last executing test programs: 3.492061417s ago: executing program 3 (id=3314): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000680)=ANY=[], 0x1, 0x18a, &(0x7f0000000380)="$eJzsVb1OMkEUPbM77MJXfPmarzEmFhKFQlgWNVppZXgAH0ACKxIXf1gShZCIFe9hw2tYmPgIFhobLIyJBfZmzc7cXYdeQkzmJLvn3DP3ztxp7hwF54EN4HPSr2EXAib+4pExcABLTHp7tuQ3S3KB4lcuOU/+DfETcdDtHVd932vPTNz/B2Z9xlxEeKU4bP79aKHFLAX/+Z2/w51rA+9ilj1M+rVIHAAIwzCMvLr8mJpjArhTcha4+JiJMMmJhl8UrAIodlpnxaDbW2u2qg2v4Z24bnnTWXecDbd42PQ9R/y3aW6KcoN0xHkA0VpGaSEF4JkG7B9Mgymt0TpTay1lOOeWp2tNpTZmhtuk1lby9rGCNICLAVPcrOiaQ1ysAgaTghJX+pN3S4uFQu3Urw/BwOKyEXiyR2mMFIwMgKbvuSKglfLWIG57SJwlrhCPiMfE8ZsVv0Vc7PBCUW4AWLisdjrtUmRJlXhu4rn/kpMNOvXDmr7cog0NDQ0NDQ0NjV+GrwAAAP//ZVpfyw==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0x0) getdents(r0, 0x0, 0x58) 3.276385325s ago: executing program 3 (id=3317): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa06000003", @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000280)=0x7ff, 0x4) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fcntl$dupfd(r2, 0x406, r2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) link(&(0x7f0000000040)='./file0\x00', 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 3.276283735s ago: executing program 4 (id=3318): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x2, 0xfd, {0x14, 0x1a, 0x11, 0x19, 0x1, 0x5c, 0x6, 0x400000d8}}) 2.654559749s ago: executing program 3 (id=3321): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x20882, 0x0) poll(&(0x7f0000000100)=[{r0, 0x1056}, {r0, 0x240d}, {r0, 0x2008}], 0x3, 0xd401) 2.444198627s ago: executing program 1 (id=3323): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast2, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1000"/16], 0x10}}], 0x1, 0x4000000) 2.438471768s ago: executing program 4 (id=3324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x8, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000050}, 0x8000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.324389118s ago: executing program 0 (id=3326): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) 2.313935669s ago: executing program 0 (id=3327): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffb) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x10000002, 0x0, 0x204002004c4, 0x8001004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee0000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.29752723s ago: executing program 3 (id=3328): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x5, "fa00114001000000000000000000000000000100000000000000ffff00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r4}) 2.200370559s ago: executing program 1 (id=3330): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r1, 0x10000) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0xfffffffd, 0x8000, 0x2000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000440)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x1) 2.194491019s ago: executing program 0 (id=3331): r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getpid() epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0x8000200d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)={0x40002000}) 2.099841547s ago: executing program 1 (id=3332): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x9f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c842, 0x24) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r1, r1, 0x0, 0xe3aa6ea) sendfile(r0, r0, 0x0, 0xe3aa6ea) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50, 0xffffffffffffffda, r3, {0x7, 0x2d, 0x40800, 0x20021, 0x8, 0x9, 0x4, 0x6, 0x0, 0x0, 0x10}}, 0x50) 2.052508891s ago: executing program 3 (id=3333): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x2) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000200)=[0xfffffff6, 0x6]) 2.052249372s ago: executing program 2 (id=3334): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa06000003", @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000280)=0x7ff, 0x4) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = fcntl$dupfd(r1, 0x406, r1) write$cgroup_pid(r4, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) link(&(0x7f0000000040)='./file0\x00', 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 2.003365906s ago: executing program 4 (id=3335): r0 = socket(0x10, 0x80002, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000003c0), 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4", @ANYBLOB, @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x3, 0x3, 0xff) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20008850) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x28000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1.944929991s ago: executing program 1 (id=3336): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000080)={[{@orlov}, {@usrjquota}]}, 0x3, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380), 0x21, 0x589, &(0x7f0000000880)="$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") munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000) alarm(0x1) 1.944296991s ago: executing program 2 (id=3337): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) 1.888429256s ago: executing program 3 (id=3338): symlink(&(0x7f0000000400)='.\x02\x00', &(0x7f00000002c0)='.\x02\x00') openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) syz_emit_ethernet(0x183, &(0x7f0000000400)={@local, @multicast, @void, {@ipv4={0x800, @dccp={{0x22, 0x4, 0x0, 0x7, 0x175, 0x465, 0x0, 0x14, 0x21, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x17, 0xf9, [@loopback, @rand_addr=0x64010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x44}, @loopback]}, @timestamp={0x44, 0x18, 0xf2, 0x0, 0x4, [0xd, 0x2, 0x200, 0x6, 0x8000]}, @lsrr={0x83, 0x7, 0xf4, [@remote]}, @timestamp_prespec={0x44, 0x3c, 0x88, 0x3, 0x5, [{@remote, 0x80000005}, {@loopback, 0x100}, {@multicast1, 0x2}, {@local, 0x6}, {@empty, 0x6}, {@remote, 0x8a5}, {@loopback, 0x200}]}]}}, {{0x4e22, 0x4e23, 0x4, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, "2a23aa", 0x7, "c81c51"}, "403a7e493a5ecaf0730d2f9cb2c566b55daf295ecb901fae25b81262b1b621b6c9f89eafe355ddeca0cddd1e80f354c22efc023c1f1ad3799dc4ef4658b50d933dfdf907a68eb285db58a1969bbf08d23d5ff688f9cb27dc3be64a793a2d7a381d82b352c824ea9b09e3c21c68bd750ce4aba0a5bc8bdf8cad7f5c4c182155cb2381551461234ba9c7ba8a319f15ffeb56c926f7bed1e5e6c3dce83881692beae5c3aba2c703c02c36d43b9e5ed7cd648e8e8df06bc5a758baebdcd80a4ba3fdbcb2798b7351b9a4115127461ba10fb945c7a316ea93d3cc45031eae9a"}}}}}, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000a80)=ANY=[@ANYBLOB='@\n\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) execveat(r2, &(0x7f0000000140)='.\x02\x00', 0x0, 0x0, 0x100) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(0xffffffffffffffff, 0xc040583f, 0x0) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000380)) pivot_root(&(0x7f0000000b40)='.\x02\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x131) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20, &(0x7f00000001c0)=ANY=[]) 1.246179022s ago: executing program 2 (id=3339): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000000c0)={[{@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@norecovery}, {@nolazytime}, {@jqfmt_vfsv1}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa1) 1.120350202s ago: executing program 4 (id=3340): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$eJzs3M9rG0cUwPEnWZYlGVs6lJYWiof20l4WW+25VBQbSgU1tlVqFwxre9UKbSWjFS4qpbZPvZbccwrkYHz0zZD4H/Alt+SSS266BHKICSEb9pf107asyJFjfz8QdjQzTzujGYW3i1f1X///s5i3tLxelXBMSUhE5EQkJWEJhPxj2C1HpdmOfD3+4vHni8srP2Wy2dkFpeYyS9+klVKTUw/++ifudzsck+PUav15+tnxx8ef1t8s/VGwVMFSpXJV6Wqt/LSqr5mG2ihYRU2pedPQLUMVSpZR8drLXnveLG9u1pRe2phIbFYMy1J6qaaKRk1Vy6paqSn9d71QUpqmqYmE4ALOgi7omT6j1wc8GlyRSiWjj4hIvKMltzeUAQEAgKFqz//DTkrfV/4vk27+73Ru5P/7XxxVx385mDx0Ylfrh9Fu+f+3T7z3asn/YyLST/5/Vy6R/3dmRLdLbm+h//wf18NUtKMq1PLKyf8T/vfXtfvb/rRbIP8HAAAAAAAAAAAAAAAAAAAAAOBDcGLbSdu2k8Ex+Nd4hMB/jRvprPUfE5GYs/o263+TLS6vSMx9cM9ZY/O/rdxWzjv6HY5ExBRDpiUpr9394HPKwZNHypGSh+a2G//KOY64LZm8FNz4GUlKqj3etud+zM7OKI8ff/qYUqI5Pi1J+ah7fLo13hn/9lYuKl992RSvSVIerUtZTNlw93Uj/t8ZpX74OdsWH/dOAgAAAADADaApFfIvn1Ot17/e9bumKdW93fuVkUzevU10xv0B7/p6uuv1eST5WWTYswcAAAAA4Hawan8XddM0KucU4nJxn/4Lkd46R9tqRs/rPNI0w17HE3VvZIi867zu9fipthSCP6RoaYr5lf2NJ5j/wNZrp7kmLD1ERdoHP+VUqEuefdefyGlNcNsoesbnLPOd7xM+ZyeMDmw/f3Ln/svBfUG+Owh2wMWdd/s9V6x917mF0av+fwcAAADA+9dI+oOa75ubQ0MZFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAt8yV/KRfW2HYcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACui7cBAAD//5Oa+gc=") r0 = openat(0xffffffffffffff9c, 0x0, 0x842, 0x20) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000002fc0)=""/4108, 0x100c) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 663.058542ms ago: executing program 0 (id=3341): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000004}) poll(&(0x7f00000000c0)=[{r1, 0x1009}], 0x1, 0x8000007) 418.540023ms ago: executing program 1 (id=3342): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@errors_remount}]}, 0x1, 0x5fc, &(0x7f0000000600)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 344.61147ms ago: executing program 4 (id=3343): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x2808088, &(0x7f0000000800)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00', @ANYRES16, @ANYBLOB="dd25bd32e31db2657c10fe3fbb13e072b2ff51994fd79a121f820ad36a8cbca0d33c98fd88490df6d99d8ee4ae834b39fafaf64db9460f4326003981a14ecafec6ed2be2f0aa3366e1b6259a333ed7b813feba344a6db50366250c70a39716fae4d5f3aecae2b3d9fca8c18fff512becc9f06b0b64ff888c5a8dd794c6a7556fdf3cd936dc6cf5093ac7e244c0"], 0x95, 0x2b9, &(0x7f00000003c0)="$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") r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x20812482, &(0x7f0000000980)=ANY=[@ANYBLOB='utf8,eriors=continue,namecase=d=\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="c92020b2b902e416dc22ad1820942c46ad0053cdc4d2811e020f6d0d02df9d48", @ANYRESOCT, @ANYRESHEX=0x0, @ANYRESHEX, @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e11dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183174fcda382e0470be1edc1ef3b4e7d1f782c4ec75f2537574330cc2ac0fd3acaeb505e7cfedffe689444ba3a904640adb21515395c07980b7f25fa1c19cadc9005dd1c63a8cf7d74589a0ebc8056e020ed2cf4390aaa5a885e0a4f00e22c4ad3e63132531992406c5973f29a2299b76d3c4b6b377e51be007db28667aa2bc204467c5cde8c2d98d9336960de4ea6586ed5906050762d", @ANYRESHEX], 0x1, 0x1504, &(0x7f00000023c0)="$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") creat(&(0x7f0000002380)='./file1\x00', 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, 0x0) syz_emit_ethernet(0xfef3, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) truncate(0x0, 0x6) close_range(r0, r0, 0x0) 217.67354ms ago: executing program 2 (id=3344): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50) r1 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) 205.578362ms ago: executing program 0 (id=3345): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000000)={0x407, 0x3ff, 0x36380}) 135.276978ms ago: executing program 1 (id=3346): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x8, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000050}, 0x8000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 72.395503ms ago: executing program 2 (id=3347): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000300)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=@newsa={0x184, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'morus640-generic\x00'}, 0x0, 0x200}}]}, 0x184}}, 0x844) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x2) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmmsg$unix(r3, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="90", 0x1}], 0x1, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x8801}}], 0x1, 0x20044034) close_range(r1, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb}}, 0x36f0516f) 72.171393ms ago: executing program 4 (id=3348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa06000003", @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000280)=0x7ff, 0x4) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = fcntl$dupfd(r1, 0x406, r1) write$cgroup_pid(r4, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) link(&(0x7f0000000040)='./file0\x00', 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 56.017465ms ago: executing program 0 (id=3349): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) 0s ago: executing program 2 (id=3350): r0 = socket(0x10, 0x80002, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000003c0), 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4", @ANYBLOB, @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x3, 0x3, 0xff) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20008850) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x28000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001000010000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): rror = -90 [ 366.419735][ T3599] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 366.743529][ T3599] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 366.782850][ T3599] usb 5-1: USB disconnect, device number 10 [ 367.055608][T12481] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received [ 367.235111][T12488] IPVS: sh: FWM 3 0x00000003 - no destination available [ 367.459650][T12491] tipc: Enabled bearer , priority 0 [ 367.472755][T12491] device syzkaller0 entered promiscuous mode [ 367.565274][T12491] tipc: Resetting bearer [ 367.612146][T12490] tipc: Resetting bearer [ 367.667566][T12490] tipc: Disabling bearer [ 367.738751][T12497] tipc: Enabled bearer , priority 0 [ 367.769254][T12497] device syzkaller0 entered promiscuous mode [ 367.807756][T12497] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 367.929057][T12497] tipc: Resetting bearer [ 367.978924][T12504] tipc: Enabling of bearer rejected, failed to enable media [ 368.034478][T12496] tipc: Resetting bearer [ 368.104261][T12496] tipc: Disabling bearer [ 369.569403][T12556] tipc: Enabled bearer , priority 0 [ 369.603079][T12556] device syzkaller0 entered promiscuous mode [ 369.679762][T12556] tipc: Resetting bearer [ 369.727768][T12555] tipc: Resetting bearer [ 369.753655][ T4345] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 369.790632][T12555] tipc: Disabling bearer [ 369.955223][ T4345] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.009628][ T4345] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.059011][ T4345] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 370.080179][ T4345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.098455][ T4345] usb 2-1: Product: syz [ 370.124470][ T4345] usb 2-1: Manufacturer: syz [ 370.130046][ T4345] usb 2-1: SerialNumber: syz [ 370.167860][ T4345] usb 2-1: selecting invalid altsetting 1 [ 370.320401][T12567] tipc: Enabled bearer , priority 0 [ 370.368340][T12567] device syzkaller0 entered promiscuous mode [ 370.443920][T12567] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 370.611601][ T4345] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 370.636492][ T4345] cdc_ncm 2-1:1.0: bind() failure [ 370.961328][T12567] tipc: Resetting bearer [ 371.010917][T12580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2644'. [ 371.034843][T12566] tipc: Resetting bearer [ 371.111034][T12566] tipc: Disabling bearer [ 371.146108][T12585] tipc: Enabling of bearer rejected, failed to enable media [ 371.998658][T12614] tipc: Enabled bearer , priority 0 [ 372.027560][T12614] device syzkaller0 entered promiscuous mode [ 372.079070][T12614] tipc: Resetting bearer [ 372.116149][T12613] tipc: Resetting bearer [ 372.141376][T12613] tipc: Disabling bearer [ 372.205914][T12618] tipc: Enabling of bearer rejected, failed to enable media [ 372.405561][T12627] tipc: Enabled bearer , priority 0 [ 372.453980][T12627] device syzkaller0 entered promiscuous mode [ 372.467315][T12627] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 372.514580][ T14] usb 2-1: USB disconnect, device number 14 [ 372.565241][T12627] tipc: Resetting bearer [ 372.592986][T12626] tipc: Resetting bearer [ 372.656379][T12626] tipc: Disabling bearer [ 373.059402][T12645] tipc: Enabling of bearer rejected, failed to enable media [ 373.085050][T12647] device syzkaller0 entered promiscuous mode [ 373.125298][ T14] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 373.314906][ T14] usb 2-1: config 0 has an invalid interface number: 135 but max is 0 [ 373.333817][ T14] usb 2-1: config 0 has no interface number 0 [ 373.360136][ T14] usb 2-1: config 0 interface 135 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 373.402265][ T14] usb 2-1: config 0 interface 135 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 373.465215][T12667] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received [ 373.479183][ T14] usb 2-1: config 0 interface 135 altsetting 0 endpoint 0x7 has invalid maxpacket 197, setting to 64 [ 373.518970][ T14] usb 2-1: New USB device found, idVendor=0079, idProduct=be44, bcdDevice=39.b9 [ 373.552581][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.604271][ T14] usb 2-1: config 0 descriptor?? [ 373.755589][T12676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 373.769061][T12676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 374.037433][T12684] tipc: Enabled bearer , priority 0 [ 374.048497][T12684] device syzkaller0 entered promiscuous mode [ 374.058929][T12684] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 374.105244][T12684] tipc: Resetting bearer [ 374.142313][T12683] tipc: Resetting bearer [ 374.181869][T12683] tipc: Disabling bearer [ 374.198969][T12687] tipc: Enabling of bearer rejected, failed to enable media [ 374.313411][ T4855] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 374.563829][ T4855] usb 3-1: Using ep0 maxpacket: 16 [ 374.824873][ T4855] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.837666][ T4855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 374.848829][ T4855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 374.858705][ T4855] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 374.868566][ T4855] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 374.896735][ T4855] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 374.971702][ T4855] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 375.030476][ T4855] usb 3-1: Manufacturer: syz [ 375.074281][ T4855] usb 3-1: config 0 descriptor?? [ 375.668779][T12708] device syzkaller0 entered promiscuous mode [ 375.719177][ T4313] usb 2-1: USB disconnect, device number 15 [ 375.868910][ T4855] rc_core: IR keymap rc-hauppauge not found [ 375.874973][ T4855] Registered IR keymap rc-empty [ 375.879905][ T4855] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 375.902360][T12714] tipc: Enabling of bearer rejected, failed to enable media [ 375.953365][ T4855] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 375.983887][ T4855] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 376.040196][ T4855] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input49 [ 376.133640][ T4855] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 376.163477][ T4855] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 376.233503][ T4855] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 376.273459][ T4855] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 376.313477][ T4855] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 376.363380][ T4855] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 376.403503][ T4855] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 376.433398][ T4855] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 376.463346][ T4855] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 376.496905][ T4855] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 376.520130][T12735] netlink: 'syz.3.2689': attribute type 9 has an invalid length. [ 376.534777][ T4855] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 376.561172][ T4855] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 376.593111][ T4855] usb 3-1: USB disconnect, device number 11 [ 376.642517][T12739] tipc: Enabling of bearer rejected, failed to enable media [ 376.676997][T12738] tipc: Enabled bearer , priority 0 [ 376.698772][T12738] device syzkaller0 entered promiscuous mode [ 376.721991][T12738] tipc: Resetting bearer [ 376.740264][T12736] tipc: Resetting bearer [ 376.791171][T12736] tipc: Disabling bearer [ 376.983572][ T4345] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 377.270957][T12755] device syzkaller0 entered promiscuous mode [ 377.280652][ T4345] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.302196][ T4345] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 377.326827][ T4345] usb 4-1: config 1 has no interface number 0 [ 377.332985][ T4345] usb 4-1: too many endpoints for config 1 interface 1 altsetting 0: 222, using maximum allowed: 30 [ 377.344672][ T4345] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.370116][ T4345] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 222 [ 377.388015][ T4345] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 377.403959][ T4345] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 377.444351][ T4345] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=17.40 [ 377.459483][ T4345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.479730][ T4345] usb 4-1: Product: syz [ 377.490892][ T4345] usb 4-1: Manufacturer: syz [ 377.496419][ T4345] usb 4-1: SerialNumber: syz [ 377.729721][T12774] tipc: Enabled bearer , priority 0 [ 377.748043][T12774] tipc: Resetting bearer [ 377.765420][T12772] tipc: Disabling bearer [ 378.469173][ T4345] cdc_ncm 4-1:1.1: SET_NTB_FORMAT failed [ 378.494230][ T4345] cdc_ncm 4-1:1.1: bind() failure [ 378.507687][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.514387][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.552872][ T4345] usb 4-1: USB disconnect, device number 8 [ 378.793379][ T4856] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 378.814086][T12799] tipc: Enabling of bearer rejected, failed to enable media [ 378.832021][T12797] device syzkaller0 entered promiscuous mode [ 378.983418][ T4856] usb 5-1: Using ep0 maxpacket: 16 [ 378.990563][ T4856] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.023591][ T4856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 379.077973][ T4856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 379.122264][ T4856] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 379.166818][ T4856] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.228126][ T4856] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 379.252445][ T4856] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 379.292859][ T4856] usb 5-1: Manufacturer: syz [ 379.320620][ T4856] usb 5-1: config 0 descriptor?? [ 379.633311][ T4345] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 379.683311][ T4856] rc_core: IR keymap rc-hauppauge not found [ 379.689260][ T4856] Registered IR keymap rc-empty [ 379.704036][ T4856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 379.733635][ T4856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 379.854224][ T4345] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.881615][ T4856] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 379.906705][ T4345] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.946495][ T4856] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input50 [ 379.972934][ T4345] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 379.987951][T12829] tipc: Enabled bearer , priority 0 [ 379.988688][ T4345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.126609][ T4856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 380.138144][ T4345] usb 4-1: Product: syz [ 380.138237][T12829] device syzkaller0 entered promiscuous mode [ 380.142478][ T4345] usb 4-1: Manufacturer: syz [ 380.153760][ T4345] usb 4-1: SerialNumber: syz [ 380.163712][ T4856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 380.203647][ T4856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 380.230303][ T4345] usb 4-1: selecting invalid altsetting 1 [ 380.236376][ T4856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 380.273372][ T4856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 380.291097][T12829] tipc: Resetting bearer [ 380.310823][T12826] tipc: Resetting bearer [ 380.353542][ T4856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 380.371291][T12826] tipc: Disabling bearer [ 380.383937][ T4856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 380.394704][T12836] tipc: Enabled bearer , priority 0 [ 380.413393][ T4856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 380.416878][T12836] device syzkaller0 entered promiscuous mode [ 380.453399][ T4856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 380.462697][T12839] tipc: Enabled bearer , priority 0 [ 380.471970][T12836] tipc: Resetting bearer [ 380.483368][ T4856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 380.490729][T12835] tipc: Resetting bearer [ 380.520364][T12835] tipc: Disabling bearer [ 380.524540][ T4856] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 380.536287][ T4856] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 380.551577][ T4856] usb 5-1: USB disconnect, device number 11 [ 380.557972][T12839] device syzkaller0 entered promiscuous mode [ 380.573350][T12839] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 380.599310][T12841] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 380.613050][T12841] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 380.632880][ T4345] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 380.643385][ T4345] cdc_ncm 4-1:1.0: bind() failure [ 380.683141][T12839] tipc: Resetting bearer [ 380.700041][T12837] tipc: Resetting bearer [ 380.722300][T12837] tipc: Disabling bearer [ 380.733627][T12846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2715'. [ 380.813566][T12848] tipc: Enabling of bearer rejected, failed to enable media [ 381.946221][T12880] tipc: Enabled bearer , priority 0 [ 381.972082][T12880] device syzkaller0 entered promiscuous mode [ 382.020695][T12883] tipc: Enabled bearer , priority 0 [ 382.044222][T12880] tipc: Resetting bearer [ 382.059618][T12883] device syzkaller0 entered promiscuous mode [ 382.081821][T12879] tipc: Resetting bearer [ 382.114843][T12879] tipc: Disabling bearer [ 382.160742][T12883] tipc: Resetting bearer [ 382.179659][T12881] tipc: Resetting bearer [ 382.243947][T12881] tipc: Disabling bearer [ 382.341815][T12891] tipc: Enabled bearer , priority 0 [ 382.389811][T12891] device syzkaller0 entered promiscuous mode [ 382.406646][T12891] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 382.448238][T12891] tipc: Resetting bearer [ 382.459769][T12890] tipc: Resetting bearer [ 382.491212][ T4856] usb 4-1: USB disconnect, device number 9 [ 382.522574][T12890] tipc: Disabling bearer [ 382.640491][T12898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2742'. [ 382.932034][T12910] tipc: Enabling of bearer rejected, failed to enable media [ 383.973288][ T4345] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 384.057934][T12938] tipc: Enabled bearer , priority 0 [ 384.071904][T12938] device syzkaller0 entered promiscuous mode [ 384.113351][T12938] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 384.163307][ T4345] usb 1-1: Using ep0 maxpacket: 8 [ 384.170033][ T4345] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 384.178772][ T4345] usb 1-1: config 179 has no interface number 0 [ 384.185441][ T4345] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 384.197042][ T4345] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 384.209061][ T4345] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 384.220940][ T4345] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 384.233184][ T4345] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 384.247663][ T4345] usb 1-1: config 179 interface 65 has no altsetting 0 [ 384.254969][ T4345] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 384.264345][ T4345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.284859][T12933] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 384.291557][T12942] tipc: Resetting bearer [ 384.302360][ T4345] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input51 [ 384.306904][T12944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2756'. [ 384.354204][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 384.372135][T12937] tipc: Resetting bearer [ 384.394163][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 384.453355][ T4855] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 384.514099][T12937] tipc: Disabling bearer [ 384.593921][ T14] usb 1-1: USB disconnect, device number 15 [ 384.593985][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 384.608568][ T14] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 384.649402][T12946] device syzkaller0 entered promiscuous mode [ 384.666198][ T4855] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.679194][ T4855] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.720206][ T4855] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 384.729666][ T4855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.738029][ T4855] usb 5-1: Product: syz [ 384.742251][ T4855] usb 5-1: Manufacturer: syz [ 384.746931][ T4855] usb 5-1: SerialNumber: syz [ 384.779204][ T4855] usb 5-1: selecting invalid altsetting 1 [ 385.600641][ T4855] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 385.608553][ T4855] cdc_ncm 5-1:1.0: bind() failure [ 385.652158][T12964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2754'. [ 385.693467][ T4345] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 385.895098][ T4345] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.905914][ T4345] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 385.915217][ T4345] usb 2-1: config 1 has no interface number 0 [ 385.921548][ T4345] usb 2-1: too many endpoints for config 1 interface 1 altsetting 0: 222, using maximum allowed: 30 [ 385.934006][ T4345] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.946700][ T4345] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 222 [ 385.962107][ T4345] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 385.982247][ T4345] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 386.011931][ T4345] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=17.40 [ 386.023651][ T4345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.032039][ T4345] usb 2-1: Product: syz [ 386.036652][ T4345] usb 2-1: Manufacturer: syz [ 386.045309][ T4345] usb 2-1: SerialNumber: syz [ 386.352459][T12979] tipc: Enabled bearer , priority 0 [ 386.360092][T12979] device syzkaller0 entered promiscuous mode [ 386.370296][T12979] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 386.396566][T12981] device syzkaller0 entered promiscuous mode [ 386.409990][T12979] tipc: Resetting bearer [ 386.418409][T12978] tipc: Resetting bearer [ 386.437972][T12978] tipc: Disabling bearer [ 386.953565][ T4345] cdc_ncm 2-1:1.1: SET_NTB_FORMAT failed [ 386.978472][ T4345] cdc_ncm 2-1:1.1: bind() failure [ 387.038052][ T4345] usb 2-1: USB disconnect, device number 16 [ 387.081395][T12993] device syzkaller0 entered promiscuous mode [ 387.104774][T12995] tipc: Enabling of bearer rejected, failed to enable media [ 387.111378][ T4310] usb 5-1: USB disconnect, device number 12 [ 387.415906][T13007] tipc: Enabled bearer , priority 0 [ 387.441001][T13007] device syzkaller0 entered promiscuous mode [ 387.468930][T13007] tipc: Resetting bearer [ 387.498358][T13006] tipc: Resetting bearer [ 387.557241][T13006] tipc: Disabling bearer [ 387.589737][T13014] tipc: Enabled bearer , priority 0 [ 387.671139][T13020] device syzkaller0 entered promiscuous mode [ 387.751540][T13014] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 387.908187][T13014] tipc: Resetting bearer [ 388.239948][T13024] device syzkaller0 entered promiscuous mode [ 388.292312][T13013] tipc: Resetting bearer [ 388.340215][T13013] tipc: Disabling bearer [ 389.129550][T13050] tipc: Enabling of bearer rejected, failed to enable media [ 389.461682][T13060] tipc: Enabled bearer , priority 0 [ 389.496971][T13060] device syzkaller0 entered promiscuous mode [ 389.550897][T13060] tipc: Resetting bearer [ 389.580798][T13059] tipc: Resetting bearer [ 389.620135][T13059] tipc: Disabling bearer [ 389.727051][ T4310] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 389.898537][T13073] tipc: Enabled bearer , priority 0 [ 389.923058][T13073] device syzkaller0 entered promiscuous mode [ 389.935939][ T4310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.980302][ T4310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 390.010376][ T4310] usb 1-1: config 1 has no interface number 0 [ 390.023667][T13073] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 390.043271][ T4345] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 390.044076][ T4310] usb 1-1: too many endpoints for config 1 interface 1 altsetting 0: 222, using maximum allowed: 30 [ 390.079630][ T4310] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.091555][ T4310] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 222 [ 390.108354][ T4310] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 390.118780][ T4310] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 390.140349][ T4310] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=17.40 [ 390.159172][ T4310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.168708][ T4310] usb 1-1: Product: syz [ 390.173173][ T4310] usb 1-1: Manufacturer: syz [ 390.181421][ T4310] usb 1-1: SerialNumber: syz [ 390.202620][T13078] tipc: Resetting bearer [ 390.237828][T13072] tipc: Resetting bearer [ 390.238223][ T4345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.305585][ T4345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.309557][T13072] tipc: Disabling bearer [ 390.315762][ T4345] usb 3-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 390.331004][ T4345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.410023][ T4345] usb 3-1: config 0 descriptor?? [ 390.642229][T13081] device syzkaller0 entered promiscuous mode [ 391.068632][ T4310] cdc_ncm 1-1:1.1: SET_NTB_FORMAT failed [ 391.098555][ T4310] cdc_ncm 1-1:1.1: bind() failure [ 391.118153][ T4345] hid-led 0003:1D34:0004.0001: hidraw0: USB HID v0.06 Device [HID 1d34:0004] on usb-dummy_hcd.2-1/input0 [ 391.159676][ T4310] usb 1-1: USB disconnect, device number 16 [ 391.246237][ T4345] hid-led 0003:1D34:0004.0001: Dream Cheeky Webmail Notifier initialized [ 391.390396][T13097] tipc: Enabling of bearer rejected, failed to enable media [ 391.391564][ T4312] usb 3-1: USB disconnect, device number 12 [ 391.603951][T13094] fido_id[13094]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 392.577310][T13133] device syzkaller0 entered promiscuous mode [ 393.063694][T13138] tipc: Enabled bearer , priority 0 [ 393.106742][T13138] device syzkaller0 entered promiscuous mode [ 393.234568][T13138] tipc: Resetting bearer [ 393.313496][T13134] tipc: Resetting bearer [ 393.398818][T13134] tipc: Disabling bearer [ 393.856566][T13152] tipc: Enabled bearer , priority 0 [ 394.412545][T13152] tipc: Resetting bearer [ 394.431776][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 394.458855][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 394.459424][T13151] tipc: Disabling bearer [ 394.473178][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 394.481752][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 394.491675][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 394.499022][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 394.572362][T13159] bridge0 speed is unknown, defaulting to 1000 [ 394.723312][ T4345] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 394.871363][T13172] tipc: Enabled bearer , priority 0 [ 394.914727][ T4345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.936609][ T4345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.957328][T13172] device syzkaller0 entered promiscuous mode [ 394.966411][ T4345] usb 5-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 394.997193][ T4345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.031173][ T4345] usb 5-1: config 0 descriptor?? [ 395.081353][T13172] tipc: Resetting bearer [ 395.119903][ T9175] tipc: Left network mode [ 395.141400][T13171] tipc: Resetting bearer [ 395.163393][ T4312] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 395.201686][T13171] tipc: Disabling bearer [ 395.301117][T13159] chnl_net:caif_netlink_parms(): no params data found [ 395.359977][ T4312] usb 2-1: Using ep0 maxpacket: 32 [ 395.371670][ T4312] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 395.407238][ T4312] usb 2-1: config 0 has no interface number 0 [ 395.422772][ T4312] usb 2-1: config 0 interface 184 has no altsetting 0 [ 395.450934][ T4312] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 395.615348][ T4312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.624232][ T4312] usb 2-1: Product: syz [ 395.628422][ T4312] usb 2-1: Manufacturer: syz [ 395.633099][ T4312] usb 2-1: SerialNumber: syz [ 395.641250][ T4312] usb 2-1: config 0 descriptor?? [ 395.648386][ T4312] smsc75xx v1.0.0 [ 395.817846][ T4345] hid-led 0003:1D34:0004.0002: hidraw0: USB HID v0.06 Device [HID 1d34:0004] on usb-dummy_hcd.4-1/input0 [ 396.008427][ T4345] hid-led 0003:1D34:0004.0002: Dream Cheeky Webmail Notifier initialized [ 396.284757][ T4345] usb 5-1: USB disconnect, device number 13 [ 396.488319][T13159] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.535861][T13159] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.561895][T13203] fido_id[13203]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 396.577549][T13159] device bridge_slave_0 entered promiscuous mode [ 396.594031][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 396.684257][T13159] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.699770][T13159] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.710288][T13159] device bridge_slave_1 entered promiscuous mode [ 397.166364][ T4312] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 397.187502][ T4312] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 397.270055][T13221] tipc: Enabled bearer , priority 0 [ 397.315429][T13159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.358140][T13221] tipc: Resetting bearer [ 397.376175][T13159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.433084][ T4312] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 397.464512][T13220] tipc: Disabling bearer [ 397.465855][ T4312] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 397.536460][T13159] team0: Port device team_slave_0 added [ 397.580979][ T4312] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 397.623749][ T4312] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 397.683098][ T4312] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 397.742780][ T4312] usb 2-1: USB disconnect, device number 17 [ 397.755272][T13159] team0: Port device team_slave_1 added [ 397.850991][T13159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.881673][T13159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.954575][T13159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.095226][T13159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.111895][T13159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.207288][T13159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.226801][T13241] tipc: Enabled bearer , priority 0 [ 398.233997][T13237] device syzkaller0 entered promiscuous mode [ 398.335076][T13237] tipc: Resetting bearer [ 398.371629][T13249] device syzkaller0 entered promiscuous mode [ 398.408425][T13236] tipc: Resetting bearer [ 398.458138][T13236] tipc: Disabling bearer [ 398.617948][T13159] device hsr_slave_0 entered promiscuous mode [ 398.663362][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 398.676623][T13159] device hsr_slave_1 entered promiscuous mode [ 398.758554][T13159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.797274][ T4315] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 398.821725][T13159] Cannot create hsr debugfs directory [ 398.910641][ T9175] device hsr_slave_0 left promiscuous mode [ 398.960049][ T9175] device hsr_slave_1 left promiscuous mode [ 398.994970][ T4315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.013412][ T4315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.027357][ T4315] usb 4-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 399.036863][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.048997][ T4315] usb 4-1: config 0 descriptor?? [ 399.301758][ T9175] bond12 (unregistering): Released all slaves [ 399.516975][ T9175] bond11 (unregistering): Released all slaves [ 399.636274][ T9175] bond10 (unregistering): Released all slaves [ 399.740195][ T9175] bond9 (unregistering): Released all slaves [ 399.761820][ T4315] hid-led 0003:1D34:0004.0003: hidraw0: USB HID v0.06 Device [HID 1d34:0004] on usb-dummy_hcd.3-1/input0 [ 399.778076][ T4315] hid-led 0003:1D34:0004.0003: Dream Cheeky Webmail Notifier initialized [ 399.919651][ T9175] bond8 (unregistering): Released all slaves [ 400.038586][ T9175] bond7 (unregistering): Released all slaves [ 400.146719][ T9175] bond6 (unregistering): Released all slaves [ 400.251241][ T9175] bond5 (unregistering): Released all slaves [ 400.358974][ T9175] bond4 (unregistering): Released all slaves [ 400.466691][ T9175] bond3 (unregistering): Released all slaves [ 400.571707][ T9175] bond2 (unregistering): Released all slaves [ 400.671747][ T9175] bond1 (unregistering): Released all slaves [ 400.744540][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 401.342746][ T9175] bond0 (unregistering): Released all slaves [ 401.591752][ T4310] usb 4-1: USB disconnect, device number 10 [ 402.648367][T13310] tipc: Enabled bearer , priority 0 [ 402.683479][ T4310] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 402.697362][T13310] device syzkaller0 entered promiscuous mode [ 402.781794][T13159] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 402.809897][T13312] tipc: Resetting bearer [ 402.823763][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 402.859355][T13159] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 402.866366][ T4310] usb 2-1: device descriptor read/64, error -71 [ 402.887330][T13159] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 402.905428][T13309] tipc: Resetting bearer [ 402.981521][T13309] tipc: Disabling bearer [ 402.999677][T13159] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 403.153288][ T4310] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 403.333648][ T4310] usb 2-1: device descriptor read/64, error -71 [ 403.464936][ T4310] usb usb2-port1: attempt power cycle [ 403.528282][T13159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.553024][T13328] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2864'. [ 403.628761][T13159] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.643721][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 403.654019][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 403.689105][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 403.704113][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 403.729043][T12528] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.736219][T12528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.775141][T13334] device syzkaller0 entered promiscuous mode [ 403.834235][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 403.842915][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 403.874455][ T4310] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 403.904852][ T4310] usb 2-1: device descriptor read/8, error -71 [ 403.914226][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 403.937832][T12528] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.945025][T12528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.964337][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 403.977534][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 404.046009][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 404.058340][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 404.083655][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 404.106083][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 404.188169][ T4310] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 404.232281][ T4310] usb 2-1: device descriptor read/8, error -71 [ 404.250560][T13159] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 404.295624][T13159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.892527][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 404.940121][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 405.044288][ T4310] usb usb2-port1: unable to enumerate USB device [ 405.282896][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 405.356420][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 405.386110][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 405.422229][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 405.447947][T13360] tipc: Enabled bearer , priority 0 [ 405.524005][T13360] device syzkaller0 entered promiscuous mode [ 405.896839][T13360] tipc: Resetting bearer [ 405.914106][T13359] tipc: Resetting bearer [ 405.973529][T13359] tipc: Disabling bearer [ 405.988819][T13371] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2876'. [ 406.103462][ T4310] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 406.293547][ T4310] usb 2-1: Using ep0 maxpacket: 16 [ 406.312314][ T4310] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.335016][ T4310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 406.373787][ T4310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 406.410138][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 406.420367][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 406.435829][T13159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.451661][ T4310] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 406.492126][ T4310] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 406.527182][ T4310] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 406.543532][ T4310] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 406.562756][ T4310] usb 2-1: Manufacturer: syz [ 406.582619][ T4310] usb 2-1: config 0 descriptor?? [ 406.622594][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 406.648271][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 406.700056][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 406.712333][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 406.765636][T13159] device veth0_vlan entered promiscuous mode [ 406.776651][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 406.804705][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 406.846936][T13159] device veth1_vlan entered promiscuous mode [ 406.918295][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 406.940833][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 406.965699][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 406.991732][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 407.023298][ T4310] rc_core: IR keymap rc-hauppauge not found [ 407.029382][ T4310] Registered IR keymap rc-empty [ 407.041098][T13159] device veth0_macvtap entered promiscuous mode [ 407.051879][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 407.066538][T13159] device veth1_macvtap entered promiscuous mode [ 407.103565][ T4310] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 407.143870][ T4310] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 407.182611][T13159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.183963][ T4310] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 407.205751][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 407.243970][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 407.279292][T13159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.303078][ T4310] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input52 [ 407.326843][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 407.338415][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 407.376341][ T4310] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 407.420270][T13159] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.453383][ T4310] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 407.459335][T13159] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.500392][T13159] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.513323][ T4310] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 407.765472][ T4310] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 407.967732][T13159] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.023377][ T4310] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 408.073321][ T4310] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 408.113349][ T4310] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 408.144088][ T4310] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 408.200161][ T4310] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 408.274368][ T4310] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 408.339313][ T4310] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 408.413303][ T4310] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 408.422320][ T4674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.461215][ T4674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.512588][ T4310] usb 2-1: USB disconnect, device number 22 [ 408.533751][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 408.541760][T12528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.571017][T12528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.584324][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 408.603540][T13284] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 408.816041][T13284] usb 5-1: config 0 has an invalid interface number: 244 but max is 0 [ 408.838961][T13284] usb 5-1: config 0 has no interface number 0 [ 408.860362][T13284] usb 5-1: config 0 interface 244 has no altsetting 0 [ 408.909631][T13284] usb 5-1: New USB device found, idVendor=2019, idProduct=ab2b, bcdDevice= d.0f [ 408.933832][T13284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.941995][T13284] usb 5-1: Product: syz [ 408.946431][T13284] usb 5-1: Manufacturer: syz [ 408.951107][T13284] usb 5-1: SerialNumber: syz [ 408.957742][T13284] usb 5-1: config 0 descriptor?? [ 409.076258][T13444] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2889'. [ 409.177731][ T4312] usb 5-1: USB disconnect, device number 14 [ 409.258728][T13448] tipc: Enabled bearer , priority 0 [ 409.287809][T13448] device syzkaller0 entered promiscuous mode [ 409.363795][T13448] tipc: Resetting bearer [ 409.422681][T13447] tipc: Resetting bearer [ 409.484230][T13447] tipc: Disabling bearer [ 409.883387][T13421] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 409.935505][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 409.947887][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 409.958126][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 409.967419][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 409.975801][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 409.983068][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 410.038976][T13469] bridge0 speed is unknown, defaulting to 1000 [ 410.083339][T13421] usb 1-1: Using ep0 maxpacket: 16 [ 410.093842][T13421] usb 1-1: unable to get BOS descriptor or descriptor too short [ 410.176846][T13421] usb 1-1: config 1 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 51, changing to 9 [ 410.248956][T13421] usb 1-1: config 1 interface 0 altsetting 14 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 410.327222][T13421] usb 1-1: config 1 interface 0 has no altsetting 0 [ 410.366667][ T4329] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.382506][T13421] usb 1-1: New USB device found, idVendor=093a, idProduct=8003, bcdDevice= 0.40 [ 410.401809][T13421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.421920][T13421] usb 1-1: Product: syz [ 410.430433][T13421] usb 1-1: Manufacturer: syz [ 410.435328][T13421] usb 1-1: SerialNumber: syz [ 410.580548][ T4329] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.744543][ T4329] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.857341][T13421] usbhid 1-1:1.0: can't add hid device: -71 [ 410.873363][T13421] usbhid: probe of 1-1:1.0 failed with error -71 [ 410.919141][T13421] usb 1-1: USB disconnect, device number 17 [ 411.014589][ T4329] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.065291][T13469] chnl_net:caif_netlink_parms(): no params data found [ 411.575869][T13502] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2902'. [ 411.727428][T13469] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.767108][T13469] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.797524][T13469] device bridge_slave_0 entered promiscuous mode [ 411.870690][T13508] device syzkaller0 entered promiscuous mode [ 411.902679][T13469] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.915928][T13469] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.934532][T13469] device bridge_slave_1 entered promiscuous mode [ 411.951799][ T4329] tipc: Left network mode [ 412.002682][T13514] device syzkaller0 entered promiscuous mode [ 412.023809][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 412.210324][T13469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.260649][T13469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.670920][T13469] team0: Port device team_slave_0 added [ 412.885552][T13469] team0: Port device team_slave_1 added [ 413.012603][T13469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.049498][T13469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.112693][T13469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.213366][T13469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.222274][T13469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.669905][T13469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.103731][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 414.215649][T13469] device hsr_slave_0 entered promiscuous mode [ 414.233063][T13469] device hsr_slave_1 entered promiscuous mode [ 414.250298][T13469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 414.278505][T13469] Cannot create hsr debugfs directory [ 414.294069][T13578] tipc: Started in network mode [ 414.303468][T13578] tipc: Node identity 322588eb39c1, cluster identity 4711 [ 414.366377][T13578] tipc: Enabled bearer , priority 0 [ 414.424529][T13579] device syzkaller0 entered promiscuous mode [ 414.810791][T13576] tipc: Resetting bearer [ 414.902776][T13575] tipc: Resetting bearer [ 415.012324][T13575] tipc: Disabling bearer [ 415.209704][T13586] device syzkaller0 entered promiscuous mode [ 415.819273][T13607] binder: 13606:13607 ioctl c0306201 0 returned -14 [ 416.282573][T13619] binder: 13606:13619 ioctl c0306201 2000000004c0 returned -14 [ 416.290775][T13619] binder: 13606:13619 ioctl c0306201 2000000001c0 returned -14 [ 416.306802][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 417.896558][ T4329] device hsr_slave_0 left promiscuous mode [ 417.924497][ T4329] device hsr_slave_1 left promiscuous mode [ 417.929240][T13632] capability: warning: `syz.0.2928' uses deprecated v2 capabilities in a way that may be insecure [ 418.098938][ T4329] device veth1_macvtap left promiscuous mode [ 418.110796][ T4329] device veth0_macvtap left promiscuous mode [ 418.120811][ T4329] device veth1_vlan left promiscuous mode [ 419.440626][ T4329] bond13 (unregistering): Released all slaves [ 419.468960][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 420.074555][ T4329] bond12 (unregistering): Released all slaves [ 420.575141][ T4329] bond11 (unregistering): Released all slaves [ 420.852393][ T4329] bond10 (unregistering): Released all slaves [ 421.432595][ T4329] bond9 (unregistering): Released all slaves [ 421.640186][ T4329] bond8 (unregistering): Released all slaves [ 421.837846][ T4329] bond7 (unregistering): Released all slaves [ 421.948609][ T4329] bond6 (unregistering): Released all slaves [ 421.988000][ T4345] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 422.061506][ T4329] bond5 (unregistering): Released all slaves [ 422.165556][ T4329] bond4 (unregistering): Released all slaves [ 422.173616][ T4345] usb 5-1: Using ep0 maxpacket: 16 [ 422.181289][ T4345] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.199633][ T4345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 422.216591][ T4345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 422.232988][ T4345] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 422.250138][ T4345] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 422.270776][ T4345] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 422.279930][ T4345] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 422.294715][ T4345] usb 5-1: Manufacturer: syz [ 422.301055][ T4345] usb 5-1: config 0 descriptor?? [ 422.354718][ T4329] bond3 (unregistering): Released all slaves [ 422.470107][ T4329] bond2 (unregistering): Released all slaves [ 422.596282][ T4345] rc_core: IR keymap rc-hauppauge not found [ 422.602229][ T4345] Registered IR keymap rc-empty [ 422.607479][ T4345] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 422.647643][ T4345] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 422.668924][ T4329] bond1 (unregistering): Released all slaves [ 422.683847][ T4345] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 422.697625][ T4345] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input53 [ 422.712294][ T4345] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 422.747621][ T4345] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 422.784660][ T4345] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 422.823289][ T4345] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 422.863402][ T4345] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 422.903327][ T4345] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 422.944355][ T4345] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 422.993632][ T4345] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 423.034601][ T4345] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 423.066158][ T4345] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 423.106392][ T4345] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 423.115906][ T4345] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 423.127415][ T4345] usb 5-1: USB disconnect, device number 15 [ 423.612686][ T4329] bond0 (unregistering): Released all slaves [ 423.729281][T13646] tipc: Enabling of bearer rejected, failed to enable media [ 423.768563][T13680] device syzkaller0 entered promiscuous mode [ 424.148517][T13727] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2944'. [ 424.501821][T13469] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 424.588839][T13469] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 424.639825][T13469] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 424.773022][T13469] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 425.331574][T13753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2951'. [ 425.468552][T13469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.507547][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 425.533997][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 425.556426][T13469] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.709447][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 425.723359][ T4312] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 425.741904][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 425.776472][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.783589][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.827204][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 425.850749][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 425.880568][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.887752][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.923383][ T4312] usb 4-1: Using ep0 maxpacket: 16 [ 425.930382][ T4312] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.001163][T13469] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 426.037209][ T4312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 426.083654][ T4312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 426.096279][T13469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 426.137379][ T4312] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 426.155147][T13766] tipc: Enabled bearer , priority 0 [ 426.161892][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 426.164400][ T4312] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 426.193389][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 426.213885][ T4312] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 426.243954][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 426.252466][ T4312] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 426.274277][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 426.292436][ T4312] usb 4-1: Manufacturer: syz [ 426.309267][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 426.318043][ T4312] usb 4-1: config 0 descriptor?? [ 426.330035][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 426.387995][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 426.461628][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 426.500770][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 426.557798][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 426.594547][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 426.622713][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 426.654197][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 426.694586][T13766] tipc: Resetting bearer [ 426.710812][T13768] device syzkaller0 entered promiscuous mode [ 426.741146][T13768] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 426.786104][T13762] tipc: Resetting bearer [ 426.833139][T13762] tipc: Disabling bearer [ 426.839165][ T4312] rc_core: IR keymap rc-hauppauge not found [ 426.845467][ T4312] Registered IR keymap rc-empty [ 426.865023][ T4312] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 426.936588][ T4312] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 427.005010][ T4312] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 427.044647][ T4312] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input54 [ 427.112033][ T4312] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 427.122576][T13793] device syzkaller0 entered promiscuous mode [ 427.143370][ T4312] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 427.183312][ T4312] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 427.214072][ T4312] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 427.222889][T13796] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2957'. [ 427.243549][ T4312] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 427.262008][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 427.283366][ T4312] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 427.290345][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 427.331390][T13469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.338510][ T4312] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 427.373610][ T4312] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 427.404772][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 427.419412][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 427.427752][ T4312] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 427.456942][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 427.465813][ T4312] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 427.474400][T13803] binder: 13802:13803 ioctl c0306201 0 returned -14 [ 427.482462][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 427.495112][ T4312] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 427.508996][T13469] device veth0_vlan entered promiscuous mode [ 427.516182][ T4312] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 427.525690][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 427.534245][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 427.544413][ T4312] usb 4-1: USB disconnect, device number 11 [ 427.557820][T13469] device veth1_vlan entered promiscuous mode [ 427.709045][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 427.732358][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 427.782406][T13814] binder: 13802:13814 ioctl c0306201 2000000004c0 returned -14 [ 427.792764][T13814] binder: 13802:13814 ioctl c0306201 2000000001c0 returned -14 [ 428.088649][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 428.309092][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 428.347344][T13469] device veth0_macvtap entered promiscuous mode [ 428.388861][T13815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2962'. [ 428.426806][T13469] device veth1_macvtap entered promiscuous mode [ 428.527319][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.587570][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.637674][T13469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.663977][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 428.672719][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 428.718986][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.732632][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.749858][T13469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.759423][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 428.774738][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 428.813441][T13469] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.822182][T13469] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.845416][T13469] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.855092][T13469] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.867209][T13832] tipc: Enabled bearer , priority 0 [ 428.875750][T13838] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2968'. [ 428.905528][T13832] device syzkaller0 entered promiscuous mode [ 428.992788][T13832] tipc: Resetting bearer [ 429.048756][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.060198][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.072077][T13829] tipc: Resetting bearer [ 429.522731][T13829] tipc: Disabling bearer [ 429.551429][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 429.592841][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.618857][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.641381][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 429.833311][ T952] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 429.896286][T13859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2974'. [ 429.963516][ T4316] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 430.019034][ T952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 430.042277][ T952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.062882][T13861] binder: 13860:13861 ioctl c0306201 0 returned -14 [ 430.079812][ T952] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 430.093098][ T952] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 430.102477][ T952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.155104][ T952] usb 2-1: config 0 descriptor?? [ 430.206929][T13421] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 430.243325][ T4316] usb 1-1: Using ep0 maxpacket: 32 [ 430.257084][ T4316] usb 1-1: New USB device found, idVendor=06cd, idProduct=0110, bcdDevice=71.71 [ 430.865802][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.882990][ T4316] usb 1-1: Product: syz [ 430.953094][ T4316] usb 1-1: Manufacturer: syz [ 430.958730][ T4316] usb 1-1: SerialNumber: syz [ 430.978955][T13421] usb 5-1: Using ep0 maxpacket: 16 [ 430.986361][T13421] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.998149][ T4316] usb 1-1: config 0 descriptor?? [ 431.020545][T13421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 431.035111][ T4316] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 431.043132][ T4316] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 431.057751][T13421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 431.064266][T13865] binder: 13864:13865 ioctl c0306201 0 returned -14 [ 431.069169][ T4316] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 431.084174][ T952] plantronics 0003:047F:FFFF.0004: ignoring exceeding usage max [ 431.087723][T13421] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 431.107482][ T4316] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 431.115346][ T4316] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 431.117011][ T952] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 431.122924][ T4316] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 431.138581][T13421] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 431.153338][ T4316] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 431.182101][ T952] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 431.321801][T13421] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 431.343309][ T4316] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 431.351622][T13421] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 431.373713][ T4316] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 431.376877][T13871] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2978'. [ 431.382761][ T4316] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 431.448931][T13872] binder: 13864:13872 ioctl c0306201 2000000004c0 returned -14 [ 431.773588][ T4856] usb 2-1: USB disconnect, device number 23 [ 432.019365][T13421] usb 5-1: Manufacturer: syz [ 432.024909][ T4316] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 432.032604][ T4316] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 432.041260][T13421] usb 5-1: config 0 descriptor?? [ 432.051995][ T4316] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 432.145501][ T4316] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 432.161544][ T4316] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 432.178081][ T4316] usb 1-1: USB disconnect, device number 18 [ 432.191067][ T4316] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 432.231111][ T4316] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 432.246061][ T4316] keyspan 1-1:0.0: device disconnected [ 432.673493][T13421] rc_core: IR keymap rc-hauppauge not found [ 432.673570][ T952] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 432.679432][T13421] Registered IR keymap rc-empty [ 432.705436][T13421] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 432.735548][T13883] tipc: Enabled bearer , priority 0 [ 432.742929][T13883] device syzkaller0 entered promiscuous mode [ 432.745306][T13421] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 432.784057][T13421] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 432.808731][T13421] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input56 [ 432.810730][T13883] tipc: Resetting bearer [ 432.848453][T13421] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 432.861258][T13882] tipc: Resetting bearer [ 432.883439][T13421] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 432.899559][ T952] usb 4-1: Using ep0 maxpacket: 8 [ 432.913668][ T952] usb 4-1: unable to get BOS descriptor or descriptor too short [ 432.921903][T13882] tipc: Disabling bearer [ 432.923381][T13421] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 432.941691][ T952] usb 4-1: config 9 has an invalid interface number: 58 but max is 0 [ 432.953093][ T952] usb 4-1: config 9 has no interface number 0 [ 432.959742][ T952] usb 4-1: config 9 interface 58 has no altsetting 0 [ 432.965749][T13421] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 432.986702][T13892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2985'. [ 432.998517][ T952] usb 4-1: New USB device found, idVendor=04b8, idProduct=0602, bcdDevice= 1.10 [ 433.005386][T13421] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 433.141198][ T952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.166412][ T952] usb 4-1: Product: syz [ 433.170772][ T952] usb 4-1: Manufacturer: syz [ 433.616152][ T952] usb 4-1: SerialNumber: syz [ 433.673494][T13421] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 433.703547][T13421] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 433.733419][T13421] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 433.763485][T13421] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 433.803810][T13421] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 433.848363][ T952] usb-storage 4-1:9.58: USB Mass Storage device detected [ 433.848485][T13421] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 433.887213][T13421] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 433.888528][ T952] usb-storage 4-1:9.58: Quirks match for vid 04b8 pid 0602: 1 [ 433.901344][T13421] usb 5-1: USB disconnect, device number 16 [ 433.973015][ T952] usb 4-1: USB disconnect, device number 12 [ 434.096150][T13912] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 434.277479][T13918] binder: 13917:13918 ioctl c0306201 0 returned -14 [ 435.103270][T13421] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 435.533700][T13421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 435.614504][T13421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.631704][T13421] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 435.843360][T13421] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 435.893345][T13421] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.938029][T13421] usb 5-1: config 0 descriptor?? [ 436.098218][T13939] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2999'. [ 436.316179][T13942] device syzkaller0 entered promiscuous mode [ 436.353492][T13421] plantronics 0003:047F:FFFF.0005: ignoring exceeding usage max [ 436.393829][T13421] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 436.454677][T13945] bridge0 speed is unknown, defaulting to 1000 [ 436.488087][T13421] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 436.639114][ T4345] usb 5-1: USB disconnect, device number 17 [ 436.750158][T13954] binder: 13953:13954 ioctl c0306201 0 returned -14 [ 436.788068][T13949] fido_id[13949]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 438.073388][ T4856] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 438.091988][T13972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3011'. [ 438.673322][ T4856] usb 3-1: Using ep0 maxpacket: 8 [ 438.698640][ T4856] usb 3-1: unable to get BOS descriptor or descriptor too short [ 438.710235][ T4856] usb 3-1: config 9 has an invalid interface number: 58 but max is 0 [ 438.719219][ T4856] usb 3-1: config 9 has no interface number 0 [ 438.745961][ T4856] usb 3-1: config 9 interface 58 has no altsetting 0 [ 438.758934][T13981] binder: 13979:13981 ioctl c0306201 0 returned -14 [ 438.784999][ T4856] usb 3-1: New USB device found, idVendor=04b8, idProduct=0602, bcdDevice= 1.10 [ 438.915651][T13982] device syzkaller0 entered promiscuous mode [ 438.923143][ T4856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.946157][ T4856] usb 3-1: Product: syz [ 438.950411][ T4856] usb 3-1: Manufacturer: syz [ 439.014709][T13986] binder: 13979:13986 ioctl c0306201 2000000004c0 returned -14 [ 439.614211][ T4856] usb 3-1: SerialNumber: syz [ 439.849511][T13992] binder: 13990:13992 ioctl c0306201 0 returned -14 [ 439.945248][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.951783][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.967130][ T4856] usb-storage 3-1:9.58: USB Mass Storage device detected [ 440.064537][ T4856] usb-storage 3-1:9.58: Quirks match for vid 04b8 pid 0602: 1 [ 440.183941][ T4856] usb 3-1: USB disconnect, device number 13 [ 441.193580][T13421] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 441.204574][T14010] tipc: Enabled bearer , priority 0 [ 441.211970][T14010] device syzkaller0 entered promiscuous mode [ 441.255323][T14009] tipc: Resetting bearer [ 441.312781][T14009] tipc: Disabling bearer [ 441.394583][T13421] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 441.416780][T13421] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.429008][T14016] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 441.454285][T13421] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 441.508442][T13421] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 441.544608][T13421] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.571923][T13421] usb 3-1: config 0 descriptor?? [ 441.598840][T14018] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3025'. [ 441.609477][T14022] binder: 14021:14022 ioctl c0306201 0 returned -14 [ 441.773588][T14026] device syzkaller0 entered promiscuous mode [ 441.890412][T14028] binder: 14021:14028 ioctl c0306201 2000000004c0 returned -14 [ 442.024710][T13421] plantronics 0003:047F:FFFF.0006: ignoring exceeding usage max [ 443.581946][T14043] device syzkaller0 entered promiscuous mode [ 443.808143][T13421] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 443.828909][T13421] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 443.860039][T13421] usb 3-1: USB disconnect, device number 14 [ 444.126767][T14051] fido_id[14051]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 444.546770][T14060] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3040'. [ 444.585421][T14057] bridge0 speed is unknown, defaulting to 1000 [ 444.760605][T14067] binder: 14066:14067 ioctl c0306201 0 returned -14 [ 445.076361][T14075] binder: 14066:14075 ioctl c0306201 2000000004c0 returned -14 [ 446.677829][T14089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3047'. [ 446.845785][T14092] device syzkaller0 entered promiscuous mode [ 447.953904][T14110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3053'. [ 448.051715][T14116] binder: 14115:14116 ioctl c0306201 0 returned -14 [ 448.301276][T14124] device syzkaller0 entered promiscuous mode [ 448.319602][T14116] binder: 14115:14116 ioctl c0306201 2000000001c0 returned -14 [ 448.975891][T14131] bridge0 speed is unknown, defaulting to 1000 [ 449.022465][T14136] device syzkaller0 entered promiscuous mode [ 449.894559][T13283] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 450.643578][T13283] usb 5-1: Using ep0 maxpacket: 32 [ 450.656694][T13283] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 450.745888][T13283] usb 5-1: config 0 has no interface number 0 [ 450.789623][T13283] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 450.903532][T13283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.911576][T13283] usb 5-1: Product: syz [ 450.933980][T13283] usb 5-1: Manufacturer: syz [ 450.938623][T13283] usb 5-1: SerialNumber: syz [ 450.966239][T14162] binder: 14161:14162 ioctl c0306201 0 returned -14 [ 450.986048][T13283] usb 5-1: config 0 descriptor?? [ 450.992962][T13283] smsc95xx v2.0.0 [ 452.017888][T14166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3071'. [ 452.080394][T14177] device syzkaller0 entered promiscuous mode [ 452.127812][T13283] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 452.147896][ T4283] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 452.166962][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 452.294243][ T4283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 452.302201][ T4283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 452.311175][ T4270] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 452.318571][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 452.342228][T13283] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 452.353952][T13283] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 452.363119][T13283] usb 5-1: USB disconnect, device number 18 [ 452.983712][T14178] bridge0 speed is unknown, defaulting to 1000 [ 453.372566][ T2913] tipc: Disabling bearer [ 453.385015][ T2913] tipc: Left network mode [ 454.323662][T14205] binder: 14204:14205 ioctl c0306201 0 returned -14 [ 454.343365][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 454.497832][T14201] bridge0 speed is unknown, defaulting to 1000 [ 455.420225][T14178] chnl_net:caif_netlink_parms(): no params data found [ 455.541309][T14223] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3085'. [ 455.702716][T14233] binder: 14232:14233 ioctl c0306201 0 returned -14 [ 455.769378][T14178] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.827381][T14178] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.865005][T14178] device bridge_slave_0 entered promiscuous mode [ 456.000745][T14239] binder: 14232:14239 ioctl c0306201 2000000001c0 returned -14 [ 456.253961][T14178] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.280022][T14178] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.446097][T14178] device bridge_slave_1 entered promiscuous mode [ 456.634013][ T4283] Bluetooth: hci0: command 0x041b tx timeout [ 456.660369][T14178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.729570][T14178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.966556][T14178] team0: Port device team_slave_0 added [ 457.091780][T14178] team0: Port device team_slave_1 added [ 457.317250][T14178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.332595][T14178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.393268][T14178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.436899][T14264] binder: 14263:14264 ioctl c0306201 0 returned -14 [ 457.589108][T14178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.623634][T14178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.688455][T14178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.517161][T14178] device hsr_slave_0 entered promiscuous mode [ 458.593688][T14178] device hsr_slave_1 entered promiscuous mode [ 458.663405][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 458.779529][ T2913] device hsr_slave_0 left promiscuous mode [ 458.799942][ T2913] device hsr_slave_1 left promiscuous mode [ 458.828054][T14282] overlayfs: failed to resolve './file1': -2 [ 459.998243][ T2913] bond8 (unregistering): Released all slaves [ 460.273113][ T2913] bond7 (unregistering): Released all slaves [ 460.513709][ T2913] bond6 (unregistering): Released all slaves [ 460.630905][ T2913] bond5 (unregistering): Released all slaves [ 460.748840][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 460.756933][ T2913] bond4 (unregistering): Released all slaves [ 460.872851][ T2913] bond3 (unregistering): Released all slaves [ 460.979265][ T2913] bond2 (unregistering): Released all slaves [ 461.122034][ T2913] bond1 (unregistering): Released all slaves [ 461.820583][ T2913] bond0 (unregistering): Released all slaves [ 461.848629][T12528] smc: removing ib device syz1 [ 461.937184][T14283] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3097'. [ 462.485557][T14330] binder: 14329:14330 ioctl c0306201 0 returned -14 [ 462.865923][T14335] binder: 14329:14335 ioctl c0306201 2000000004c0 returned -14 [ 465.296227][T14178] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 465.525337][T14178] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 466.016813][T14178] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 466.146292][T14178] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 466.497521][T14388] overlayfs: failed to clone upperpath [ 466.601133][T14178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.684575][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 466.697002][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 466.748695][T14178] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.774113][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 467.590143][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 467.661603][T12528] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.668777][T12528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.739054][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 467.784066][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 467.800303][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 467.833811][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.840937][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.873642][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 467.905029][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 467.918728][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 467.939207][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 467.950721][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 467.965499][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 468.005535][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 468.065339][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 468.078803][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 468.087892][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 468.098546][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 468.109890][T14178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 469.125014][T14430] overlayfs: failed to clone upperpath [ 469.692006][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 469.715345][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 470.325614][T14178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.866727][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 470.887090][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 470.966797][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 471.012656][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 471.059255][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 471.132104][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 471.141568][T14178] device veth0_vlan entered promiscuous mode [ 471.248326][T14178] device veth1_vlan entered promiscuous mode [ 471.774371][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 471.792530][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 471.844361][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 471.864259][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 471.877683][T14178] device veth0_macvtap entered promiscuous mode [ 471.926356][T14178] device veth1_macvtap entered promiscuous mode [ 471.935988][T14488] overlayfs: failed to clone upperpath [ 471.995840][T14178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.051667][T14178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.073502][T14178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.119206][T14178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.157433][T14178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.206580][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 472.229538][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 472.265382][T14178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.294589][T14178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.330253][T14178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.358566][T14178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.379689][T14178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.413920][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 472.427213][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 472.449586][T14178] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.470647][T14178] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.491713][T14178] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.510900][T14178] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.696059][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.723894][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.784913][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 472.810669][T12528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.843272][T12528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.311013][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 473.893472][T13350] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 473.926043][T14547] overlayfs: failed to clone upperpath [ 474.034143][T14551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3155'. [ 474.061759][T14551] device bridge_slave_1 left promiscuous mode [ 474.082430][T14551] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.108768][T13350] usb 5-1: Using ep0 maxpacket: 16 [ 474.116120][T13350] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.132540][T13350] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 474.167305][T14551] device bridge_slave_0 left promiscuous mode [ 474.180646][T13350] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 474.198320][T14551] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.218188][T13350] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 474.241852][T13350] usb 5-1: Manufacturer: syz [ 474.286385][T13350] usb 5-1: config 0 descriptor?? [ 474.482268][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 474.492641][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 474.504448][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 474.514672][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 474.522393][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 474.529843][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 474.746350][T14568] fuse: Bad value for 'fd' [ 475.646496][T14560] chnl_net:caif_netlink_parms(): no params data found [ 476.141421][T14581] device syzkaller0 entered promiscuous mode [ 476.399660][T14560] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.408750][T14560] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.418786][T14560] device bridge_slave_0 entered promiscuous mode [ 476.428439][T14560] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.447870][T14560] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.465389][T14560] device bridge_slave_1 entered promiscuous mode [ 476.593641][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 476.635421][T13421] usb 5-1: USB disconnect, device number 19 [ 476.645948][T14560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.658573][T14560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.774728][T14560] team0: Port device team_slave_0 added [ 476.782044][T14601] overlayfs: failed to clone upperpath [ 476.811811][T14560] team0: Port device team_slave_1 added [ 476.879832][T14560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.899998][T14560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.941389][T14560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.967446][T14560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.982383][T14560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.017208][T14560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.134366][T14560] device hsr_slave_0 entered promiscuous mode [ 477.151964][T14560] device hsr_slave_1 entered promiscuous mode [ 477.162115][T14560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 477.179917][T14560] Cannot create hsr debugfs directory [ 477.210520][T14618] binder: 14617:14618 ioctl c0306201 0 returned -14 [ 477.253304][T13421] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 477.501895][T14623] binder: 14617:14623 ioctl c0306201 2000000004c0 returned -14 [ 477.510499][T13421] usb 5-1: Using ep0 maxpacket: 16 [ 477.523071][T13421] usb 5-1: config 0 interface 0 has no altsetting 0 [ 477.707389][T13421] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 477.869920][T13421] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.084137][T13421] usb 5-1: config 0 descriptor?? [ 478.227604][T14560] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.687272][T14560] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.703434][ T4283] Bluetooth: hci2: command 0x041b tx timeout [ 479.046248][T13421] hid (null): unknown global tag 0x14 [ 479.051815][T13421] hid (null): global environment stack underflow [ 479.058242][T13421] hid (null): unknown global tag 0xd [ 479.065283][T13421] hid (null): report_id 25806 is invalid [ 479.070950][T13421] hid (null): unknown global tag 0xe [ 479.082403][T13421] hid (null): global environment stack underflow [ 479.206722][T13421] usb 5-1: USB disconnect, device number 20 [ 479.397683][T14560] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.535628][T14560] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.618266][T14651] tipc: Enabling of bearer rejected, failed to enable media [ 479.638541][T14651] device syzkaller0 entered promiscuous mode [ 480.743413][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 481.114628][T14560] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 481.142944][T14560] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 481.206843][T14560] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 481.217809][T14684] binder: 14683:14684 ioctl c0306201 0 returned -14 [ 481.235703][T14682] overlayfs: failed to clone upperpath [ 482.066551][T14686] binder: 14683:14686 ioctl c0306201 2000000001c0 returned -14 [ 482.083821][T14560] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 482.298821][T14560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.324245][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 482.353552][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 482.397831][T14560] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.429171][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 482.454109][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 482.486673][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.493868][ T4335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.537421][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 482.568461][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 482.624040][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 482.644131][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.651308][ T4335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.653303][T13283] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 482.697300][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 482.710055][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 482.735726][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 482.765178][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 482.803584][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 482.811758][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 482.821581][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 482.831705][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 482.846342][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 482.864034][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 482.881373][T14560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 482.893986][T13283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.905880][T14560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 482.913574][T13283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.924235][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 482.932169][T13283] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 482.945361][T13283] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 482.956843][T13283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.975209][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 482.979385][T13283] usb 4-1: config 0 descriptor?? [ 483.429379][T13283] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 483.449910][T13283] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 483.484017][T13283] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 483.497572][T13283] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 483.542141][T13283] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 483.561867][T13283] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 483.590745][T13283] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 483.631521][T13283] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 483.657046][T13283] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 483.688779][T13283] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 483.728010][T13283] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 483.752860][T13283] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 483.803537][T13283] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 483.850362][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 483.864703][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 483.873910][T13283] usb 4-1: USB disconnect, device number 13 [ 483.916107][T14560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.953223][T13421] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 483.962286][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 483.977032][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 484.011240][T14740] fido_id[14740]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 484.013548][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 484.051599][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 484.065863][T14742] overlayfs: failed to clone upperpath [ 484.077138][T14560] device veth0_vlan entered promiscuous mode [ 484.085324][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 484.117474][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 484.144879][T13421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 484.152252][T14560] device veth1_vlan entered promiscuous mode [ 484.181805][T13421] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 484.218038][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 484.232013][T13421] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 484.232469][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 484.264429][T13421] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.268641][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 484.304448][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 484.312769][T13421] usb 5-1: config 0 descriptor?? [ 484.341096][T14560] device veth0_macvtap entered promiscuous mode [ 484.346328][T14739] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 484.373876][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 484.388780][T14560] device veth1_macvtap entered promiscuous mode [ 484.435942][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.477227][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.503292][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.524980][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.553268][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.568201][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.606265][T13421] usbhid 5-1:0.0: can't add hid device: -71 [ 484.612282][T13421] usbhid: probe of 5-1:0.0 failed with error -71 [ 484.657635][T13421] usb 5-1: USB disconnect, device number 21 [ 484.701398][T14560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.718661][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.761717][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.765967][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.920328][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.010952][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.111812][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.251127][T14560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.287050][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 486.296646][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 486.309689][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 486.318962][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 486.330602][T14560] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.356080][T14560] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.395595][T14560] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.416263][T14560] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.473208][T13350] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 486.528354][ T4335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.543057][ T4335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.552098][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 486.579200][ T4335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.589292][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.601208][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 486.608631][T13421] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 486.683280][T13350] usb 4-1: Using ep0 maxpacket: 32 [ 486.692067][T13350] usb 4-1: config 0 has an invalid interface number: 109 but max is 0 [ 486.708735][T13350] usb 4-1: config 0 has no interface number 0 [ 486.723265][T13350] usb 4-1: config 0 interface 109 has no altsetting 0 [ 486.760156][T13350] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=fb.62 [ 486.808843][T13350] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.837653][T13350] usb 4-1: Product: syz [ 486.841862][T13350] usb 4-1: Manufacturer: syz [ 486.868466][T13350] usb 4-1: SerialNumber: syz [ 486.896741][T14776] device syzkaller0 entered promiscuous mode [ 486.904182][T13350] usb 4-1: config 0 descriptor?? [ 486.928167][T13350] option 4-1:0.109: GSM modem (1-port) converter detected [ 486.958598][T13350] usb 4-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 487.003551][T13421] usb 5-1: device not accepting address 22, error -71 [ 487.241823][T14787] overlayfs: failed to clone upperpath [ 487.546457][T14794] tipc: Enabling of bearer rejected, failed to enable media [ 488.443946][ T4310] usb 4-1: USB disconnect, device number 14 [ 488.619494][ T4310] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 488.774164][ T4310] option 4-1:0.109: device disconnected [ 488.826548][ T4283] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 488.841304][ T4283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 488.852935][ T4283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 488.864473][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 488.878750][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 488.886912][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 489.044486][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.379139][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.246895][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.516889][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.765504][T14807] chnl_net:caif_netlink_parms(): no params data found [ 490.813353][T13283] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 490.990522][ T4283] Bluetooth: hci4: command 0x0409 tx timeout [ 491.025426][T13283] usb 2-1: config 59 has an invalid interface number: 182 but max is 1 [ 491.048770][T13283] usb 2-1: config 59 has an invalid interface number: 3 but max is 1 [ 491.058042][ T46] tipc: Left network mode [ 491.070482][T14807] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.112662][T13283] usb 2-1: config 59 has no interface number 0 [ 491.155598][T13283] usb 2-1: config 59 has no interface number 1 [ 491.161835][T13283] usb 2-1: config 59 interface 182 altsetting 8 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 491.173655][T14807] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.203506][T14807] device bridge_slave_0 entered promiscuous mode [ 491.230987][T14807] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.245673][T13283] usb 2-1: config 59 interface 182 altsetting 8 endpoint 0x2 has invalid maxpacket 1056, setting to 64 [ 491.270723][T14807] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.288378][T13283] usb 2-1: config 59 interface 182 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 491.324486][T14807] device bridge_slave_1 entered promiscuous mode [ 491.341144][T13283] usb 2-1: config 59 interface 182 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 491.362968][T13283] usb 2-1: config 59 interface 182 has no altsetting 0 [ 491.371524][T14807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.380829][T13283] usb 2-1: config 59 interface 3 has no altsetting 0 [ 491.416538][T13283] usb 2-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=71.5d [ 491.428889][T14807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.444223][T13283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.461862][T13283] usb 2-1: Product: syz [ 491.476360][T13283] usb 2-1: Manufacturer: syz [ 491.481003][T13283] usb 2-1: SerialNumber: syz [ 491.511741][T14807] team0: Port device team_slave_0 added [ 491.520528][T14849] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 491.540854][T14849] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 493.042795][T13283] sierra 2-1:59.182: Sierra USB modem converter detected [ 493.063414][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 493.089725][T13283] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 493.100785][T13283] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 493.111106][T13283] usb 2-1: Sierra USB modem converter now attached to ttyUSB2 [ 493.189733][T13283] usb 2-1: USB disconnect, device number 24 [ 493.247456][T13283] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 493.281208][T13283] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 493.334246][T13283] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 493.377817][T13283] sierra 2-1:59.182: device disconnected [ 493.484596][T14807] team0: Port device team_slave_1 added [ 493.561559][T14807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.662120][T14807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.211336][T14807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.366626][T14807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.378121][T14807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.442112][T14807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.569305][ T4310] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 494.773360][ T4310] usb 2-1: Using ep0 maxpacket: 32 [ 494.788047][ T4310] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 494.813858][ T4310] usb 2-1: config 0 has no interface number 0 [ 494.835801][ T4310] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 494.876857][ T4310] usb 2-1: config 0 interface 85 has no altsetting 0 [ 494.906656][T14807] device hsr_slave_0 entered promiscuous mode [ 494.934671][T14807] device hsr_slave_1 entered promiscuous mode [ 494.936490][ T4310] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 494.950309][T14807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.973488][ T4310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.978509][T14807] Cannot create hsr debugfs directory [ 494.991993][ T4310] usb 2-1: Product: syz [ 495.002108][ T4310] usb 2-1: Manufacturer: syz [ 495.018051][ T4310] usb 2-1: SerialNumber: syz [ 495.040961][ T4310] usb 2-1: config 0 descriptor?? [ 495.143368][ T4283] Bluetooth: hci4: command 0x040f tx timeout [ 496.158645][ T4310] appletouch 2-1:0.85: Geyser mode initialized. [ 496.182258][ T4310] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input60 [ 496.380576][ T33] usb 2-1: USB disconnect, device number 25 [ 496.410315][ T33] appletouch 2-1:0.85: input: appletouch disconnected [ 497.273258][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 497.766830][T14971] tipc: Enabling of bearer rejected, failed to enable media [ 497.817486][ T46] device hsr_slave_0 left promiscuous mode [ 497.837286][ T46] device hsr_slave_1 left promiscuous mode [ 497.893851][ T46] device veth1_macvtap left promiscuous mode [ 497.903987][ T46] device veth0_macvtap left promiscuous mode [ 497.922625][ T46] device veth1_vlan left promiscuous mode [ 497.929294][ T46] device veth0_vlan left promiscuous mode [ 498.320234][T15002] usb usb8: usbfs: process 15002 (syz.1.3253) did not claim interface 0 before use [ 499.378077][ T46] bond10 (unregistering): Released all slaves [ 499.545399][ T46] bond9 (unregistering): Released all slaves [ 499.697180][ T46] bond8 (unregistering): Released all slaves [ 499.816518][ T46] bond7 (unregistering): Released all slaves [ 499.926956][ T46] bond6 (unregistering): Released all slaves [ 500.046734][ T46] bond5 (unregistering): Released all slaves [ 500.171795][ T46] bond4 (unregistering): Released all slaves [ 500.284262][ T46] bond3 (unregistering): Released all slaves [ 500.392651][ T46] bond2 (unregistering): Released all slaves [ 500.501525][ T46] bond1 (unregistering): Released all slaves [ 501.266575][ T46] bond0 (unregistering): Released all slaves [ 501.357316][T14807] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 501.381146][T14807] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 501.398729][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.405122][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.430993][T14807] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 501.522839][T14807] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 501.565161][T15008] tipc: Enabling of bearer rejected, failed to enable media [ 501.586618][T15008] device syzkaller0 entered promiscuous mode [ 501.828338][T15021] device syzkaller0 entered promiscuous mode [ 501.943028][T14807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.003661][T15026] binder: 15025:15026 ioctl c0306201 0 returned -14 [ 502.033601][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 502.051516][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 502.076721][T14807] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.162908][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 502.217668][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 502.237250][T12528] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.244436][T12528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.293601][T15032] binder: 15025:15032 ioctl c0306201 2000000001c0 returned -14 [ 502.416891][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 502.429307][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 502.448869][T12528] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.456072][T12528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.471041][T12528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 502.915663][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 502.949302][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 503.000661][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 503.027690][T15046] xt_hashlimit: invalid interval [ 503.033910][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 503.067924][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 503.100036][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 503.122182][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 503.163908][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 503.186634][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 503.230752][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 503.245328][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 503.301316][T14807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 503.310550][T15043] process '/file0' started with executable stack [ 504.951249][T15081] tipc: Enabling of bearer rejected, failed to enable media [ 506.709104][T15098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3275'. [ 507.282525][T15098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3275'. [ 507.296249][T14807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.325128][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 507.333088][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 507.731307][T15132] binder: 15130:15132 ioctl c0306201 0 returned -14 [ 507.755698][T15133] binder: 15131:15133 ioctl c0306201 0 returned -14 [ 508.051752][T15138] binder: 15130:15138 ioctl c0306201 2000000004c0 returned -14 [ 508.060875][T15138] binder: 15130:15138 ioctl c0306201 2000000001c0 returned -14 [ 508.328535][T15140] binder: 15131:15140 ioctl c0306201 2000000001c0 returned -14 [ 513.803504][ T26] audit: type=1326 audit(1771693959.996:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15159 comm="syz.0.3288" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcae6b9c629 code=0x0 [ 513.876669][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 514.611748][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 514.866716][T15169] tipc: Enabling of bearer rejected, failed to enable media [ 514.926253][T15171] device syzkaller0 entered promiscuous mode [ 515.064983][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 515.083021][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 515.111978][T14807] device veth0_vlan entered promiscuous mode [ 515.155728][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 515.176998][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 515.227295][T14807] device veth1_vlan entered promiscuous mode [ 515.301138][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 515.317470][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 515.326478][T15197] binder: 15196:15197 ioctl c0306201 0 returned -14 [ 515.353968][T14807] device veth0_macvtap entered promiscuous mode [ 515.430516][T14807] device veth1_macvtap entered promiscuous mode [ 515.459908][T14807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.499141][T14807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.543370][T14807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.555975][T14807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.565903][T14807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.644727][T15202] binder: 15196:15202 ioctl c0306201 2000000004c0 returned -14 [ 515.653833][T15202] binder: 15196:15202 ioctl c0306201 2000000001c0 returned -14 [ 515.677966][T14807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.914555][T14807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.155615][T14807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.236128][T14807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.266931][T14807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.278120][T14807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.288060][T14807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.304001][T14807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.343440][T14807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.374491][T14807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.394193][T14807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.419683][T15214] binder: 15212:15214 ioctl c0306201 0 returned -14 [ 516.443347][T14807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.471982][T14807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.639666][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 516.649029][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 516.652457][T15223] overlayfs: failed to clone upperpath [ 516.678943][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 516.744311][T15229] binder: 15212:15229 ioctl c0306201 2000000004c0 returned -14 [ 516.795676][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 517.343842][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 517.825194][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 517.856954][T14807] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.890077][T14807] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.914145][T14807] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.933096][T14807] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.974860][T15227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3303'. [ 517.989998][T15230] tipc: Enabling of bearer rejected, failed to enable media [ 518.221342][ T4335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.238861][ T4335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.263455][ T4674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.278291][ T4674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.295485][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 518.326199][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 518.913417][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 519.179533][T15282] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3319'. [ 519.579112][T15295] tipc: Enabling of bearer rejected, failed to enable media [ 519.633664][T15300] device syzkaller0 entered promiscuous mode [ 519.932609][T15316] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3335'. [ 520.548137][ T26] audit: type=1326 audit(1771693966.746:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15304 comm="syz.0.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae6b9c629 code=0x7fc00000 [ 520.808041][ T26] audit: type=1326 audit(1771693966.776:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15304 comm="syz.0.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcae6b9c629 code=0x7fc00000 [ 521.158227][ T26] audit: type=1326 audit(1771693966.776:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15304 comm="syz.0.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae6b9c629 code=0x7fc00000 [ 521.398555][ T26] audit: type=1326 audit(1771693966.776:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15304 comm="syz.0.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae6b9c629 code=0x7fc00000 [ 521.451242][ T26] audit: type=1326 audit(1771693966.776:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15304 comm="syz.0.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae6b9c629 code=0x7fc00000 [ 521.493404][ T26] audit: type=1326 audit(1771693966.776:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15304 comm="syz.0.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae6b9c629 code=0x7fc00000 [ 521.532264][ T26] audit: type=1326 audit(1771693966.776:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15304 comm="syz.0.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae6b9c629 code=0x7fc00000 [ 521.556741][ T26] audit: type=1326 audit(1771693966.776:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15304 comm="syz.0.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae6b9c629 code=0x7fc00000 [ 521.563285][T13284] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 521.593831][ T26] audit: type=1326 audit(1771693966.776:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15304 comm="syz.0.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae6b9c629 code=0x7fc00000 [ 521.660950][ T26] audit: type=1326 audit(1771693966.776:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15304 comm="syz.0.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae6b9c629 code=0x7fc00000 [ 521.804886][T13284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 521.824048][T13284] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 521.833901][ T4779] [ 521.836242][ T4779] ============================================ [ 521.842389][ T4779] WARNING: possible recursive locking detected [ 521.848549][ T4779] syzkaller #0 Not tainted [ 521.852964][ T4779] -------------------------------------------- [ 521.859120][ T4779] kworker/u4:10/4779 is trying to acquire lock: [ 521.863053][T15348] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3350'. [ 521.865343][ T4779] ffff88807a64c9e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0x15a/0x550 [ 521.865404][ T4779] [ 521.865404][ T4779] but task is already holding lock: [ 521.865408][ T4779] ffff88807a64d1e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0xb7/0x550 [ 521.865443][ T4779] [ 521.865443][ T4779] other info that might help us debug this: [ 521.865448][ T4779] Possible unsafe locking scenario: [ 521.865448][ T4779] [ 521.865453][ T4779] CPU0 [ 521.865456][ T4779] ---- [ 521.865459][ T4779] lock(rlock-AF_UNIX); [ 521.865470][ T4779] lock(rlock-AF_UNIX); [ 521.865480][ T4779] [ 521.865480][ T4779] *** DEADLOCK *** [ 521.865480][ T4779] [ 521.865484][ T4779] May be due to missing lock nesting notation [ 521.865484][ T4779] [ 521.865489][ T4779] 4 locks held by kworker/u4:10/4779: [ 521.865498][ T4779] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 521.865537][ T4779] #1: ffffc90007ac7d00 (unix_gc_work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 521.865573][ T4779] #2: ffffffff8de46b38 (unix_gc_lock){+.+.}-{2:2}, at: __unix_gc+0xc4/0x19b0 [ 521.865614][ T4779] #3: ffff88807a64d1e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0xb7/0x550 [ 521.865654][ T4779] [ 521.865654][ T4779] stack backtrace: [ 521.865669][ T4779] CPU: 1 PID: 4779 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 521.865685][ T4779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 521.865694][ T4779] Workqueue: events_unbound __unix_gc [ 521.865715][ T4779] Call Trace: [ 521.865723][ T4779] [ 521.865729][ T4779] dump_stack_lvl+0x188/0x24e [ 521.865752][ T4779] ? show_regs_print_info+0x12/0x12 [ 521.865772][ T4779] ? load_image+0x400/0x400 [ 521.865791][ T4779] __lock_acquire+0x123e/0x7d10 [ 521.865811][ T4779] ? lockdep_lock+0x1f0/0x1f0 [ 521.865837][ T4779] ? verify_lock_unused+0x140/0x140 [ 521.865863][ T4779] ? lockdep_unlock+0x142/0x2e0 [ 521.865881][ T4779] ? lockdep_lock+0x1f0/0x1f0 [ 521.865900][ T4779] lock_acquire+0x1bb/0x4a0 [ 521.865919][ T4779] ? unix_collect_skb+0x15a/0x550 [ 521.865940][ T4779] ? read_lock_is_recursive+0x10/0x10 [ 521.865960][ T4779] ? do_raw_spin_lock+0x128/0x2f0 [ 521.865975][ T4779] ? __rwlock_init+0x140/0x140 [ 521.865991][ T4779] _raw_spin_lock+0x2a/0x40 [ 521.866006][ T4779] ? unix_collect_skb+0x15a/0x550 [ 521.866023][ T4779] unix_collect_skb+0x15a/0x550 [ 521.866044][ T4779] __unix_gc+0x1107/0x19b0 [ 521.866065][ T4779] ? wait_for_unix_gc+0x190/0x190 [ 521.866100][ T4779] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 521.866124][ T4779] ? _raw_spin_unlock_irq+0x1f/0x40 [ 521.866140][ T4779] ? process_one_work+0x7b0/0x1160 [ 521.866154][ T4779] process_one_work+0x8a2/0x1160 [ 521.866175][ T4779] ? worker_detach_from_pool+0x240/0x240 [ 521.866195][ T4779] ? _raw_spin_lock_irq+0xb7/0xf0 [ 521.866209][ T4779] ? _raw_spin_lock_irqsave+0x100/0x100 [ 521.866224][ T4779] ? kthread_data+0x4b/0xc0 [ 521.866247][ T4779] worker_thread+0xaa2/0x1270 [ 521.866273][ T4779] kthread+0x29d/0x330 [ 521.866286][ T4779] ? worker_clr_flags+0x1a0/0x1a0 [ 521.866302][ T4779] ? kthread_blkcg+0xd0/0xd0 [ 521.866316][ T4779] ret_from_fork+0x1f/0x30 [ 521.866340][ T4779] [ 521.873100][T13284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.910745][T15340] tipc: Enabling of bearer rejected, failed to enable media [ 521.940705][T13284] usb 4-1: config 0 descriptor?? [ 521.952880][T15340] device syzkaller0 entered promiscuous mode [ 521.958582][T15321] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 522.627298][T13284] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 522.634444][T13284] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 522.641243][T13284] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 522.649165][T13284] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 522.656023][T13284] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 522.664209][T13284] elan 0003:04F3:0755.0009: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 522.844302][ T14] usb 4-1: USB disconnect, device number 15