840'. [ 514.572812][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 514.582905][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 514.591730][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 514.601909][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 514.610060][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 514.617484][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 514.736359][ T23] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 515.807952][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 515.814844][ T23] usb 1-1: no configurations [ 515.823926][ T23] usb 1-1: can't read configurations, error -22 [ 515.958025][ T8860] netlink: 224 bytes leftover after parsing attributes in process `syz.2.843'. [ 515.978740][ T23] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 516.218112][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 516.256171][ T23] usb 1-1: no configurations [ 516.273941][ T8864] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 516.281522][ T23] usb 1-1: can't read configurations, error -22 [ 516.288257][ T8864] ALSA: mixer_oss: invalid index 1374389 [ 516.299997][ T23] usb usb1-port1: attempt power cycle [ 516.497942][ T8863] batman_adv: batadv0: Adding interface: veth3 [ 516.517750][ T8863] batman_adv: batadv0: The MTU of interface veth3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.604335][ T8863] batman_adv: batadv0: Interface activated: veth3 [ 516.689467][ T5776] Bluetooth: hci0: command tx timeout [ 516.732292][ T23] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 516.823867][ T1144] bridge0: port 1(gretap0) entered disabled state [ 516.844004][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 516.896255][ T1144] gretap0 (unregistering): left allmulticast mode [ 516.905675][ T1144] gretap0 (unregistering): left promiscuous mode [ 516.905832][ T23] usb 1-1: no configurations [ 516.922617][ T1144] bridge0: port 1(gretap0) entered disabled state [ 516.942403][ T23] usb 1-1: can't read configurations, error -22 [ 517.127995][ T23] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 517.371686][ T23] usb 1-1: device descriptor read/8, error -71 [ 517.436202][ T8847] chnl_net:caif_netlink_parms(): no params data found [ 517.546583][ T23] usb usb1-port1: unable to enumerate USB device [ 517.597267][ T1144] hsr_slave_0: left promiscuous mode [ 517.615182][ T1144] hsr_slave_1: left promiscuous mode [ 517.680581][ T1144] veth1_macvtap: left promiscuous mode [ 517.693669][ T1144] veth0_macvtap: left promiscuous mode [ 517.725166][ T1144] veth1_vlan: left promiscuous mode [ 517.742999][ T1144] veth0_vlan: left promiscuous mode [ 518.768191][ T5776] Bluetooth: hci0: command tx timeout [ 520.164010][ T1144] bond0 (unregistering): Released all slaves [ 520.317013][ T8908] netlink: 830 bytes leftover after parsing attributes in process `syz.1.849'. [ 520.641999][ T8847] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.657893][ T8847] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.665465][ T8847] bridge_slave_0: entered allmulticast mode [ 520.673549][ T8847] bridge_slave_0: entered promiscuous mode [ 520.790776][ T8820] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 520.848085][ T5776] Bluetooth: hci0: command tx timeout [ 521.118277][ T8820] usb 2-1: Using ep0 maxpacket: 32 [ 521.188791][ T8820] usb 2-1: no configurations [ 521.280078][ T8820] usb 2-1: can't read configurations, error -22 [ 521.406948][ T8847] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.429069][ T8847] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.511918][ T8847] bridge_slave_1: entered allmulticast mode [ 521.528500][ T8847] bridge_slave_1: entered promiscuous mode [ 521.550111][ T8820] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 521.697781][ T8847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.740003][ T8847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.778467][ T8820] usb 2-1: Using ep0 maxpacket: 32 [ 521.790266][ T8820] usb 2-1: no configurations [ 521.794948][ T8820] usb 2-1: can't read configurations, error -22 [ 521.851647][ T8820] usb usb2-port1: attempt power cycle [ 521.893123][ T8847] team0: Port device team_slave_0 added [ 521.922007][ T8847] team0: Port device team_slave_1 added [ 522.060590][ T8847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.078056][ T8847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.137999][ T8847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.709812][ T8847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.716832][ T8847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.907914][ T8847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.927972][ T5776] Bluetooth: hci0: command tx timeout [ 522.938171][ T8820] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 522.998639][ T8820] usb 2-1: Using ep0 maxpacket: 32 [ 523.011352][ T8820] usb 2-1: no configurations [ 523.015998][ T8820] usb 2-1: can't read configurations, error -22 [ 523.228094][ T8820] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 523.304482][ T8847] hsr_slave_0: entered promiscuous mode [ 523.310641][ T8820] usb 2-1: Using ep0 maxpacket: 32 [ 523.331653][ T8820] usb 2-1: no configurations [ 523.353802][ T8820] usb 2-1: can't read configurations, error -22 [ 523.375124][ T8847] hsr_slave_1: entered promiscuous mode [ 523.407014][ T8820] usb usb2-port1: unable to enumerate USB device [ 523.765360][ T8954] netlink: 830 bytes leftover after parsing attributes in process `syz.1.858'. [ 525.323384][ T8847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 525.374314][ T8847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 525.470363][ T8847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 525.506083][ T8847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 526.729373][ T8847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.334131][ T8847] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.502159][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.509409][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.584993][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.592249][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.015045][ T9004] netlink: 830 bytes leftover after parsing attributes in process `syz.0.866'. [ 528.028215][ T23] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 528.191903][ T8847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.218229][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 528.241251][ T23] usb 3-1: no configurations [ 528.248294][ T23] usb 3-1: can't read configurations, error -22 [ 528.541758][ T23] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 530.143637][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 530.188764][ T23] usb 3-1: no configurations [ 530.193820][ T23] usb 3-1: can't read configurations, error -22 [ 530.206343][ T23] usb usb3-port1: attempt power cycle [ 530.638365][ T23] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 530.688161][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 530.700529][ T23] usb 3-1: no configurations [ 530.705884][ T23] usb 3-1: can't read configurations, error -22 [ 532.106372][ T9046] netlink: 224 bytes leftover after parsing attributes in process `syz.0.873'. [ 532.181453][ T8847] veth0_vlan: entered promiscuous mode [ 532.397715][ T9047] batman_adv: batadv0: Adding interface: veth3 [ 532.445043][ T9047] batman_adv: batadv0: The MTU of interface veth3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.479908][ T9047] batman_adv: batadv0: Interface activated: veth3 [ 532.555167][ T9049] netlink: 830 bytes leftover after parsing attributes in process `syz.2.874'. [ 532.589842][ T8847] veth1_vlan: entered promiscuous mode [ 532.754578][ T8847] veth0_macvtap: entered promiscuous mode [ 532.811014][ T9058] tipc: Enabled bearer , priority 0 [ 532.845328][ T9058] tipc: Resetting bearer [ 532.869939][ T9057] tipc: Disabling bearer [ 532.918521][ T8847] veth1_macvtap: entered promiscuous mode [ 533.017383][ T8847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.058013][ T8847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.098577][ T8847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.109401][ T8847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.168821][ T8847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.202253][ T8847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.234102][ T8847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.302865][ T8847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.344462][ T8847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.364995][ T8847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.418059][ T8847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.432027][ T8847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.444568][ T8847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.460816][ T9047] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 533.470083][ T8847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.489954][ T9047] ALSA: mixer_oss: invalid index 1374389 [ 533.530259][ T8847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.541230][ T8847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.575382][ T8847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.588059][ T8847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.330153][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.342052][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.580532][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.600805][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.658277][ T8820] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 535.868045][ T8820] usb 2-1: Using ep0 maxpacket: 32 [ 535.878062][ T8820] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.902692][ T8820] usb 2-1: config 0 has no interfaces? [ 536.960091][ T8820] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 538.853922][ T9084] ubi: mtd0 is already attached to ubi31 [ 538.866507][ T8820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.897936][ T8820] usb 2-1: Product: syz [ 538.902281][ T8820] usb 2-1: Manufacturer: syz [ 538.906980][ T8820] usb 2-1: SerialNumber: syz [ 538.942180][ T8820] usb 2-1: config 0 descriptor?? [ 539.083558][ T8820] usb 2-1: can't set config #0, error -71 [ 539.104492][ T8820] usb 2-1: USB disconnect, device number 24 [ 539.738050][ T8820] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 539.959063][ T8820] usb 1-1: Using ep0 maxpacket: 8 [ 540.064428][ T8820] usb 1-1: unable to get BOS descriptor or descriptor too short [ 540.108905][ T8820] usb 1-1: config index 0 descriptor too short (expected 255, got 18) [ 540.131106][ T8820] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 540.147915][ T8820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.177315][ T8820] usb 1-1: Product: syz [ 540.186667][ T8820] usb 1-1: Manufacturer: syz [ 540.197062][ T8820] usb 1-1: SerialNumber: syz [ 540.436061][ T8820] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 540.495994][ T8820] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 540.557936][ T8820] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 540.565887][ T8820] usb 1-1: media controller created [ 540.718852][ T8820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 542.224141][ T8820] zl10353_read_register: readreg error (reg=127, ret==0) [ 542.376416][ T8820] usb 1-1: USB disconnect, device number 19 [ 542.904339][ T9126] netlink: 830 bytes leftover after parsing attributes in process `syz.2.883'. [ 543.304186][ T9136] input: syz1 as /devices/virtual/input/input10 [ 545.378215][ T9145] ubi: mtd0 is already attached to ubi31 [ 545.648054][ T5881] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 545.838454][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 545.845821][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.868328][ T5881] usb 3-1: config 0 has no interfaces? [ 545.896025][ T5881] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 545.918281][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.926439][ T5881] usb 3-1: Product: syz [ 545.942660][ T5881] usb 3-1: Manufacturer: syz [ 545.947586][ T5881] usb 3-1: SerialNumber: syz [ 547.391827][ T5881] usb 3-1: config 0 descriptor?? [ 547.498430][ T5881] usb 3-1: can't set config #0, error -71 [ 547.509389][ T5881] usb 3-1: USB disconnect, device number 27 [ 547.836078][ T9162] netlink: 224 bytes leftover after parsing attributes in process `syz.4.888'. [ 547.932424][ T9164] netlink: 830 bytes leftover after parsing attributes in process `syz.2.899'. [ 548.520842][ T9167] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 548.548066][ T9167] ALSA: mixer_oss: invalid index 1374389 [ 548.673188][ T9166] batman_adv: batadv0: Adding interface: veth3 [ 548.710852][ T9166] batman_adv: batadv0: The MTU of interface veth3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.752994][ T9166] batman_adv: batadv0: Interface activated: veth3 [ 552.428168][ T9195] ubi: mtd0 is already attached to ubi31 [ 553.144864][ T5881] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 553.367942][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 553.380304][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.408405][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.450804][ T5881] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 553.471270][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.488566][ T9037] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 553.503100][ T5881] usb 2-1: config 0 descriptor?? [ 553.728592][ T9037] usb 5-1: Using ep0 maxpacket: 32 [ 553.762557][ T9037] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.762578][ T9215] netlink: 830 bytes leftover after parsing attributes in process `syz.2.908'. [ 553.786291][ T9200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.795104][ T9037] usb 5-1: config 0 has no interfaces? [ 553.806937][ T9037] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 553.816656][ T9037] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.863654][ T9037] usb 5-1: Product: syz [ 553.888410][ T9037] usb 5-1: Manufacturer: syz [ 553.912683][ T9037] usb 5-1: SerialNumber: syz [ 553.984010][ T9037] usb 5-1: config 0 descriptor?? [ 553.984384][ T9200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.497256][ T9037] usb 5-1: USB disconnect, device number 2 [ 557.398320][ T5881] usbhid 2-1:0.0: can't add hid device: -71 [ 557.405097][ T5881] usbhid: probe of 2-1:0.0 failed with error -71 [ 557.415085][ T5881] usb 2-1: USB disconnect, device number 25 [ 558.028010][ T5881] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 558.221611][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 558.246564][ T5881] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 558.270318][ T5881] usb 5-1: config 0 has no interface number 0 [ 558.290673][ T5881] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 558.322432][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.377591][ T5881] usb 5-1: Product: syz [ 558.390015][ T5881] usb 5-1: Manufacturer: syz [ 558.402139][ T5881] usb 5-1: SerialNumber: syz [ 558.480072][ T5881] usb 5-1: config 0 descriptor?? [ 558.530695][ T5881] smsc95xx v2.0.0 [ 558.931936][ T5881] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 559.009352][ T5881] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 559.281644][ T5881] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 560.428191][ T9262] ubi: mtd0 is already attached to ubi31 [ 560.761768][ T5881] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 560.778282][ T5881] usb 5-1: USB disconnect, device number 3 [ 560.918931][ T9269] netlink: 830 bytes leftover after parsing attributes in process `syz.1.917'. [ 561.491109][ T23] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 561.678372][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 561.721860][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.738465][ T23] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 561.831701][ T23] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 561.841461][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.852940][ T23] usb 2-1: Product: syz [ 561.857249][ T23] usb 2-1: Manufacturer: syz [ 561.868379][ T23] usb 2-1: SerialNumber: syz [ 562.007178][ T23] usb 2-1: config 0 descriptor?? [ 563.333404][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.340068][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.615366][ T9319] netlink: 830 bytes leftover after parsing attributes in process `syz.0.928'. [ 564.143361][ T23] usb 2-1: USB disconnect, device number 26 [ 565.043269][ T9314] ubi: mtd0 is already attached to ubi31 [ 566.974063][ T9352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.937'. [ 568.868073][ T23] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 569.118454][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 570.010129][ T9368] ubi: mtd0 is already attached to ubi31 [ 570.113860][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.147934][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 570.171166][ T23] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 570.188087][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.226617][ T23] usb 3-1: Product: syz [ 570.236731][ T23] usb 3-1: Manufacturer: syz [ 570.246856][ T23] usb 3-1: SerialNumber: syz [ 570.279161][ T23] usb 3-1: config 0 descriptor?? [ 571.967289][ T23] usb 3-1: USB disconnect, device number 28 [ 572.826136][ T9037] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 573.027961][ T9037] usb 1-1: Using ep0 maxpacket: 32 [ 573.035670][ T9037] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.060068][ T9037] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.082801][ T9037] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 573.108185][ T9037] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.144680][ T9037] usb 1-1: config 0 descriptor?? [ 573.217951][ T789] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 573.381116][ T9406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.420728][ T789] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 573.445342][ T9406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.465491][ T789] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 573.484413][ T789] usb 3-1: config 1 interface 0 has no altsetting 0 [ 573.754167][ T789] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 573.843417][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.851632][ T789] usb 3-1: Product: syz [ 573.855888][ T789] usb 3-1: Manufacturer: syz [ 573.860624][ T789] usb 3-1: SerialNumber: syz [ 574.017578][ T9418] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 574.025306][ T9418] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 575.682050][ T789] rtl8150 3-1:1.0: couldn't reset the device [ 575.688489][ T789] rtl8150: probe of 3-1:1.0 failed with error -5 [ 575.711089][ T789] usb 3-1: USB disconnect, device number 29 [ 576.013591][ T9037] usbhid 1-1:0.0: can't add hid device: -71 [ 576.028055][ T9037] usbhid: probe of 1-1:0.0 failed with error -71 [ 576.049336][ T9037] usb 1-1: USB disconnect, device number 20 [ 577.578196][ T9037] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 577.768359][ T9037] usb 2-1: Using ep0 maxpacket: 32 [ 577.822638][ T9037] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.846792][ T9037] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 577.919440][ T9037] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 577.940783][ T9037] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.952447][ T9037] usb 2-1: Product: syz [ 577.961250][ T9037] usb 2-1: Manufacturer: syz [ 577.973786][ T9037] usb 2-1: SerialNumber: syz [ 577.988949][ T9037] usb 2-1: config 0 descriptor?? [ 579.190740][ T9478] mmap: syz.2.960 (9478) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 580.080453][ T9037] usb 2-1: USB disconnect, device number 27 [ 581.408158][ T5825] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 581.598242][ T5825] usb 5-1: Using ep0 maxpacket: 32 [ 581.675118][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.727438][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.748212][ T5825] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 581.757490][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.949934][ T5825] usb 5-1: config 0 descriptor?? [ 582.254306][ T9485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.285186][ T9485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.933955][ T5825] usbhid 5-1:0.0: can't add hid device: -71 [ 584.944123][ T5825] usbhid: probe of 5-1:0.0 failed with error -71 [ 584.960120][ T5825] usb 5-1: USB disconnect, device number 4 [ 586.329588][ T9539] ubi: mtd0 is already attached to ubi31 [ 587.988099][ T8820] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 588.978156][ T8820] usb 1-1: Using ep0 maxpacket: 32 [ 588.986587][ T8820] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 589.028873][ T8820] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 589.205726][ T8820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.487029][ T8820] usb 1-1: Product: syz [ 590.514813][ T8820] usb 1-1: Manufacturer: syz [ 590.539839][ T8820] usb 1-1: SerialNumber: syz [ 590.569429][ T8820] usb 1-1: config 0 descriptor?? [ 590.740010][ T28] usb 1-1: USB disconnect, device number 21 [ 592.248044][ T5881] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 592.438220][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 592.461984][ T5881] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 592.553150][ T5881] usb 3-1: config 0 has no interface number 0 [ 592.599533][ T5881] usb 3-1: config 0 interface 89 has no altsetting 0 [ 592.629445][ T5881] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 592.650522][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.679091][ T5881] usb 3-1: Product: syz [ 592.689444][ T5881] usb 3-1: Manufacturer: syz [ 592.706311][ T5881] usb 3-1: SerialNumber: syz [ 593.200589][ T5881] usb 3-1: config 0 descriptor?? [ 593.256289][ T5881] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 593.278089][ T5881] em28xx 3-1:0.89: Video interface 89 found: bulk [ 594.021678][ T5881] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 595.438722][ T9611] ubi: mtd0 is already attached to ubi31 [ 596.732328][ T5881] em28xx 3-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 596.732396][ T5881] em28xx 3-1:0.89: board has no eeprom [ 596.807903][ T5881] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 596.815432][ T5881] em28xx 3-1:0.89: analog set to bulk mode. [ 596.869469][ T8] em28xx 3-1:0.89: Registering V4L2 extension [ 596.920256][ T5881] usb 3-1: USB disconnect, device number 30 [ 596.949827][ T5881] em28xx 3-1:0.89: Disconnecting em28xx [ 597.089079][ T8] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 597.096410][ T8] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 597.127923][ T8] em28xx 3-1:0.89: No AC97 audio processor [ 597.202987][ T8] usb 3-1: Decoder not found [ 597.207679][ T8] em28xx 3-1:0.89: failed to create media graph [ 597.228200][ T8] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 597.289263][ T8] em28xx 3-1:0.89: Registering snapshot button... [ 597.340527][ T8] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input11 [ 599.017615][ T8] em28xx 3-1:0.89: Remote control support is not available for this card. [ 599.140041][ T5881] em28xx 3-1:0.89: Closing input extension [ 599.146847][ T5881] em28xx 3-1:0.89: Deregistering snapshot button [ 599.450763][ T5881] em28xx 3-1:0.89: Freeing device [ 599.868014][ T5881] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 600.101593][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 600.123261][ T5881] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 600.184307][ T5881] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 600.238029][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.274255][ T5881] usb 3-1: Product: syz [ 600.288075][ T5881] usb 3-1: Manufacturer: syz [ 600.307871][ T5881] usb 3-1: SerialNumber: syz [ 600.316420][ T5881] usb 3-1: config 0 descriptor?? [ 600.358243][ T5881] usb 3-1: can't set config #0, error -71 [ 600.401230][ T5881] usb 3-1: USB disconnect, device number 31 [ 601.189219][ T9638] ubi: mtd0 is already attached to ubi31 [ 603.689423][ T9648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.992'. [ 603.748044][ T9648] bond0: entered promiscuous mode [ 603.769110][ T9648] team0: entered promiscuous mode [ 603.774517][ T9648] team_slave_0: entered promiscuous mode [ 603.781679][ T9648] team_slave_1: entered promiscuous mode [ 603.808370][ T9648] hsr1: entered promiscuous mode [ 606.547948][ T5825] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 606.771202][ T5825] usb 2-1: Using ep0 maxpacket: 32 [ 606.783324][ T5825] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 606.818328][ T5825] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 606.847386][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.869227][ T5825] usb 2-1: Product: syz [ 606.873482][ T5825] usb 2-1: Manufacturer: syz [ 606.908109][ T5825] usb 2-1: SerialNumber: syz [ 606.928717][ T5825] usb 2-1: config 0 descriptor?? [ 607.933598][ T9671] ubi: mtd0 is already attached to ubi31 [ 609.456114][ T9677] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 609.495662][ T9677] overlayfs: overlapping lowerdir path [ 610.245136][ T5825] usb 2-1: USB disconnect, device number 28 [ 611.409763][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'. [ 611.963734][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1004'. [ 613.023072][ T9708] ubi: mtd0 is already attached to ubi31 [ 615.128167][ T5825] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 615.348109][ T5825] usb 5-1: Using ep0 maxpacket: 32 [ 615.389213][ T5825] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 615.407706][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.424352][ T5825] usb 5-1: Product: syz [ 615.437891][ T5825] usb 5-1: Manufacturer: syz [ 615.444522][ T5825] usb 5-1: SerialNumber: syz [ 615.508258][ T5825] usb 5-1: config 0 descriptor?? [ 615.920183][ T5825] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 005 [ 618.035437][ T5825] usb 5-1: USB disconnect, device number 5 [ 620.953043][ T9737] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 620.965608][ T9737] overlayfs: overlapping lowerdir path [ 621.630345][ T9744] ubi: mtd0 is already attached to ubi31 [ 624.778437][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.784914][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.784959][ T9789] ubi: mtd0 is already attached to ubi31 [ 640.602204][ T9846] ubi: mtd0 is already attached to ubi31 [ 640.755223][ T8820] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 640.989816][ T8820] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 641.652979][ T8820] usb 2-1: config 0 interface 0 has no altsetting 0 [ 641.721853][ T8820] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 641.764094][ T8820] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 641.799900][ T8820] usb 2-1: Product: syz [ 641.837089][ T8820] usb 2-1: Manufacturer: syz [ 641.851681][ T8820] usb 2-1: SerialNumber: syz [ 641.889277][ T8820] usb 2-1: config 0 descriptor?? [ 642.009960][ T8820] usb 2-1: selecting invalid altsetting 0 [ 642.392737][ T9858] [ 642.395159][ T9858] ============================================ [ 642.401427][ T9858] WARNING: possible recursive locking detected [ 642.407783][ T9858] syzkaller #0 Not tainted [ 642.412505][ T9858] -------------------------------------------- [ 642.419311][ T9858] syz.1.1052/9858 is trying to acquire lock: [ 642.425320][ T9858] ffff888059ec8b30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_close+0x3c/0x4c0 [ 642.435228][ T9858] [ 642.435228][ T9858] but task is already holding lock: [ 642.442647][ T9858] ffff888059ec8b30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_set_params+0x6d/0x2b50 [ 642.453073][ T9858] [ 642.453073][ T9858] other info that might help us debug this: [ 642.461548][ T9858] Possible unsafe locking scenario: [ 642.461548][ T9858] [ 642.469032][ T9858] CPU0 [ 642.472345][ T9858] ---- [ 642.475832][ T9858] lock(&chip->mutex); [ 642.480207][ T9858] lock(&chip->mutex); [ 642.485043][ T9858] [ 642.485043][ T9858] *** DEADLOCK *** [ 642.485043][ T9858] [ 642.493566][ T9858] May be due to missing lock nesting notation [ 642.493566][ T9858] [ 642.502009][ T9858] 3 locks held by syz.1.1052/9858: [ 642.507263][ T9858] #0: ffff888079d194e0 (&runtime->oss.params_lock){+.+.}-{3:3}, at: snd_pcm_oss_sync+0x2a7/0xc20 [ 642.518057][ T9858] #1: ffff888079d19238 (&runtime->buffer_mutex){+.+.}-{3:3}, at: snd_pcm_hw_params+0x15a/0x1c50 [ 642.528657][ T9858] #2: ffff888059ec8b30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_set_params+0x6d/0x2b50 [ 642.539259][ T9858] [ 642.539259][ T9858] stack backtrace: [ 642.545193][ T9858] CPU: 1 PID: 9858 Comm: syz.1.1052 Not tainted syzkaller #0 [ 642.552606][ T9858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 642.562706][ T9858] Call Trace: [ 642.566039][ T9858] [ 642.569017][ T9858] dump_stack_lvl+0x16c/0x230 [ 642.573815][ T9858] ? show_regs_print_info+0x20/0x20 [ 642.579053][ T9858] ? print_deadlock_bug+0x435/0x5d0 [ 642.584382][ T9858] __lock_acquire+0x5d40/0x7c80 [ 642.589291][ T9858] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 642.595421][ T9858] ? verify_lock_unused+0x140/0x140 [ 642.600683][ T9858] ? mark_lock+0x94/0x320 [ 642.605068][ T9858] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 642.611093][ T9858] ? trace_irq_disable+0x37/0xe0 [ 642.616077][ T9858] ? lock_chain_count+0x20/0x20 [ 642.620995][ T9858] lock_acquire+0x197/0x410 [ 642.625565][ T9858] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 642.631091][ T9858] ? __might_sleep+0xe0/0xe0 [ 642.635728][ T9858] ? read_lock_is_recursive+0x20/0x20 [ 642.641156][ T9858] ? wait_clear_urbs+0x26e/0x390 [ 642.646157][ T9858] ? snd_usb_endpoint_sync_pending_stop+0x30/0x30 [ 642.652690][ T9858] __mutex_lock+0x129/0xcc0 [ 642.657263][ T9858] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 642.662897][ T9858] ? usb_free_coherent+0x5d/0x90 [ 642.667887][ T9858] ? release_urbs+0x3fe/0x4a0 [ 642.672623][ T9858] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 642.678176][ T9858] ? mutex_lock_nested+0x20/0x20 [ 642.683147][ T9858] ? snd_usb_endpoint_set_params+0x407/0x2b50 [ 642.689446][ T9858] snd_usb_endpoint_close+0x3c/0x4c0 [ 642.694881][ T9858] snd_usb_hw_params+0x1357/0x19c0 [ 642.700049][ T9858] ? snd_usb_pcm_close+0x300/0x300 [ 642.705217][ T9858] ? snd_pcm_lib_malloc_pages+0x2f0/0x690 [ 642.710988][ T9858] snd_pcm_hw_params+0x835/0x1c50 [ 642.716063][ T9858] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 642.721768][ T9858] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 642.727456][ T9858] ? snd_pcm_forward+0x6d0/0x6d0 [ 642.732527][ T9858] ? __sanitizer_cov_trace_switch+0xb2/0x120 [ 642.738553][ T9858] snd_pcm_oss_change_params_locked+0x2144/0x3d30 [ 642.745032][ T9858] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 642.750202][ T9858] ? ima_file_free+0x154/0x450 [ 642.755030][ T9858] ? mutex_lock_nested+0x20/0x20 [ 642.760013][ T9858] ? __fsnotify_parent+0x6cc/0x7c0 [ 642.765178][ T9858] snd_pcm_oss_sync+0x363/0xc20 [ 642.770076][ T9858] snd_pcm_oss_release+0x102/0x240 [ 642.775229][ T9858] ? snd_pcm_oss_open+0x1b40/0x1b40 [ 642.780489][ T9858] __fput+0x234/0x970 [ 642.784526][ T9858] task_work_run+0x1ce/0x250 [ 642.789157][ T9858] ? task_work_cancel+0x240/0x240 [ 642.794217][ T9858] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 642.800334][ T9858] ? exit_to_user_mode_loop+0x3b/0x110 [ 642.805838][ T9858] exit_to_user_mode_loop+0xe6/0x110 [ 642.811180][ T9858] exit_to_user_mode_prepare+0xf6/0x180 [ 642.816865][ T9858] syscall_exit_to_user_mode+0x1a/0x50 [ 642.822366][ T9858] do_syscall_64+0x61/0xb0 [ 642.826813][ T9858] ? clear_bhb_loop+0x40/0x90 [ 642.831531][ T9858] ? clear_bhb_loop+0x40/0x90 [ 642.836246][ T9858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 642.842182][ T9858] RIP: 0033:0x7f2e6158df90 [ 642.846642][ T9858] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 642.866374][ T9858] RSP: 002b:00007f2e623f6b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 642.874839][ T9858] RAX: ffffffffffffffea RBX: 00000000008c4201 RCX: 00007f2e6158df90 [ 642.882880][ T9858] RDX: 00000000008c4201 RSI: 00007f2e623f6c10 RDI: 00000000ffffff9c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 642.890891][ T9858] RBP: 00007f2e623f6c10 R08: 0000000000000000 R09: 00236f696475612f [ 642.899169][ T9858] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 642.907269][ T9858] R13: 00007f2e617e6218 R14: 00007f2e617e6180 R15: 00007ffca4e7d678 [ 642.915292][ T9858] [ 643.703432][ T1144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.810615][ T1144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.965468][ T1144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.119855][ T1144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.356097][ T1144] tipc: Left network mode [ 645.602042][ T1144] bridge0: port 3(gretap0) entered disabled state [ 645.611073][ T1144] gretap0 (unregistering): left allmulticast mode [ 645.617570][ T1144] gretap0 (unregistering): left promiscuous mode [ 645.626582][ T1144] bridge0: port 3(gretap0) entered disabled state [ 645.973466][ T1144] hsr_slave_0: left promiscuous mode [ 645.984634][ T1144] hsr_slave_1: left promiscuous mode [ 645.994281][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.003593][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.011852][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.021115][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.030372][ T1144] batman_adv: batadv0: Interface deactivated: veth3 [ 646.037074][ T1144] batman_adv: batadv0: Removing interface: veth3 [ 646.046883][ T1144] bridge_slave_1: left allmulticast mode [ 646.056568][ T1144] bridge_slave_1: left promiscuous mode [ 646.064294][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.073957][ T1144] bridge_slave_0: left allmulticast mode [ 646.081364][ T1144] bridge_slave_0: left promiscuous mode [ 646.087413][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.109048][ T1144] veth1_macvtap: left promiscuous mode [ 646.114641][ T1144] veth0_macvtap: left promiscuous mode [ 646.129174][ T1144] veth1_vlan: left promiscuous mode [ 646.134540][ T1144] veth0_vlan: left promiscuous mode [ 646.453575][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 646.485965][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 646.515288][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.547274][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.629555][ T1144] bond0 (unregistering): Released all slaves [ 647.032019][ T1144] IPVS: stop unused estimator thread 0... [ 647.347569][ T1144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.394037][ T1144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.435262][ T1144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.498092][ T1144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.640199][ T1144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.684768][ T1144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.735930][ T1144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.817667][ T1144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.433306][ T1144] bridge0: port 3(gretap0) entered disabled state [ 648.449175][ T1144] gretap0 (unregistering): left allmulticast mode [ 648.455661][ T1144] gretap0 (unregistering): left promiscuous mode [ 648.462980][ T1144] bridge0: port 3(gretap0) entered disabled state [ 648.942570][ T1144] hsr_slave_0: left promiscuous mode [ 648.952580][ T1144] hsr_slave_1: left promiscuous mode [ 648.961402][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.970654][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.979938][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.987487][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.997091][ T1144] batman_adv: batadv0: Interface deactivated: veth3 [ 649.005275][ T1144] batman_adv: batadv0: Removing interface: veth3 [ 649.013353][ T1144] bridge_slave_1: left allmulticast mode [ 649.021741][ T1144] bridge_slave_1: left promiscuous mode [ 649.027627][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.039205][ T1144] bridge_slave_0: left allmulticast mode [ 649.045181][ T1144] bridge_slave_0: left promiscuous mode [ 649.053431][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.064964][ T1144] bond0: left promiscuous mode [ 649.071870][ T1144] team0: left promiscuous mode [ 649.076699][ T1144] team_slave_0: left promiscuous mode [ 649.085443][ T1144] team_slave_1: left promiscuous mode [ 649.094067][ T1144] hsr_slave_0: left promiscuous mode [ 649.102558][ T1144] hsr_slave_1: left promiscuous mode [ 649.109952][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.118942][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.127048][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.136077][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.145144][ T1144] batman_adv: batadv0: Interface deactivated: veth3 [ 649.152872][ T1144] batman_adv: batadv0: Removing interface: veth3 [ 649.162694][ T1144] bridge_slave_1: left allmulticast mode [ 649.170833][ T1144] bridge_slave_1: left promiscuous mode [ 649.176708][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.188691][ T1144] bridge_slave_0: left allmulticast mode [ 649.194392][ T1144] bridge_slave_0: left promiscuous mode [ 649.201363][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.216882][ T1144] veth1_macvtap: left promiscuous mode [ 649.223567][ T1144] veth0_macvtap: left promiscuous mode [ 649.230804][ T1144] veth1_vlan: left promiscuous mode [ 649.236163][ T1144] veth0_vlan: left promiscuous mode [ 649.244488][ T1144] veth1_macvtap: left promiscuous mode [ 649.251925][ T1144] veth0_macvtap: left promiscuous mode [ 649.615631][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 649.651944][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 649.681237][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.715036][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.804891][ T1144] bond0 (unregistering): Released all slaves [ 649.996383][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 650.026450][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 650.057368][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.091615][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.208633][ T1144] bond0 (unregistering): Released all slaves [ 650.851575][ T1144] IPVS: stop unused estimator thread 0...