last executing test programs: 7m11.907877759s ago: executing program 1 (id=2): socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_open_dev$hiddev(&(0x7f0000000140), 0x2cc0, 0x18000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x40}}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300090a00000040000000000000000300060000000e0002000000e00000090000000000000000020001000400000000000002000000006234ca2e83f57c0300050000000000020000002c1e0101000000000000"], 0x50}}, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x50) io_setup(0x4fe, &(0x7f00000009c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40, r6, &(0x7f0000000200)='8', 0x1, 0x10000000005971}]) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x503, 0x70bd29, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x68315}}, 0x20}}, 0x0) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 7m5.412665005s ago: executing program 0 (id=1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x20008890}, 0x24000000) 6m58.580881452s ago: executing program 0 (id=14): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040e04050520"], 0x7) socket$alg(0x26, 0x5, 0x0) r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b01, 0x0) 6m55.405862135s ago: executing program 32 (id=2): socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_open_dev$hiddev(&(0x7f0000000140), 0x2cc0, 0x18000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x40}}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300090a00000040000000000000000300060000000e0002000000e00000090000000000000000020001000400000000000002000000006234ca2e83f57c0300050000000000020000002c1e0101000000000000"], 0x50}}, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x50) io_setup(0x4fe, &(0x7f00000009c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40, r6, &(0x7f0000000200)='8', 0x1, 0x10000000005971}]) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x503, 0x70bd29, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x68315}}, 0x20}}, 0x0) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 6m55.378217445s ago: executing program 0 (id=17): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 6m40.034016926s ago: executing program 33 (id=17): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 5m18.316105686s ago: executing program 4 (id=116): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x11, 0xffffffffffffffff, 0xd0b05000) 5m17.913139215s ago: executing program 4 (id=117): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000000)={&(0x7f0000000280)=[{0x5, 0x200, 0x0, 0x0}], 0x1}) 5m17.425517363s ago: executing program 4 (id=118): sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$isdn(0x22, 0x2, 0x10) r6 = socket$isdn(0x22, 0x2, 0x2) dup3(r6, r5, 0x0) 5m13.209741905s ago: executing program 4 (id=119): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002040), 0x82401, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_io_uring_setup(0x6d5f, &(0x7f0000000940)={0x0, 0x7779, 0x0, 0x100000, 0x186}, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0xa, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_targets\x00') socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x4, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @loopback}, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x9, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 5m12.242580404s ago: executing program 4 (id=120): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000080)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x56}) 5m11.301732064s ago: executing program 4 (id=121): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_setup(0x371d, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TCFLSH(r1, 0x80047437, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x94f, 0xbe, 0xcf, 0x9}, {0x7ff, 0x3b, 0x52, 0x6}]}) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) request_key(0x0, &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000440)='\x00\xaa\xf4\xd9\xc3vF\\\x05\xd5\xfe\x95\xa8*q\x1eX40WK\xfdt\xf2#`\xf7\x99:\x9b\xd0\xbbOIB\xd3\x06L\xc4\xc1c\x0f\xce\xb1\xcf/\xbaL\xe0\xb1\xb6\x8e\xd3o\x14L\xc6IKl<\xf9\xcdi\x8d\xc8?\xb9\x14\xbf\x81(\xe1h\xb9_\xbe?b\xb5\x89\x8f\t2\xff\xffC\xaa\xfdy\xc9\xc1\\aP^8\xe7=p P\xde\xa6[+L*\x8c\x0e\xbb\xc1x\x82])eR\xc1\xe5\xd7\xea\xc6\xab\xf5r>\x96\xf7G1l{dJ\xce\xc7\xa0+\xf4t\xcfy\x8f\xa7O,|\x06\\\x90-\x01\xda:\x1f\xb8\xa5\xc6\x18\"\xe8', r2) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32, @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) read(r3, &(0x7f0000000380)=""/144, 0x90) pwrite64(r3, 0x0, 0x0, 0x4) write$vhost_msg_v2(r3, 0x0, 0x0) syz_open_dev$audion(0x0, 0x3, 0x8c4201) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m53.65946843s ago: executing program 34 (id=121): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_setup(0x371d, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TCFLSH(r1, 0x80047437, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x94f, 0xbe, 0xcf, 0x9}, {0x7ff, 0x3b, 0x52, 0x6}]}) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) request_key(0x0, &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000440)='\x00\xaa\xf4\xd9\xc3vF\\\x05\xd5\xfe\x95\xa8*q\x1eX40WK\xfdt\xf2#`\xf7\x99:\x9b\xd0\xbbOIB\xd3\x06L\xc4\xc1c\x0f\xce\xb1\xcf/\xbaL\xe0\xb1\xb6\x8e\xd3o\x14L\xc6IKl<\xf9\xcdi\x8d\xc8?\xb9\x14\xbf\x81(\xe1h\xb9_\xbe?b\xb5\x89\x8f\t2\xff\xffC\xaa\xfdy\xc9\xc1\\aP^8\xe7=p P\xde\xa6[+L*\x8c\x0e\xbb\xc1x\x82])eR\xc1\xe5\xd7\xea\xc6\xab\xf5r>\x96\xf7G1l{dJ\xce\xc7\xa0+\xf4t\xcfy\x8f\xa7O,|\x06\\\x90-\x01\xda:\x1f\xb8\xa5\xc6\x18\"\xe8', r2) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32, @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) read(r3, &(0x7f0000000380)=""/144, 0x90) pwrite64(r3, 0x0, 0x0, 0x4) write$vhost_msg_v2(r3, 0x0, 0x0) syz_open_dev$audion(0x0, 0x3, 0x8c4201) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m50.275774772s ago: executing program 2 (id=140): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000280)=ANY=[]) 4m46.500582218s ago: executing program 2 (id=142): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040e04050520"], 0x7) 4m45.780283069s ago: executing program 2 (id=144): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d00010000600209040010050300010009210000360122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4m43.121018968s ago: executing program 2 (id=146): socket(0x40000000015, 0x5, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x123880, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2140088, &(0x7f00000001c0)={[{@metacopy_off, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x80480, 0xcd) getdents64(r4, &(0x7f0000000580)=""/166, 0xfe) 4m40.630017228s ago: executing program 2 (id=147): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = getpgrp(0xffffffffffffffff) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0xb201ffff) r5 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = fsopen(&(0x7f00000001c0)='romfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r6, 0xc048aec8, &(0x7f0000000500)={0x4, 0xc0011037, 0x0, 0x0}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400002) capset(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x181801, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r9, 0xf504, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00002010000d0429bd70000000", @ANYRES32=0x0, @ANYBLOB="10a00000144005001c0012800b00010062726964676500000c0002800600270001000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc005}, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 4m34.268929908s ago: executing program 2 (id=148): r0 = socket$inet6(0xa, 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x1, 0x3c0, 0xc0, 0x0}) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) write$dsp(r3, &(0x7f00000012c0)="a5", 0x1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2a9a, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) 4m18.842593956s ago: executing program 35 (id=148): r0 = socket$inet6(0xa, 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x1, 0x3c0, 0xc0, 0x0}) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) write$dsp(r3, &(0x7f00000012c0)="a5", 0x1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2a9a, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) 3m13.002460453s ago: executing program 7 (id=137): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002040), 0x82401, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_io_uring_setup(0x6d5f, &(0x7f0000000940)={0x0, 0x7779, 0x0, 0x100000, 0x186}, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0xa, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_targets\x00') socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x4, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @loopback}, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x9, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3m12.169330777s ago: executing program 7 (id=189): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m11.592870722s ago: executing program 7 (id=190): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8121}, 0x20000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4004804) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m9.580691413s ago: executing program 7 (id=193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r4 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101400, 0xad) lseek(r6, 0x100000001, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0xab851, r7, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) 2m54.205981955s ago: executing program 36 (id=193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r4 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101400, 0xad) lseek(r6, 0x100000001, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0xab851, r7, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) 2m52.262394252s ago: executing program 8 (id=211): ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000002c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r0, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) 2m51.385967576s ago: executing program 8 (id=213): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1fb, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000180)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0xfffffffffffffffd, 0xf, 0x80000006, 0x1b65}, 0x0, 0x0) 2m51.00574097s ago: executing program 6 (id=33): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0xb93, 0x8) 2m49.924223244s ago: executing program 6 (id=216): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c00000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000001d000000000000000000000000000000000000ffffffffffffff7f00000000000000000000000000000000020000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000100000000000008001f000200"], 0xc0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x70bd2b, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x10}, {0x8, 0x1, 0x0, 0x0, 0x8, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x2}, 0x4, 0x6e6bb3, 0x0, 0x1, 0x3, 0x3}}, 0xb8}}, 0x0) 2m49.894811779s ago: executing program 8 (id=217): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0xc048aec8, &(0x7f0000000500)={0x4, 0xc0011037, 0x0, 0x0}) 2m47.563755462s ago: executing program 8 (id=219): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m47.442873711s ago: executing program 6 (id=221): ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000002c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r0, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) 2m46.756975073s ago: executing program 8 (id=222): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000100000000100000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="02000060010000000f5b369079"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x84844) 2m46.651583098s ago: executing program 6 (id=224): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8121}, 0x20000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4004804) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m45.723428506s ago: executing program 8 (id=225): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') fcntl$notify(r0, 0x402, 0x80000032) ioctl$VT_RELDISP(r1, 0x5605) pread64(r1, 0x0, 0x0, 0x1c) read$FUSE(0xffffffffffffffff, &(0x7f0000002480)={0x2020}, 0x2020) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m45.098398567s ago: executing program 6 (id=227): mknod$loop(0x0, 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0xc040) setrlimit(0x8, 0x0) execve(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) connect$inet(r3, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) 2m30.166218033s ago: executing program 37 (id=225): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') fcntl$notify(r0, 0x402, 0x80000032) ioctl$VT_RELDISP(r1, 0x5605) pread64(r1, 0x0, 0x0, 0x1c) read$FUSE(0xffffffffffffffff, &(0x7f0000002480)={0x2020}, 0x2020) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m30.004259826s ago: executing program 38 (id=227): mknod$loop(0x0, 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0xc040) setrlimit(0x8, 0x0) execve(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) connect$inet(r3, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) 9.965342426s ago: executing program 5 (id=383): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000000)={&(0x7f0000000280)=[{0x5, 0x200, 0x0, 0x0}], 0x1}) 6.878646366s ago: executing program 3 (id=384): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x9, &(0x7f0000000240)=@raw=[@ringbuf_query, @tail_call], 0x0, 0x95, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9365, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x4008050) 6.364094049s ago: executing program 3 (id=385): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) 6.291079585s ago: executing program 5 (id=386): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000c80)=""/218, 0xda}, {&(0x7f00000028c0)=""/4035, 0xfc3}, {&(0x7f00000038c0)=""/4111, 0x100f}, {&(0x7f0000000500)=""/208, 0xd0}, {&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000000380)=""/131, 0x83}], 0x6}, 0x120) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 5.801555627s ago: executing program 5 (id=387): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 5.252035493s ago: executing program 5 (id=388): r0 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000c40)=ANY=[@ANYBLOB="18080000c0000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc09085b"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 4.741794776s ago: executing program 5 (id=389): r0 = syz_open_dev$dri(0x0, 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1fb, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000180)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0xfffffffffffffffd, 0xf, 0x80000006, 0x1b65}, 0x0, 0x0) 4.644965183s ago: executing program 3 (id=390): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000180)="b90103606908068c3c270040e7832f0000f008001ffff2e1ffff8100632f0806", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.680160678s ago: executing program 5 (id=391): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x7fffffffffffffff, 0x8002) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x5) connect$pptp(r0, 0x0, 0x0) connect$pptp(r0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, 0x0) ioctl$HIDIOCINITREPORT(r3, 0x4805, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 2.63980805s ago: executing program 3 (id=392): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) 2.151473648s ago: executing program 3 (id=393): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000000)={&(0x7f0000000280)=[{0x5, 0x200, 0x0, 0x0}], 0x1}) 0s ago: executing program 3 (id=394): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) kernel console output (not intermixed with test programs): interface [ 406.614471][ T3438] bond0 (unregistering): Released all slaves [ 406.819456][ T6948] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 406.826300][ T6948] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 406.872942][ T5783] Bluetooth: hci1: command tx timeout [ 406.889825][ T6948] vhci_hcd vhci_hcd.0: Device attached [ 406.923782][ T3438] hsr_slave_0: left promiscuous mode [ 406.940815][ T3438] hsr_slave_1: left promiscuous mode [ 406.960115][ T3438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.970286][ T3438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.984315][ T6952] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(16) [ 406.991612][ T6952] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 407.002224][ T3438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.011324][ T3438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.035630][ T6948] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(15) [ 407.042469][ T6948] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 407.066486][ T3438] veth1_macvtap: left promiscuous mode [ 407.073323][ T3438] veth0_macvtap: left promiscuous mode [ 407.083932][ T6952] vhci_hcd vhci_hcd.0: Device attached [ 407.092393][ T6948] vhci_hcd vhci_hcd.0: Device attached [ 407.092639][ T3438] veth1_vlan: left promiscuous mode [ 407.104847][ T3438] veth0_vlan: left promiscuous mode [ 407.109299][ T6957] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(21) [ 407.116839][ T6957] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 407.128215][ T6957] vhci_hcd vhci_hcd.0: Device attached [ 407.137228][ T6948] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 407.148591][ T6948] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 407.149835][ T5426] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 407.169427][ T6948] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 407.258515][ T6958] vhci_hcd: connection closed [ 407.260036][ T6955] vhci_hcd: connection closed [ 407.266664][ T6353] vhci_hcd vhci_hcd.3: stop threads [ 407.288033][ T6949] vhci_hcd: connection reset by peer [ 407.295065][ T6953] vhci_hcd: connection closed [ 407.296104][ T6353] vhci_hcd vhci_hcd.3: release socket [ 407.314850][ T6353] vhci_hcd vhci_hcd.3: disconnect device [ 407.326163][ T6353] vhci_hcd vhci_hcd.3: stop threads [ 407.333617][ T6353] vhci_hcd vhci_hcd.3: release socket [ 407.339910][ T6353] vhci_hcd vhci_hcd.3: disconnect device [ 407.346212][ T6353] vhci_hcd vhci_hcd.3: stop threads [ 407.352946][ T6353] vhci_hcd vhci_hcd.3: release socket [ 407.358707][ T6353] vhci_hcd vhci_hcd.3: disconnect device [ 407.372549][ T6353] vhci_hcd vhci_hcd.3: stop threads [ 407.378248][ T6353] vhci_hcd vhci_hcd.3: release socket [ 407.387067][ T6353] vhci_hcd vhci_hcd.3: disconnect device [ 407.717956][ T3438] team0 (unregistering): Port device team_slave_1 removed [ 407.759114][ T3438] team0 (unregistering): Port device team_slave_0 removed [ 408.349948][ T6916] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.368557][ T6916] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.389486][ T6916] bridge_slave_0: entered allmulticast mode [ 408.398442][ T6916] bridge_slave_0: entered promiscuous mode [ 408.452634][ T6916] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.473511][ T6916] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.481947][ T6916] bridge_slave_1: entered allmulticast mode [ 408.497859][ T6916] bridge_slave_1: entered promiscuous mode [ 408.520207][ T30] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 408.528692][ T6806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.697719][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 408.713991][ T30] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 408.748552][ T30] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 408.769654][ T30] usb 4-1: config 0 interface 0 has no altsetting 0 [ 408.794266][ T6916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.795166][ T30] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 408.840546][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.852966][ T30] usb 4-1: Product: syz [ 408.857332][ T30] usb 4-1: Manufacturer: syz [ 408.864923][ T30] usb 4-1: SerialNumber: syz [ 408.874786][ T6916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.895464][ T30] usb 4-1: config 0 descriptor?? [ 408.951801][ T5783] Bluetooth: hci1: command tx timeout [ 409.118781][ T6916] team0: Port device team_slave_0 added [ 409.167226][ T30] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 409.210941][ T6916] team0: Port device team_slave_1 added [ 409.213023][ T30] imon 4-1:0.0: unable to initialize intf0, err -90 [ 409.254719][ T30] imon:imon_probe: failed to initialize context! [ 409.273034][ T30] imon 4-1:0.0: unable to register, err -19 [ 409.575766][ T6916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.600296][ T6916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.643214][ T6916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.678103][ T6916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.698155][ T6916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.726126][ T6916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.020162][ T6916] hsr_slave_0: entered promiscuous mode [ 410.032603][ T6916] hsr_slave_1: entered promiscuous mode [ 410.183623][ T6803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.660690][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.686489][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.030333][ T5783] Bluetooth: hci1: command tx timeout [ 411.069286][ T6352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.084062][ T6806] veth0_vlan: entered promiscuous mode [ 411.114709][ T6352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.324659][ T6806] veth1_vlan: entered promiscuous mode [ 411.385350][ T30] usb 4-1: USB disconnect, device number 21 [ 412.006778][ T6806] veth0_macvtap: entered promiscuous mode [ 412.236871][ T6806] veth1_macvtap: entered promiscuous mode [ 412.318697][ T5837] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 412.332559][ T6803] veth0_vlan: entered promiscuous mode [ 412.369503][ T5426] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 412.390680][ T6803] veth1_vlan: entered promiscuous mode [ 412.473181][ T6916] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 412.621195][ T6916] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 412.708749][ T6806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.758258][ T6916] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 412.811742][ T6916] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 412.881800][ T5837] usb 9-1: Using ep0 maxpacket: 32 [ 412.899943][ T5837] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.912592][ T5837] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.938193][ T5837] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.976596][ T5837] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 413.005339][ T5837] usb 9-1: config 0 interface 0 has no altsetting 0 [ 413.014309][ T6806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.023608][ T5837] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 413.049543][ T5837] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.065259][ T6803] veth0_macvtap: entered promiscuous mode [ 413.083313][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 413.086461][ T5837] usb 9-1: config 0 descriptor?? [ 413.206725][ T3438] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.230645][ T3438] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.255573][ T6803] veth1_macvtap: entered promiscuous mode [ 413.265582][ T3438] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.281007][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 413.282132][ T3438] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.295136][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 413.295279][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 413.322472][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 413.337654][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.375438][ T24] usb 4-1: Product: syz [ 413.398304][ T24] usb 4-1: Manufacturer: syz [ 413.424076][ T24] usb 4-1: SerialNumber: syz [ 413.451029][ T24] usb 4-1: config 0 descriptor?? [ 413.539751][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 413.567900][ T24] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 413.625217][ T5837] usbhid 9-1:0.0: can't add hid device: -71 [ 413.652704][ T5837] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 413.682828][ T6803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.683275][ T5837] usb 9-1: USB disconnect, device number 2 [ 413.824104][ T6803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.924259][ T3438] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.043357][ T3438] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.096153][ T3438] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.160710][ T3438] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.193240][ T24] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 414.220214][ T24] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 414.251961][ T24] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 414.289658][ T24] em28xx 4-1:0.0: No AC97 audio processor [ 414.831509][ T6916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.914468][ T7007] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 415.065515][ T6916] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.166260][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.174295][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.236918][ T6353] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.244582][ T6353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.983429][ T30] usb 4-1: USB disconnect, device number 22 [ 416.009318][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 416.042945][ T30] em28xx 4-1:0.0: Disconnecting em28xx [ 416.071462][ T30] em28xx 4-1:0.0: Freeing device [ 416.225379][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.293014][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.365200][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 416.400857][ T7025] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 416.407692][ T7025] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 416.427538][ T24] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 416.468411][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.497396][ T7025] vhci_hcd vhci_hcd.0: Device attached [ 416.510663][ T7029] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(16) [ 416.517497][ T7029] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 416.540766][ T24] usb 9-1: config 0 descriptor?? [ 416.624946][ T7029] vhci_hcd vhci_hcd.0: Device attached [ 416.730926][ T7025] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(15) [ 416.737762][ T7025] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 416.769251][ T794] usb 39-1: new low-speed USB device number 6 using vhci_hcd [ 416.840885][ T7025] vhci_hcd vhci_hcd.0: Device attached [ 416.843586][ T7039] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 416.911459][ T7029] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(18) [ 416.918296][ T7029] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 416.920505][ T7025] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 417.058856][ T7029] vhci_hcd vhci_hcd.0: Device attached [ 417.090180][ T24] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 417.115723][ T7025] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 417.445192][ T7037] vhci_hcd: connection closed [ 417.451295][ T6352] vhci_hcd vhci_hcd.3: stop threads [ 417.461214][ T7030] vhci_hcd: connection closed [ 417.464327][ T7035] vhci_hcd: connection closed [ 417.466525][ T7027] vhci_hcd: connection reset by peer [ 417.541941][ T6352] vhci_hcd vhci_hcd.3: release socket [ 417.569895][ T6352] vhci_hcd vhci_hcd.3: disconnect device [ 417.605500][ T6352] vhci_hcd vhci_hcd.3: stop threads [ 417.625127][ T6352] vhci_hcd vhci_hcd.3: release socket [ 417.660091][ T6352] vhci_hcd vhci_hcd.3: disconnect device [ 417.699614][ T6352] vhci_hcd vhci_hcd.3: stop threads [ 417.705044][ T6352] vhci_hcd vhci_hcd.3: release socket [ 417.770226][ T6352] vhci_hcd vhci_hcd.3: disconnect device [ 417.811985][ T6352] vhci_hcd vhci_hcd.3: stop threads [ 417.832639][ T6352] vhci_hcd vhci_hcd.3: release socket [ 417.867392][ T6352] vhci_hcd vhci_hcd.3: disconnect device [ 418.260714][ C1] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -1 [ 418.306924][ T6916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.044814][ T5787] usb 9-1: USB disconnect, device number 3 [ 420.299248][ T5784] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 420.565135][ T5784] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 420.639345][ T5784] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.711705][ T5784] usb 9-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 420.781779][ T5784] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.889551][ T5784] usb 9-1: config 0 descriptor?? [ 421.636127][ T5784] usbhid 9-1:0.0: can't add hid device: -71 [ 421.668483][ T6354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.669586][ T5784] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 421.738406][ T6354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.782870][ T5784] usb 9-1: USB disconnect, device number 4 [ 421.910555][ T794] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 421.930812][ T29] audit: type=1326 audit(1772987447.409:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1adf99c799 code=0x7fc00000 [ 421.999302][ T6354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.024047][ T6354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.033556][ T29] audit: type=1326 audit(1772987447.409:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1adf99c799 code=0x7fc00000 [ 422.073106][ T29] audit: type=1326 audit(1772987447.409:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1adf99c799 code=0x7fc00000 [ 422.169314][ T29] audit: type=1326 audit(1772987447.489:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1adf99c799 code=0x7fc00000 [ 422.228088][ T29] audit: type=1326 audit(1772987447.489:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1adf99c799 code=0x7fc00000 [ 422.347490][ T29] audit: type=1326 audit(1772987447.489:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1adf99c799 code=0x7fc00000 [ 422.401111][ T29] audit: type=1326 audit(1772987447.489:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1adf99c799 code=0x7fc00000 [ 422.521425][ T29] audit: type=1326 audit(1772987447.489:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1adf99c799 code=0x7fc00000 [ 422.585101][ T29] audit: type=1326 audit(1772987447.489:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1adf99c799 code=0x7fc00000 [ 422.656265][ T29] audit: type=1326 audit(1772987447.489:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1adf99c799 code=0x7fc00000 [ 422.669913][ T7094] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 422.810854][ T6916] veth0_vlan: entered promiscuous mode [ 422.879988][ T5426] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 422.957181][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.995163][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.997453][ T6916] veth1_vlan: entered promiscuous mode [ 423.072605][ T5426] usb 9-1: Using ep0 maxpacket: 16 [ 423.083149][ T5426] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 423.140916][ T5426] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 423.232404][ T5426] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 423.279292][ T5426] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.287517][ T5426] usb 9-1: Product: syz [ 423.312483][ T5426] usb 9-1: Manufacturer: syz [ 423.317291][ T5426] usb 9-1: SerialNumber: syz [ 423.356872][ T7098] Bluetooth: MGMT ver 1.23 [ 423.393309][ T5426] usb 9-1: config 0 descriptor?? [ 423.403460][ T5997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.453568][ T5426] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 423.467632][ T5997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.492802][ T5426] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 423.532307][ T7102] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 423.539138][ T7102] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 423.609472][ T7102] vhci_hcd vhci_hcd.0: Device attached [ 423.713531][ T7102] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(15) [ 423.720361][ T7102] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 423.762711][ T7106] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(16) [ 423.769561][ T7106] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 423.817152][ T6916] veth0_macvtap: entered promiscuous mode [ 423.824528][ T7102] vhci_hcd vhci_hcd.0: Device attached [ 423.861355][ T7106] vhci_hcd vhci_hcd.0: Device attached [ 423.904056][ T7112] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(21) [ 423.910880][ T7112] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 423.916880][ T6916] veth1_macvtap: entered promiscuous mode [ 423.924861][ T5787] usb 39-1: new low-speed USB device number 7 using vhci_hcd [ 423.944725][ T7102] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 424.015826][ T7112] vhci_hcd vhci_hcd.0: Device attached [ 424.041928][ T7106] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 424.083580][ T5426] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 424.104998][ T7102] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 424.113814][ T6916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.136452][ T5426] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 424.144351][ T6916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.305549][ T5997] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.339507][ T5997] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.346436][ T7108] vhci_hcd: connection closed [ 424.349211][ T7114] vhci_hcd: connection closed [ 424.370199][ T6354] vhci_hcd vhci_hcd.3: stop threads [ 424.390831][ T5426] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 424.398012][ T5426] em28xx 9-1:0.0: No AC97 audio processor [ 424.411978][ T7103] vhci_hcd: connection reset by peer [ 424.415493][ T7107] vhci_hcd: connection closed [ 424.427160][ T3438] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.451968][ T6354] vhci_hcd vhci_hcd.3: release socket [ 424.463657][ T6354] vhci_hcd vhci_hcd.3: disconnect device [ 424.493190][ T3438] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.514476][ T6354] vhci_hcd vhci_hcd.3: stop threads [ 424.545308][ T6354] vhci_hcd vhci_hcd.3: release socket [ 424.601343][ T6354] vhci_hcd vhci_hcd.3: disconnect device [ 424.648644][ T6354] vhci_hcd vhci_hcd.3: stop threads [ 424.664423][ T6354] vhci_hcd vhci_hcd.3: release socket [ 424.730452][ T6354] vhci_hcd vhci_hcd.3: disconnect device [ 424.759222][ T6354] vhci_hcd vhci_hcd.3: stop threads [ 424.798743][ T6354] vhci_hcd vhci_hcd.3: release socket [ 424.831665][ T6354] vhci_hcd vhci_hcd.3: disconnect device [ 427.352090][ T5838] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 427.443097][ T30] usb 9-1: USB disconnect, device number 5 [ 427.562086][ T30] em28xx 9-1:0.0: Disconnecting em28xx [ 427.629461][ T30] em28xx 9-1:0.0: Freeing device [ 427.667792][ T5838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 428.015634][ T5838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.109993][ T5838] usb 6-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 428.269331][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.725324][ T5787] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 429.748011][ T5838] usb 6-1: config 0 descriptor?? [ 429.751439][ T7152] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 434.723200][ T5838] usbhid 6-1:0.0: can't add hid device: -71 [ 434.753471][ T5838] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 435.316071][ T5838] usb 6-1: USB disconnect, device number 2 [ 436.784893][ T7177] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13) [ 436.791746][ T7177] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 436.871426][ T7177] vhci_hcd vhci_hcd.0: Device attached [ 436.906696][ T7182] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(16) [ 436.913532][ T7182] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 436.993883][ T7182] vhci_hcd vhci_hcd.0: Device attached [ 437.029548][ T7177] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(15) [ 437.036364][ T7177] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 437.100489][ T7189] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 437.149520][ T5838] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 437.179264][ T7182] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(18) [ 437.186099][ T7182] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 437.253373][ T7177] vhci_hcd vhci_hcd.0: Device attached [ 437.371085][ T7194] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 437.413739][ T7182] vhci_hcd vhci_hcd.0: Device attached [ 437.452586][ T7177] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 437.896142][ T7188] vhci_hcd: connection closed [ 437.897117][ T6353] vhci_hcd vhci_hcd.5: stop threads [ 437.907568][ T7178] vhci_hcd: connection reset by peer [ 437.908598][ T7186] vhci_hcd: connection closed [ 437.913727][ T7183] vhci_hcd: connection closed [ 437.977030][ T6353] vhci_hcd vhci_hcd.5: release socket [ 438.039266][ T6353] vhci_hcd vhci_hcd.5: disconnect device [ 438.060249][ T6353] vhci_hcd vhci_hcd.5: stop threads [ 438.065657][ T6353] vhci_hcd vhci_hcd.5: release socket [ 438.120693][ T6353] vhci_hcd vhci_hcd.5: disconnect device [ 439.010472][ T6353] vhci_hcd vhci_hcd.5: stop threads [ 439.015900][ T6353] vhci_hcd vhci_hcd.5: release socket [ 439.056548][ T6353] vhci_hcd vhci_hcd.5: disconnect device [ 439.080119][ T6353] vhci_hcd vhci_hcd.5: stop threads [ 439.085536][ T6353] vhci_hcd vhci_hcd.5: release socket [ 439.092262][ T6353] vhci_hcd vhci_hcd.5: disconnect device [ 440.926662][ T5787] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 441.179584][ T5787] usb 4-1: Using ep0 maxpacket: 16 [ 441.221075][ T5787] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 441.279208][ T5787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 441.344712][ T5787] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 441.405511][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.451777][ T5787] usb 4-1: Product: syz [ 441.456141][ T5787] usb 4-1: Manufacturer: syz [ 441.493548][ T5787] usb 4-1: SerialNumber: syz [ 441.531614][ T5787] usb 4-1: config 0 descriptor?? [ 441.549203][ T30] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 441.627582][ T5787] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 441.679127][ T5787] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 441.810901][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 441.879238][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.949775][ T30] usb 6-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 442.012225][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.149298][ T30] usb 6-1: config 0 descriptor?? [ 442.204190][ T5787] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 442.239377][ T5787] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 442.299645][ T5838] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 442.485280][ T5787] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 442.559250][ T5787] em28xx 4-1:0.0: No AC97 audio processor [ 442.660901][ T30] usbhid 6-1:0.0: can't add hid device: -71 [ 442.667458][ T30] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 442.808098][ T30] usb 6-1: USB disconnect, device number 3 [ 443.358770][ T6352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.399265][ T6352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.650686][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 443.670649][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 443.688531][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 443.719848][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 443.740276][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 443.836387][ T5838] usb 4-1: USB disconnect, device number 23 [ 443.836433][ T6352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.836513][ T6352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.900677][ T5838] em28xx 4-1:0.0: Disconnecting em28xx [ 443.961048][ T5838] em28xx 4-1:0.0: Freeing device [ 445.845410][ T5791] Bluetooth: hci2: command tx timeout [ 447.728590][ T7262] netlink: 40 bytes leftover after parsing attributes in process `syz.3.218'. [ 447.840995][ T7259] netlink: 104 bytes leftover after parsing attributes in process `syz.6.216'. [ 447.909384][ T5791] Bluetooth: hci2: command tx timeout [ 448.527380][ T7231] chnl_net:caif_netlink_parms(): no params data found [ 449.079808][ T5787] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 449.292635][ T5787] usb 4-1: Using ep0 maxpacket: 16 [ 449.334677][ T5787] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 449.390015][ T5787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 449.466482][ T5787] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 449.607890][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.652907][ T5787] usb 4-1: Product: syz [ 449.689338][ T5787] usb 4-1: Manufacturer: syz [ 449.695724][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.704177][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.709481][ T5787] usb 4-1: SerialNumber: syz [ 449.767620][ T5787] usb 4-1: config 0 descriptor?? [ 449.881817][ T5787] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 449.928796][ T5787] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 450.000327][ T5791] Bluetooth: hci2: command tx timeout [ 450.615068][ T5787] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 450.652149][ T5787] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 450.717980][ T75] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.932155][ T5787] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 451.000457][ T5787] em28xx 4-1:0.0: No AC97 audio processor [ 451.021049][ C0] hrtimer: interrupt took 351304 ns [ 452.069482][ T5791] Bluetooth: hci2: command tx timeout [ 452.296018][ T75] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.418375][ T5838] usb 4-1: USB disconnect, device number 24 [ 452.470839][ T5838] em28xx 4-1:0.0: Disconnecting em28xx [ 452.542128][ T75] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.567299][ T5838] em28xx 4-1:0.0: Freeing device [ 452.743451][ T7231] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.801455][ T7231] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.836704][ T7231] bridge_slave_0: entered allmulticast mode [ 452.887034][ T7231] bridge_slave_0: entered promiscuous mode [ 453.115487][ T75] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.286778][ T7231] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.300341][ T7231] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.308831][ T7231] bridge_slave_1: entered allmulticast mode [ 453.331308][ T7231] bridge_slave_1: entered promiscuous mode [ 453.875594][ T7231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.246338][ T7231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.425764][ T5838] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 455.897095][ T7231] team0: Port device team_slave_0 added [ 457.425316][ T7231] team0: Port device team_slave_1 added [ 458.924011][ T7231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.029501][ T7231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.209261][ T7231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.275763][ T7231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.369600][ T7231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.543667][ T7231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.753801][ T75] bridge_slave_1: left allmulticast mode [ 459.770968][ T75] bridge_slave_1: left promiscuous mode [ 459.804144][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.828505][ T5962] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 460.020731][ T75] bridge_slave_0: left allmulticast mode [ 460.059154][ T75] bridge_slave_0: left promiscuous mode [ 460.065663][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.155881][ T5962] usb 6-1: Using ep0 maxpacket: 8 [ 460.327953][ T5962] usb 6-1: config 64 has an invalid interface number: 19 but max is 0 [ 460.386955][ T5962] usb 6-1: config 64 has no interface number 0 [ 460.413886][ T5962] usb 6-1: config 64 interface 19 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 460.539097][ T5962] usb 6-1: config 64 interface 19 altsetting 0 endpoint 0x8F has invalid maxpacket 39713, setting to 1024 [ 460.649427][ T5962] usb 6-1: config 64 interface 19 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024 [ 460.769723][ T5962] usb 6-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 460.851511][ T5962] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.879394][ T5838] usb 4-1: device descriptor read/all, error -110 [ 460.935957][ T7330] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 460.996020][ T5962] usb 6-1: probing VID:PID(2201:012C) [ 461.079501][ T5838] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 461.133708][ T5962] usb 6-1: vub300 testing BULK IN EndPoint(0) 8F [ 461.174311][ T5962] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 461.248713][ T5838] usb 4-1: device descriptor read/64, error -32 [ 461.270180][ T5962] vub300 6-1:64.19: probe with driver vub300 failed with error -22 [ 461.340330][ T5962] usb 6-1: USB disconnect, device number 4 [ 461.400843][ T5838] usb usb4-port1: attempt power cycle [ 461.847997][ T5838] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 461.950316][ T5838] usb 4-1: device descriptor read/8, error -32 [ 462.200430][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.234857][ T5838] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 462.321272][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.340029][ T5838] usb 4-1: device descriptor read/8, error -32 [ 462.443849][ T75] bond0 (unregistering): Released all slaves [ 462.461839][ T5838] usb usb4-port1: unable to enumerate USB device [ 462.592184][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.232'. [ 463.035468][ T7231] hsr_slave_0: entered promiscuous mode [ 463.065877][ T7231] hsr_slave_1: entered promiscuous mode [ 463.126451][ T7231] debugfs: 'hsr0' already exists in 'hsr' [ 463.169738][ T7231] Cannot create hsr debugfs directory [ 465.020429][ T75] hsr_slave_0: left promiscuous mode [ 465.072340][ T75] hsr_slave_1: left promiscuous mode [ 465.123616][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.146715][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.222747][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.233317][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.393677][ T75] veth1_macvtap: left promiscuous mode [ 465.434494][ T75] veth0_macvtap: left promiscuous mode [ 465.526597][ T75] veth1_vlan: left promiscuous mode [ 465.559734][ T75] veth0_vlan: left promiscuous mode [ 466.373649][ T5787] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 466.572070][ T5787] usb 6-1: Using ep0 maxpacket: 16 [ 466.589353][ T5787] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 466.713622][ T5787] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 466.821310][ T5787] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 466.866161][ T5787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.898531][ T5787] usb 6-1: Product: syz [ 466.951019][ T5787] usb 6-1: Manufacturer: syz [ 466.978268][ T5787] usb 6-1: SerialNumber: syz [ 467.030911][ T5787] usb 6-1: config 0 descriptor?? [ 467.096284][ T5787] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 467.137984][ T5787] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 467.671565][ T5783] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 467.692229][ T5783] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 467.700728][ T5787] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 467.715314][ T5783] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 467.762301][ T5783] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 467.771193][ T5787] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 467.807528][ T5783] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 468.000891][ T5787] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 468.019135][ T5787] em28xx 6-1:0.0: No AC97 audio processor [ 468.040109][ T5791] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 468.081072][ T5791] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 468.108111][ T5791] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 468.134977][ T5791] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 468.151695][ T5791] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 468.617477][ T75] team0 (unregistering): Port device team_slave_1 removed [ 468.727477][ T75] team0 (unregistering): Port device team_slave_0 removed [ 469.942138][ T5783] Bluetooth: hci5: command tx timeout [ 470.260481][ T5783] Bluetooth: hci6: command tx timeout [ 471.642168][ T5787] usb 6-1: USB disconnect, device number 5 [ 471.652748][ T5787] em28xx 6-1:0.0: Disconnecting em28xx [ 471.716047][ T5787] em28xx 6-1:0.0: Freeing device [ 471.991628][ T5783] Bluetooth: hci5: command tx timeout [ 472.195726][ T5787] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 472.309637][ T5783] Bluetooth: hci6: command tx timeout [ 472.371419][ T5787] usb 6-1: Using ep0 maxpacket: 8 [ 472.385717][ T5787] usb 6-1: config 64 has an invalid interface number: 19 but max is 0 [ 472.428067][ T5787] usb 6-1: config 64 has no interface number 0 [ 472.447878][ T5787] usb 6-1: config 64 interface 19 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 472.495216][ T5787] usb 6-1: config 64 interface 19 altsetting 0 endpoint 0x8F has invalid maxpacket 39713, setting to 1024 [ 472.922890][ T5787] usb 6-1: config 64 interface 19 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024 [ 472.935179][ T5787] usb 6-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 472.979444][ T5787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.315509][ T7371] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 473.497907][ T5787] usb 6-1: probing VID:PID(2201:012C) [ 473.552231][ T5787] usb 6-1: vub300 testing BULK IN EndPoint(0) 8F [ 473.624036][ T5787] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 473.679484][ T5787] vub300 6-1:64.19: probe with driver vub300 failed with error -22 [ 473.771032][ T5787] usb 6-1: USB disconnect, device number 6 [ 474.069210][ T5783] Bluetooth: hci5: command tx timeout [ 474.270384][ T7378] kAFS: unable to lookup cell '(,c¾ûL' [ 474.399740][ T5783] Bluetooth: hci6: command tx timeout [ 476.150105][ T5783] Bluetooth: hci5: command tx timeout [ 476.470743][ T5783] Bluetooth: hci6: command tx timeout [ 477.498832][ T5787] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 477.663570][ T75] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.788098][ T5787] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 477.828482][ T5787] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 477.850066][ T5787] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 477.877901][ T5787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.943021][ T7406] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 477.974829][ T75] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.057686][ T5787] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 478.708680][ T7231] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 478.741777][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 479.010150][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 479.088445][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 479.104634][ T75] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.163820][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 479.306912][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 479.383424][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.431861][ T10] usb 6-1: Product: syz [ 479.465525][ T10] usb 6-1: Manufacturer: syz [ 479.493562][ T10] usb 6-1: SerialNumber: syz [ 479.592001][ T10] usb 6-1: config 0 descriptor?? [ 479.712328][ T7231] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 479.718191][ T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 479.783337][ T10] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 479.952427][ T75] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.203446][ T7231] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 480.652672][ T5787] usb 4-1: USB disconnect, device number 29 [ 480.699305][ T10] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 480.712922][ T10] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 480.928526][ T10] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 480.936637][ T10] em28xx 6-1:0.0: No AC97 audio processor [ 481.001036][ T7231] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 482.329695][ T7360] chnl_net:caif_netlink_parms(): no params data found [ 482.624559][ T5787] usb 6-1: USB disconnect, device number 7 [ 482.736740][ T5787] em28xx 6-1:0.0: Disconnecting em28xx [ 482.870783][ T5787] em28xx 6-1:0.0: Freeing device [ 486.895250][ T7436] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 486.902666][ T7436] overlayfs: failed to set xattr on upper [ 486.908777][ T7436] overlayfs: ...falling back to redirect_dir=nofollow. [ 486.917941][ T7436] overlayfs: ...falling back to index=off. [ 486.933514][ T7436] overlayfs: ...falling back to uuid=null. [ 486.942525][ T7436] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 487.582381][ T7357] chnl_net:caif_netlink_parms(): no params data found [ 488.379837][ T75] bridge_slave_1: left allmulticast mode [ 488.439401][ T75] bridge_slave_1: left promiscuous mode [ 488.445982][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.598292][ T75] bridge_slave_0: left allmulticast mode [ 488.630057][ T75] bridge_slave_0: left promiscuous mode [ 488.636610][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.343129][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.359656][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 489.385816][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.405512][ T75] bond0 (unregistering): Released all slaves [ 489.535478][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 489.589254][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 489.649700][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 489.741189][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 489.789414][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.856964][ T10] usb 6-1: Product: syz [ 489.870610][ T10] usb 6-1: Manufacturer: syz [ 489.939095][ T10] usb 6-1: SerialNumber: syz [ 489.963783][ T10] usb 6-1: config 0 descriptor?? [ 490.061351][ T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 490.144991][ T10] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 490.642576][ T7360] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.678775][ T10] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 490.690286][ T7360] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.716108][ T10] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 490.732218][ T7360] bridge_slave_0: entered allmulticast mode [ 490.750312][ T7360] bridge_slave_0: entered promiscuous mode [ 490.885776][ T7360] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.910840][ T7360] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.945783][ T7360] bridge_slave_1: entered allmulticast mode [ 490.955897][ T10] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 490.972365][ T7360] bridge_slave_1: entered promiscuous mode [ 490.987202][ T10] em28xx 6-1:0.0: No AC97 audio processor [ 491.110613][ T7357] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.118091][ T7357] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.147172][ T7357] bridge_slave_0: entered allmulticast mode [ 491.162235][ T7357] bridge_slave_0: entered promiscuous mode [ 491.539907][ T75] hsr_slave_0: left promiscuous mode [ 491.567470][ T75] hsr_slave_1: left promiscuous mode [ 491.595945][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.626621][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.646706][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.656307][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.695054][ T75] veth1_macvtap: left promiscuous mode [ 491.708103][ T75] veth0_macvtap: left promiscuous mode [ 491.726642][ T75] veth1_vlan: left promiscuous mode [ 491.738041][ T75] veth0_vlan: left promiscuous mode [ 492.250208][ T5426] usb 6-1: USB disconnect, device number 8 [ 492.319293][ T5426] em28xx 6-1:0.0: Disconnecting em28xx [ 492.352683][ T5426] em28xx 6-1:0.0: Freeing device [ 492.549327][ T5779] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 492.757609][ T75] team0 (unregistering): Port device team_slave_1 removed [ 492.794446][ T5779] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 492.811962][ T5779] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 492.823660][ T5779] usb 4-1: config 8 has no interface number 0 [ 492.854636][ T75] team0 (unregistering): Port device team_slave_0 removed [ 492.866865][ T5779] usb 4-1: config 8 interface 177 has no altsetting 0 [ 492.884262][ T5779] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 492.909198][ T5779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.346006][ T7357] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.849446][ T7357] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.857093][ T7357] bridge_slave_1: entered allmulticast mode [ 495.671857][ T7357] bridge_slave_1: entered promiscuous mode [ 497.957688][ T7360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.664026][ T5779] usb 4-1: USB disconnect, device number 30 [ 499.847297][ T7360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.074599][ T7357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.136110][ T7231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.274082][ T7357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.366165][ T7360] team0: Port device team_slave_0 added [ 500.396274][ T7360] team0: Port device team_slave_1 added [ 500.514441][ T7357] team0: Port device team_slave_0 added [ 500.536193][ T7357] team0: Port device team_slave_1 added [ 500.655332][ T7360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.674109][ T7360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.729358][ T7360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.835364][ T7231] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.924970][ T7360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.961136][ T7360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.073495][ T7360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.132665][ T7357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.185855][ T7357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.231165][ T7357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.285547][ T7357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.293716][ T7357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.322270][ T7357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.404374][ T75] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.699631][ T5779] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 501.852875][ T7156] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.860448][ T7156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.892048][ T5779] usb 6-1: Using ep0 maxpacket: 16 [ 501.956161][ T5779] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 502.036509][ T5779] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 502.061712][ T75] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.128867][ T5779] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 502.138289][ T5779] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.221720][ T5779] usb 6-1: Product: syz [ 502.226082][ T5779] usb 6-1: Manufacturer: syz [ 502.259153][ T5779] usb 6-1: SerialNumber: syz [ 502.297686][ T5779] usb 6-1: config 0 descriptor?? [ 502.343897][ T6354] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.351598][ T6354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.378524][ T5779] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 502.411667][ T5779] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 502.510020][ T75] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.631152][ T7360] hsr_slave_0: entered promiscuous mode [ 502.683741][ T7360] hsr_slave_1: entered promiscuous mode [ 502.877822][ T75] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.009127][ T5779] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 503.039267][ T5779] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 503.049249][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 503.077672][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 503.093001][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 503.104334][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 503.124854][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 503.147400][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 503.220028][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 503.239936][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 503.268265][ T5779] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 503.273266][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 503.289273][ T5779] em28xx 6-1:0.0: No AC97 audio processor [ 503.361168][ T24] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 503.389393][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.409456][ T24] usb 4-1: Product: syz [ 503.413824][ T24] usb 4-1: Manufacturer: syz [ 503.459734][ T24] usb 4-1: SerialNumber: syz [ 503.473555][ T24] usb 4-1: config 0 descriptor?? [ 503.508635][ T7357] hsr_slave_0: entered promiscuous mode [ 503.553663][ T7357] hsr_slave_1: entered promiscuous mode [ 503.593775][ T7357] debugfs: 'hsr0' already exists in 'hsr' [ 503.604599][ T7357] Cannot create hsr debugfs directory [ 503.741852][ T24] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 504.304903][ T24] rc_core: IR keymap rc-imon-pad not found [ 504.319579][ T24] Registered IR keymap rc-empty [ 504.325086][ T24] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 504.369551][ T24] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 504.414862][ T24] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 504.455837][ T24] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 504.474835][ T5779] usb 6-1: USB disconnect, device number 9 [ 504.495067][ T5779] em28xx 6-1:0.0: Disconnecting em28xx [ 504.507114][ T5779] em28xx 6-1:0.0: Freeing device [ 504.516051][ T24] imon 4-1:0.0: iMON device (15c2:0041, intf0) on usb<4:31> initialized [ 504.793049][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 504.801913][ T24] usb 4-1: USB disconnect, device number 31 [ 505.129595][ T75] bridge_slave_1: left allmulticast mode [ 505.139081][ T75] bridge_slave_1: left promiscuous mode [ 505.145522][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.189975][ T5791] Bluetooth: hci1: command tx timeout [ 505.242905][ T75] bridge_slave_0: left allmulticast mode [ 505.248754][ T75] bridge_slave_0: left promiscuous mode [ 505.261579][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.799493][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 506.013045][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.033987][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.052596][ T75] bond0 (unregistering): Released all slaves [ 506.074917][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.131365][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.174484][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 506.254134][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 506.267817][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.346143][ T7547] netlink: 104 bytes leftover after parsing attributes in process `syz.3.275'. [ 507.234176][ T24] usb 6-1: config 0 descriptor?? [ 507.269444][ T5786] Bluetooth: hci1: command tx timeout [ 508.069408][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 508.180790][ T24] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 508.315817][ T5779] usb 6-1: USB disconnect, device number 10 [ 508.508025][ T75] hsr_slave_0: left promiscuous mode [ 508.547257][ T75] hsr_slave_1: left promiscuous mode [ 508.597128][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.640476][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.684113][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.715538][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.804188][ T75] veth1_macvtap: left promiscuous mode [ 508.823300][ T75] veth0_macvtap: left promiscuous mode [ 508.847922][ T75] veth1_vlan: left promiscuous mode [ 508.854819][ T75] veth0_vlan: left promiscuous mode [ 508.871006][ T7551] fido_id[7551]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 509.369409][ T5791] Bluetooth: hci1: command tx timeout [ 509.889451][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 510.059932][ T75] team0 (unregistering): Port device team_slave_1 removed [ 510.092213][ T75] team0 (unregistering): Port device team_slave_0 removed [ 510.095991][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 510.126858][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 510.139878][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 510.167180][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 510.184550][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.201838][ T24] usb 4-1: Product: syz [ 510.206307][ T24] usb 4-1: Manufacturer: syz [ 510.212326][ T24] usb 4-1: SerialNumber: syz [ 510.227382][ T24] usb 4-1: config 0 descriptor?? [ 510.281471][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 510.296083][ T24] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 510.525824][ T7560] netlink: 60 bytes leftover after parsing attributes in process `syz.5.279'. [ 510.918403][ T24] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 510.928612][ T24] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 511.002428][ T7360] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 511.138978][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.145686][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.266723][ T7360] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 511.390628][ T7360] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 511.439375][ T5791] Bluetooth: hci1: command tx timeout [ 511.601186][ T7360] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 511.707604][ T7528] chnl_net:caif_netlink_parms(): no params data found [ 511.790164][ T24] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 511.797317][ T24] em28xx 4-1:0.0: No AC97 audio processor [ 511.948037][ T7572] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 513.123837][ T24] usb 4-1: USB disconnect, device number 32 [ 513.178169][ T24] em28xx 4-1:0.0: Disconnecting em28xx [ 513.352461][ T24] em28xx 4-1:0.0: Freeing device [ 513.631772][ T7578] netlink: 'syz.3.282': attribute type 10 has an invalid length. [ 513.691252][ T7578] netlink: 164 bytes leftover after parsing attributes in process `syz.3.282'. [ 514.158496][ T7357] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 514.919298][ T7586] netlink: 104 bytes leftover after parsing attributes in process `syz.5.283'. [ 517.176766][ T7357] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 517.278012][ T7357] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 517.390042][ T7357] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 517.473193][ T75] bridge_slave_1: left allmulticast mode [ 517.489239][ T75] bridge_slave_1: left promiscuous mode [ 517.507023][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.549251][ T5779] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 517.583418][ T75] bridge_slave_0: left allmulticast mode [ 517.599300][ T75] bridge_slave_0: left promiscuous mode [ 517.613289][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.736067][ T5779] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.779407][ T5779] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.812103][ T5779] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 517.848176][ T5779] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 517.897442][ T5779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.963668][ T5779] usb 6-1: config 0 descriptor?? [ 518.517877][ T5779] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 518.626544][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.677183][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.746724][ T75] bond0 (unregistering): Released all slaves [ 518.793245][ T7528] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.872718][ T7528] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.907672][ T7528] bridge_slave_0: entered allmulticast mode [ 519.012092][ T7528] bridge_slave_0: entered promiscuous mode [ 519.124984][ T7528] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.191953][ T7528] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.226960][ T7528] bridge_slave_1: entered allmulticast mode [ 519.324852][ T7528] bridge_slave_1: entered promiscuous mode [ 519.523326][ T75] hsr_slave_0: left promiscuous mode [ 519.568528][ T75] hsr_slave_1: left promiscuous mode [ 519.613812][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.672524][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.749785][ C0] plantronics 0003:047F:FFFF.0005: usb_submit_urb(ctrl) failed: -1 [ 520.577976][ T7495] usb 6-1: USB disconnect, device number 11 [ 520.627552][ T75] team0 (unregistering): Port device team_slave_1 removed [ 520.792578][ T75] team0 (unregistering): Port device team_slave_0 removed [ 522.067077][ T7528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.127041][ T7528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.527993][ T7600] netlink: 'syz.3.288': attribute type 2 has an invalid length. [ 522.540700][ T7600] netlink: 164 bytes leftover after parsing attributes in process `syz.3.288'. [ 522.583092][ T7528] team0: Port device team_slave_0 added [ 522.661095][ T7528] team0: Port device team_slave_1 added [ 522.790670][ T7360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.958028][ T7528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.966405][ T7528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.000056][ T7528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.016869][ T7528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.024673][ T7528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.051622][ T7528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.164925][ T7360] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.496929][ T7528] hsr_slave_0: entered promiscuous mode [ 523.523223][ T7528] hsr_slave_1: entered promiscuous mode [ 523.536086][ T7528] debugfs: 'hsr0' already exists in 'hsr' [ 523.542642][ T7528] Cannot create hsr debugfs directory [ 523.664903][ T24] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 523.914147][ T7608] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 524.483636][ T6354] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.491322][ T6354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.523758][ T6354] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.531305][ T6354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.629498][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 524.659103][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 524.702231][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 524.756740][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 524.778558][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.829714][ T24] usb 4-1: Product: syz [ 524.840364][ T24] usb 4-1: Manufacturer: syz [ 524.854281][ T24] usb 4-1: SerialNumber: syz [ 524.933506][ T24] usb 4-1: config 0 descriptor?? [ 525.046763][ T7357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.058540][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 525.077405][ T24] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 525.661048][ T24] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 525.691946][ T24] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 525.727932][ T7357] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.914024][ T24] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 525.937717][ T24] em28xx 4-1:0.0: No AC97 audio processor [ 527.419150][ T5426] usb 4-1: USB disconnect, device number 33 [ 527.488520][ T5426] em28xx 4-1:0.0: Disconnecting em28xx [ 527.595209][ T7619] netlink: 104 bytes leftover after parsing attributes in process `syz.5.292'. [ 527.814525][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 527.834348][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 527.845241][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 527.862141][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 527.873453][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 528.513700][ T5426] em28xx 4-1:0.0: Freeing device [ 529.320717][ T5791] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 529.350233][ T5791] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 529.359862][ T5791] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 529.385953][ T5791] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 529.397514][ T5791] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 529.638635][ T7528] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 529.692181][ T7628] netlink: 164 bytes leftover after parsing attributes in process `syz.3.295'. [ 529.833460][ T7528] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 529.989653][ T5786] Bluetooth: hci2: command tx timeout [ 530.129627][ T7528] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 530.176642][ T7528] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 531.254778][ T7639] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 531.699344][ T5786] Bluetooth: hci4: command tx timeout [ 532.069186][ T5786] Bluetooth: hci2: command tx timeout [ 532.269197][ T5426] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 532.429334][ T5426] usb 4-1: Using ep0 maxpacket: 16 [ 532.453119][ T5426] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 532.506215][ T5426] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 532.555807][ T5426] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 532.575909][ T5426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.607208][ T5426] usb 4-1: Product: syz [ 532.615584][ T5426] usb 4-1: Manufacturer: syz [ 532.628486][ T5426] usb 4-1: SerialNumber: syz [ 532.676494][ T5426] usb 4-1: config 0 descriptor?? [ 532.724961][ T5426] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 532.753485][ T5426] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 533.045154][ T7617] chnl_net:caif_netlink_parms(): no params data found [ 533.392942][ T5426] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 533.423485][ T5426] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 533.729140][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 533.749290][ T5786] Bluetooth: hci4: command tx timeout [ 533.853340][ T5426] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 533.875533][ T5426] em28xx 4-1:0.0: No AC97 audio processor [ 533.914291][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 533.948285][ T10] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 533.990571][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 534.030047][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.076606][ T7650] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 534.149456][ T5786] Bluetooth: hci2: command tx timeout [ 534.154558][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 535.097312][ T1038] bridge_slave_1: left allmulticast mode [ 535.123206][ T1038] bridge_slave_1: left promiscuous mode [ 535.130401][ T5426] usb 4-1: USB disconnect, device number 34 [ 535.143928][ T5426] em28xx 4-1:0.0: Disconnecting em28xx [ 535.158524][ T5426] em28xx 4-1:0.0: Freeing device [ 535.165900][ T1038] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.209558][ T1038] bridge_slave_0: left allmulticast mode [ 535.227498][ T1038] bridge_slave_0: left promiscuous mode [ 535.245572][ T1038] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.833635][ T5786] Bluetooth: hci4: command tx timeout [ 536.123968][ T7662] netlink: 104 bytes leftover after parsing attributes in process `syz.3.303'. [ 536.338151][ T5791] Bluetooth: hci2: command tx timeout [ 536.380718][ T1038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.408174][ T1038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.464791][ T1038] bond0 (unregistering): Released all slaves [ 536.999859][ T7617] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.010053][ T24] usb 6-1: USB disconnect, device number 12 [ 537.031161][ T7617] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.059799][ T7617] bridge_slave_0: entered allmulticast mode [ 537.097987][ T7617] bridge_slave_0: entered promiscuous mode [ 537.449720][ T7617] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.559682][ T7617] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.567387][ T7617] bridge_slave_1: entered allmulticast mode [ 537.668405][ T7617] bridge_slave_1: entered promiscuous mode [ 537.959404][ T5786] Bluetooth: hci4: command tx timeout [ 538.043498][ T7625] chnl_net:caif_netlink_parms(): no params data found [ 538.370878][ T7617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.593606][ T1038] hsr_slave_0: left promiscuous mode [ 538.618655][ T1038] hsr_slave_1: left promiscuous mode [ 538.627967][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.658559][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.951903][ T7495] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 539.129922][ T7495] usb 4-1: Using ep0 maxpacket: 8 [ 539.166666][ T7495] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 539.198429][ T7495] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.290773][ T7495] pvrusb2: Hardware description: Terratec Grabster AV400 [ 539.319468][ T7495] pvrusb2: ********** [ 539.323727][ T7495] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 539.379954][ T7495] pvrusb2: Important functionality might not be entirely working. [ 539.409417][ T7495] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 539.439990][ T7495] pvrusb2: ********** [ 539.457875][ T2329] pvrusb2: Invalid write control endpoint [ 539.647955][ T1038] team0 (unregistering): Port device team_slave_1 removed [ 539.682627][ T7669] pvrusb2: Invalid write control endpoint [ 539.710297][ T7495] usb 4-1: USB disconnect, device number 35 [ 539.728699][ T2329] pvrusb2: Invalid write control endpoint [ 539.749245][ T2329] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 539.758698][ T2329] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 539.802338][ T1038] team0 (unregistering): Port device team_slave_0 removed [ 539.819174][ T2329] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 539.836595][ T2329] pvrusb2: Device being rendered inoperable [ 539.867782][ T2329] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 539.889526][ T2329] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 539.916235][ T2329] pvrusb2: Attached sub-driver cx25840 [ 539.925350][ T2329] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 539.965795][ T2329] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 540.339752][ T7617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.906232][ T7681] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 541.634785][ T7617] team0: Port device team_slave_0 added [ 541.697425][ T7617] team0: Port device team_slave_1 added [ 541.703617][ T5426] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 541.929576][ T5426] usb 4-1: Using ep0 maxpacket: 16 [ 541.970327][ T5426] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 542.003878][ T5426] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 542.056032][ T5426] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 542.084607][ T5426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.097184][ T7528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.108873][ T5426] usb 4-1: Product: syz [ 542.151769][ T7617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.166989][ T5426] usb 4-1: Manufacturer: syz [ 542.200913][ T5426] usb 4-1: SerialNumber: syz [ 542.230388][ T7617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.300344][ T5426] usb 4-1: config 0 descriptor?? [ 542.347267][ T7617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.385920][ T5426] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 542.419810][ T5426] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 542.472473][ T7617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.519221][ T7617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.611899][ T7617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.957829][ T7625] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.973726][ T7625] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.984202][ T7625] bridge_slave_0: entered allmulticast mode [ 542.993633][ T7625] bridge_slave_0: entered promiscuous mode [ 543.008185][ T5426] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 543.031697][ T5426] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 543.096609][ T7528] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.105013][ T7625] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.112987][ T7625] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.121099][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 543.122251][ T7625] bridge_slave_1: entered allmulticast mode [ 543.143140][ T7625] bridge_slave_1: entered promiscuous mode [ 543.307159][ T7625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.337339][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 543.349662][ T10] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 543.363699][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 543.365250][ T7617] hsr_slave_0: entered promiscuous mode [ 543.373983][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.406615][ T7689] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 543.428853][ T7617] hsr_slave_1: entered promiscuous mode [ 543.438100][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 543.463166][ T5426] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 543.473977][ T5426] em28xx 4-1:0.0: No AC97 audio processor [ 543.571639][ T7625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.086953][ T3438] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.094654][ T3438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.116861][ T3438] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.124572][ T3438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.228577][ T7625] team0: Port device team_slave_0 added [ 544.422336][ T7625] team0: Port device team_slave_1 added [ 545.366389][ T10] usb 4-1: USB disconnect, device number 36 [ 545.565777][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 545.657007][ T10] em28xx 4-1:0.0: Freeing device [ 546.223321][ T7625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.251270][ T7625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.366166][ T7625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.428080][ T7625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.460559][ T7625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.579400][ T7625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.563189][ T7625] hsr_slave_0: entered promiscuous mode [ 548.591052][ T7625] hsr_slave_1: entered promiscuous mode [ 548.621343][ T7625] debugfs: 'hsr0' already exists in 'hsr' [ 548.637505][ T7625] Cannot create hsr debugfs directory [ 548.737196][ T1038] bridge_slave_1: left allmulticast mode [ 548.747213][ T1038] bridge_slave_1: left promiscuous mode [ 548.759105][ T1038] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.806504][ T1038] bridge_slave_0: left allmulticast mode [ 548.821193][ T1038] bridge_slave_0: left promiscuous mode [ 548.829161][ T1038] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.631068][ T1038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.666722][ T1038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.718383][ T1038] bond0 (unregistering): Released all slaves [ 550.456803][ T1038] hsr_slave_0: left promiscuous mode [ 550.467853][ T1038] hsr_slave_1: left promiscuous mode [ 550.511686][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.528741][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.944573][ T5426] usb 6-1: USB disconnect, device number 13 [ 551.251822][ T1038] team0 (unregistering): Port device team_slave_1 removed [ 551.306261][ T1038] team0 (unregistering): Port device team_slave_0 removed [ 551.971469][ T5426] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 552.151742][ T5426] usb 6-1: Using ep0 maxpacket: 8 [ 552.187837][ T5426] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 552.200070][ T5426] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.248836][ T5426] pvrusb2: Hardware description: Terratec Grabster AV400 [ 552.257055][ T5426] pvrusb2: ********** [ 552.265671][ T5426] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 552.301252][ T5426] pvrusb2: Important functionality might not be entirely working. [ 552.836041][ T7617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 552.914957][ T5426] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 552.929314][ T5426] pvrusb2: ********** [ 552.951284][ T2329] pvrusb2: Invalid write control endpoint [ 553.399275][ T24] usb 6-1: USB disconnect, device number 14 [ 553.628102][ T2329] pvrusb2: Invalid write control endpoint [ 553.643170][ T2329] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 553.654454][ T2329] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 553.677648][ T2329] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 553.713823][ T2329] pvrusb2: Device being rendered inoperable [ 553.724933][ T2329] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 553.745668][ T2329] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 553.763320][ T2329] pvrusb2: Attached sub-driver cx25840 [ 553.783915][ T2329] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 553.809963][ T2329] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 554.032316][ T7617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 554.142181][ T7617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 554.317711][ T7617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 554.980389][ T7625] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 555.116663][ T7625] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 555.174734][ T7625] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 555.216460][ T7625] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 555.307997][ T7528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.316549][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 555.491331][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 555.514922][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 555.534023][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 555.556651][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 555.568234][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.578009][ T24] usb 6-1: Product: syz [ 555.583250][ T24] usb 6-1: Manufacturer: syz [ 555.597093][ T24] usb 6-1: SerialNumber: syz [ 555.608213][ T24] usb 6-1: config 0 descriptor?? [ 555.693171][ T24] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 555.706846][ T24] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 556.108232][ T7617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.268423][ T7617] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.280464][ T24] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 556.311454][ T24] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 556.320559][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 556.367761][ T6352] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.375520][ T6352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.504750][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 556.532424][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 556.566574][ T6352] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.574131][ T6352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.593896][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 556.611382][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.670541][ T7733] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 556.688088][ T7625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.730931][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 556.752608][ T24] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 556.782660][ T24] em28xx 6-1:0.0: No AC97 audio processor [ 557.545590][ T7625] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.050250][ T3438] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.057859][ T3438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.899615][ T6354] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.907257][ T6354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.997274][ T7495] usb 6-1: USB disconnect, device number 15 [ 559.136079][ T7495] em28xx 6-1:0.0: Disconnecting em28xx [ 559.266911][ T7495] em28xx 6-1:0.0: Freeing device [ 561.358674][ T7528] veth0_vlan: entered promiscuous mode [ 562.208477][ T7528] veth1_vlan: entered promiscuous mode [ 564.049783][ T24] usb 4-1: USB disconnect, device number 37 [ 564.638352][ T7617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.147673][ T5791] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 568.158705][ T5791] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 568.173274][ T5791] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 568.188297][ T5791] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 568.207175][ T5791] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 568.339093][ T7617] veth0_vlan: entered promiscuous mode [ 568.437296][ T7625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.554528][ T7617] veth1_vlan: entered promiscuous mode [ 568.579321][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 568.744999][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 568.789137][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 568.805598][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.876960][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 568.899116][ T10] pvrusb2: ********** [ 568.903278][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 568.963734][ T10] pvrusb2: Important functionality might not be entirely working. [ 568.974987][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 568.987705][ T10] pvrusb2: ********** [ 569.051810][ T2329] pvrusb2: Invalid write control endpoint [ 569.252742][ T7762] pvrusb2: Invalid write control endpoint [ 569.291737][ T24] usb 6-1: USB disconnect, device number 16 [ 569.550078][ T2329] pvrusb2: Invalid write control endpoint [ 569.555977][ T2329] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 569.580547][ T2329] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 569.602422][ T2329] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 569.613708][ T2329] pvrusb2: Device being rendered inoperable [ 569.650729][ T2329] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 569.658310][ T2329] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 569.683230][ T2329] pvrusb2: Attached sub-driver cx25840 [ 569.690737][ T2329] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 569.698771][ T7617] veth0_macvtap: entered promiscuous mode [ 569.714040][ T2329] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 569.796922][ T7778] netlink: 52 bytes leftover after parsing attributes in process `syz.3.330'. [ 570.097669][ T7617] veth1_macvtap: entered promiscuous mode [ 570.309189][ T5786] Bluetooth: hci5: command tx timeout [ 570.426769][ T7625] veth0_vlan: entered promiscuous mode [ 570.619398][ T7495] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 570.639629][ T7617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.763017][ T7617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.807915][ T7625] veth1_vlan: entered promiscuous mode [ 570.842624][ T7495] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 570.875730][ T7495] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 570.899605][ T7495] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 570.940180][ T7768] chnl_net:caif_netlink_parms(): no params data found [ 570.943770][ T7495] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.994833][ T7786] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 571.073705][ T7495] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 571.099280][ T1038] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.136766][ T1038] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.180183][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.214750][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.646784][ T7797] No control pipe specified [ 572.389306][ T5786] Bluetooth: hci5: command tx timeout [ 572.574219][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.595738][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.898718][ T5779] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 573.270049][ T5779] usb 6-1: Using ep0 maxpacket: 8 [ 573.799953][ T5779] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 574.009160][ T5779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.498039][ T5786] Bluetooth: hci5: command tx timeout [ 574.662602][ T5779] pvrusb2: Hardware description: Terratec Grabster AV400 [ 574.760260][ T5779] pvrusb2: ********** [ 574.764534][ T5779] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 574.981850][ T5779] pvrusb2: Important functionality might not be entirely working. [ 575.052757][ T5779] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 575.202308][ T5779] pvrusb2: ********** [ 575.288494][ T2329] pvrusb2: Invalid write control endpoint [ 575.492662][ T5779] usb 6-1: USB disconnect, device number 17 [ 576.536137][ T7625] veth0_macvtap: entered promiscuous mode [ 576.559988][ T5786] Bluetooth: hci5: command tx timeout [ 576.760947][ T6354] bridge_slave_1: left allmulticast mode [ 576.766938][ T6354] bridge_slave_1: left promiscuous mode [ 576.885736][ T2329] pvrusb2: Invalid write control endpoint [ 576.909867][ T6354] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.004820][ T2329] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 577.185830][ T2329] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 577.240638][ T6354] bridge_slave_0: left allmulticast mode [ 577.299866][ T2329] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 577.319622][ T6354] bridge_slave_0: left promiscuous mode [ 577.326729][ T6354] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.428659][ T2329] pvrusb2: Device being rendered inoperable [ 577.523098][ T2329] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 577.558841][ T2329] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 577.643372][ T2329] pvrusb2: Attached sub-driver cx25840 [ 577.742453][ T2329] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 577.819730][ T2329] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 578.594861][ T30] usb 4-1: USB disconnect, device number 38 [ 579.383144][ T6354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.435856][ T6354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.474971][ T6354] bond0 (unregistering): Released all slaves [ 579.556131][ T7828] netlink: 132 bytes leftover after parsing attributes in process `syz.5.343'. [ 579.640368][ T7625] veth1_macvtap: entered promiscuous mode [ 579.877177][ T6354] hsr_slave_0: left promiscuous mode [ 579.914949][ T6354] hsr_slave_1: left promiscuous mode [ 579.923219][ T6354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.966519][ T6354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.071834][ T6354] veth1_vlan: left promiscuous mode [ 580.088193][ T6354] veth0_vlan: left promiscuous mode [ 580.290542][ T7841] program syz.5.346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 581.579288][ T30] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 581.689282][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 581.739448][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 581.772604][ T30] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 581.801261][ T6354] team0 (unregistering): Port device team_slave_1 removed [ 581.807673][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.857777][ T30] pvrusb2: Hardware description: Terratec Grabster AV400 [ 581.860977][ T6354] team0 (unregistering): Port device team_slave_0 removed [ 581.883762][ T30] pvrusb2: ********** [ 581.915828][ T24] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 581.928340][ T30] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 581.954930][ T24] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 581.967254][ T30] pvrusb2: Important functionality might not be entirely working. [ 581.977868][ T30] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 581.993919][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 582.003482][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.012318][ T30] pvrusb2: ********** [ 582.044607][ T2329] pvrusb2: Invalid write control endpoint [ 582.117607][ T7851] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 582.202505][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 582.253954][ T7845] pvrusb2: Invalid write control endpoint [ 582.322887][ T30] usb 4-1: USB disconnect, device number 39 [ 582.474105][ T2329] pvrusb2: Invalid write control endpoint [ 582.504919][ T2329] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 582.589331][ T2329] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 582.647881][ T2329] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 582.757341][ T2329] pvrusb2: Device being rendered inoperable [ 582.816737][ T2329] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 582.897071][ T2329] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 582.960298][ T2329] pvrusb2: Attached sub-driver cx25840 [ 582.965929][ T2329] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 583.072779][ T2329] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 583.352135][ T7625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.496678][ T24] usb 6-1: USB disconnect, device number 18 [ 583.517347][ T7625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.957533][ T1038] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.223784][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.258312][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.457952][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.506488][ T7768] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.553913][ T7768] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.589652][ T7768] bridge_slave_0: entered allmulticast mode [ 584.628606][ T7768] bridge_slave_0: entered promiscuous mode [ 584.695016][ T7768] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.730288][ T7768] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.749177][ T7768] bridge_slave_1: entered allmulticast mode [ 584.784381][ T7768] bridge_slave_1: entered promiscuous mode [ 585.208818][ T7768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.315513][ T7768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.627103][ T7768] team0: Port device team_slave_0 added [ 585.737276][ T7768] team0: Port device team_slave_1 added [ 585.769671][ T7894] netlink: 60 bytes leftover after parsing attributes in process `syz.3.353'. [ 585.887952][ T7895] netlink: 60 bytes leftover after parsing attributes in process `syz.3.353'. [ 585.942510][ T7894] netlink: 60 bytes leftover after parsing attributes in process `syz.3.353'. [ 586.180929][ T7768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.199486][ T7768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.268718][ T7768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.367368][ T7768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.389303][ T7768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.451830][ T7768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.082810][ T7768] hsr_slave_0: entered promiscuous mode [ 587.127331][ T7768] hsr_slave_1: entered promiscuous mode [ 587.229515][ T7917] program syz.3.355 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 587.308303][ T7768] debugfs: 'hsr0' already exists in 'hsr' [ 587.415879][ T7768] Cannot create hsr debugfs directory [ 588.269348][ T5839] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 588.380644][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 588.393067][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 588.403434][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 588.425230][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 588.441661][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 588.479374][ T5839] usb 6-1: Using ep0 maxpacket: 8 [ 588.547434][ T5839] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 588.609409][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.612738][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 588.735926][ T5839] pvrusb2: Hardware description: Terratec Grabster AV400 [ 588.778462][ T5839] pvrusb2: ********** [ 588.794995][ T5839] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 588.827723][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 588.828584][ T5839] pvrusb2: Important functionality might not be entirely working. [ 588.860592][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 588.894130][ T5839] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 588.905015][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 588.929117][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.943686][ T5786] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 588.959940][ T5786] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 588.980360][ T5786] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 588.998613][ T5786] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 589.012564][ T7927] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 589.025544][ T5839] pvrusb2: ********** [ 589.026324][ T5786] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 589.081715][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 589.118467][ T2329] pvrusb2: Invalid write control endpoint [ 589.310347][ T7920] pvrusb2: Invalid write control endpoint [ 589.363040][ T5837] usb 6-1: USB disconnect, device number 19 [ 589.719245][ T2329] pvrusb2: Invalid write control endpoint [ 589.746240][ T2329] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 589.768144][ T2329] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 589.808557][ T2329] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 589.837865][ T2329] pvrusb2: Device being rendered inoperable [ 589.863252][ T2329] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 589.879741][ T2329] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 589.966836][ T7495] usb 4-1: USB disconnect, device number 40 [ 590.016870][ T2329] pvrusb2: Attached sub-driver cx25840 [ 590.060295][ T2329] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 590.141856][ T2329] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 590.368741][ T7500] udevd[7500]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 590.519687][ T5786] Bluetooth: hci1: command tx timeout [ 591.111784][ T5786] Bluetooth: hci6: command tx timeout [ 591.206620][ T7946] netlink: 164 bytes leftover after parsing attributes in process `syz.3.359'. [ 591.797601][ T7953] netlink: 'syz.3.361': attribute type 1 has an invalid length. [ 592.350208][ T1038] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.452510][ T7959] netlink: 60 bytes leftover after parsing attributes in process `syz.3.363'. [ 592.549782][ T5786] Bluetooth: hci1: command tx timeout [ 592.602050][ T7967] program syz.5.364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 593.190086][ T5786] Bluetooth: hci6: command tx timeout [ 593.333366][ T1038] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.422646][ T7960] netlink: 60 bytes leftover after parsing attributes in process `syz.3.363'. [ 593.588854][ T1038] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.875969][ T1038] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.029323][ T5839] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 594.045052][ T7495] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 594.075616][ T7768] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 594.104272][ T7768] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 594.189754][ T7768] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 594.204613][ T5839] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 594.210049][ T7495] usb 6-1: Using ep0 maxpacket: 8 [ 594.234715][ T5839] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 594.249218][ T7495] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 594.258658][ T7495] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.293605][ T5839] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 594.303158][ T7768] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 594.336914][ T7495] pvrusb2: Hardware description: Terratec Grabster AV400 [ 594.342916][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.392578][ T7495] pvrusb2: ********** [ 594.396724][ T7495] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 594.439088][ T7495] pvrusb2: Important functionality might not be entirely working. [ 594.451006][ T7977] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 594.486608][ T7495] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 594.528647][ T5839] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 594.608345][ T7495] pvrusb2: ********** [ 594.629160][ T5786] Bluetooth: hci1: command tx timeout [ 594.689010][ T2329] pvrusb2: Invalid write control endpoint [ 594.929706][ T7971] pvrusb2: Invalid write control endpoint [ 595.050499][ T7495] usb 6-1: USB disconnect, device number 20 [ 595.250229][ T7931] chnl_net:caif_netlink_parms(): no params data found [ 595.346153][ T5786] Bluetooth: hci6: command tx timeout [ 595.533600][ T5839] usb 4-1: USB disconnect, device number 41 [ 595.720819][ T2329] pvrusb2: Invalid write control endpoint [ 595.726724][ T2329] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 595.754586][ T2329] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 595.772234][ T2329] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 595.795429][ T2329] pvrusb2: Device being rendered inoperable [ 595.842706][ T2329] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 595.874027][ T2329] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 595.884833][ T1038] bridge_slave_1: left allmulticast mode [ 595.908381][ T2329] pvrusb2: Attached sub-driver cx25840 [ 595.918653][ T1038] bridge_slave_1: left promiscuous mode [ 595.948469][ T2329] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 595.952314][ T1038] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.015375][ T1038] bridge_slave_0: left allmulticast mode [ 596.032966][ T1038] bridge_slave_0: left promiscuous mode [ 596.059018][ T1038] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.359120][ T2329] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 596.712106][ T5786] Bluetooth: hci1: command tx timeout [ 597.015373][ T1038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.047193][ T1038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.074633][ T1038] bond0 (unregistering): Released all slaves [ 597.305771][ T7926] chnl_net:caif_netlink_parms(): no params data found [ 597.332777][ T8006] netlink: 'syz.5.370': attribute type 4 has an invalid length. [ 597.362957][ T8006] netlink: 156 bytes leftover after parsing attributes in process `syz.5.370'. [ 597.395736][ T7997] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.368'. [ 597.429922][ T5786] Bluetooth: hci6: command tx timeout [ 597.494848][ T1038] hsr_slave_0: left promiscuous mode [ 597.527780][ T1038] hsr_slave_1: left promiscuous mode [ 597.577780][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.587347][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.610660][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.618864][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.703692][ T1038] veth1_macvtap: left promiscuous mode [ 597.722906][ T1038] veth0_macvtap: left promiscuous mode [ 597.743606][ T1038] veth1_vlan: left promiscuous mode [ 597.761092][ T1038] veth0_vlan: left promiscuous mode [ 598.141492][ T8018] program syz.3.372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 599.491587][ T7495] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 599.604210][ T1038] team0 (unregistering): Port device team_slave_1 removed [ 599.659906][ T7495] usb 4-1: device descriptor read/64, error -71 [ 599.669839][ T1038] team0 (unregistering): Port device team_slave_0 removed [ 599.924467][ T7495] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 600.013523][ T8006] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 600.089758][ T7495] usb 4-1: device descriptor read/64, error -71 [ 600.211349][ T7495] usb usb4-port1: attempt power cycle [ 600.619146][ T7495] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 600.672492][ T7495] usb 4-1: device descriptor read/8, error -71 [ 600.861190][ T7931] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.875498][ T7931] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.898068][ T7931] bridge_slave_0: entered allmulticast mode [ 600.916955][ T7931] bridge_slave_0: entered promiscuous mode [ 600.937155][ T7931] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.946587][ T7931] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.957007][ T7931] bridge_slave_1: entered allmulticast mode [ 600.975109][ T7931] bridge_slave_1: entered promiscuous mode [ 601.000599][ T7495] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 601.047286][ T7495] usb 4-1: device descriptor read/8, error -71 [ 601.048151][ T1038] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.110133][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 601.160369][ T7495] usb usb4-port1: unable to enumerate USB device [ 601.228286][ T1038] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.270173][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 601.300048][ T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 601.319626][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.377729][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 601.398132][ T24] pvrusb2: ********** [ 601.418850][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 601.451767][ T24] pvrusb2: Important functionality might not be entirely working. [ 601.479169][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 601.499896][ T1038] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.516598][ T24] pvrusb2: ********** [ 601.556029][ T2329] pvrusb2: Invalid write control endpoint [ 601.592261][ T7931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.652957][ T7931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.687168][ T7926] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.708875][ T7926] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.724417][ T7926] bridge_slave_0: entered allmulticast mode [ 601.735467][ T7926] bridge_slave_0: entered promiscuous mode [ 601.754395][ T8034] pvrusb2: Invalid write control endpoint [ 601.771134][ T7926] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.778624][ T7926] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.795016][ T7926] bridge_slave_1: entered allmulticast mode [ 601.802242][ T5837] usb 6-1: USB disconnect, device number 21 [ 601.805684][ T7926] bridge_slave_1: entered promiscuous mode [ 601.819914][ T2329] pvrusb2: Invalid write control endpoint [ 601.838634][ T2329] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 601.873402][ T1038] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.889716][ T2329] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 601.910420][ T2329] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 601.931396][ T2329] pvrusb2: Device being rendered inoperable [ 601.945419][ T2329] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 601.963358][ T2329] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 601.994959][ T2329] pvrusb2: Attached sub-driver cx25840 [ 602.012187][ T2329] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 602.045396][ T2329] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 602.251423][ T7931] team0: Port device team_slave_0 added [ 602.290383][ T7931] team0: Port device team_slave_1 added [ 602.366677][ T7926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.413043][ T7926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.769341][ T7495] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 602.811280][ T7931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.829584][ T7931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.865508][ T7931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.884728][ T7931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.893645][ T7931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.922412][ T7931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.956464][ T7926] team0: Port device team_slave_0 added [ 602.983028][ T7495] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 603.009211][ T7495] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 603.039580][ T7495] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 603.074842][ T7495] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.134081][ T7926] team0: Port device team_slave_1 added [ 603.145584][ T8054] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 603.222830][ T7495] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 603.347332][ T7768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.690507][ T7495] usb 4-1: USB disconnect, device number 46 [ 604.121324][ T7926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.128442][ T7926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.172907][ T7926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.372617][ T7926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.411085][ T7926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.523575][ T7926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.536053][ T7931] hsr_slave_0: entered promiscuous mode [ 605.560874][ T7931] hsr_slave_1: entered promiscuous mode [ 605.580066][ T7931] debugfs: 'hsr0' already exists in 'hsr' [ 605.585991][ T7931] Cannot create hsr debugfs directory [ 605.756025][ T1038] bridge_slave_1: left allmulticast mode [ 605.766419][ T1038] bridge_slave_1: left promiscuous mode [ 605.780245][ T1038] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.808876][ T1038] bridge_slave_0: left allmulticast mode [ 605.826755][ T1038] bridge_slave_0: left promiscuous mode [ 605.846944][ T1038] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.941962][ T7495] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 606.147431][ T7495] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.174996][ T7495] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 606.195196][ T7495] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 606.216170][ T7495] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.278574][ T7495] usb 4-1: config 0 descriptor?? [ 606.319369][ T24] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 606.378224][ T1038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.394605][ T1038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.411344][ T1038] bond0 (unregistering): Released all slaves [ 606.480010][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 606.504818][ T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 606.527424][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.588104][ T7768] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.600011][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 606.618089][ T24] pvrusb2: ********** [ 606.628043][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 606.653289][ T24] pvrusb2: Important functionality might not be entirely working. [ 606.662016][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 606.674891][ T24] pvrusb2: ********** [ 606.769938][ T2329] pvrusb2: Invalid write control endpoint [ 606.803671][ T1038] hsr_slave_0: left promiscuous mode [ 606.833586][ T1038] hsr_slave_1: left promiscuous mode [ 606.865947][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.880741][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.902802][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.923369][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.964737][ T2329] pvrusb2: Invalid write control endpoint [ 606.979211][ T2329] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 607.000011][ T1038] veth1_macvtap: left promiscuous mode [ 607.003556][ T2329] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 607.010220][ T1038] veth0_macvtap: left promiscuous mode [ 607.014954][ T2329] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 607.032452][ T2329] pvrusb2: Device being rendered inoperable [ 607.033111][ T1038] veth1_vlan: left promiscuous mode [ 607.039372][ T8085] pvrusb2: Attempted to execute control transfer when device not ok [ 607.055984][ T2329] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 607.064951][ T2329] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 607.078078][ T1038] veth0_vlan: left promiscuous mode [ 607.101768][ T2329] pvrusb2: Attached sub-driver cx25840 [ 607.119893][ T2329] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 607.157648][ T2329] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 608.033838][ T1038] team0 (unregistering): Port device team_slave_1 removed [ 608.070445][ T1038] team0 (unregistering): Port device team_slave_0 removed [ 608.634510][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.642130][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.755121][ T7926] hsr_slave_0: entered promiscuous mode [ 608.783886][ T7926] hsr_slave_1: entered promiscuous mode [ 608.851396][ T5837] usb 4-1: USB disconnect, device number 47 [ 609.131911][ T24] usb 6-1: USB disconnect, device number 22 [ 609.324346][ T3438] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.331919][ T3438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.764190][ T8118] netlink: 60 bytes leftover after parsing attributes in process `syz.5.386'. [ 609.781928][ T8119] netlink: 60 bytes leftover after parsing attributes in process `syz.5.386'. [ 609.812249][ T5837] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 609.877565][ T8118] netlink: 60 bytes leftover after parsing attributes in process `syz.5.386'. [ 610.002539][ T5837] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 610.078686][ T5837] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 610.099847][ T5837] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 610.129913][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.181443][ T8115] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 610.272824][ T5837] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 610.802452][ T5837] usb 4-1: USB disconnect, device number 48 [ 612.670517][ T7768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.647691][ T7931] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 613.670390][ T5837] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 613.809508][ T7931] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 613.854613][ T7931] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 613.869507][ T5837] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.889474][ T5837] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 613.898713][ T5837] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 613.924258][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.936700][ T7931] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 613.961737][ T5837] usb 6-1: config 0 descriptor?? [ 614.269956][ T5426] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 614.459286][ T5426] usb 4-1: Using ep0 maxpacket: 8 [ 614.473687][ T5426] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 614.491819][ T5426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.585440][ T5426] pvrusb2: Hardware description: Terratec Grabster AV400 [ 614.610738][ T5426] pvrusb2: ********** [ 614.618062][ T5426] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 614.639692][ T5426] pvrusb2: Important functionality might not be entirely working. [ 614.647663][ T5426] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 614.689340][ T5426] pvrusb2: ********** [ 614.748336][ T2329] pvrusb2: Invalid write control endpoint [ 614.858745][ T7926] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 614.966240][ T7926] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 614.967986][ T8159] pvrusb2: Invalid write control endpoint [ 615.034338][ T5426] usb 4-1: USB disconnect, device number 49 [ 615.040097][ T7926] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 615.059979][ T2329] pvrusb2: Invalid write control endpoint [ 615.065865][ T2329] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 615.120732][ T2329] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 615.142856][ T7926] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 615.150422][ T2329] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 615.167769][ T2329] pvrusb2: Device being rendered inoperable [ 615.190750][ T2329] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 615.198174][ T2329] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 615.226311][ T2329] pvrusb2: Attached sub-driver cx25840 [ 615.244752][ T2329] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 615.258857][ T2329] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 615.491593][ T7768] veth0_vlan: entered promiscuous mode [ 615.606634][ T7768] veth1_vlan: entered promiscuous mode [ 616.017114][ T7931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.028839][ T8182] ===================================================== [ 616.036366][ T8182] BUG: KMSAN: uninit-value in eth_type_trans+0x6a2/0x9b0 [ 616.043747][ T8182] eth_type_trans+0x6a2/0x9b0 [ 616.048590][ T8182] __dev_forward_skb2+0x4b1/0x940 [ 616.054113][ T8182] dev_forward_skb_nomtu+0x3b/0xe0 [ 616.059647][ T8182] __bpf_redirect+0x14d7/0x1760 [ 616.064718][ T8182] bpf_clone_redirect+0x4a6/0x6c0 [ 616.070256][ T8182] ___bpf_prog_run+0x12af/0xeb60 [ 616.075445][ T8182] __bpf_prog_run512+0xc5/0x100 [ 616.080615][ T8182] bpf_test_run+0x493/0xdf0 [ 616.085350][ T8182] bpf_prog_test_run_skb+0x22a5/0x3050 [ 616.089957][ T7768] veth0_macvtap: entered promiscuous mode [ 616.091262][ T8182] bpf_prog_test_run+0x5bb/0x9f0 [ 616.102211][ T8182] __sys_bpf+0x925/0xee0 [ 616.106606][ T8182] __x64_sys_bpf+0xa4/0xf0 [ 616.111433][ T8182] x64_sys_call+0x13d0/0x3ea0 [ 616.116341][ T8182] do_syscall_64+0x134/0xf80 [ 616.121389][ T8182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.127010][ T7768] veth1_macvtap: entered promiscuous mode [ 616.127450][ T8182] [ 616.127476][ T8182] Uninit was created at: [ 616.127751][ T8182] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 616.146356][ T8182] pskb_expand_head+0x2ef/0x1fb0 [ 616.151726][ T8182] skb_ensure_writable+0x44e/0x510 [ 616.157026][ T8182] bpf_clone_redirect+0x301/0x6c0 [ 616.162434][ T8182] ___bpf_prog_run+0x12af/0xeb60 [ 616.167520][ T8182] __bpf_prog_run512+0xc5/0x100 [ 616.172688][ T8182] bpf_test_run+0x493/0xdf0 [ 616.177325][ T8182] bpf_prog_test_run_skb+0x22a5/0x3050 [ 616.183121][ T8182] bpf_prog_test_run+0x5bb/0x9f0 [ 616.188223][ T8182] __sys_bpf+0x925/0xee0 [ 616.192757][ T8182] __x64_sys_bpf+0xa4/0xf0 [ 616.197310][ T8182] x64_sys_call+0x13d0/0x3ea0 [ 616.202294][ T8182] do_syscall_64+0x134/0xf80 [ 616.207038][ T8182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.213227][ T8182] [ 616.215666][ T8182] CPU: 1 UID: 0 PID: 8182 Comm: syz.3.394 Not tainted syzkaller #0 PREEMPT(full) [ 616.225203][ T8182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 616.235519][ T8182] ===================================================== [ 616.242700][ T8182] Disabling lock debugging due to kernel taint [ 616.249161][ T8182] Kernel panic - not syncing: kmsan.panic set ... [ 616.255733][ T8182] CPU: 1 UID: 0 PID: 8182 Comm: syz.3.394 Tainted: G B syzkaller #0 PREEMPT(full) [ 616.266687][ T8182] Tainted: [B]=BAD_PAGE [ 616.270933][ T8182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 616.281135][ T8182] Call Trace: [ 616.284518][ T8182] [ 616.287536][ T8182] __dump_stack+0x26/0x30 [ 616.292034][ T8182] dump_stack_lvl+0x50/0x1c0 [ 616.296798][ T8182] ? dump_stack+0x12/0x25 [ 616.301306][ T8182] dump_stack+0x1e/0x25 [ 616.305627][ T8182] vpanic+0x7b4/0x1430 [ 616.309889][ T8182] panic+0x15d/0x160 [ 616.314000][ T8182] kmsan_report+0x31a/0x320 [ 616.318704][ T8182] ? __bpf_prog_run512+0xc5/0x100 [ 616.323890][ T8182] ? __msan_warning+0x1b/0x30 [ 616.328746][ T8182] ? eth_type_trans+0x6a2/0x9b0 [ 616.333739][ T8182] ? __dev_forward_skb2+0x4b1/0x940 [ 616.339114][ T8182] ? dev_forward_skb_nomtu+0x3b/0xe0 [ 616.344582][ T8182] ? __bpf_redirect+0x14d7/0x1760 [ 616.349744][ T8182] ? bpf_clone_redirect+0x4a6/0x6c0 [ 616.355137][ T8182] ? ___bpf_prog_run+0x12af/0xeb60 [ 616.360408][ T8182] ? __bpf_prog_run512+0xc5/0x100 [ 616.365598][ T8182] ? bpf_test_run+0x493/0xdf0 [ 616.370411][ T8182] ? bpf_prog_test_run_skb+0x22a5/0x3050 [ 616.376239][ T8182] ? bpf_prog_test_run+0x5bb/0x9f0 [ 616.381698][ T8182] ? __sys_bpf+0x925/0xee0 [ 616.386275][ T8182] ? __x64_sys_bpf+0xa4/0xf0 [ 616.391008][ T8182] ? x64_sys_call+0x13d0/0x3ea0 [ 616.396038][ T8182] ? do_syscall_64+0x134/0xf80 [ 616.400952][ T8182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.407188][ T8182] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 616.413227][ T8182] ? kmsan_get_metadata+0xf1/0x160 [ 616.418555][ T8182] ? kmsan_get_metadata+0xf1/0x160 [ 616.423870][ T8182] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 616.429901][ T8182] ? kmsan_get_metadata+0xf1/0x160 [ 616.435310][ T8182] ? kmsan_get_metadata+0xf1/0x160 [ 616.440637][ T8182] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 616.447188][ T8182] ? kmsan_get_metadata+0xf1/0x160 [ 616.452524][ T8182] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 616.458548][ T8182] ? kmsan_get_metadata+0xf1/0x160 [ 616.463879][ T8182] __msan_warning+0x1b/0x30 [ 616.468580][ T8182] eth_type_trans+0x6a2/0x9b0 [ 616.473450][ T8182] __dev_forward_skb2+0x4b1/0x940 [ 616.478678][ T8182] dev_forward_skb_nomtu+0x3b/0xe0 [ 616.483992][ T8182] __bpf_redirect+0x14d7/0x1760 [ 616.488986][ T8182] ? kmsan_get_metadata+0xf1/0x160 [ 616.494328][ T8182] bpf_clone_redirect+0x4a6/0x6c0 [ 616.499582][ T8182] ___bpf_prog_run+0x12af/0xeb60 [ 616.504732][ T8182] __bpf_prog_run512+0xc5/0x100 [ 616.509800][ T8182] ? kmsan_internal_poison_memory+0x78/0x90 [ 616.515893][ T8182] ? kmsan_internal_poison_memory+0x4a/0x90 [ 616.521986][ T8182] ? kmsan_slab_alloc+0xdc/0x160 [ 616.527124][ T8182] ? kmem_cache_alloc_noprof+0x37b/0x1270 [ 616.533004][ T8182] ? slab_build_skb+0x5c/0x5b0 [ 616.538047][ T8182] ? bpf_prog_test_run_skb+0x74d/0x3050 [ 616.543806][ T8182] ? bpf_prog_test_run+0x5bb/0x9f0 [ 616.549077][ T8182] ? __sys_bpf+0x925/0xee0 [ 616.553629][ T8182] ? kmsan_get_metadata+0xf1/0x160 [ 616.558914][ T8182] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 616.564954][ T8182] ? bpf_test_run+0xd1/0xdf0 [ 616.569702][ T8182] ? filter_irq_stacks+0x49/0x190 [ 616.574990][ T8182] ? kmsan_get_metadata+0xf1/0x160 [ 616.580274][ T8182] ? kmsan_get_metadata+0xf1/0x160 [ 616.585562][ T8182] ? kmsan_get_metadata+0xf1/0x160 [ 616.590855][ T8182] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 616.597358][ T8182] ? kmsan_get_metadata+0x146/0x160 [ 616.602731][ T8182] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 616.608713][ T8182] ? __pfx___bpf_prog_run512+0x10/0x10 [ 616.614317][ T8182] ? __pfx___bpf_prog_run512+0x10/0x10 [ 616.619932][ T8182] bpf_test_run+0x493/0xdf0 [ 616.624550][ T8182] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 616.630550][ T8182] ? kmsan_get_metadata+0xf1/0x160 [ 616.635834][ T8182] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 616.641833][ T8182] ? bpf_test_run+0x2f4/0xdf0 [ 616.646641][ T8182] ? kmsan_get_metadata+0xf1/0x160 [ 616.651920][ T8182] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 616.657913][ T8182] bpf_prog_test_run_skb+0x22a5/0x3050 [ 616.663562][ T8182] ? kmsan_get_metadata+0xf1/0x160 [ 616.668946][ T8182] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 616.674953][ T8182] bpf_prog_test_run+0x5bb/0x9f0 [ 616.680063][ T8182] __sys_bpf+0x925/0xee0 [ 616.684492][ T8182] __x64_sys_bpf+0xa4/0xf0 [ 616.689049][ T8182] x64_sys_call+0x13d0/0x3ea0 [ 616.693920][ T8182] do_syscall_64+0x134/0xf80 [ 616.698642][ T8182] ? clear_bhb_loop+0x50/0xa0 [ 616.703465][ T8182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.709512][ T8182] RIP: 0033:0x7f1adf99c799 [ 616.714029][ T8182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.733775][ T8182] RSP: 002b:00007f1ae091c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 616.742343][ T8182] RAX: ffffffffffffffda RBX: 00007f1adfc15fa0 RCX: 00007f1adf99c799 [ 616.750426][ T8182] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 616.758491][ T8182] RBP: 00007f1adfa32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 616.766561][ T8182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 616.774624][ T8182] R13: 00007f1adfc16038 R14: 00007f1adfc15fa0 R15: 00007fffab8c6f48 [ 616.782737][ T8182] [ 616.786135][ T8182] Kernel Offset: disabled [ 616.790509][ T8182] Rebooting in 86400 seconds..