last executing test programs: 15m12.368660906s ago: executing program 3 (id=169): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) 15m11.960983898s ago: executing program 3 (id=172): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r5, 0x303, 0x70bd29, 0x10000000, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x4) 15m1.703413709s ago: executing program 3 (id=183): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x2669f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f00000001c0)=0xe927) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) write$binfmt_misc(r3, &(0x7f0000000240)='}', 0x61) sendto$inet(r3, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) 14m59.424989019s ago: executing program 3 (id=187): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r0 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) 14m58.093576723s ago: executing program 3 (id=189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x40000) 14m56.657744613s ago: executing program 3 (id=191): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r5, 0x303, 0x70bd29, 0x10000000, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x4) 14m37.477556112s ago: executing program 32 (id=191): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r5, 0x303, 0x70bd29, 0x10000000, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x4) 13m28.787688993s ago: executing program 1 (id=291): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x2669f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f00000001c0)=0xe927) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) write$binfmt_misc(r3, &(0x7f0000000240)='}', 0x61) sendto$inet(r3, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) 13m27.399594228s ago: executing program 1 (id=294): socket$nl_route(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x2, 0x82002) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x80000001, 0x0, 0x1000001000, 0x80000000009}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x4, 0xf, 0xf4e0, 0x2}, 0x0, 0x0) 13m26.100590167s ago: executing program 1 (id=297): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 13m24.784477734s ago: executing program 1 (id=299): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x6, 0x3b, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000600)={&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffc, r0}, 0x38) 13m24.738084308s ago: executing program 1 (id=300): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x1000000, 0x0, 0x1, 0x0, &(0x7f0000000280)="f8"}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 13m23.690162397s ago: executing program 1 (id=302): socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b70500000000000061104e00000000000400"/29, @ANYRESOCT=0x0], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000080), 0x10, 0xffffffffffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getuid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = dup(0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/vmallocinfo\x00', 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a801, 0x0) sendfile(r4, r3, 0x0, 0xfffffffc) 13m6.89330903s ago: executing program 33 (id=302): socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b70500000000000061104e00000000000400"/29, @ANYRESOCT=0x0], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000080), 0x10, 0xffffffffffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getuid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = dup(0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/vmallocinfo\x00', 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a801, 0x0) sendfile(r4, r3, 0x0, 0xfffffffc) 18.633368908s ago: executing program 0 (id=1284): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write(r1, &(0x7f0000000100)="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", 0xff) 12.561675506s ago: executing program 0 (id=1290): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000100)={0x0, 0x4, 0x2014, 0x1}) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000020000000000000002200000950000000000000085100000ffffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000170c000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000002c0)) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r3, r4, 0x0) syz_clone(0x81400, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x2000000, 0x0, 0x1}]) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) 12.553733738s ago: executing program 2 (id=1291): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000001c40), 0x1, 0x2) ioctl$VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000001c80)=@multiplanar_mmap={0x4d, 0xd, 0x4, 0xe000, 0x7, {}, {0x5, 0x1, 0x1, 0xd6, 0x5, 0x81, "36053797"}, 0x6, 0x1, {0x0}, 0x7f85}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0x0, &(0x7f00000001c0)={0xfc3, 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_BYTES={0xc}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x4001) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r8, 0x1, &(0x7f00000002c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x8, r2, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x1}]) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 10.481810611s ago: executing program 2 (id=1292): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) writev(r0, 0x0, 0x0) 9.976438822s ago: executing program 2 (id=1294): r0 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(r0, &(0x7f0000000000)='net/ip_mr_cache\x00') r1 = socket$inet(0x2, 0x1, 0x7fffffff) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000002000010000000000000000001a000000d35c2b1dadad9c1008245e24040016000000000000000000490fe2c75cb9d175298e4ec2f83e6a11d2c15f952b923926408004040a1f2b339093e3071d17386b393ccc62d311db943290e0aa4ceb25c9bdc3"], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 9.871509373s ago: executing program 0 (id=1296): r0 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000100)=@nullb, 0x0, &(0x7f0000000300)='gfs2\x00', 0x5, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x32, 0x3, 0x0, 0x2, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in6=@empty, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x42000) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r7, r5, 0x0) pwritev2(r0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) syz_open_procfs(0x0, &(0x7f0000000ec0)='attr/current\x00') 8.453335947s ago: executing program 0 (id=1297): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, 0x0, 0xed0290c774ebd675) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, 0x0, 0x0) 7.393049515s ago: executing program 4 (id=1298): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) r1 = epoll_create(0xff9) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1834c2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002380)=ANY=[@ANYRESDEC=0x0, @ANYRES32], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) chdir(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2400c080) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2, 0x2000000}) 7.356642403s ago: executing program 2 (id=1299): syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8847000004000000000001aa84bc00001400f9a572af0bb743a0053a682d4f65dff222a5f4ab8ce8731b46f6990a729900"], 0x0) syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0x29d4, 0x10100}, &(0x7f0000000100), &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) syz_open_dev$usbmon(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x20380, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001080)={0xf, {"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", 0x1000}}, 0x1006) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000040)={0x1, 0x0, [{0x40000001, 0x80000001, 0x2, 0x7fffffff, 0x2, 0x0, 0x6}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = gettid() rt_sigqueueinfo(r4, 0x6, &(0x7f0000000080)={0x13, 0x5, 0x28}) prctl$PR_SCHED_CORE(0x3e, 0x0, r4, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x4000084) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000080)=0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x2b, 'cpuset'}]}, 0x8) writev(r0, &(0x7f0000000200)=[{&(0x7f00000004c0)="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", 0x130}], 0x1) 6.751513468s ago: executing program 4 (id=1300): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xb, 0x8, 0x2, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) socket$packet(0x11, 0x3, 0x300) 6.046309718s ago: executing program 4 (id=1301): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000100)='./bus\x00', 0x262) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000080)=@echo=0xffffffcd) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mlockall(0x7) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000540)={0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="20020001000000214c05794409730f3666917f5aa4f034d4be3029a279f14eb6e369243044f8e633b9bdcb7a9f7ed1ae700307d6cf792b0853803a1401e6061169bd250875aaf54eb771f1e12036c5ea0486c94be1dd780f62298c8bc0a6e42f4776892032b41b588ec06f825fd85f927f43fa768d211d3afcccc3c4e1f9cc76709be75566201bd6936ee6d14d7b6dbd5e27cf32"], &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5081, 0x9, 0x1, {0x22, 0x4c1}}}}, &(0x7f0000000800)={0x2c, 0x0, &(0x7f0000000640)={0x0, 0xa, 0x1}, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x56, "f482488ca6d48eb7dd021774b2659ea209d35c47961ade494da3d78399b81c1e713538b3caf9fb5f37467f41cbe9568cfd203a01f3a0e724f94331106567b95b08845cd8f72f1bedb05197baf29591beab7a01efa311"}, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x40) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) 4.128633156s ago: executing program 2 (id=1302): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000100)={0x0, 0x4, 0x2014, 0x1}) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000002c0)) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) 3.572530233s ago: executing program 4 (id=1303): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405668, &(0x7f0000000080)={0x0, 0x0, 0x3, "271500007a0000006451b3f79f985d1d00"}) 3.2031278s ago: executing program 0 (id=1304): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000180)={0x2020}, 0x143b) 2.688368113s ago: executing program 4 (id=1305): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES16, @ANYBLOB="0000000000000000b7030000000000008500000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000580)=@getsadinfo={0x14, 0x23, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x4008044) socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r6 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000540), 0x0, 0x1, 0x0, 0x0, r7}) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) 1.592150266s ago: executing program 2 (id=1306): r0 = syz_open_dev$video4linux(0x0, 0x7fffffffffffffde, 0x161041) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000100)={0x0, 0x4, 0x2014, 0x1}) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000020000000000000002200000950000000000000085100000ffffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000170c000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000002c0)) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) 1.211697784s ago: executing program 0 (id=1307): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, 0x0, 0x5005) socket$netlink(0x10, 0x3, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) pselect6(0x40, &(0x7f0000000280)={0x5, 0x1ff, 0xfffffffffffffffc, 0xc, 0x0, 0x1, 0x6, 0x7fffffff}, &(0x7f0000000300)={0x4, 0x1, 0x8, 0x80000000, 0x8, 0x6, 0x80000001, 0x7}, &(0x7f0000000340)={0xd2, 0x0, 0x500000000, 0x0, 0x5, 0xffff, 0x5, 0x1}, &(0x7f00000003c0), &(0x7f0000000440)={&(0x7f0000000400), 0x8}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) lseek(0xffffffffffffffff, 0x289e0cb5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 0s ago: executing program 4 (id=1308): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000000000000000"], 0x24, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x50, 0x1, 0x0, 0x8ee}, {0x20, 0x0, 0x2, 0x8}, {0x6, 0xfc, 0x0, 0x4}]}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xfdef) kernel console output (not intermixed with test programs): 40][ T37] vhci_hcd: disconnect device [ 553.032191][ T5911] usb usb34-port1: attempt power cycle [ 554.645693][ T8075] hsr_slave_0: entered promiscuous mode [ 554.649472][ T8075] hsr_slave_1: entered promiscuous mode [ 554.704826][ T8075] debugfs: 'hsr0' already exists in 'hsr' [ 554.704853][ T8075] Cannot create hsr debugfs directory [ 554.885008][ T8263] netlink: 44 bytes leftover after parsing attributes in process `syz.2.569'. [ 555.019628][ T5911] usb usb34-port1: unable to enumerate USB device [ 555.500212][ T69] hsr_slave_0: left promiscuous mode [ 555.536712][ T69] hsr_slave_1: left promiscuous mode [ 555.537903][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.720756][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.796206][ T8271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 555.806903][ T8271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 555.808931][ T8271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 555.810350][ T8271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 555.811685][ T8271] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 557.914464][ T5156] Bluetooth: hci0: command tx timeout [ 559.994797][ T5156] Bluetooth: hci0: command tx timeout [ 562.106390][ T5156] Bluetooth: hci0: command tx timeout [ 564.870391][ T5156] Bluetooth: hci0: command tx timeout [ 565.265329][ T69] team0 (unregistering): Port device team_slave_1 removed [ 565.650412][ T69] team0 (unregistering): Port device team_slave_0 removed [ 566.085157][ T8328] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 566.085178][ T8328] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 566.176638][ T8328] vhci_hcd vhci_hcd.0: Device attached [ 566.564495][ T989] usb 42-1: SetAddress Request (2) to port 0 [ 566.564593][ T989] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 566.678502][ T8329] vhci_hcd: connection reset by peer [ 566.729977][ T3550] vhci_hcd: stop threads [ 566.729995][ T3550] vhci_hcd: release socket [ 566.731886][ T3550] vhci_hcd: disconnect device [ 570.095199][ T8345] netlink: 44 bytes leftover after parsing attributes in process `syz.2.587'. [ 571.596650][ T989] usb 42-1: device descriptor read/8, error -110 [ 571.990727][ T989] usb usb42-port1: attempt power cycle [ 572.906013][ T989] usb usb42-port1: unable to enumerate USB device [ 573.285485][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.285569][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.464061][ T8374] fuse: Unknown parameter '0x0000000000000005' [ 574.992545][ T8379] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 575.229421][ T8075] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 575.416179][ T8075] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 575.572774][ T8075] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 577.089327][ T8075] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 578.116167][ T8398] netlink: 44 bytes leftover after parsing attributes in process `syz.0.599'. [ 580.499564][ T8268] chnl_net:caif_netlink_parms(): no params data found [ 580.804754][ T8426] fuse: Unknown parameter '0x0000000000000005' [ 583.614484][ T8446] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 583.614514][ T8446] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 583.614648][ T8446] vhci_hcd vhci_hcd.0: Device attached [ 583.701373][ T8447] vhci_hcd: connection closed [ 583.743841][ T3550] vhci_hcd: stop threads [ 583.743864][ T3550] vhci_hcd: release socket [ 583.743899][ T3550] vhci_hcd: disconnect device [ 585.188449][ T8271] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 585.212482][ T8271] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 585.213744][ T8271] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 585.238927][ T8271] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 585.253180][ T8271] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 585.458022][ T69] bridge_slave_1: left allmulticast mode [ 585.458057][ T69] bridge_slave_1: left promiscuous mode [ 585.458335][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.728330][ T69] bridge_slave_0: left allmulticast mode [ 586.728367][ T69] bridge_slave_0: left promiscuous mode [ 586.728640][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.462003][ T5156] Bluetooth: hci2: command tx timeout [ 587.481043][ T8474] netlink: 44 bytes leftover after parsing attributes in process `syz.2.610'. [ 590.512018][ T8271] Bluetooth: hci2: command tx timeout [ 591.300458][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.455402][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.137409][ T69] bond0 (unregistering): Released all slaves [ 592.275607][ T8268] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.275752][ T8268] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.276017][ T8268] bridge_slave_0: entered allmulticast mode [ 592.316227][ T8496] fuse: Unknown parameter 'fd0x0000000000000005' [ 592.316459][ T8268] bridge_slave_0: entered promiscuous mode [ 592.502973][ T8503] netlink: 40 bytes leftover after parsing attributes in process `syz.2.618'. [ 592.582628][ T8271] Bluetooth: hci2: command tx timeout [ 594.645463][ T8271] Bluetooth: hci2: command tx timeout [ 599.916767][ T8268] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.916927][ T8268] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.917182][ T8268] bridge_slave_1: entered allmulticast mode [ 599.920066][ T8268] bridge_slave_1: entered promiscuous mode [ 600.231228][ T69] hsr_slave_0: left promiscuous mode [ 601.020494][ T69] hsr_slave_1: left promiscuous mode [ 601.021535][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.109760][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.100704][ T69] team0 (unregistering): Port device team_slave_1 removed [ 604.190436][ T8542] fuse: Unknown parameter 'fd0x0000000000000005' [ 605.562377][ T8547] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 605.784994][ T69] team0 (unregistering): Port device team_slave_0 removed [ 605.879701][ T8552] netlink: 40 bytes leftover after parsing attributes in process `syz.2.628'. [ 607.793378][ T8566] netlink: 20 bytes leftover after parsing attributes in process `syz.4.631'. [ 610.603299][ T8581] fuse: Unknown parameter 'fd0x0000000000000005' [ 612.010395][ T8268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.056944][ T8268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.380320][ T8600] netlink: 40 bytes leftover after parsing attributes in process `syz.0.639'. [ 614.149543][ T8463] chnl_net:caif_netlink_parms(): no params data found [ 620.079427][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 620.100196][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 620.101797][ T8648] netlink: 40 bytes leftover after parsing attributes in process `syz.0.650'. [ 620.103059][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 620.104939][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 621.111038][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 621.189391][ T8650] ceph: No mds server is up or the cluster is laggy [ 621.193780][ T6785] libceph: connect (1)[c::]:6789 error -101 [ 621.194015][ T6785] libceph: mon0 (1)[c::]:6789 connect error [ 623.364453][ T5156] Bluetooth: hci0: command tx timeout [ 623.452001][ T8675] program syz.4.653 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 626.454327][ T5156] Bluetooth: hci0: command tx timeout [ 626.671162][ T8697] netlink: 'syz.2.661': attribute type 3 has an invalid length. [ 626.671185][ T8697] netlink: 20 bytes leftover after parsing attributes in process `syz.2.661'. [ 627.865120][ T8707] fuse: Unknown parameter 'grou00000000000000000000' [ 628.476026][ T8271] Bluetooth: hci0: command tx timeout [ 630.554431][ T8271] Bluetooth: hci0: command tx timeout [ 630.900336][ T8732] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 630.900372][ T8732] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 630.900448][ T8732] vhci_hcd vhci_hcd.0: Device attached [ 631.282458][ T8463] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.282615][ T8463] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.282870][ T8463] bridge_slave_0: entered allmulticast mode [ 631.317260][ T8463] bridge_slave_0: entered promiscuous mode [ 631.524350][ T6827] usb 42-1: SetAddress Request (6) to port 0 [ 631.524438][ T6827] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 631.566644][ T8463] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.566811][ T8463] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.567076][ T8463] bridge_slave_1: entered allmulticast mode [ 631.657166][ T8463] bridge_slave_1: entered promiscuous mode [ 631.725127][ T8737] vhci_hcd: connection reset by peer [ 631.734687][ T5990] vhci_hcd: stop threads [ 631.734709][ T5990] vhci_hcd: release socket [ 631.734792][ T5990] vhci_hcd: disconnect device [ 632.307327][ T8751] program syz.0.670 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 636.235096][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 636.235175][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 636.557381][ T6827] usb 42-1: device descriptor read/8, error -110 [ 636.956772][ T6827] usb usb42-port1: attempt power cycle [ 637.585021][ T8463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.180520][ T8463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.565494][ T6827] usb usb42-port1: unable to enumerate USB device [ 639.471534][ T8463] team0: Port device team_slave_0 added [ 639.492775][ T8463] team0: Port device team_slave_1 added [ 640.150770][ T8775] kvm: kvm [8774]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8c00008e73 [ 640.150820][ T8775] kvm: kvm [8774]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x8c0000ce73 [ 640.157103][ T8775] kvm_intel: kvm [8774]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xc900009a49 [ 640.158748][ T8775] kvm_intel: kvm [8774]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x410000b442 [ 642.114692][ T1159] bridge_slave_1: left allmulticast mode [ 642.114728][ T1159] bridge_slave_1: left promiscuous mode [ 642.115012][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.245441][ T8799] random: crng reseeded on system resumption [ 642.956776][ T1159] bridge_slave_0: left allmulticast mode [ 642.956812][ T1159] bridge_slave_0: left promiscuous mode [ 642.975128][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.461243][ T5156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 643.472730][ T5156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 643.473991][ T5156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 643.475957][ T5156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 643.477218][ T5156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 644.613722][ T6138] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 644.684492][ T6138] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 645.889970][ T5156] Bluetooth: hci5: command tx timeout [ 647.914259][ T8271] Bluetooth: hci5: command tx timeout [ 649.722816][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.934987][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.994418][ T8271] Bluetooth: hci5: command tx timeout [ 650.001332][ T1159] bond0 (unregistering): Released all slaves [ 653.254792][ T8271] Bluetooth: hci5: command tx timeout [ 656.174693][ T8641] chnl_net:caif_netlink_parms(): no params data found [ 656.691343][ T6785] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 656.718187][ T6785] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 657.020867][ T1159] hsr_slave_0: left promiscuous mode [ 657.076599][ T1159] hsr_slave_1: left promiscuous mode [ 657.077568][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.429056][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.103819][ T8897] netlink: 44 bytes leftover after parsing attributes in process `syz.0.699'. [ 666.666435][ T6827] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 666.685881][ T6827] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 666.884666][ T8932] random: crng reseeded on system resumption [ 669.435401][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 670.685155][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 671.428266][ T8963] netlink: 'syz.0.715': attribute type 3 has an invalid length. [ 671.428290][ T8963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.715'. [ 677.708471][ T6138] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 677.758664][ T6138] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 679.887946][ T8808] chnl_net:caif_netlink_parms(): no params data found [ 679.908786][ T8271] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 679.927752][ T8271] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 679.931619][ T8271] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 679.933633][ T8271] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 679.938693][ T8271] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 682.380351][ T5156] Bluetooth: hci2: command tx timeout [ 683.839422][ T8808] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.839566][ T8808] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.839758][ T8808] bridge_slave_0: entered allmulticast mode [ 683.842724][ T8808] bridge_slave_0: entered promiscuous mode [ 684.029865][ T8808] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.030025][ T8808] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.030275][ T8808] bridge_slave_1: entered allmulticast mode [ 684.084976][ T8808] bridge_slave_1: entered promiscuous mode [ 684.394338][ T5156] Bluetooth: hci2: command tx timeout [ 686.136788][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 686.289788][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 686.295004][ T31] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 686.295040][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.322659][ T31] usb 3-1: config 0 descriptor?? [ 686.431426][ T8808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.476666][ T5156] Bluetooth: hci2: command tx timeout [ 686.506727][ T8808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.175301][ T8808] team0: Port device team_slave_0 added [ 687.200097][ T8808] team0: Port device team_slave_1 added [ 687.549618][ T8808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.549636][ T8808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.549665][ T8808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.711114][ T8808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.712244][ T8808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.712275][ T8808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.862498][ T1159] bridge_slave_1: left allmulticast mode [ 687.862535][ T1159] bridge_slave_1: left promiscuous mode [ 687.862924][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.958966][ T1159] bridge_slave_0: left allmulticast mode [ 687.959002][ T1159] bridge_slave_0: left promiscuous mode [ 687.959372][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.062259][ T1159] bridge_slave_1: left allmulticast mode [ 688.062297][ T1159] bridge_slave_1: left promiscuous mode [ 688.062568][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.167489][ T1159] bridge_slave_0: left allmulticast mode [ 688.167525][ T1159] bridge_slave_0: left promiscuous mode [ 688.167786][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.537064][ T6785] usb 3-1: USB disconnect, device number 7 [ 688.561307][ T5156] Bluetooth: hci2: command tx timeout [ 690.022776][ T1159] bond0 (unregistering): Released all slaves [ 691.729153][ T9098] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 692.044965][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.915612][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 693.911917][ T1159] bond0 (unregistering): Released all slaves [ 700.990003][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 700.990088][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 702.385243][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.545183][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.766148][ T9125] netlink: 32 bytes leftover after parsing attributes in process `syz.2.747'. [ 702.820488][ T1159] bond0 (unregistering): Released all slaves [ 704.685993][ T9004] chnl_net:caif_netlink_parms(): no params data found [ 705.097772][ T8271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 705.119013][ T8271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 705.121374][ T8271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 705.122757][ T8271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 705.124922][ T8271] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 707.323310][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 707.471133][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 707.471163][ T10] usb 5-1: config 0 has no interface number 0 [ 707.474392][ T10] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 707.474424][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.474446][ T10] usb 5-1: Product: syz [ 707.474461][ T10] usb 5-1: Manufacturer: syz [ 707.474477][ T10] usb 5-1: SerialNumber: syz [ 707.552400][ T10] usb 5-1: config 0 descriptor?? [ 708.612043][ T5156] Bluetooth: hci0: command tx timeout [ 708.620422][ T10] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 708.646702][ T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 708.647107][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 708.647167][ T10] usb 5-1: media controller created [ 708.766523][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 709.245747][ T10] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 709.372153][ T10] usb 5-1: USB disconnect, device number 9 [ 710.634642][ T5156] Bluetooth: hci0: command tx timeout [ 714.701992][ T9208] program syz.0.761 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 715.535618][ T5156] Bluetooth: hci0: command tx timeout [ 716.443101][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 716.469822][ T38] kauditd_printk_skb: 6 callbacks suppressed [ 716.469841][ T38] audit: type=1326 audit(1759074914.462:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9212 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 716.469896][ T38] audit: type=1326 audit(1759074914.462:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9212 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 716.984242][ T8923] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 717.028090][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 717.514228][ T8923] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 717.514257][ T8923] usb 3-1: config 0 has no interface number 0 [ 717.523897][ T8923] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 717.523924][ T8923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.523938][ T8923] usb 3-1: Product: syz [ 717.523948][ T8923] usb 3-1: Manufacturer: syz [ 717.523958][ T8923] usb 3-1: SerialNumber: syz [ 717.528971][ T8923] usb 3-1: config 0 descriptor?? [ 717.594824][ T5156] Bluetooth: hci0: command tx timeout [ 717.739508][ T8923] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 717.778706][ T8923] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 717.779110][ T8923] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 717.779161][ T8923] usb 3-1: media controller created [ 717.897003][ T8923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 718.211318][ T8923] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 718.404688][ T8923] usb 3-1: USB disconnect, device number 8 [ 719.985116][ T6138] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 720.416401][ T6138] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.416463][ T6138] usb 3-1: config 0 has no interfaces? [ 720.416596][ T6138] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 720.416656][ T6138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.684346][ T6138] usb 3-1: config 0 descriptor?? [ 721.043641][ T6785] usb 3-1: USB disconnect, device number 9 [ 722.534515][ T9004] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.534671][ T9004] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.534903][ T9004] bridge_slave_0: entered allmulticast mode [ 722.576581][ T9004] bridge_slave_0: entered promiscuous mode [ 722.618247][ T9004] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.618560][ T9004] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.618763][ T9004] bridge_slave_1: entered allmulticast mode [ 722.658753][ T9004] bridge_slave_1: entered promiscuous mode [ 722.914668][ C0] vkms_vblank_simulate: vblank timer overrun [ 723.321923][ C0] vkms_vblank_simulate: vblank timer overrun [ 723.970677][ C0] vkms_vblank_simulate: vblank timer overrun [ 724.485085][ C0] vkms_vblank_simulate: vblank timer overrun [ 726.730102][ T9004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 726.772026][ T9260] random: crng reseeded on system resumption [ 727.038441][ T9004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.816140][ T6138] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 729.896380][ T6138] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 730.131118][ T9004] team0: Port device team_slave_0 added [ 730.198453][ T9004] team0: Port device team_slave_1 added [ 730.786109][ T9004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 730.786127][ T9004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 730.786153][ T9004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 730.873631][ T9004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 730.873649][ T9004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 730.873679][ T9004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.659456][ T38] audit: type=1804 audit(1759074932.582:20): pid=9314 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.784" name="/newroot/208/bus/file0" dev="overlay" ino=1116 res=1 errno=0 [ 736.893182][ T9004] hsr_slave_0: entered promiscuous mode [ 736.950430][ T9004] hsr_slave_1: entered promiscuous mode [ 737.268363][ T9141] chnl_net:caif_netlink_parms(): no params data found [ 738.101787][ T9338] random: crng reseeded on system resumption [ 740.015451][ T8271] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 740.019460][ T8271] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 740.021011][ T8271] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 740.022772][ T8271] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 740.023653][ T8271] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 740.318016][ T9141] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.318231][ T9141] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.318482][ T9141] bridge_slave_0: entered allmulticast mode [ 740.322643][ T9141] bridge_slave_0: entered promiscuous mode [ 740.325456][ T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 740.408130][ T9141] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.408286][ T9141] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.408535][ T9141] bridge_slave_1: entered allmulticast mode [ 740.411553][ T9141] bridge_slave_1: entered promiscuous mode [ 740.516986][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 740.548810][ T31] usb 1-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 740.548841][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.737178][ T31] usb 1-1: config 0 descriptor?? [ 740.944737][ T9370] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 740.944758][ T9370] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 740.945083][ T9370] vhci_hcd vhci_hcd.0: Device attached [ 741.168003][ T9371] vhci_hcd: connection closed [ 741.203195][ T7187] vhci_hcd: stop threads [ 741.203215][ T7187] vhci_hcd: release socket [ 741.203292][ T7187] vhci_hcd: disconnect device [ 741.214304][ T31] usb 38-1: enqueue for inactive port 0 [ 741.409357][ T9141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.490161][ T9141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.717873][ T31] usb usb38-port1: attempt power cycle [ 741.970203][ T9141] team0: Port device team_slave_0 added [ 741.999749][ T9141] team0: Port device team_slave_1 added [ 742.001169][ T1159] bridge_slave_1: left allmulticast mode [ 742.001200][ T1159] bridge_slave_1: left promiscuous mode [ 742.001534][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.065393][ T1159] bridge_slave_0: left allmulticast mode [ 742.065418][ T1159] bridge_slave_0: left promiscuous mode [ 742.065617][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.074577][ T8271] Bluetooth: hci2: command tx timeout [ 742.139542][ T1159] bridge_slave_1: left allmulticast mode [ 742.142334][ T1159] bridge_slave_1: left promiscuous mode [ 742.142531][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.199317][ T1159] bridge_slave_0: left allmulticast mode [ 742.199342][ T1159] bridge_slave_0: left promiscuous mode [ 742.199531][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.306280][ T31] usb usb38-port1: unable to enumerate USB device [ 742.787055][ T44] usb 1-1: USB disconnect, device number 9 [ 743.180178][ T44] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 743.201501][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.224772][ T44] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 743.418688][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.389886][ T1159] bond0 (unregistering): Released all slaves [ 744.577380][ T8271] Bluetooth: hci2: command tx timeout [ 745.397449][ T38] audit: type=1804 audit(1759074943.362:21): pid=9387 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.795" name="/newroot/206/bus/file0" dev="overlay" ino=1094 res=1 errno=0 [ 747.094618][ T8271] Bluetooth: hci2: command tx timeout [ 747.351704][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 747.634062][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.703958][ T8271] Bluetooth: hci2: command tx timeout [ 749.719195][ T1159] bond0 (unregistering): Released all slaves [ 753.224263][ T6011] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 753.445063][ T6011] usb 5-1: Using ep0 maxpacket: 8 [ 753.462865][ T6011] usb 5-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 753.462949][ T6011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.268463][ T6011] usb 5-1: config 0 descriptor?? [ 754.269876][ T9141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.269891][ T9141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.269920][ T9141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.648362][ T6011] usb 5-1: can't set config #0, error -71 [ 754.902461][ T9420] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 754.954790][ T6011] usb 5-1: USB disconnect, device number 10 [ 754.994544][ T9141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.994574][ T9141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.994621][ T9141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.970557][ T1159] hsr_slave_0: left promiscuous mode [ 757.466232][ T1159] hsr_slave_1: left promiscuous mode [ 757.467140][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.510925][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.584995][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 758.585071][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 762.268142][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.855052][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.031962][ T9457] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 764.820930][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 766.327287][ T44] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 766.494888][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 766.574503][ T44] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 766.574605][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.724982][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 766.843377][ T44] usb 3-1: config 0 descriptor?? [ 767.019419][ T5156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 767.036308][ T5156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 767.038249][ T5156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 767.039550][ T5156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 767.040425][ T5156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 768.137695][ T6785] usb 3-1: USB disconnect, device number 10 [ 768.485140][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 768.756618][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 769.126936][ T8271] Bluetooth: hci5: command tx timeout [ 769.338805][ T9482] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 769.338833][ T9482] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 769.338939][ T9482] vhci_hcd vhci_hcd.0: Device attached [ 770.647716][ T6827] usb 34-1: SetAddress Request (6) to port 0 [ 770.647802][ T6827] usb 34-1: new SuperSpeed USB device number 6 using vhci_hcd [ 770.769512][ T9488] vhci_hcd: connection reset by peer [ 770.824237][ T13] vhci_hcd: stop threads [ 770.824258][ T13] vhci_hcd: release socket [ 770.824346][ T13] vhci_hcd: disconnect device [ 771.591769][ T5156] Bluetooth: hci5: command tx timeout [ 773.675305][ T5156] Bluetooth: hci5: command tx timeout [ 773.884628][ T38] audit: type=1326 audit(2000000000.470:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9512 comm="syz.2.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075c3beec9 code=0x7ffc0000 [ 773.884684][ T38] audit: type=1326 audit(2000000000.480:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9512 comm="syz.2.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075c3beec9 code=0x7ffc0000 [ 773.886137][ T38] audit: type=1326 audit(2000000000.480:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9512 comm="syz.2.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f075c3beec9 code=0x7ffc0000 [ 773.886196][ T38] audit: type=1326 audit(2000000000.480:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9512 comm="syz.2.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075c3beec9 code=0x7ffc0000 [ 773.886242][ T38] audit: type=1326 audit(2000000000.480:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9512 comm="syz.2.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075c3beec9 code=0x7ffc0000 [ 773.903393][ T38] audit: type=1326 audit(2000000000.490:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9512 comm="syz.2.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f075c3beec9 code=0x7ffc0000 [ 774.054788][ T38] audit: type=1326 audit(2000000000.650:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9512 comm="syz.2.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075c3beec9 code=0x7ffc0000 [ 774.054846][ T38] audit: type=1326 audit(2000000000.650:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9512 comm="syz.2.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075c3beec9 code=0x7ffc0000 [ 774.124305][ T38] audit: type=1326 audit(2000000000.700:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9512 comm="syz.2.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f075c3beec9 code=0x7ffc0000 [ 774.124369][ T38] audit: type=1326 audit(2000000000.700:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9512 comm="syz.2.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075c3beec9 code=0x7ffc0000 [ 775.690913][ T6827] usb 34-1: device descriptor read/8, error -110 [ 775.754367][ T5156] Bluetooth: hci5: command tx timeout [ 776.086068][ T6827] usb usb34-port1: attempt power cycle [ 776.640243][ T9359] chnl_net:caif_netlink_parms(): no params data found [ 776.676639][ T6827] usb usb34-port1: unable to enumerate USB device [ 777.850806][ T9477] chnl_net:caif_netlink_parms(): no params data found [ 783.319993][ T9359] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.320141][ T9359] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.320360][ T9359] bridge_slave_0: entered allmulticast mode [ 783.331427][ T9359] bridge_slave_0: entered promiscuous mode [ 783.661527][ T9359] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.661677][ T9359] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.695173][ T9359] bridge_slave_1: entered allmulticast mode [ 783.719315][ T9359] bridge_slave_1: entered promiscuous mode [ 785.041114][ T38] kauditd_printk_skb: 6 callbacks suppressed [ 785.041175][ T38] audit: type=1804 audit(2000000011.620:38): pid=9593 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.832" name="/newroot/216/bus/file0" dev="overlay" ino=1155 res=1 errno=0 [ 791.551724][ T9359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.612274][ T9359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.663370][ T9477] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.663466][ T9477] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.663647][ T9477] bridge_slave_0: entered allmulticast mode [ 792.666723][ T9477] bridge_slave_0: entered promiscuous mode [ 794.026942][ T9626] netlink: 44 bytes leftover after parsing attributes in process `syz.4.841'. [ 794.086224][ T9477] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.086403][ T9477] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.086615][ T9477] bridge_slave_1: entered allmulticast mode [ 794.136156][ T9477] bridge_slave_1: entered promiscuous mode [ 794.851060][ T9359] team0: Port device team_slave_0 added [ 795.392106][ T9359] team0: Port device team_slave_1 added [ 795.392936][ T1159] bridge_slave_1: left allmulticast mode [ 795.392968][ T1159] bridge_slave_1: left promiscuous mode [ 795.393239][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.565736][ T1159] bridge_slave_0: left allmulticast mode [ 798.565769][ T1159] bridge_slave_0: left promiscuous mode [ 798.566044][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.391730][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.890743][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 800.560262][ T1159] bond0 (unregistering): Released all slaves [ 801.626798][ T9477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.912835][ T8271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 801.929861][ T8271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 801.931033][ T8271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 801.932620][ T8271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 801.933688][ T8271] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 802.180877][ T9477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.429309][ T9681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.854'. [ 802.429469][ T9681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.854'. [ 804.554353][ T8271] Bluetooth: hci0: command tx timeout [ 804.947229][ T9477] team0: Port device team_slave_0 added [ 804.947755][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 804.985045][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.875927][ T8271] Bluetooth: hci0: command tx timeout [ 808.979297][ T8271] Bluetooth: hci0: command tx timeout [ 811.688735][ T8271] Bluetooth: hci0: command tx timeout [ 811.693670][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 813.315985][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 813.377450][ T38] audit: type=1326 audit(2000000039.930:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9751 comm="syz.2.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075c3beec9 code=0x7ffc0000 [ 813.377489][ T38] audit: type=1326 audit(2000000039.930:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9751 comm="syz.2.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075c3beec9 code=0x7ffc0000 [ 813.377520][ T38] audit: type=1326 audit(2000000039.930:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9751 comm="syz.2.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f075c3beec9 code=0x7ffc0000 [ 813.377550][ T38] audit: type=1326 audit(2000000039.930:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9751 comm="syz.2.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075c3beec9 code=0x7ffc0000 [ 813.377581][ T38] audit: type=1326 audit(2000000039.930:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9751 comm="syz.2.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075c3beec9 code=0x7ffc0000 [ 813.377611][ T38] audit: type=1326 audit(2000000039.930:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9751 comm="syz.2.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f075c3beec9 code=0x7ffc0000 [ 813.377640][ T38] audit: type=1326 audit(2000000039.940:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9751 comm="syz.2.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075c3beec9 code=0x7ffc0000 [ 813.377677][ T38] audit: type=1326 audit(2000000039.940:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9751 comm="syz.2.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075c3beec9 code=0x7ffc0000 [ 813.377708][ T38] audit: type=1326 audit(2000000039.940:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9751 comm="syz.2.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f075c3beec9 code=0x7ffc0000 [ 813.377738][ T38] audit: type=1326 audit(2000000039.950:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9751 comm="syz.2.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075c3beec9 code=0x7ffc0000 [ 815.235782][ T9477] team0: Port device team_slave_1 added [ 818.484645][ T9477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.484665][ T9477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.484693][ T9477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.945144][ T9477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.945162][ T9477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.945191][ T9477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.042764][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 819.042836][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.646669][ T9790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.876'. [ 819.646702][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.876'. [ 820.717865][ T9673] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 820.804578][ T9673] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 821.058402][ T9477] hsr_slave_0: entered promiscuous mode [ 821.059866][ T9477] hsr_slave_1: entered promiscuous mode [ 822.769483][ T1159] bridge_slave_1: left allmulticast mode [ 822.769516][ T1159] bridge_slave_1: left promiscuous mode [ 822.774275][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.865290][ T1159] bridge_slave_0: left allmulticast mode [ 822.865322][ T1159] bridge_slave_0: left promiscuous mode [ 822.865525][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.048980][ T9820] input: syz1 as /devices/virtual/input/input18 [ 823.805301][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 824.052582][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 824.249065][ T1159] bond0 (unregistering): Released all slaves [ 825.072485][ T9829] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 825.072515][ T9829] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 825.214494][ T9829] vhci_hcd vhci_hcd.0: Device attached [ 825.577355][ T9673] usb 38-1: SetAddress Request (6) to port 0 [ 825.577441][ T9673] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 825.664811][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 826.124420][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 826.215741][ T9830] vhci_hcd: connection reset by peer [ 826.217830][ T1284] vhci_hcd: stop threads [ 826.217846][ T1284] vhci_hcd: release socket [ 826.217906][ T1284] vhci_hcd: disconnect device [ 830.396374][ T8271] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 830.403621][ T8271] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 830.411136][ T8271] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 830.421287][ T8271] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 830.465121][ T8271] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 830.716077][ T9673] usb 38-1: device descriptor read/8, error -110 [ 831.110996][ T9862] input: syz1 as /devices/virtual/input/input19 [ 831.588508][ T9673] usb usb38-port1: attempt power cycle [ 832.375913][ T9871] random: crng reseeded on system resumption [ 832.395847][ T9673] usb usb38-port1: unable to enumerate USB device [ 832.447413][ T9673] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 832.476178][ T9673] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 832.554380][ T5156] Bluetooth: hci2: command tx timeout [ 833.679138][ T9885] program syz.4.889 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 834.402435][ T9670] chnl_net:caif_netlink_parms(): no params data found [ 834.638839][ T5156] Bluetooth: hci2: command tx timeout [ 836.201015][ T9901] netlink: 44 bytes leftover after parsing attributes in process `syz.2.892'. [ 836.724316][ T5156] Bluetooth: hci2: command tx timeout [ 838.424386][ T9670] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.424546][ T9670] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.424815][ T9670] bridge_slave_0: entered allmulticast mode [ 838.427609][ T9670] bridge_slave_0: entered promiscuous mode [ 838.462948][ T9670] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.463096][ T9670] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.463309][ T9670] bridge_slave_1: entered allmulticast mode [ 838.492034][ T9670] bridge_slave_1: entered promiscuous mode [ 838.943277][ T5156] Bluetooth: hci2: command tx timeout [ 840.920134][ T9910] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 840.920158][ T9910] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 840.920218][ T9910] vhci_hcd vhci_hcd.0: Device attached [ 840.982015][ T9926] vhci_hcd: connection closed [ 840.982394][ T9108] vhci_hcd: stop threads [ 840.982411][ T9108] vhci_hcd: release socket [ 840.982444][ T9108] vhci_hcd: disconnect device [ 841.237280][ T9670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.260715][ T9670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 842.618253][ C1] vkms_vblank_simulate: vblank timer overrun [ 843.451722][ C1] vkms_vblank_simulate: vblank timer overrun [ 843.958291][ C1] vkms_vblank_simulate: vblank timer overrun [ 843.958620][ T9943] ceph: No mds server is up or the cluster is laggy [ 843.961156][ T6011] libceph: connect (1)[c::]:6789 error -101 [ 843.961373][ T6011] libceph: mon0 (1)[c::]:6789 connect error [ 844.257391][ C1] vkms_vblank_simulate: vblank timer overrun [ 844.340663][ T31] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 844.372089][ T31] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 844.774656][ C1] vkms_vblank_simulate: vblank timer overrun [ 845.054801][ C1] vkms_vblank_simulate: vblank timer overrun [ 845.615312][ C1] vkms_vblank_simulate: vblank timer overrun [ 845.866252][ C1] vkms_vblank_simulate: vblank timer overrun [ 845.883765][ T9670] team0: Port device team_slave_0 added [ 846.176428][ C1] vkms_vblank_simulate: vblank timer overrun [ 846.189874][ T9670] team0: Port device team_slave_1 added [ 846.464816][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'. [ 847.673438][ T37] bridge_slave_1: left allmulticast mode [ 847.673481][ T37] bridge_slave_1: left promiscuous mode [ 847.673749][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.861854][ T37] bridge_slave_0: left allmulticast mode [ 849.861880][ T37] bridge_slave_0: left promiscuous mode [ 849.862078][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.083355][ T9993] syz.2.906 (9993) used greatest stack depth: 17456 bytes left [ 852.330070][ C0] vkms_vblank_simulate: vblank timer overrun [ 853.416577][ C0] vkms_vblank_simulate: vblank timer overrun [ 853.849734][ C0] vkms_vblank_simulate: vblank timer overrun [ 854.289306][ C0] vkms_vblank_simulate: vblank timer overrun [ 854.437843][ T6827] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 854.443631][ T6827] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 854.485014][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 854.776969][ C0] vkms_vblank_simulate: vblank timer overrun [ 854.782506][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 855.024817][ C0] vkms_vblank_simulate: vblank timer overrun [ 855.057662][ C0] vkms_vblank_simulate: vblank timer overrun [ 855.214097][ C0] vkms_vblank_simulate: vblank timer overrun [ 856.236570][ T37] bond0 (unregistering): Released all slaves [ 856.437805][ C0] vkms_vblank_simulate: vblank timer overrun [ 856.510411][ T9670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.510430][ T9670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.510458][ T9670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.536484][ T9670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.536506][ T9670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.536540][ T9670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.747681][T10053] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 856.747708][T10053] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 856.748123][T10053] vhci_hcd vhci_hcd.0: Device attached [ 857.024277][ T31] usb 38-1: SetAddress Request (10) to port 0 [ 857.024364][ T31] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 857.147911][ T9670] hsr_slave_0: entered promiscuous mode [ 857.162836][ T9670] hsr_slave_1: entered promiscuous mode [ 857.185805][ T9670] debugfs: 'hsr0' already exists in 'hsr' [ 857.187132][ T9670] Cannot create hsr debugfs directory [ 857.554189][T10056] vhci_hcd: connection reset by peer [ 857.560652][ T1305] vhci_hcd: stop threads [ 857.560672][ T1305] vhci_hcd: release socket [ 857.560772][ T1305] vhci_hcd: disconnect device [ 857.598458][ T37] hsr_slave_0: left promiscuous mode [ 857.624333][ T37] hsr_slave_1: left promiscuous mode [ 857.625311][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 857.681610][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 857.742391][T10070] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 857.742413][T10070] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 857.742512][T10070] vhci_hcd vhci_hcd.0: Device attached [ 857.889942][T10071] vhci_hcd: connection closed [ 857.892058][ T7186] vhci_hcd: stop threads [ 857.892077][ T7186] vhci_hcd: release socket [ 857.892111][ T7186] vhci_hcd: disconnect device [ 860.505030][ T37] team0 (unregistering): Port device team_slave_1 removed [ 861.096046][ T37] team0 (unregistering): Port device team_slave_0 removed [ 861.696974][ T44] IPVS: starting estimator thread 0... [ 861.784578][T10117] IPVS: using max 6 ests per chain, 14400 per kthread [ 862.285006][ T31] usb 38-1: device descriptor read/8, error -110 [ 862.727877][ T8271] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 862.781415][ T8271] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 862.783936][ T8271] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 862.835623][ T8271] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 862.837239][ T8271] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 862.837782][ T31] usb usb38-port1: attempt power cycle [ 863.320120][T10133] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 863.320147][T10133] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 863.320250][T10133] vhci_hcd vhci_hcd.0: Device attached [ 864.114453][ T31] usb usb38-port1: unable to enumerate USB device [ 864.378317][T10136] vhci_hcd: connection closed [ 864.442808][ T3550] vhci_hcd: stop threads [ 864.442865][ T3550] vhci_hcd: release socket [ 864.443001][ T3550] vhci_hcd: disconnect device [ 864.875378][ T8271] Bluetooth: hci5: command tx timeout [ 865.142094][ T44] usb 42-1: enqueue for inactive port 0 [ 867.266914][ T8271] Bluetooth: hci5: command tx timeout [ 867.311795][ T44] usb usb42-port1: attempt power cycle [ 868.950875][ T44] usb usb42-port1: unable to enumerate USB device [ 868.998751][ T9856] chnl_net:caif_netlink_parms(): no params data found [ 869.378517][ T8271] Bluetooth: hci5: command tx timeout [ 870.288388][ T6827] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 870.354816][ T6827] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 871.765073][ T8271] Bluetooth: hci5: command tx timeout [ 872.154451][T10183] input: syz1 as /devices/virtual/input/input21 [ 872.154654][T10183] input: failed to attach handler leds to device input21, error: -6 [ 875.175026][T10203] random: crng reseeded on system resumption [ 880.276486][ T9856] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.276632][ T9856] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.276872][ T9856] bridge_slave_0: entered allmulticast mode [ 880.279522][ T9856] bridge_slave_0: entered promiscuous mode [ 880.366901][ T9856] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.367051][ T9856] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.367434][ T9856] bridge_slave_1: entered allmulticast mode [ 880.369462][ T9856] bridge_slave_1: entered promiscuous mode [ 880.413418][ T38] kauditd_printk_skb: 49 callbacks suppressed [ 880.413433][ T38] audit: type=1326 audit(2000000107.000:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10236 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 880.443625][ T38] audit: type=1326 audit(2000000107.030:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10236 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 880.473812][ T38] audit: type=1326 audit(2000000107.060:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10236 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 880.473869][ T38] audit: type=1326 audit(2000000107.060:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10236 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 880.473917][ T38] audit: type=1326 audit(2000000107.060:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10236 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 880.473964][ T38] audit: type=1326 audit(2000000107.060:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10236 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 880.569850][ T38] audit: type=1326 audit(2000000107.090:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10236 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 880.569921][ T38] audit: type=1326 audit(2000000107.090:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10236 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 880.569973][ T38] audit: type=1326 audit(2000000107.100:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10236 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 880.570023][ T38] audit: type=1326 audit(2000000107.110:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10236 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 880.650519][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 880.650611][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 881.160283][T10245] program syz.2.950 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 881.985698][ T8922] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 882.026025][ T8922] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 882.714973][ T9856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 882.787793][ T9856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.340950][ T9856] team0: Port device team_slave_0 added [ 883.366937][ T9856] team0: Port device team_slave_1 added [ 883.716996][T10262] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 883.717025][T10262] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 883.717121][T10262] vhci_hcd vhci_hcd.0: Device attached [ 884.027396][ T44] usb 42-1: SetAddress Request (14) to port 0 [ 884.027481][ T44] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 884.054263][T10263] vhci_hcd: connection closed [ 884.054791][T10264] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 884.055115][ T3616] vhci_hcd: stop threads [ 884.055130][ T3616] vhci_hcd: release socket [ 884.055203][ T3616] vhci_hcd: disconnect device [ 884.300991][ T37] bridge_slave_1: left allmulticast mode [ 884.301026][ T37] bridge_slave_1: left promiscuous mode [ 884.301329][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.845910][ T37] bridge_slave_0: left allmulticast mode [ 888.924259][ T37] bridge_slave_0: left promiscuous mode [ 888.924574][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.114374][ T44] usb 42-1: device descriptor read/8, error -110 [ 889.519017][ T44] usb usb42-port1: attempt power cycle [ 889.745182][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.878040][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 890.027566][ T37] bond0 (unregistering): Released all slaves [ 890.084309][ T44] usb usb42-port1: unable to enumerate USB device [ 890.118327][T10296] random: crng reseeded on system resumption [ 890.405441][ T9856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.405460][ T9856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.405489][ T9856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.236291][ T37] hsr_slave_0: left promiscuous mode [ 892.316952][ T37] hsr_slave_1: left promiscuous mode [ 892.402782][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.535876][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 892.551788][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 892.553122][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 892.555278][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 892.555970][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 892.651559][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 895.024157][ T5156] Bluetooth: hci0: command tx timeout [ 897.604306][ T5156] Bluetooth: hci0: command tx timeout [ 899.335770][T10357] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 899.335800][T10357] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 899.335899][T10357] vhci_hcd vhci_hcd.0: Device attached [ 899.863477][ T5156] Bluetooth: hci0: command tx timeout [ 899.910495][T10358] vhci_hcd: connection closed [ 899.914727][ T3616] vhci_hcd: stop threads [ 899.914745][ T3616] vhci_hcd: release socket [ 899.914816][ T3616] vhci_hcd: disconnect device [ 900.849565][T10372] random: crng reseeded on system resumption [ 901.226676][ T37] team0 (unregistering): Port device team_slave_1 removed [ 901.758369][ T37] team0 (unregistering): Port device team_slave_0 removed [ 901.955704][ T5156] Bluetooth: hci0: command tx timeout [ 902.391996][T10392] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 902.392018][T10392] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 902.392087][T10392] vhci_hcd vhci_hcd.0: Device attached [ 903.790813][ T9673] usb 42-1: SetAddress Request (18) to port 0 [ 903.790910][ T9673] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 903.969531][T10396] vhci_hcd: connection reset by peer [ 903.970107][ T1159] vhci_hcd: stop threads [ 903.970122][ T1159] vhci_hcd: release socket [ 903.970189][ T1159] vhci_hcd: disconnect device [ 907.498694][T10431] program syz.0.979 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 908.256210][T10127] chnl_net:caif_netlink_parms(): no params data found [ 908.901891][ T9673] usb 42-1: device descriptor read/8, error -110 [ 909.325963][ T9673] usb usb42-port1: attempt power cycle [ 909.894971][ T8922] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 910.044343][ T8922] usb 3-1: Using ep0 maxpacket: 32 [ 910.045869][ T9673] usb usb42-port1: unable to enumerate USB device [ 910.077202][ T8922] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 910.077220][ T8922] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 910.077234][ T8922] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 910.077271][ T8922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 910.077286][ T8922] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 910.077302][ T8922] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 910.077331][ T8922] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 910.077346][ T8922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.126706][ T8922] usb 3-1: config 0 descriptor?? [ 910.487230][ T8922] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 910.672130][ T8922] usb 3-1: USB disconnect, device number 11 [ 910.700608][ T8922] usblp0: removed [ 910.809565][T10127] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.809723][T10127] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.809950][T10127] bridge_slave_0: entered allmulticast mode [ 910.818512][T10127] bridge_slave_0: entered promiscuous mode [ 910.887966][T10127] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.888099][T10127] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.888274][T10127] bridge_slave_1: entered allmulticast mode [ 910.907568][T10127] bridge_slave_1: entered promiscuous mode [ 911.815588][T10127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.340718][T10127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 915.853269][ T38] kauditd_printk_skb: 42 callbacks suppressed [ 915.853289][ T38] audit: type=1326 audit(2000000142.430:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10482 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 915.853332][ T38] audit: type=1326 audit(2000000142.430:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10482 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 915.853367][ T38] audit: type=1326 audit(2000000142.430:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10482 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 915.853401][ T38] audit: type=1326 audit(2000000142.430:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10482 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 915.854301][ T38] audit: type=1326 audit(2000000142.440:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10482 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 915.855845][ T38] audit: type=1326 audit(2000000142.440:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10482 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 915.909951][T10127] team0: Port device team_slave_0 added [ 915.919942][ T38] audit: type=1326 audit(2000000142.510:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10482 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 915.942747][T10127] team0: Port device team_slave_1 added [ 916.052382][ T38] audit: type=1326 audit(2000000142.640:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10482 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 916.052862][ T38] audit: type=1326 audit(2000000142.640:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10482 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 916.193629][ T38] audit: type=1326 audit(2000000142.780:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10482 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 916.305075][T10489] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 916.305096][T10489] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 916.305184][T10489] vhci_hcd vhci_hcd.0: Device attached [ 916.654330][ T9673] usb 38-1: SetAddress Request (15) to port 0 [ 916.654418][ T9673] usb 38-1: new SuperSpeed USB device number 15 using vhci_hcd [ 916.680051][T10490] vhci_hcd: connection reset by peer [ 916.681385][ T8847] vhci_hcd: stop threads [ 916.681400][ T8847] vhci_hcd: release socket [ 916.681470][ T8847] vhci_hcd: disconnect device [ 916.843523][ T37] bridge_slave_1: left allmulticast mode [ 916.843558][ T37] bridge_slave_1: left promiscuous mode [ 916.843815][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.135131][ T37] bridge_slave_0: left allmulticast mode [ 917.135178][ T37] bridge_slave_0: left promiscuous mode [ 917.138952][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.675940][ T44] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 917.834160][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 917.840621][ T44] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 917.840648][ T44] usb 3-1: config 0 has no interface number 0 [ 917.864982][ T44] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 917.865002][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.865015][ T44] usb 3-1: Product: syz [ 917.865024][ T44] usb 3-1: Manufacturer: syz [ 917.865034][ T44] usb 3-1: SerialNumber: syz [ 917.868589][ T44] usb 3-1: config 0 descriptor?? [ 917.932394][ T44] smsc95xx v2.0.0 [ 917.932410][ T44] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 917.932877][ T44] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 918.043378][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 919.849227][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 921.621324][ T37] bond0 (unregistering): Released all slaves [ 921.754286][ T9673] usb 38-1: device descriptor read/8, error -110 [ 921.760063][ T31] usb 3-1: USB disconnect, device number 12 [ 921.829414][T10127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.829432][T10127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.829459][T10127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 922.116823][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 922.168229][ T9673] usb usb38-port1: attempt power cycle [ 922.396521][ T37] team0 (unregistering): Port device team_slave_1 removed [ 922.551319][ T37] team0 (unregistering): Port device team_slave_0 removed [ 922.730682][ T9673] usb usb38-port1: unable to enumerate USB device [ 924.985267][T10318] chnl_net:caif_netlink_parms(): no params data found [ 926.190431][ T8271] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 926.202636][ T8271] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 926.221277][ T8271] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 926.225361][ T8271] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 926.226600][ T8271] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 926.324708][ T9672] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 926.338442][ T9672] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 928.315512][ T5156] Bluetooth: hci2: command tx timeout [ 928.411585][T10318] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.411796][T10318] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.412008][T10318] bridge_slave_0: entered allmulticast mode [ 928.433085][T10318] bridge_slave_0: entered promiscuous mode [ 928.591927][T10318] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.592070][T10318] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.592314][T10318] bridge_slave_1: entered allmulticast mode [ 928.629518][T10318] bridge_slave_1: entered promiscuous mode [ 928.644806][ T8923] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 929.864253][ T8923] usb 3-1: Using ep0 maxpacket: 32 [ 929.868729][ T8923] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 929.868759][ T8923] usb 3-1: config 0 has no interface number 0 [ 929.872010][ T8923] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 929.872044][ T8923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.872064][ T8923] usb 3-1: Product: syz [ 929.872078][ T8923] usb 3-1: Manufacturer: syz [ 929.872093][ T8923] usb 3-1: SerialNumber: syz [ 929.879887][ T8923] usb 3-1: config 0 descriptor?? [ 929.887104][ T8923] smsc95xx v2.0.0 [ 929.887123][ T8923] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 929.887438][ T8923] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 930.016325][T10318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 930.048353][T10318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 930.370157][ C1] vkms_vblank_simulate: vblank timer overrun [ 930.394262][ T5156] Bluetooth: hci2: command tx timeout [ 930.537854][ C1] vkms_vblank_simulate: vblank timer overrun [ 931.723147][ C1] vkms_vblank_simulate: vblank timer overrun [ 931.873193][ C1] vkms_vblank_simulate: vblank timer overrun [ 931.946251][ C1] vkms_vblank_simulate: vblank timer overrun [ 932.113412][ T13] bridge_slave_1: left allmulticast mode [ 932.113448][ T13] bridge_slave_1: left promiscuous mode [ 932.113721][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.175812][ T13] bridge_slave_0: left allmulticast mode [ 932.175846][ T13] bridge_slave_0: left promiscuous mode [ 932.176113][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.456192][ C1] vkms_vblank_simulate: vblank timer overrun [ 932.474192][ T5156] Bluetooth: hci2: command tx timeout [ 932.724157][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 932.818666][ T8923] usb 3-1: USB disconnect, device number 13 [ 933.196762][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 933.381073][T10594] gfs2: not a GFS2 filesystem [ 933.575505][ T9672] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 934.087273][ T13] bond0 (unregistering): Released all slaves [ 934.116154][ T9672] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 934.116174][ T9672] usb 5-1: config 0 has no interface number 0 [ 934.118456][ T9672] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 934.118476][ T9672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.118490][ T9672] usb 5-1: Product: syz [ 934.118500][ T9672] usb 5-1: Manufacturer: syz [ 934.118510][ T9672] usb 5-1: SerialNumber: syz [ 934.122310][ T9672] usb 5-1: config 0 descriptor?? [ 934.240419][T10318] team0: Port device team_slave_0 added [ 934.258746][ T9673] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 934.305842][T10318] team0: Port device team_slave_1 added [ 934.331986][ T9672] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 934.387448][ T9673] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 934.470304][ T9672] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 934.470550][ T9672] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 934.470584][ T9672] usb 5-1: media controller created [ 934.536204][ T9672] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 934.565264][ T5156] Bluetooth: hci2: command tx timeout [ 934.655189][ T9672] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 934.771378][ T9672] usb 5-1: USB disconnect, device number 11 [ 936.395184][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 937.429269][ T13] team0 (unregistering): Port device team_slave_1 removed [ 937.628984][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 937.987539][ T13] team0 (unregistering): Port device team_slave_0 removed [ 938.904132][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 938.906932][ T31] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 938.906958][ T31] usb 1-1: config 0 has no interface number 0 [ 938.916621][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 938.916648][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.916667][ T31] usb 1-1: Product: syz [ 938.916677][ T31] usb 1-1: Manufacturer: syz [ 938.916688][ T31] usb 1-1: SerialNumber: syz [ 938.972494][ T31] usb 1-1: config 0 descriptor?? [ 938.990558][ T31] smsc95xx v2.0.0 [ 938.990576][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 938.990836][ T31] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 941.556266][ T8922] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 941.664549][T10318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 941.664570][T10318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.664601][T10318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.704124][ T8922] usb 5-1: Using ep0 maxpacket: 32 [ 941.706975][ T8922] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 941.707001][ T8922] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 941.707022][ T8922] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 941.707077][ T8922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 941.707100][ T8922] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 941.707126][ T8922] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 941.707170][ T8922] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 941.707194][ T8922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.949067][T10318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.949084][T10318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.949116][T10318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.979964][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.980041][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 942.678314][ T8922] usb 5-1: config 0 descriptor?? [ 942.937906][ T8922] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 943.044849][ T9672] usb 1-1: USB disconnect, device number 10 [ 943.129889][ T8922] usb 5-1: USB disconnect, device number 12 [ 943.585998][ T8922] usblp0: removed [ 943.620449][ T9673] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 943.686936][ T9673] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 944.880597][T10318] hsr_slave_0: entered promiscuous mode [ 944.881996][T10318] hsr_slave_1: entered promiscuous mode [ 944.907253][T10544] chnl_net:caif_netlink_parms(): no params data found [ 945.344674][T10661] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 945.344698][T10661] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 945.344807][T10661] vhci_hcd vhci_hcd.0: Device attached [ 946.700411][T10663] vhci_hcd: connection closed [ 946.704612][ T7187] vhci_hcd: stop threads [ 946.704626][ T7187] vhci_hcd: release socket [ 946.704690][ T7187] vhci_hcd: disconnect device [ 946.756051][ T9673] usb 34-1: enqueue for inactive port 0 [ 947.824643][ T9673] usb usb34-port1: attempt power cycle [ 948.491474][ C0] vkms_vblank_simulate: vblank timer overrun [ 948.565815][ C0] vkms_vblank_simulate: vblank timer overrun [ 948.569975][ T9673] usb usb34-port1: unable to enumerate USB device [ 949.309816][ C0] vkms_vblank_simulate: vblank timer overrun [ 949.403794][ C0] vkms_vblank_simulate: vblank timer overrun [ 949.860429][ T8923] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 949.959480][ C0] vkms_vblank_simulate: vblank timer overrun [ 950.036142][ T8923] usb 1-1: Using ep0 maxpacket: 32 [ 950.038797][ T8923] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 950.038823][ T8923] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 950.038845][ T8923] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 950.038910][ T8923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 950.038933][ T8923] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 950.038958][ T8923] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 950.039002][ T8923] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 950.039025][ T8923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.566280][ C0] vkms_vblank_simulate: vblank timer overrun [ 950.984307][ C0] vkms_vblank_simulate: vblank timer overrun [ 951.023408][ C0] vkms_vblank_simulate: vblank timer overrun [ 951.086445][ T8923] usb 1-1: config 0 descriptor?? [ 951.380040][ C0] vkms_vblank_simulate: vblank timer overrun [ 951.389126][T10544] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.389283][T10544] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.389547][T10544] bridge_slave_0: entered allmulticast mode [ 951.416466][T10544] bridge_slave_0: entered promiscuous mode [ 951.448476][T10544] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.449747][T10544] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.450728][T10544] bridge_slave_1: entered allmulticast mode [ 951.486795][T10544] bridge_slave_1: entered promiscuous mode [ 951.500451][ T8923] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 951.670362][ T9672] usb 1-1: USB disconnect, device number 11 [ 951.687586][ T9672] usblp0: removed [ 951.844674][T10544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.863701][T10544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 952.031909][T10544] team0: Port device team_slave_0 added [ 952.035694][T10544] team0: Port device team_slave_1 added [ 952.140958][ C0] vkms_vblank_simulate: vblank timer overrun [ 957.508063][ T8271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 957.512894][ T8271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 957.518017][ T8271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 957.525751][ T8271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 957.528110][ T8271] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 958.708677][ T9673] libceph: connect (1)[c::]:6789 error -101 [ 958.729434][ T9673] libceph: mon0 (1)[c::]:6789 connect error [ 959.283062][T10731] ceph: No mds server is up or the cluster is laggy [ 959.296554][ T9673] libceph: connect (1)[c::]:6789 error -101 [ 959.296774][ T9673] libceph: mon0 (1)[c::]:6789 connect error [ 959.298766][T10544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.298780][T10544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.298810][T10544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.660684][ T5156] Bluetooth: hci0: command tx timeout [ 962.316531][ T5156] Bluetooth: hci0: command tx timeout [ 962.796337][T10544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.796351][T10544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.796371][T10544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.284250][T10751] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 963.284280][T10751] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 963.284373][T10751] vhci_hcd vhci_hcd.0: Device attached [ 963.965440][T10757] vhci_hcd: connection closed [ 963.967922][ T8847] bridge_slave_1: left allmulticast mode [ 963.967958][ T8847] bridge_slave_1: left promiscuous mode [ 963.968234][ T8847] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.974422][ T6785] usb 34-1: SetAddress Request (14) to port 0 [ 963.974504][ T6785] usb 34-1: new SuperSpeed USB device number 14 using vhci_hcd [ 963.974702][ T1284] vhci_hcd: stop threads [ 963.974716][ T1284] vhci_hcd: release socket [ 963.974794][ T1284] vhci_hcd: disconnect device [ 964.005197][ T6785] usb 34-1: enqueue for inactive port 0 [ 964.116038][ T8847] bridge_slave_0: left allmulticast mode [ 964.116072][ T8847] bridge_slave_0: left promiscuous mode [ 964.116360][ T8847] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.416276][ C1] vkms_vblank_simulate: vblank timer overrun [ 964.416807][ T5156] Bluetooth: hci0: command tx timeout [ 964.443006][ T6785] usb usb34-port1: attempt power cycle [ 964.530280][ C1] vkms_vblank_simulate: vblank timer overrun [ 964.901619][ C1] vkms_vblank_simulate: vblank timer overrun [ 965.078338][ C1] vkms_vblank_simulate: vblank timer overrun [ 965.198477][ C1] vkms_vblank_simulate: vblank timer overrun [ 965.298158][ T8847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 965.377998][ T6785] usb usb34-port1: unable to enumerate USB device [ 965.458267][ T8847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 965.596416][ C1] vkms_vblank_simulate: vblank timer overrun [ 965.779066][ T8847] bond0 (unregistering): Released all slaves [ 966.474178][ T5156] Bluetooth: hci0: command tx timeout [ 966.738693][ C1] vkms_vblank_simulate: vblank timer overrun [ 966.825846][ C1] vkms_vblank_simulate: vblank timer overrun [ 966.996652][ C1] vkms_vblank_simulate: vblank timer overrun [ 967.780838][ C1] vkms_vblank_simulate: vblank timer overrun [ 968.528173][T10544] hsr_slave_0: entered promiscuous mode [ 968.550829][T10544] hsr_slave_1: entered promiscuous mode [ 968.564948][T10544] debugfs: 'hsr0' already exists in 'hsr' [ 968.564972][T10544] Cannot create hsr debugfs directory [ 968.906985][ T8847] hsr_slave_0: left promiscuous mode [ 968.937678][ T8847] hsr_slave_1: left promiscuous mode [ 969.391873][ T8847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 969.418323][ T8847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 972.411503][ T38] kauditd_printk_skb: 31 callbacks suppressed [ 972.411522][ T38] audit: type=1326 audit(2000000199.000:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10813 comm="syz.0.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 972.414505][ T38] audit: type=1326 audit(2000000199.010:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10813 comm="syz.0.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 972.426824][ T38] audit: type=1326 audit(2000000199.020:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10813 comm="syz.0.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 972.426876][ T38] audit: type=1326 audit(2000000199.020:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10813 comm="syz.0.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 972.427314][ T38] audit: type=1326 audit(2000000199.020:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10813 comm="syz.0.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 972.433383][ T38] audit: type=1326 audit(2000000199.020:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10813 comm="syz.0.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 972.510819][ T38] audit: type=1326 audit(2000000199.060:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10813 comm="syz.0.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 972.510873][ T38] audit: type=1326 audit(2000000199.060:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10813 comm="syz.0.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 972.510907][ T38] audit: type=1326 audit(2000000199.060:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10813 comm="syz.0.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 972.510939][ T38] audit: type=1326 audit(2000000199.070:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10813 comm="syz.0.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303126eec9 code=0x7ffc0000 [ 974.785378][ T8847] team0 (unregistering): Port device team_slave_1 removed [ 974.978356][T10833] binder: 10832:10833 ioctl c0306201 0 returned -14 [ 975.645779][T10837] binder: 10832:10837 ioctl c0306201 0 returned -14 [ 976.439729][ T8847] team0 (unregistering): Port device team_slave_0 removed [ 978.456197][T10860] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 978.456219][T10860] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 978.456522][T10860] vhci_hcd vhci_hcd.0: Device attached [ 978.695268][T10865] random: crng reseeded on system resumption [ 978.755150][ T6785] usb 42-1: SetAddress Request (22) to port 0 [ 978.755237][ T6785] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd [ 978.851235][T10862] vhci_hcd: connection reset by peer [ 978.894807][ T7187] vhci_hcd: stop threads [ 978.894825][ T7187] vhci_hcd: release socket [ 978.894899][ T7187] vhci_hcd: disconnect device [ 983.759539][T10895] mmap: syz.4.1099 (10895) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 983.834434][ T6785] usb 42-1: device descriptor read/8, error -110 [ 984.535920][ T6785] usb usb42-port1: attempt power cycle [ 984.652711][T10720] chnl_net:caif_netlink_parms(): no params data found [ 985.098344][ T6785] usb usb42-port1: unable to enumerate USB device [ 985.289541][T10913] random: crng reseeded on system resumption [ 985.905092][ T8271] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 986.949535][ T8271] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 986.953539][ T8271] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 986.966000][ T8271] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 986.966902][ T8271] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 988.356326][T10720] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.356496][T10720] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.356721][T10720] bridge_slave_0: entered allmulticast mode [ 988.379690][T10720] bridge_slave_0: entered promiscuous mode [ 988.416786][T10720] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.416936][T10720] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.417175][T10720] bridge_slave_1: entered allmulticast mode [ 988.429071][T10720] bridge_slave_1: entered promiscuous mode [ 988.430591][ T5990] bridge_slave_1: left allmulticast mode [ 988.430623][ T5990] bridge_slave_1: left promiscuous mode [ 988.430915][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.782641][ T5990] bridge_slave_0: left allmulticast mode [ 989.782678][ T5990] bridge_slave_0: left promiscuous mode [ 989.782946][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.174626][ T8271] Bluetooth: hci2: command tx timeout [ 991.456815][ T5990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 991.586709][ T5990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 991.811579][ T5990] bond0 (unregistering): Released all slaves [ 991.811968][T10950] random: crng reseeded on system resumption [ 992.272331][ T8271] Bluetooth: hci2: command tx timeout [ 992.514390][T10720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 992.519669][T10720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 994.318243][ T8271] Bluetooth: hci2: command tx timeout [ 994.642973][T10720] team0: Port device team_slave_0 added [ 994.844211][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 994.870988][ T5990] hsr_slave_0: left promiscuous mode [ 995.416647][ T5990] hsr_slave_1: left promiscuous mode [ 995.417546][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 995.446151][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 995.463376][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 995.463404][ T10] usb 3-1: config 0 has no interface number 0 [ 995.490720][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 995.490751][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.490772][ T10] usb 3-1: Product: syz [ 995.490787][ T10] usb 3-1: Manufacturer: syz [ 995.490802][ T10] usb 3-1: SerialNumber: syz [ 995.499441][ T10] usb 3-1: config 0 descriptor?? [ 995.516058][ T10] smsc95xx v2.0.0 [ 995.516080][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 995.516389][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 995.578014][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 996.890473][ T8271] Bluetooth: hci2: command tx timeout [ 996.955205][T10983] random: crng reseeded on system resumption [ 998.158359][ T31] usb 3-1: USB disconnect, device number 14 [ 999.880620][T11015] binder: 11013:11015 ioctl c0306201 0 returned -14 [ 1000.092174][T11016] random: crng reseeded on system resumption [ 1001.187811][ T5990] team0 (unregistering): Port device team_slave_1 removed [ 1001.644121][ T6785] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1001.672104][ T5990] team0 (unregistering): Port device team_slave_0 removed [ 1002.644147][ T6785] usb 5-1: Using ep0 maxpacket: 32 [ 1002.647221][ T6785] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1002.647248][ T6785] usb 5-1: config 0 has no interface number 0 [ 1002.675619][ T6785] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1002.675652][ T6785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.675673][ T6785] usb 5-1: Product: syz [ 1002.675688][ T6785] usb 5-1: Manufacturer: syz [ 1002.675704][ T6785] usb 5-1: SerialNumber: syz [ 1002.681540][ T6785] usb 5-1: config 0 descriptor?? [ 1002.756478][ T6785] smsc95xx v2.0.0 [ 1002.756498][ T6785] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1002.756782][ T6785] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 1003.362650][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1003.362739][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1005.588549][ T44] usb 5-1: USB disconnect, device number 13 [ 1005.890536][T11047] random: crng reseeded on system resumption [ 1006.945062][T10720] team0: Port device team_slave_1 added [ 1007.509905][ C1] vkms_vblank_simulate: vblank timer overrun [ 1008.169104][ C1] vkms_vblank_simulate: vblank timer overrun [ 1008.242352][ C1] vkms_vblank_simulate: vblank timer overrun [ 1008.629238][T10720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1008.629257][T10720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1008.629287][T10720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1008.705948][T10720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1008.705967][T10720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1008.705998][T10720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1008.927692][ C1] vkms_vblank_simulate: vblank timer overrun [ 1009.928344][T10720] hsr_slave_0: entered promiscuous mode [ 1009.940434][T10720] hsr_slave_1: entered promiscuous mode [ 1010.491114][ C1] vkms_vblank_simulate: vblank timer overrun [ 1011.219604][ T6827] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1011.816752][ C1] vkms_vblank_simulate: vblank timer overrun [ 1011.886636][ T6827] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1011.886663][ T6827] usb 3-1: config 0 has no interface number 0 [ 1011.891352][ T6827] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1011.891382][ T6827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.891403][ T6827] usb 3-1: Product: syz [ 1011.891418][ T6827] usb 3-1: Manufacturer: syz [ 1011.891433][ T6827] usb 3-1: SerialNumber: syz [ 1012.797028][ T6827] usb 3-1: config 0 descriptor?? [ 1013.003545][ T6827] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1013.025678][ T6827] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1013.026043][ T6827] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1013.026102][ T6827] usb 3-1: media controller created [ 1013.152558][ T6827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1013.290387][T10923] chnl_net:caif_netlink_parms(): no params data found [ 1014.055580][T10923] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.055920][T10923] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.056260][T10923] bridge_slave_0: entered allmulticast mode [ 1014.063161][T10923] bridge_slave_0: entered promiscuous mode [ 1014.082536][T10923] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.083162][T10923] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.088149][T10923] bridge_slave_1: entered allmulticast mode [ 1014.107756][T10923] bridge_slave_1: entered promiscuous mode [ 1014.244530][ T6827] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1014.338927][T11104] fuse: Unknown parameter '00000000000000000000' [ 1014.431139][ T6827] usb 3-1: USB disconnect, device number 15 [ 1014.674317][ T37] bridge_slave_1: left allmulticast mode [ 1014.674353][ T37] bridge_slave_1: left promiscuous mode [ 1014.674626][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.700607][ T37] bridge_slave_0: left allmulticast mode [ 1015.700641][ T37] bridge_slave_0: left promiscuous mode [ 1015.700929][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.894962][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1015.897649][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1015.898904][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1015.900537][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1015.901739][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1017.536263][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1017.667606][ T38] kauditd_printk_skb: 38 callbacks suppressed [ 1017.667628][ T38] audit: type=1326 audit(2000000244.160:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11125 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93bd58eec9 code=0x7ffc0000 [ 1017.667685][ T38] audit: type=1326 audit(2000000244.170:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11125 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93bd58eec9 code=0x7ffc0000 [ 1017.667732][ T38] audit: type=1326 audit(2000000244.190:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11125 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f93bd58eec9 code=0x7ffc0000 [ 1017.667781][ T38] audit: type=1326 audit(2000000244.200:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11125 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93bd58eec9 code=0x7ffc0000 [ 1017.667834][ T38] audit: type=1326 audit(2000000244.210:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11125 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93bd58eec9 code=0x7ffc0000 [ 1017.826535][ T38] audit: type=1326 audit(2000000244.380:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11125 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f93bd58eec9 code=0x7ffc0000 [ 1017.826595][ T38] audit: type=1326 audit(2000000244.390:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11125 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93bd58eec9 code=0x7ffc0000 [ 1017.826644][ T38] audit: type=1326 audit(2000000244.400:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11125 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93bd58eec9 code=0x7ffc0000 [ 1017.826691][ T38] audit: type=1326 audit(2000000244.400:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11125 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f93bd58eec9 code=0x7ffc0000 [ 1017.826817][ T38] audit: type=1326 audit(2000000244.410:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11125 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93bd58eec9 code=0x7ffc0000 [ 1018.004379][ T8271] Bluetooth: hci0: command tx timeout [ 1018.026415][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1018.156755][ T37] bond0 (unregistering): Released all slaves [ 1018.481485][T10923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1018.534277][T10923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1018.927560][T10923] team0: Port device team_slave_0 added [ 1018.969914][ T37] hsr_slave_0: left promiscuous mode [ 1019.004940][ T37] hsr_slave_1: left promiscuous mode [ 1019.005654][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1019.052523][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1019.404411][ T9672] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1019.566895][ T9672] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1019.566924][ T9672] usb 1-1: config 0 has no interface number 0 [ 1019.570168][ T9672] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1019.570196][ T9672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.570217][ T9672] usb 1-1: Product: syz [ 1019.570232][ T9672] usb 1-1: Manufacturer: syz [ 1019.570247][ T9672] usb 1-1: SerialNumber: syz [ 1019.580679][ T9672] usb 1-1: config 0 descriptor?? [ 1019.910725][ T9672] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1019.957471][ T9672] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1019.957878][ T9672] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1019.957932][ T9672] usb 1-1: media controller created [ 1020.074204][ T8271] Bluetooth: hci0: command tx timeout [ 1020.852118][ T9672] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1021.435680][ T9672] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1021.559051][ T9672] usb 1-1: USB disconnect, device number 12 [ 1022.244524][ T8271] Bluetooth: hci0: command tx timeout [ 1022.857078][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1023.675215][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1024.314248][ T8271] Bluetooth: hci0: command tx timeout [ 1026.218322][T10923] team0: Port device team_slave_1 added [ 1027.064248][ T9672] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1027.216463][ T9672] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1027.216494][ T9672] usb 3-1: config 0 has no interface number 0 [ 1027.225834][ T9672] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1027.225865][ T9672] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.225886][ T9672] usb 3-1: Product: syz [ 1027.225901][ T9672] usb 3-1: Manufacturer: syz [ 1027.225916][ T9672] usb 3-1: SerialNumber: syz [ 1027.236495][ T9672] usb 3-1: config 0 descriptor?? [ 1027.260792][T10923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.260811][T10923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.260843][T10923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.348603][ C1] vkms_vblank_simulate: vblank timer overrun [ 1027.403277][T10923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.403296][T10923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.403326][T10923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.924152][ T9672] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1027.939219][ T9672] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1027.939447][ T9672] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1027.939478][ T9672] usb 3-1: media controller created [ 1028.066853][ T9672] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1028.224606][ T9672] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1028.292220][ C1] vkms_vblank_simulate: vblank timer overrun [ 1028.418616][ C1] vkms_vblank_simulate: vblank timer overrun [ 1028.490971][ T9672] usb 3-1: USB disconnect, device number 16 [ 1029.092364][T10923] hsr_slave_0: entered promiscuous mode [ 1029.093812][T10923] hsr_slave_1: entered promiscuous mode [ 1029.576988][ C1] vkms_vblank_simulate: vblank timer overrun [ 1029.799420][ C1] vkms_vblank_simulate: vblank timer overrun [ 1030.329551][ C1] vkms_vblank_simulate: vblank timer overrun [ 1032.021271][T11118] chnl_net:caif_netlink_parms(): no params data found [ 1033.625071][T11118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.625223][T11118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.625413][T11118] bridge_slave_0: entered allmulticast mode [ 1033.644178][ T9672] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1033.666185][T11118] bridge_slave_0: entered promiscuous mode [ 1033.691157][T11118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.691315][T11118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.691497][T11118] bridge_slave_1: entered allmulticast mode [ 1033.714676][T11118] bridge_slave_1: entered promiscuous mode [ 1033.806567][ T9672] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1033.806596][ T9672] usb 3-1: config 0 has no interface number 0 [ 1033.811243][ T9672] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1033.811273][ T9672] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.811295][ T9672] usb 3-1: Product: syz [ 1033.811310][ T9672] usb 3-1: Manufacturer: syz [ 1033.811326][ T9672] usb 3-1: SerialNumber: syz [ 1033.862973][ T9672] usb 3-1: config 0 descriptor?? [ 1034.326944][ T9672] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1034.333086][ T9672] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1034.333418][ T9672] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1034.333488][ T9672] usb 3-1: media controller created [ 1034.369669][T10923] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1034.439984][T11118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1034.442304][ T9672] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1034.480707][T11118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.480839][T10923] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1034.637664][T10923] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1034.833729][T10923] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1034.960501][T11118] team0: Port device team_slave_0 added [ 1035.001685][T11118] team0: Port device team_slave_1 added [ 1035.596435][ T9672] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1035.700875][ T9672] usb 3-1: USB disconnect, device number 17 [ 1035.847749][T11118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1035.847768][T11118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1035.847797][T11118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1035.851514][T11118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1035.851530][T11118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1035.851559][T11118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1036.054304][T11259] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1036.054331][T11259] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1036.054406][T11259] vhci_hcd vhci_hcd.0: Device attached [ 1036.720538][T11118] hsr_slave_0: entered promiscuous mode [ 1037.146974][T11118] hsr_slave_1: entered promiscuous mode [ 1037.147885][T11118] debugfs: 'hsr0' already exists in 'hsr' [ 1037.147910][T11118] Cannot create hsr debugfs directory [ 1037.156568][T11262] vhci_hcd: connection closed [ 1037.165673][ T1379] vhci_hcd: stop threads [ 1037.165698][ T1379] vhci_hcd: release socket [ 1037.165774][ T1379] vhci_hcd: disconnect device [ 1037.234463][ T6827] usb 34-1: enqueue for inactive port 0 [ 1039.895453][ T6827] usb usb34-port1: attempt power cycle [ 1040.214374][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1040.384268][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1040.389243][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1040.389279][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1040.389305][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1040.389331][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1040.389375][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1040.389400][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.484188][ T6827] usb usb34-port1: unable to enumerate USB device [ 1041.908908][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 1041.908959][ T10] usbtmc 5-1:16.0: can't read capabilities [ 1042.441237][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1042.445289][T11291] usbtmc 5-1:16.0: Unable to send data, error -71 [ 1043.035450][T10923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1043.270147][T10923] 8021q: adding VLAN 0 to HW filter on device team0 [ 1043.334652][ T7186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.334816][ T7186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1043.420215][ T7186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.420678][ T7186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.715529][T11118] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1043.911491][T11118] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1044.131870][T11118] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1044.226509][T11118] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1044.250199][ T44] usb 5-1: USB disconnect, device number 14 [ 1046.442040][T11118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1046.547308][T11118] 8021q: adding VLAN 0 to HW filter on device team0 [ 1046.589300][ T1284] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.589532][ T1284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1046.633761][ T1284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.634250][ T1284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1047.115894][T11118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1049.678455][T11345] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1049.678475][T11345] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1049.678540][T11345] vhci_hcd vhci_hcd.0: Device attached [ 1049.915252][T11346] vhci_hcd: connection closed [ 1049.915850][ T1379] vhci_hcd: stop threads [ 1049.915866][ T1379] vhci_hcd: release socket [ 1049.915936][ T1379] vhci_hcd: disconnect device [ 1049.966178][ T10] usb 42-1: enqueue for inactive port 0 [ 1050.262157][ T5156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1050.288778][ T5156] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1050.291580][ T5156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1050.310829][ T5156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1050.311662][ T5156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1050.474343][ T10] usb usb42-port1: attempt power cycle [ 1051.069468][T11118] veth0_vlan: entered promiscuous mode [ 1051.219114][ T10] usb usb42-port1: unable to enumerate USB device [ 1052.252054][T11118] veth1_vlan: entered promiscuous mode [ 1052.954382][ T5156] Bluetooth: hci2: command tx timeout [ 1055.044125][ T5156] Bluetooth: hci2: command tx timeout [ 1055.293870][T11118] veth0_macvtap: entered promiscuous mode [ 1055.320702][T11118] veth1_macvtap: entered promiscuous mode [ 1055.433604][T11118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1055.445684][T11118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1055.541239][ T1159] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.601264][ T1159] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.606318][ T1159] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.633702][ T1159] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.517592][ T5156] Bluetooth: hci2: command tx timeout [ 1058.635607][T11354] chnl_net:caif_netlink_parms(): no params data found [ 1059.197632][T11401] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1059.197660][T11401] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1059.197766][T11401] vhci_hcd vhci_hcd.0: Device attached [ 1059.544266][ T9672] usb 38-1: SetAddress Request (19) to port 0 [ 1059.544357][ T9672] usb 38-1: new SuperSpeed USB device number 19 using vhci_hcd [ 1059.681835][T11408] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1059.684977][ T13] vhci_hcd: stop threads [ 1059.684997][ T13] vhci_hcd: release socket [ 1059.685083][ T13] vhci_hcd: disconnect device [ 1060.406232][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.406256][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.406613][ T1284] bridge_slave_1: left allmulticast mode [ 1060.406643][ T1284] bridge_slave_1: left promiscuous mode [ 1060.406932][ T1284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.474177][ T5156] Bluetooth: hci2: command tx timeout [ 1060.507991][ T1284] bridge_slave_0: left allmulticast mode [ 1060.508028][ T1284] bridge_slave_0: left promiscuous mode [ 1060.508290][ T1284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.948982][ T9672] usb 38-1: device descriptor read/8, error -110 [ 1064.954134][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.956002][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1065.496169][ T9672] usb usb38-port1: attempt power cycle [ 1066.595976][ T9672] usb usb38-port1: unable to enumerate USB device [ 1069.624257][ T6827] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1070.434114][ T6827] usb 1-1: Using ep0 maxpacket: 8 [ 1070.436570][ T6827] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1070.436605][ T6827] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1070.436631][ T6827] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1070.436656][ T6827] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1070.436701][ T6827] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1070.436725][ T6827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.891492][ T6827] usb 1-1: GET_CAPABILITIES returned 0 [ 1070.891541][ T6827] usbtmc 1-1:16.0: can't read capabilities [ 1071.541203][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1071.544018][T11498] usbtmc 1-1:16.0: Unable to send data, error -71 [ 1073.268506][ T1284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1073.346081][ T1284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1073.369628][ T1284] bond0 (unregistering): Released all slaves [ 1073.431770][T11354] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.431917][T11354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.432157][T11354] bridge_slave_0: entered allmulticast mode [ 1073.456389][T11354] bridge_slave_0: entered promiscuous mode [ 1073.491514][T11354] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.491654][T11354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.491876][T11354] bridge_slave_1: entered allmulticast mode [ 1073.518206][T11354] bridge_slave_1: entered promiscuous mode [ 1073.820186][ T5927] usb 1-1: USB disconnect, device number 13 [ 1075.271515][ T1284] hsr_slave_0: left promiscuous mode [ 1075.315603][ T1284] hsr_slave_1: left promiscuous mode [ 1075.317492][ T1284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1075.365034][ T1284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1076.424997][ T1284] team0 (unregistering): Port device team_slave_1 removed [ 1076.464779][T11511] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1076.464798][T11511] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1076.464865][T11511] vhci_hcd vhci_hcd.0: Device attached [ 1076.788651][ T5927] usb 34-1: SetAddress Request (22) to port 0 [ 1076.789054][ T5927] usb 34-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1077.242600][T11516] vhci_hcd: connection reset by peer [ 1077.325882][ T37] vhci_hcd: stop threads [ 1077.325955][ T37] vhci_hcd: release socket [ 1077.326097][ T37] vhci_hcd: disconnect device [ 1079.266084][ T1284] team0 (unregistering): Port device team_slave_0 removed [ 1080.531806][ T8271] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1080.552240][ T8271] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1080.859169][T11120] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1080.860421][T11120] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1080.861395][T11120] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1082.833241][ T5927] usb 34-1: device descriptor read/8, error -110 [ 1083.242422][ T5927] usb usb34-port1: attempt power cycle [ 1084.007877][T11554] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1084.153303][T11120] Bluetooth: hci5: command tx timeout [ 1084.674830][ T5927] usb usb34-port1: unable to enumerate USB device [ 1086.154267][T11120] Bluetooth: hci5: command tx timeout [ 1088.434066][T11120] Bluetooth: hci5: command tx timeout [ 1090.487206][T11120] Bluetooth: hci5: command tx timeout [ 1095.504277][ T9673] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1095.694112][ T9673] usb 1-1: Using ep0 maxpacket: 32 [ 1095.702618][ T9673] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1095.702648][ T9673] usb 1-1: config 0 has no interface number 0 [ 1095.735442][ T9673] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1095.735475][ T9673] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.735496][ T9673] usb 1-1: Product: syz [ 1095.735511][ T9673] usb 1-1: Manufacturer: syz [ 1095.735526][ T9673] usb 1-1: SerialNumber: syz [ 1095.779874][ T9673] usb 1-1: config 0 descriptor?? [ 1096.217404][ T9673] smsc95xx v2.0.0 [ 1096.217423][ T9673] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1096.217672][ T9673] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 1098.607097][ T9673] usb 1-1: USB disconnect, device number 14 [ 1098.867290][T11354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1098.945294][T11354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1101.391410][T11354] team0: Port device team_slave_0 added [ 1101.471002][T11354] team0: Port device team_slave_1 added [ 1103.713259][T11354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1103.713272][T11354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1103.713298][T11354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1103.880000][T11354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1103.880018][T11354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1103.880058][T11354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.064233][ T44] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1104.214411][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 1104.216238][ T44] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1104.216261][ T44] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1104.216279][ T44] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1104.216298][ T44] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1104.216335][ T44] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1104.216355][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.513673][ T44] usb 1-1: GET_CAPABILITIES returned 0 [ 1104.513725][ T44] usbtmc 1-1:16.0: can't read capabilities [ 1105.747905][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1105.748040][T11669] usbtmc 1-1:16.0: Unable to send data, error -71 [ 1106.833689][T11354] hsr_slave_0: entered promiscuous mode [ 1106.837398][T11354] hsr_slave_1: entered promiscuous mode [ 1108.591153][ T8923] usb 1-1: USB disconnect, device number 15 [ 1109.409075][ T1284] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.226169][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1112.254233][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1112.256844][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1112.259515][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1112.285602][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1112.614961][ T1284] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.728532][T11527] chnl_net:caif_netlink_parms(): no params data found [ 1114.316998][ T5156] Bluetooth: hci0: command tx timeout [ 1115.402165][ T1284] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.394425][ T5156] Bluetooth: hci0: command tx timeout [ 1118.306753][ T1284] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.476277][ T5156] Bluetooth: hci0: command tx timeout [ 1119.196031][T11757] binder: 11756:11757 ioctl c0306201 0 returned -14 [ 1120.179198][T11762] binder: 11756:11762 ioctl c0306201 0 returned -14 [ 1120.624091][ T5156] Bluetooth: hci0: command tx timeout [ 1122.043039][ C1] vkms_vblank_simulate: vblank timer overrun [ 1122.239472][T11527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.239600][T11527] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.240326][T11527] bridge_slave_0: entered allmulticast mode [ 1122.246163][T11527] bridge_slave_0: entered promiscuous mode [ 1122.271335][T11527] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.271724][T11527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.273012][T11527] bridge_slave_1: entered allmulticast mode [ 1122.277319][T11527] bridge_slave_1: entered promiscuous mode [ 1122.285135][T11773] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1122.285160][T11773] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1122.285264][T11773] vhci_hcd vhci_hcd.0: Device attached [ 1122.574380][ T9673] usb 34-1: SetAddress Request (26) to port 0 [ 1122.574418][ T9673] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 1122.574432][ T9673] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 9673, name: kworker/0:3 [ 1122.574451][ T9673] preempt_count: 0, expected: 0 [ 1122.574461][ T9673] RCU nest depth: 0, expected: 0 [ 1122.574481][ T9673] 6 locks held by kworker/0:3/9673: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1122.574494][ T9673] #0: ffff88814047c938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1122.574562][ T9673] #1: ffffc9000401fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1122.574620][ T9673] #2: ffff888028b46188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1122.574675][ T9673] #3: ffff888028bb25b8 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 1122.574730][ T9673] #4: ffff88802853e258 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 1122.574784][ T9673] #5: ffff888028883868 (&mbus->lock#2){+.+.}-{3:3}, at: mon_complete+0x5c/0x200 [ 1122.574855][ T9673] irq event stamp: 859020 [ 1122.574864][ T9673] hardirqs last enabled at (859019): [] _raw_spin_unlock_irqrestore+0x85/0x110 [ 1122.574905][ T9673] hardirqs last disabled at (859020): [] vhci_urb_enqueue+0xb2c/0xe70 [ 1122.574932][ T9673] softirqs last enabled at (856746): [] __local_bh_enable_ip+0x1a4/0x270 [ 1122.574964][ T9673] softirqs last disabled at (856740): [] wg_packet_decrypt_worker+0xcd/0xce0 [ 1122.575026][ T9673] CPU: 0 UID: 0 PID: 9673 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1122.575051][ T9673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1122.575066][ T9673] Workqueue: usb_hub_wq hub_event [ 1122.575104][ T9673] Call Trace: [ 1122.575113][ T9673] [ 1122.575123][ T9673] dump_stack_lvl+0x189/0x250 [ 1122.575156][ T9673] ? wg_packet_decrypt_worker+0xcd/0xce0 [ 1122.575186][ T9673] ? wg_packet_decrypt_worker+0xcd/0xce0 [ 1122.575219][ T9673] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1122.575254][ T9673] ? rtlock_slowlock_locked+0xd8/0x4010 [ 1122.575293][ T9673] ? print_lock_name+0xde/0x100 [ 1122.575330][ T9673] __might_resched+0x44b/0x5d0 [ 1122.575367][ T9673] ? __pfx___might_resched+0x10/0x10 [ 1122.575393][ T9673] ? mon_complete+0x5c/0x200 [ 1122.575426][ T9673] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1122.575474][ T9673] rt_spin_lock+0xc7/0x2c0 [ 1122.575505][ T9673] ? __pfx_rt_spin_lock+0x10/0x10 [ 1122.575535][ T9673] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1122.575566][ T9673] ? reacquire_held_locks+0x127/0x1d0 [ 1122.575601][ T9673] ? __pfx_migrate_enable+0x10/0x10 [ 1122.575632][ T9673] mon_complete+0x5c/0x200 [ 1122.575669][ T9673] __usb_hcd_giveback_urb+0x254/0x5e0 [ 1122.575709][ T9673] vhci_urb_enqueue+0xb4f/0xe70 [ 1122.575747][ T9673] ? __pfx_vhci_urb_enqueue+0x10/0x10 [ 1122.575773][ T9673] ? usb_hcd_map_urb_for_dma+0x3c1/0xd80 [ 1122.575812][ T9673] usb_hcd_submit_urb+0x320/0x1a80 [ 1122.575859][ T9673] usb_start_wait_urb+0x114/0x4c0 [ 1122.575894][ T9673] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1122.575930][ T9673] ? trace_kmalloc+0x1f/0xd0 [ 1122.575973][ T9673] usb_control_msg+0x232/0x3e0 [ 1122.576007][ T9673] hub_port_init+0xe24/0x2800 [ 1122.576070][ T9673] hub_event+0x2532/0x4a20 [ 1122.576166][ T9673] ? __pfx_hub_event+0x10/0x10 [ 1122.576194][ T9673] ? process_scheduled_works+0x9ef/0x17b0 [ 1122.576230][ T9673] ? _raw_spin_unlock_irq+0x23/0x50 [ 1122.576262][ T9673] ? process_scheduled_works+0x9ef/0x17b0 [ 1122.576290][ T9673] ? process_scheduled_works+0x9ef/0x17b0 [ 1122.576320][ T9673] process_scheduled_works+0xae1/0x17b0 [ 1122.576384][ T9673] ? __pfx_process_scheduled_works+0x10/0x10 [ 1122.576434][ T9673] worker_thread+0x8a0/0xda0 [ 1122.576466][ T9673] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1122.576512][ T9673] ? __kthread_parkme+0x7b/0x200 [ 1122.576555][ T9673] kthread+0x711/0x8a0 [ 1122.576593][ T9673] ? __pfx_worker_thread+0x10/0x10 [ 1122.576622][ T9673] ? __pfx_kthread+0x10/0x10 [ 1122.576661][ T9673] ? __pfx_kthread+0x10/0x10 [ 1122.576696][ T9673] ret_from_fork+0x436/0x7d0 [ 1122.576730][ T9673] ? __pfx_ret_from_fork+0x10/0x10 [ 1122.576767][ T9673] ? __switch_to_asm+0x39/0x70 [ 1122.576787][ T9673] ? __switch_to_asm+0x33/0x70 [ 1122.576806][ T9673] ? __pfx_kthread+0x10/0x10 [ 1122.576840][ T9673] ret_from_fork_asm+0x1a/0x30 [ 1122.576881][ T9673] [ 1122.579524][ T9673] usb 34-1: new SuperSpeed USB device number 26 using vhci_hcd [ 1122.586798][ C1] vkms_vblank_simulate: vblank timer overrun [ 1123.002234][T11779] vhci_hcd: connection reset by peer [ 1123.006265][ T1379] vhci_hcd: stop threads [ 1123.006284][ T1379] vhci_hcd: release socket [ 1123.094057][ T1379] vhci_hcd: disconnect device [ 1123.208680][ C1] vkms_vblank_simulate: vblank timer overrun [ 1123.845410][ C1] vkms_vblank_simulate: vblank timer overrun [ 1125.414770][ T1284] bridge_slave_1: left allmulticast mode [ 1125.414807][ T1284] bridge_slave_1: left promiscuous mode [ 1125.415138][ T1284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.556100][ T1284] bridge_slave_0: left allmulticast mode [ 1125.556135][ T1284] bridge_slave_0: left promiscuous mode [ 1125.556399][ T1284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.243177][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.243284][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1127.674401][ T9673] usb 34-1: device descriptor read/8, error -110 [ 1127.675222][ T1284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1127.744719][ T1284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1127.802867][ T1284] bond0 (unregistering): Released all slaves [ 1128.086178][ T9673] usb usb34-port1: attempt power cycle [ 1128.648346][ T9673] usb usb34-port1: unable to enumerate USB device [ 1129.487505][ T1284] hsr_slave_0: left promiscuous mode [ 1129.554268][ T1284] hsr_slave_1: left promiscuous mode [ 1129.555302][ T1284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1129.555331][ T1284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1129.586747][ T1284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1129.586777][ T1284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1129.667200][ T1284] veth1_macvtap: left promiscuous mode [ 1129.667323][ T1284] veth0_macvtap: left promiscuous mode [ 1129.667591][ T1284] veth1_vlan: left promiscuous mode [ 1129.667777][ T1284] veth0_vlan: left promiscuous mode [ 1132.207251][ T1284] team0 (unregistering): Port device team_slave_1 removed [ 1132.454751][ T1284] team0 (unregistering): Port device team_slave_0 removed