last executing test programs: 8m13.531373292s ago: executing program 0 (id=589): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) listen(0xffffffffffffffff, 0x8b25714e) userfaultfd(0x1000) 8m11.55929827s ago: executing program 0 (id=592): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = timerfd_create(0x7, 0x0) timerfd_gettime(r3, &(0x7f0000000000)) 8m7.589911408s ago: executing program 0 (id=598): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = getpgrp(0x0) prlimit64(r2, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0x9d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109028b000301007000090400000001010000"], 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000080)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008018}, 0x4000080) 8m2.334345055s ago: executing program 0 (id=606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0x10000008, @mcast2, 0x9}, 0x1c) inotify_init1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 7m59.72778409s ago: executing program 0 (id=611): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES8, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) unshare(0x24020400) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000019080)=0x30) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000800)="6d7073e447d8008cfc1cf31a5f0bd84a119946c0b75dfb85d203c35b3aa517ac064868616799a88d9f2fcc9e6416ef7adf7d880385d9ad89dbefe495118aa992e64eadd19f163a09b298e596d22be83b863e1afdb863f27b7567e76eb562a426f03c075a73d32500733a6542967860b1ffb11b2a8e3f4fff4539f5b4143979a0f17d3a9c0b1974e15baebf814e0b9509ba47df", 0x93}], 0x1, &(0x7f0000000d00)=[{0x98, 0x10b, 0x4, "e8acc9f61f5463a09840af5167395a9ce39457a8d2de79f14e8022196d0a98741225bb757fbdf248e0da227ec50420e51c971ad25929e7ca8a8d547d216a650f3a4821e41bfe06498fca9e0fccc428f097f7fb1c2824d072d15d8804847938e1d64742f275cc9e5b28895fb224c724bb83d45d4857df9e2b4acbe875111fd8a732a0ba11ca190e"}], 0x98}, 0x4000) socket$pppl2tp(0x18, 0x1, 0x1) 7m55.714251493s ago: executing program 0 (id=615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) getpriority(0x1, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_uring_enter(0xffffffffffffffff, 0x8aa, 0x0, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}) 7m40.368038245s ago: executing program 32 (id=615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) getpriority(0x1, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_uring_enter(0xffffffffffffffff, 0x8aa, 0x0, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}) 6m25.461582842s ago: executing program 2 (id=739): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) munlock(&(0x7f0000b5f000/0x2000)=nil, 0x2000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) socketpair$nbd(0x1, 0x1, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000003c0)={{0x1, 0xee01, 0x0, 0x0, 0x0, 0x91}, 0x0, 0x0, 0x7, 0xffffffff, 0x3ff, 0x200, 0x7, 0x4, 0x1, 0xffff}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000b5f000/0x4000)=nil, 0x4000, 0x100000d, 0x2012, 0xffffffffffffffff, 0x0) listen(r1, 0xda90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="88020000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="6102330050300100080211000001080211000000"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 6m23.374759143s ago: executing program 2 (id=744): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$evdev(0x0, 0xc, 0x121600) ioctl$EVIOCGMASK(r2, 0x80104592, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000640)=[0xa181], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000001080)=0xc, 0x4) close(0x3) 6m22.66167801s ago: executing program 2 (id=746): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x60a41, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}}], {0x14}}, 0x3c}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 6m14.587362879s ago: executing program 2 (id=764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x18, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'macvlan1\x00', &(0x7f00000003c0)=@ethtool_drvinfo={0x3, "e959d44ae64b3212a49d27979a610a92d1bbe4842367053cc09337c31224fd28", "513266b351491dd801f9f9769c0189ebf8171361af5f0336899be780d7fc2482", "4a0b8d6d4078fc31c9acf580399a10a81620ff95639bd1d091d2bb04d8b41469", "1a126d3e90bfef84e1df386ed01d2a79151a8be1fd3a8d7d79df206dbac2fd0f", "047ac24ee39ccb1858bba36075429c52b2735c10d5ac5bff1505426dd6e0569e", "000800000000cf9924da0100", 0xffffffff, 0x3, 0x3, 0x5, 0x2}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa}, 0x28) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000080)={0x6, 0xff}, 0x10) write(r6, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) 6m12.516105667s ago: executing program 2 (id=765): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x25000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 6m11.224276952s ago: executing program 2 (id=766): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x1c1840, 0x92) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) sendfile(r3, r2, 0x0, 0x40001) 5m55.619243595s ago: executing program 33 (id=766): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x1c1840, 0x92) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) sendfile(r3, r2, 0x0, 0x40001) 26.260591607s ago: executing program 1 (id=1141): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) 22.881698857s ago: executing program 1 (id=1143): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000200)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17.358069315s ago: executing program 1 (id=1148): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) unshare(0x2040400) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendto$packet(r5, 0x0, 0x0, 0x4, &(0x7f0000000180)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 11.717185174s ago: executing program 1 (id=1152): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfffd}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 9.875181599s ago: executing program 4 (id=1154): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfffd}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 9.687379477s ago: executing program 3 (id=1155): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x40000) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) fcntl$getown(0xffffffffffffffff, 0x9) 9.537060458s ago: executing program 1 (id=1156): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000003200)=""/102400, 0x19000) epoll_create1(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff00000032"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x28, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "cd9585f6f5d8b8105e00"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r0, 0x7, 0x0) fcntl$lock(r0, 0x26, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x2, 0x1, 0x8, 0x2}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) 7.187054508s ago: executing program 3 (id=1157): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, &(0x7f0000003680)) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x2a11, 0x400, 0x1, 0x40000335}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7.006975384s ago: executing program 4 (id=1158): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x71096000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={0x0}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x2}]}}, 0x0, 0x26, 0x0, 0x1, 0x8000}, 0x28) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) 6.937922108s ago: executing program 3 (id=1159): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect(r3, &(0x7f0000000000)=@ieee802154={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80) syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)) socket$nl_rdma(0x10, 0x3, 0x14) 4.181075263s ago: executing program 3 (id=1160): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) unshare(0x2040400) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendto$packet(r5, 0x0, 0x0, 0x4, &(0x7f0000000180)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.178323815s ago: executing program 4 (id=1161): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x204, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="00f0e1", 0x3, 0x2002c144, &(0x7f00000001c0)={0xa, 0x2, 0x0, @loopback, 0xd}, 0x1c) shutdown(r0, 0x1) 3.98089158s ago: executing program 4 (id=1162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_GET_IO_FLUSHER(0x4) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect(r3, &(0x7f0000000000)=@ieee802154={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80) syz_clone(0x25000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) pipe(0x0) socket$nl_rdma(0x10, 0x3, 0x14) 2.059091887s ago: executing program 4 (id=1163): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x300, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg(r4, &(0x7f0000000540)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0xfffe, 0x2, 0x0, 0x3, {0xa, 0x4e22, 0x20064a, @dev={0xfe, 0x80, '\x00', 0x15}, 0x8}}}, 0x80, 0x0}, 0x10040800) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x660bbb32c8e0e6fb, 0x0) 1.98397144s ago: executing program 3 (id=1164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpriority(0x1, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}) 581.654248ms ago: executing program 4 (id=1165): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x40000) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r6}}, 0x18) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r7) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_dev$vim2m(0x0, 0x7, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 86.086897ms ago: executing program 3 (id=1166): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x40000) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) fcntl$getown(0xffffffffffffffff, 0x9) 0s ago: executing program 1 (id=1167): openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, &(0x7f0000003680)) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x2a11, 0x400, 0x1, 0x40000335}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) kernel console output (not intermixed with test programs): s: Mfr=0, Product=0, SerialNumber=0 [ 346.833284][ T36] usb 1-1: config 0 descriptor?? [ 346.834134][ T7774] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 346.925700][ T5921] usb 5-1: USB disconnect, device number 10 [ 348.262004][ T36] usbhid 1-1:0.0: can't add hid device: -71 [ 348.262090][ T36] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 348.295150][ T36] usb 1-1: USB disconnect, device number 6 [ 348.672804][ T7783] netlink: 408 bytes leftover after parsing attributes in process `syz.1.537'. [ 350.918064][ T7799] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.543'. [ 351.018096][ T7797] input: syz0 as /devices/virtual/input/input5 [ 353.375141][ T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 353.714276][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.714299][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 354.653269][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 354.653293][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.653307][ T10] usb 1-1: Product: syz [ 354.653318][ T10] usb 1-1: Manufacturer: syz [ 354.653328][ T10] usb 1-1: SerialNumber: syz [ 355.190936][ T10] usb 1-1: cannot find UAC_HEADER [ 355.395190][ T809] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 355.615161][ T810] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 355.623293][ T809] usb 4-1: config 0 interface 0 altsetting 68 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 355.623338][ T809] usb 4-1: config 0 interface 0 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 355.623381][ T809] usb 4-1: config 0 interface 0 has no altsetting 0 [ 355.623418][ T809] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 355.623443][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.747163][ T809] usb 4-1: config 0 descriptor?? [ 355.749788][ T7821] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 355.865230][ T810] usb 2-1: Using ep0 maxpacket: 8 [ 355.891838][ T810] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 355.891868][ T810] usb 2-1: config 0 has no interface number 0 [ 355.969952][ T810] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 355.971338][ T810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.971363][ T810] usb 2-1: Product: syz [ 355.971378][ T810] usb 2-1: Manufacturer: syz [ 355.971393][ T810] usb 2-1: SerialNumber: syz [ 356.134786][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 356.248210][ T810] usb 2-1: config 0 descriptor?? [ 356.306487][ T809] usbhid 4-1:0.0: can't add hid device: -71 [ 356.306626][ T809] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 356.340918][ T10] usb 1-1: USB disconnect, device number 7 [ 356.392361][ T809] usb 4-1: USB disconnect, device number 12 [ 356.538107][ T7343] udevd[7343]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.568449][ T7822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.568880][ T7822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.623220][ T810] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 356.623288][ T810] uvcvideo 2-1:0.31: No valid video chain found. [ 363.334859][ T10] usb 2-1: USB disconnect, device number 9 [ 363.749975][ T7849] No control pipe specified [ 366.252357][ T7869] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 367.137980][ T7875] loop7: detected capacity change from 0 to 16384 [ 368.536812][ T9] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 368.821799][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 368.821832][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.821853][ T9] usb 2-1: Product: syz [ 368.821867][ T9] usb 2-1: Manufacturer: syz [ 368.821882][ T9] usb 2-1: SerialNumber: syz [ 368.874476][ T9] usb 2-1: config 0 descriptor?? [ 369.294394][ T7890] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 370.204121][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 372.115351][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 372.145166][ T9] usb 2-1: USB disconnect, device number 10 [ 372.424857][ T7904] No control pipe specified [ 376.345186][ T6306] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 376.490444][ T7928] wlan1: mtu less than device minimum [ 376.504347][ T6306] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.504374][ T6306] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 376.528895][ T6306] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 376.528927][ T6306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.528948][ T6306] usb 4-1: Product: syz [ 376.528963][ T6306] usb 4-1: Manufacturer: syz [ 376.528979][ T6306] usb 4-1: SerialNumber: syz [ 379.337173][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.337309][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.592565][ T6306] usb 4-1: cannot find UAC_HEADER [ 380.897044][ T6306] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 380.932910][ T6306] usb 4-1: USB disconnect, device number 13 [ 381.402831][ T7886] udevd[7886]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 386.045105][ T6306] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 386.205130][ T6306] usb 5-1: Using ep0 maxpacket: 32 [ 386.207569][ T6306] usb 5-1: unable to get BOS descriptor or descriptor too short [ 386.233103][ T6306] usb 5-1: config 251 has an invalid interface number: 6 but max is 0 [ 386.233136][ T6306] usb 5-1: config 251 has no interface number 0 [ 386.233170][ T6306] usb 5-1: config 251 interface 6 has no altsetting 0 [ 386.260428][ T6306] usb 5-1: New USB device found, idVendor=10b8, idProduct=1fa8, bcdDevice=ea.98 [ 386.260464][ T6306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.260486][ T6306] usb 5-1: Product: syz [ 386.260502][ T6306] usb 5-1: Manufacturer: syz [ 386.260517][ T6306] usb 5-1: SerialNumber: syz [ 386.552078][ T6306] dvb-usb: found a 'DiBcom NIM8096MD reference design' in cold state, will try to load a firmware [ 386.568839][ T6306] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 386.568888][ T6306] dib0700: firmware download failed at 7 with -22 [ 386.603481][ T6306] usb 5-1: USB disconnect, device number 11 [ 386.805276][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.596'. [ 388.005079][ T6306] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 388.032893][ T7992] No control pipe specified [ 388.175109][ T809] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 388.205226][ T6306] usb 5-1: config 0 interface 0 altsetting 68 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 388.205263][ T6306] usb 5-1: config 0 interface 0 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 388.205292][ T6306] usb 5-1: config 0 interface 0 has no altsetting 0 [ 388.205326][ T6306] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 388.205350][ T6306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.210989][ T6306] usb 5-1: config 0 descriptor?? [ 388.274454][ T7985] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 388.348308][ T809] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.348337][ T809] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 388.354538][ T809] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 388.354626][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.354649][ T809] usb 1-1: Product: syz [ 388.354665][ T809] usb 1-1: Manufacturer: syz [ 388.354680][ T809] usb 1-1: SerialNumber: syz [ 389.989142][ T6306] usbhid 5-1:0.0: can't add hid device: -71 [ 389.989307][ T6306] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 390.037420][ T6306] usb 5-1: USB disconnect, device number 12 [ 391.948136][ T809] usb 1-1: cannot find UAC_HEADER [ 392.233180][ T809] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 392.832933][ T809] usb 1-1: USB disconnect, device number 8 [ 393.554714][ T8016] udevd[8016]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.917803][ T8049] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 399.752025][ T9] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 399.937993][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.938013][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 399.941089][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 399.941111][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.941125][ T9] usb 3-1: Product: syz [ 399.941136][ T9] usb 3-1: Manufacturer: syz [ 399.941146][ T9] usb 3-1: SerialNumber: syz [ 400.165481][ T8059] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 408.152410][ T9] usb 3-1: cannot find UAC_HEADER [ 411.259996][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 411.295532][ T9] usb 3-1: USB disconnect, device number 14 [ 411.344056][ T8016] udevd[8016]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 413.619777][ T5804] Bluetooth: hci1: command 0x0406 tx timeout [ 415.824576][ T5804] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 415.926449][ T5804] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 415.928226][ T5804] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 415.929596][ T5804] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 415.947712][ T5804] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 416.162651][ T8132] fuse: Bad value for 'group_id' [ 416.162671][ T8132] fuse: Bad value for 'group_id' [ 416.235150][ T809] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 416.397499][ T809] usb 4-1: Using ep0 maxpacket: 8 [ 416.399932][ T809] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 416.399969][ T809] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 416.399995][ T809] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 416.400020][ T809] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 416.400062][ T809] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 416.400086][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.740317][ T809] usb 4-1: usb_control_msg returned -32 [ 416.740364][ T809] usbtmc 4-1:16.0: can't read capabilities [ 418.287655][ T5804] Bluetooth: hci5: command tx timeout [ 418.295565][ T809] usb 4-1: USB disconnect, device number 14 [ 420.787972][ T5804] Bluetooth: hci5: command tx timeout [ 422.865163][ T5804] Bluetooth: hci5: command tx timeout [ 423.263955][ T6739] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.909403][ T6739] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.925308][ T5804] Bluetooth: hci5: command tx timeout [ 427.228429][ T6739] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.659062][ T8185] trusted_key: encrypted_key: insufficient parameters specified [ 427.724609][ T6739] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.885062][ T36] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 428.924466][ T8124] chnl_net:caif_netlink_parms(): no params data found [ 429.057383][ T36] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 429.057434][ T36] usb 5-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 429.057459][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.115279][ T36] usb 5-1: config 0 descriptor?? [ 430.204754][ T36] usbhid 5-1:0.0: can't add hid device: -71 [ 430.261826][ T36] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 430.287247][ T36] usb 5-1: USB disconnect, device number 13 [ 430.625753][ T810] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 430.667874][ T8124] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.668005][ T8124] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.668176][ T8124] bridge_slave_0: entered allmulticast mode [ 430.670904][ T8124] bridge_slave_0: entered promiscuous mode [ 430.725359][ T8124] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.725735][ T8124] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.725997][ T8124] bridge_slave_1: entered allmulticast mode [ 430.767277][ T8124] bridge_slave_1: entered promiscuous mode [ 430.788198][ T810] usb 3-1: Using ep0 maxpacket: 16 [ 430.790092][ T810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.790132][ T810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 430.790152][ T810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 430.790167][ T810] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 430.790183][ T810] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.793755][ T810] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 430.793791][ T810] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 430.793806][ T810] usb 3-1: Manufacturer: syz [ 430.960209][ T810] usb 3-1: config 0 descriptor?? [ 431.262129][ T8204] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 432.285086][ T810] rc_core: IR keymap rc-hauppauge not found [ 432.285107][ T810] Registered IR keymap rc-empty [ 432.285751][ T810] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.307740][ T810] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.328593][ T810] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 432.334807][ T810] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 432.384629][ T6739] bridge_slave_1: left allmulticast mode [ 432.384662][ T6739] bridge_slave_1: left promiscuous mode [ 432.397554][ T6739] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.439050][ T810] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.793546][ T810] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.811686][ T810] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.825104][ T810] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.845344][ T810] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.865260][ T810] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.873704][ T6739] bridge_slave_0: left allmulticast mode [ 432.873736][ T6739] bridge_slave_0: left promiscuous mode [ 432.889438][ T810] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.907296][ T810] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.922595][ T6739] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.925388][ T810] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.945163][ T810] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.982724][ T810] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 432.982747][ T810] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 433.094709][ T810] usb 3-1: USB disconnect, device number 15 [ 436.355117][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 436.515071][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 436.518485][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 436.520055][ T10] usb 5-1: config 251 has an invalid interface number: 6 but max is 0 [ 436.520083][ T10] usb 5-1: config 251 has no interface number 0 [ 436.520116][ T10] usb 5-1: config 251 interface 6 has no altsetting 0 [ 436.532428][ T10] usb 5-1: New USB device found, idVendor=10b8, idProduct=1fa8, bcdDevice=ea.98 [ 436.532460][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.532481][ T10] usb 5-1: Product: syz [ 436.532496][ T10] usb 5-1: Manufacturer: syz [ 436.532511][ T10] usb 5-1: SerialNumber: syz [ 440.894196][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.894269][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.215094][ T809] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 441.595494][ T10] dvb-usb: found a 'DiBcom NIM8096MD reference design' in cold state, will try to load a firmware [ 441.656244][ T8235] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.668'. [ 441.746952][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 441.747017][ T10] dib0700: firmware download failed at 7 with -22 [ 441.861582][ T10] usb 5-1: USB disconnect, device number 14 [ 441.863810][ T8239] netlink: 68 bytes leftover after parsing attributes in process `syz.1.670'. [ 442.658115][ T6739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.775682][ T6739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.005069][ T6739] bond0 (unregistering): Released all slaves [ 443.624863][ T810] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 443.777065][ T810] usb 4-1: Using ep0 maxpacket: 16 [ 443.779587][ T810] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.779670][ T810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 443.779699][ T810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 443.779722][ T810] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 443.779744][ T810] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.781502][ T810] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 443.781531][ T810] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 443.781551][ T810] usb 4-1: Manufacturer: syz [ 443.888436][ T8124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.893694][ T810] usb 4-1: config 0 descriptor?? [ 443.936109][ T8225] netlink: 24 bytes leftover after parsing attributes in process `syz.2.664'. [ 444.036925][ T8124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.315209][ T8124] team0: Port device team_slave_0 added [ 444.320715][ T8124] team0: Port device team_slave_1 added [ 444.399846][ T810] rc_core: IR keymap rc-hauppauge not found [ 444.399868][ T810] Registered IR keymap rc-empty [ 444.400027][ T810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 444.415223][ T810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 444.453819][ T810] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 444.481309][ T810] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 444.521079][ T810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 444.552296][ T810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 444.565255][ T810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 444.585131][ T810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 444.605154][ T810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 444.625170][ T810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 444.645318][ T810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 444.665102][ T810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 444.686125][ T810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 444.705137][ T810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 444.741389][ T810] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 444.741408][ T810] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 444.828944][ T810] usb 4-1: USB disconnect, device number 15 [ 445.179186][ T8270] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 448.085028][ T810] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 448.435332][ T810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 448.435365][ T810] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 448.435391][ T810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 448.435412][ T810] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 448.435452][ T810] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 448.435475][ T810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.439971][ T8124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.439989][ T8124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.440016][ T8124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.457851][ T5804] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 448.564197][ T8124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.564243][ T8124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.564271][ T8124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.623191][ T810] usb 2-1: config 0 descriptor?? [ 449.326743][ T810] hdpvr 2-1:0.0: unexpected answer of status request, len 0 [ 449.326762][ T810] hdpvr 2-1:0.0: device init failed [ 449.326823][ T810] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 449.998009][ T6739] hsr_slave_0: left promiscuous mode [ 450.040696][ T6739] hsr_slave_1: left promiscuous mode [ 450.042013][ T6739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.042047][ T6739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.089034][ T6739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.089063][ T6739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.228736][ T6739] veth1_macvtap: left promiscuous mode [ 450.228807][ T6739] veth0_macvtap: left promiscuous mode [ 450.228969][ T6739] veth1_vlan: left promiscuous mode [ 450.229081][ T6739] veth0_vlan: left promiscuous mode [ 450.612241][ T809] usb 2-1: USB disconnect, device number 12 [ 451.596097][ T37] audit: type=1804 audit(1772216762.756:3): pid=8322 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.690" name="/newroot/40/bus/bus" dev="overlay" ino=243 res=1 errno=0 [ 452.795104][ T810] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 452.947601][ T810] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.947634][ T810] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 452.949414][ T810] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 452.949447][ T810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 452.949468][ T810] usb 4-1: SerialNumber: syz [ 453.393426][ T810] usb 4-1: 0:2 : does not exist [ 453.539819][ T810] usb 4-1: USB disconnect, device number 16 [ 454.002594][ T6739] team0 (unregistering): Port device team_slave_1 removed [ 454.093679][ T6739] team0 (unregistering): Port device team_slave_0 removed [ 454.664300][ T8124] hsr_slave_0: entered promiscuous mode [ 454.675983][ T8124] hsr_slave_1: entered promiscuous mode [ 455.256618][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.695'. [ 455.282693][ T8339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.695'. [ 455.331296][ T5804] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 456.239343][ T8348] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.697'. [ 456.798521][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 456.965726][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 456.965757][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 456.965783][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 456.965805][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 456.965843][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 456.965867][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.213903][ T10] usb 5-1: config 0 descriptor?? [ 457.241829][ T8358] wlan1: mtu less than device minimum [ 457.931856][ T10] hdpvr 5-1:0.0: unexpected answer of status request, len 0 [ 457.931881][ T10] hdpvr 5-1:0.0: device init failed [ 457.932688][ T10] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 458.070382][ T5842] libceph: connect (1)[c::]:6789 error -101 [ 458.070576][ T5842] libceph: mon0 (1)[c::]:6789 connect error [ 458.106268][ T5842] libceph: connect (1)[c::]:6789 error -101 [ 458.106487][ T5842] libceph: mon0 (1)[c::]:6789 connect error [ 458.106979][ T8363] ceph: No mds server is up or the cluster is laggy [ 458.271744][ T8124] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 458.396499][ T8124] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 458.462360][ T8124] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 458.563448][ T8124] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 460.396973][ T37] audit: type=1804 audit(1772216770.576:4): pid=8392 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.705" name="/newroot/143/bus/bus" dev="overlay" ino=772 res=1 errno=0 [ 461.669229][ T809] usb 5-1: USB disconnect, device number 15 [ 461.730644][ T8399] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.707'. [ 461.905015][ T5802] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 462.025461][ T8402] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 462.065090][ T5802] usb 4-1: device descriptor read/64, error -71 [ 462.386432][ T5802] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 462.782694][ T5802] usb 4-1: device descriptor read/64, error -71 [ 462.812927][ T8124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.901457][ T5802] usb usb4-port1: attempt power cycle [ 462.940680][ T8124] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.018875][ T8413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'. [ 463.054334][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'. [ 463.945165][ T5802] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 463.966822][ T5802] usb 4-1: device descriptor read/8, error -71 [ 463.995641][ T6739] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.995803][ T6739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.149420][ T487] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.149561][ T487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.233865][ T5802] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 464.275773][ T5802] usb 4-1: device descriptor read/8, error -71 [ 464.385515][ T5802] usb usb4-port1: unable to enumerate USB device [ 464.575163][ T809] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 464.583902][ T5804] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 464.726291][ T809] usb 2-1: Using ep0 maxpacket: 32 [ 464.730485][ T809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.730541][ T809] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 464.730585][ T809] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 464.730608][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.788531][ T809] usb 2-1: config 0 descriptor?? [ 464.840663][ T809] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 465.734578][ T8427] syz.3.713 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 468.031947][ T809] usb 2-1: USB disconnect, device number 13 [ 468.487055][ T8124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.545109][ T36] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 468.719741][ T36] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 468.719799][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.719814][ T36] usb 4-1: Product: syz [ 468.719825][ T36] usb 4-1: Manufacturer: syz [ 468.719835][ T36] usb 4-1: SerialNumber: syz [ 468.815934][ T36] usb 4-1: config 0 descriptor?? [ 468.915055][ T809] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 469.058289][ T36] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 469.109616][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 469.109702][ T809] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 469.109728][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 469.109750][ T809] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 469.109790][ T809] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 469.110189][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.298415][ T809] usb 5-1: config 0 descriptor?? [ 470.005797][ T809] hdpvr 5-1:0.0: unexpected answer of status request, len 0 [ 470.007737][ T809] hdpvr 5-1:0.0: device init failed [ 470.007831][ T809] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 470.819640][ T36] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 470.890932][ T36] usb 4-1: USB disconnect, device number 21 [ 470.927323][ T8124] veth0_vlan: entered promiscuous mode [ 470.989749][ T8124] veth1_vlan: entered promiscuous mode [ 471.289882][ T8470] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 472.097111][ T36] usb 5-1: USB disconnect, device number 16 [ 472.394857][ T8124] veth0_macvtap: entered promiscuous mode [ 472.413086][ T8124] veth1_macvtap: entered promiscuous mode [ 472.511788][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.720'. [ 472.533078][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.720'. [ 473.496390][ T8124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.793316][ T8484] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 474.779358][ T8124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.506116][ T8499] veth0_vlan: entered allmulticast mode [ 478.352022][ T8507] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 478.911720][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 478.929642][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 478.930101][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 478.931238][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 478.932101][ T5805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 479.265055][ T5879] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 479.441082][ T5879] usb 3-1: Using ep0 maxpacket: 32 [ 479.897215][ T5879] usb 3-1: device descriptor read/all, error -71 [ 479.903800][ T8499] veth0_vlan: left allmulticast mode [ 480.705054][ T810] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 481.850043][ T37] audit: type=1804 audit(1772216792.296:5): pid=8531 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.731" name="/newroot/148/bus/bus" dev="overlay" ino=806 res=1 errno=0 [ 481.899397][ T5804] Bluetooth: hci0: command tx timeout [ 482.861622][ T5879] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 482.891015][ T810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 482.891048][ T810] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 482.891074][ T810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 482.891096][ T810] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 482.891137][ T810] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 482.891161][ T810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.118019][ T810] usb 4-1: config 0 descriptor?? [ 483.254999][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 483.309914][ T5879] usb 3-1: device descriptor read/all, error -71 [ 483.310662][ T5879] usb usb3-port1: attempt power cycle [ 483.396902][ T810] hdpvr 4-1:0.0: unexpected answer of status request, len -71 [ 483.396928][ T810] hdpvr 4-1:0.0: device init failed [ 483.397008][ T810] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 483.456121][ T810] usb 4-1: USB disconnect, device number 22 [ 484.002802][ T5804] Bluetooth: hci0: command tx timeout [ 486.047696][ T5804] Bluetooth: hci0: command tx timeout [ 488.128382][ T5804] Bluetooth: hci0: command tx timeout [ 488.434441][ T8513] chnl_net:caif_netlink_parms(): no params data found [ 490.208201][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'. [ 490.580044][ T8568] tipc: Failed to remove unknown binding: 66,1,1/0:268773480/268773482 [ 491.206065][ T5879] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 491.687271][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 491.687302][ T5879] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 491.687333][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 491.687355][ T5879] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 491.687393][ T5879] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 491.687415][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.693348][ T5879] usb 5-1: config 0 descriptor?? [ 492.171356][ T5879] hdpvr 5-1:0.0: firmware version 0x0 dated [ 492.171414][ T5879] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 493.720806][ T5879] hdpvr 5-1:0.0: Could not setup controls [ 493.721278][ T5879] hdpvr 5-1:0.0: registering videodev failed [ 493.750770][ T5879] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71 [ 493.789757][ T5879] usb 5-1: USB disconnect, device number 17 [ 494.044840][ T8600] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 498.480505][ T8631] netlink: 24 bytes leftover after parsing attributes in process `syz.3.757'. [ 498.689001][ T8513] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.689129][ T8513] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.689389][ T8513] bridge_slave_0: entered allmulticast mode [ 498.729633][ T8513] bridge_slave_0: entered promiscuous mode [ 498.970990][ T5802] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 499.468603][ T5802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 499.468634][ T5802] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 499.468659][ T5802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 499.468680][ T5802] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 499.468720][ T5802] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 499.468743][ T5802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.525350][ T8513] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.525773][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.526507][ T8513] bridge_slave_1: entered allmulticast mode [ 499.533705][ T8513] bridge_slave_1: entered promiscuous mode [ 499.538575][ T5802] usb 5-1: config 0 descriptor?? [ 499.595104][ T6306] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 499.745882][ T6306] usb 2-1: Using ep0 maxpacket: 32 [ 500.240964][ T5802] hdpvr 5-1:0.0: firmware version 0x0 dated [ 500.240985][ T5802] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 500.245778][ T6306] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 500.245865][ T6306] usb 2-1: config 0 has no interface number 0 [ 500.272432][ T6306] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 500.272519][ T6306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.272574][ T6306] usb 2-1: Product: syz [ 500.272616][ T6306] usb 2-1: Manufacturer: syz [ 500.272657][ T6306] usb 2-1: SerialNumber: syz [ 500.328009][ T6306] usb 2-1: config 0 descriptor?? [ 500.385108][ T810] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 500.527869][ T8513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.535875][ T8513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.606812][ T810] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 501.606842][ T810] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 501.608746][ T810] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 501.608829][ T810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 501.608852][ T810] usb 4-1: SerialNumber: syz [ 501.743228][ T6306] radio-si470x 2-1:0.35: DeviceID=0x9242 ChipID=0x0000 [ 501.743256][ T6306] radio-si470x 2-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 501.815466][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.815613][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.936752][ T6306] radio-si470x 2-1:0.35: software version 146, hardware version 66 [ 501.936799][ T6306] radio-si470x 2-1:0.35: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 502.098875][ T810] usb 4-1: 0:2 : does not exist [ 502.145417][ T6306] radio-si470x 2-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 502.145787][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 502.146118][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 502.146347][ C1] radio-si470x 2-1:0.35: non-zero urb status (-71) [ 502.146471][ T6306] radio-si470x 2-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 502.149070][ T6306] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -22 [ 502.162004][ T8513] team0: Port device team_slave_0 added [ 502.196067][ T6306] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 503.079063][ T8513] team0: Port device team_slave_1 added [ 503.570733][ T37] audit: type=1804 audit(1772216814.736:6): pid=8665 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.766" name="/newroot/56/bus/bus" dev="overlay" ino=335 res=1 errno=0 [ 503.622607][ T6306] usb 2-1: USB disconnect, device number 14 [ 503.666954][ T5802] hdpvr 5-1:0.0: Could not setup controls [ 503.667679][ T5802] hdpvr 5-1:0.0: registering videodev failed [ 503.732581][ T8668] netlink: 24 bytes leftover after parsing attributes in process `syz.3.771'. [ 503.733942][ T810] usb 4-1: USB disconnect, device number 23 [ 504.352967][ T5802] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71 [ 504.576996][ T5802] usb 5-1: USB disconnect, device number 18 [ 505.665727][ T8513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.665747][ T8513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.665774][ T8513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.677397][ T8513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.677444][ T8513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.677509][ T8513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.041831][ T8016] udevd[8016]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 509.844517][ T8513] hsr_slave_0: entered promiscuous mode [ 509.882801][ T8513] hsr_slave_1: entered promiscuous mode [ 509.883744][ T8513] debugfs: 'hsr0' already exists in 'hsr' [ 509.883769][ T8513] Cannot create hsr debugfs directory [ 512.057659][ T8077] bridge_slave_1: left allmulticast mode [ 512.057689][ T8077] bridge_slave_1: left promiscuous mode [ 512.057922][ T8077] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.221063][ T8077] bridge_slave_0: left allmulticast mode [ 512.221105][ T8077] bridge_slave_0: left promiscuous mode [ 512.221397][ T8077] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.326152][ T8711] netlink: 24 bytes leftover after parsing attributes in process `syz.4.781'. [ 514.913888][ T8737] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 515.419750][ T8739] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 516.258245][ T8077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.446447][ T8077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.511173][ T8077] bond0 (unregistering): Released all slaves [ 517.654954][ T8077] hsr_slave_0: left promiscuous mode [ 517.719120][ T8077] hsr_slave_1: left promiscuous mode [ 517.720185][ T8077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.720212][ T8077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.785072][ T8077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.785103][ T8077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.488394][ T8077] veth1_macvtap: left promiscuous mode [ 518.488508][ T8077] veth0_macvtap: left promiscuous mode [ 518.488758][ T8077] veth1_vlan: left promiscuous mode [ 518.488915][ T8077] veth0_vlan: left promiscuous mode [ 518.555011][ T810] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 518.737278][ T810] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 518.737308][ T810] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 518.738768][ T810] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 518.738798][ T810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 518.738818][ T810] usb 4-1: SerialNumber: syz [ 519.004540][ T810] usb 4-1: 0:2 : does not exist [ 519.319633][ T810] usb 4-1: USB disconnect, device number 24 [ 519.530299][ T5805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 519.546826][ T5805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 519.569458][ T5805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 519.581269][ T5805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 519.582529][ T5805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 519.949757][ T8016] udevd[8016]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 520.938990][ T8775] netlink: 24 bytes leftover after parsing attributes in process `syz.4.799'. [ 521.640189][ T8783] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 521.899998][ T5804] Bluetooth: hci5: command tx timeout [ 522.515123][ T5879] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 522.516673][ T8077] team0 (unregistering): Port device team_slave_1 removed [ 522.577872][ T8077] team0 (unregistering): Port device team_slave_0 removed [ 522.696409][ T5879] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 522.696442][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.696463][ T5879] usb 4-1: Product: syz [ 522.696478][ T5879] usb 4-1: Manufacturer: syz [ 522.696493][ T5879] usb 4-1: SerialNumber: syz [ 522.738890][ T5879] usb 4-1: config 0 descriptor?? [ 522.946861][ T5879] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 523.528188][ T8792] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 524.031785][ T5804] Bluetooth: hci5: command tx timeout [ 524.871222][ T5879] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 524.886600][ T5879] usb 4-1: USB disconnect, device number 25 [ 525.342903][ T8796] No control pipe specified [ 527.398401][ T5804] Bluetooth: hci5: command tx timeout [ 527.853497][ T8809] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 529.405409][ T5804] Bluetooth: hci5: command tx timeout [ 529.835471][ T8826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.811'. [ 530.500704][ T8828] syz.3.810 (8828) used greatest stack depth: 18560 bytes left [ 530.715475][ T8769] chnl_net:caif_netlink_parms(): no params data found [ 531.079814][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 531.246180][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 531.248640][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 531.248690][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 531.248714][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.302741][ T10] usb 4-1: config 0 descriptor?? [ 531.774356][ T10] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 531.826979][ T10] usb 4-1: USB disconnect, device number 26 [ 531.895609][ T8077] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.955291][ T8769] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.955523][ T8769] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.956001][ T8769] bridge_slave_0: entered allmulticast mode [ 531.961472][ T8769] bridge_slave_0: entered promiscuous mode [ 532.015270][ T8769] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.015380][ T8769] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.015546][ T8769] bridge_slave_1: entered allmulticast mode [ 532.017716][ T8769] bridge_slave_1: entered promiscuous mode [ 532.374047][ T8077] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.296389][ T8769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.368590][ T8769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.810451][ T8077] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.073009][ T5805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 537.078981][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 537.080895][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 537.081982][ T5805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 537.082763][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 538.468139][ T8077] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.552306][ T5804] Bluetooth: hci1: command tx timeout [ 541.169556][ T8769] team0: Port device team_slave_0 added [ 541.257625][ T8769] team0: Port device team_slave_1 added [ 541.458356][ T8769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.458376][ T8769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.458403][ T8769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.460872][ T8769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.460888][ T8769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.460916][ T8769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.566405][ T5804] Bluetooth: hci1: command tx timeout [ 541.617317][ T5842] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 541.665032][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 541.970854][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.970883][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 541.972071][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 541.972098][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 541.972119][ T10] usb 5-1: SerialNumber: syz [ 543.136523][ T5842] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 543.136558][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.136580][ T5842] usb 2-1: Product: syz [ 543.136596][ T5842] usb 2-1: Manufacturer: syz [ 543.136612][ T5842] usb 2-1: SerialNumber: syz [ 543.523142][ T10] usb 5-1: 0:2 : does not exist [ 543.645025][ T5804] Bluetooth: hci1: command tx timeout [ 543.647214][ T8769] hsr_slave_0: entered promiscuous mode [ 543.648712][ T8769] hsr_slave_1: entered promiscuous mode [ 543.978861][ T10] usb 5-1: USB disconnect, device number 19 [ 544.119846][ T8016] udevd[8016]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 544.176764][ T5842] usb 2-1: config 0 descriptor?? [ 544.890668][ T8077] bridge_slave_1: left allmulticast mode [ 544.890701][ T8077] bridge_slave_1: left promiscuous mode [ 544.892231][ T8077] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.919115][ T5842] usb 2-1: can't set config #0, error -71 [ 544.954743][ T5842] usb 2-1: USB disconnect, device number 15 [ 545.030385][ T8077] bridge_slave_0: left allmulticast mode [ 545.030416][ T8077] bridge_slave_0: left promiscuous mode [ 545.030665][ T8077] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.070280][ T8915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.826'. [ 546.174947][ T5804] Bluetooth: hci1: command tx timeout [ 552.402775][ T8077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.465794][ T8077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.518349][ T8077] bond0 (unregistering): Released all slaves [ 552.650843][ T1238] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 553.080973][ T1238] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.081003][ T1238] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 553.082498][ T1238] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 553.082531][ T1238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 553.082553][ T1238] usb 2-1: SerialNumber: syz [ 553.391387][ T1238] usb 2-1: 0:2 : does not exist [ 553.662652][ T1238] usb 2-1: USB disconnect, device number 16 [ 553.800090][ T8952] udevd[8952]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 554.645533][ T8876] chnl_net:caif_netlink_parms(): no params data found [ 554.756870][ T8962] ubi31: attaching mtd0 [ 554.791310][ T8962] ubi31: scanning is finished [ 554.791333][ T8962] ubi31: empty MTD device detected [ 554.839018][ T8968] netlink: 16 bytes leftover after parsing attributes in process `syz.3.836'. [ 555.135061][ T5879] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 555.208111][ T8962] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 555.208143][ T8962] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 555.208163][ T8962] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 555.208181][ T8962] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 555.208199][ T8962] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 555.208217][ T8962] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 555.208234][ T8962] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2841600696 [ 555.208254][ T8962] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 555.210009][ T8973] ubi31: background thread "ubi_bgt31d" started, PID 8973 [ 555.317492][ T5879] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.317523][ T5879] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 555.319016][ T5879] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 555.319045][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 555.319067][ T5879] usb 2-1: SerialNumber: syz [ 555.661472][ T5879] usb 2-1: 0:2 : does not exist [ 555.661575][ T5879] usb 2-1: unit 5 not found! [ 555.778017][ T5879] usb 2-1: USB disconnect, device number 17 [ 556.332373][ T8982] udevd[8982]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 558.902003][ T1238] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 559.023353][ T8077] hsr_slave_0: left promiscuous mode [ 559.072901][ T8077] hsr_slave_1: left promiscuous mode [ 559.074653][ T8077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.074683][ T8077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.099362][ T1238] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 559.099398][ T1238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.099415][ T1238] usb 5-1: Product: syz [ 559.099425][ T1238] usb 5-1: Manufacturer: syz [ 559.099436][ T1238] usb 5-1: SerialNumber: syz [ 559.165182][ T1238] usb 5-1: config 0 descriptor?? [ 559.170568][ T8077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.170600][ T8077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.856352][ T1238] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 560.900767][ T8077] veth1_macvtap: left promiscuous mode [ 560.900873][ T8077] veth0_macvtap: left promiscuous mode [ 560.901132][ T8077] veth1_vlan: left promiscuous mode [ 560.901301][ T8077] veth0_vlan: left promiscuous mode [ 561.175009][ T810] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 561.329378][ T810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 561.329409][ T810] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 561.329470][ T810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 561.329486][ T810] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 561.329515][ T810] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 561.329532][ T810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.417345][ T810] usb 2-1: config 0 descriptor?? [ 561.705987][ T8077] team0 (unregistering): Port device team_slave_1 removed [ 561.746009][ T8077] team0 (unregistering): Port device team_slave_0 removed [ 562.646021][ T810] hdpvr 2-1:0.0: firmware version 0x8 dated [ 562.655038][ T8769] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 562.729733][ T8769] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 562.865238][ T8769] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 562.876566][ T1238] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 562.963293][ T8769] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 562.978120][ T1238] usb 5-1: USB disconnect, device number 20 [ 563.030140][ T8876] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.030262][ T8876] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.030424][ T8876] bridge_slave_0: entered allmulticast mode [ 563.085710][ T8876] bridge_slave_0: entered promiscuous mode [ 563.336661][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.336738][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.410848][ T8876] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.411082][ T8876] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.411333][ T8876] bridge_slave_1: entered allmulticast mode [ 563.414294][ T8876] bridge_slave_1: entered promiscuous mode [ 564.320756][ T810] hdpvr 2-1:0.0: Could not setup controls [ 564.321470][ T810] hdpvr 2-1:0.0: registering videodev failed [ 564.433580][ T810] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -71 [ 564.491410][ T810] usb 2-1: USB disconnect, device number 18 [ 567.132545][ T9041] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 567.184966][ T8876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.398941][ T8876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.775774][ T9049] wlan1: mtu less than device minimum [ 570.869221][ T8876] team0: Port device team_slave_0 added [ 570.916344][ T8876] team0: Port device team_slave_1 added [ 572.070431][ T8876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.070449][ T8876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.070478][ T8876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.153554][ T8876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.153573][ T8876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.153602][ T8876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.462546][ T9068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.858'. [ 572.995594][ T8876] hsr_slave_0: entered promiscuous mode [ 573.499287][ T8876] hsr_slave_1: entered promiscuous mode [ 573.500378][ T8876] debugfs: 'hsr0' already exists in 'hsr' [ 573.500407][ T8876] Cannot create hsr debugfs directory [ 573.772242][ T9078] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 574.759138][ T9081] wlan1: mtu less than device minimum [ 575.198557][ T8769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.435779][ T9089] wlan1: mtu less than device minimum [ 575.588197][ T8769] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.797502][ T8769] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 575.797529][ T8769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 576.751660][ T6793] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.754036][ T6793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.994619][ T6793] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.005662][ T6793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.940898][ T8769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.066372][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 578.275011][ T10] usb 2-1: config 1 has an invalid descriptor of length 89, skipping remainder of the config [ 578.275072][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 578.275113][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 578.361783][ T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 578.361825][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 578.361888][ T10] usb 2-1: SerialNumber: syz [ 579.357866][ T10] usb 2-1: 0:2 : does not exist [ 579.465334][ T10] usb 2-1: USB disconnect, device number 19 [ 579.661733][ T8952] udevd[8952]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 579.848799][ T8077] bridge_slave_1: left allmulticast mode [ 579.848836][ T8077] bridge_slave_1: left promiscuous mode [ 579.849117][ T8077] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.946991][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.870'. [ 580.077753][ T8077] bridge_slave_0: left allmulticast mode [ 580.077787][ T8077] bridge_slave_0: left promiscuous mode [ 580.078060][ T8077] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.410909][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 582.525206][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 582.574602][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 582.587770][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 582.588553][ T5805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 583.257500][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.873'. [ 583.403749][ T9149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.873'. [ 584.315975][ T8077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.486409][ T8077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.819261][ T8077] bond0 (unregistering): Released all slaves [ 585.133015][ T5805] Bluetooth: hci0: command tx timeout [ 586.554084][ T9170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.880'. [ 586.715452][ T8077] hsr_slave_0: left promiscuous mode [ 586.854401][ T9173] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 587.165003][ T5805] Bluetooth: hci0: command tx timeout [ 587.878722][ T8077] hsr_slave_1: left promiscuous mode [ 587.954401][ T8077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.890454][ T8077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.932893][ T9180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.883'. [ 589.245722][ T5805] Bluetooth: hci0: command tx timeout [ 589.335447][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.886'. [ 589.461643][ T9191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.886'. [ 590.669006][ T8077] team0 (unregistering): Port device team_slave_1 removed [ 590.705722][ T8077] team0 (unregistering): Port device team_slave_0 removed [ 591.082512][ T37] audit: type=1804 audit(1772216902.226:7): pid=9201 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.887" name="/newroot/201/bus/bus" dev="overlay" ino=1080 res=1 errno=0 [ 592.450735][ T8876] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 592.733452][ T8876] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 593.175042][ T810] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 593.380747][ T810] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 593.380778][ T810] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.380800][ T810] usb 5-1: config 0 has no interfaces? [ 593.380829][ T810] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 593.380853][ T810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.457245][ T810] usb 5-1: config 0 descriptor?? [ 593.533111][ T8876] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 593.668312][ T8876] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 596.141185][ T8876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.143518][ T6306] usb 5-1: USB disconnect, device number 21 [ 596.275313][ T9143] chnl_net:caif_netlink_parms(): no params data found [ 599.213975][ T9143] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.214116][ T9143] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.214358][ T9143] bridge_slave_0: entered allmulticast mode [ 599.238042][ T9143] bridge_slave_0: entered promiscuous mode [ 599.260364][ T9143] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.273863][ T9143] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.274124][ T9143] bridge_slave_1: entered allmulticast mode [ 599.297789][ T9143] bridge_slave_1: entered promiscuous mode [ 599.426569][ T5804] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 599.434661][ T5804] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 599.458677][ T5804] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 599.465709][ T5804] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 599.468195][ T5804] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 599.677880][ T9143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.695053][ T5921] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 599.724180][ T9143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.854986][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 599.880352][ T5921] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 599.880412][ T5921] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 599.880442][ T5921] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 599.880469][ T5921] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 599.880513][ T5921] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 599.880537][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.979808][ T5921] usbtmc 5-1:16.0: bulk endpoints not found [ 600.873781][ T9143] team0: Port device team_slave_0 added [ 600.884956][ T1238] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 600.891871][ T9143] team0: Port device team_slave_1 added [ 601.038302][ T1238] usb 4-1: config 1 has an invalid descriptor of length 89, skipping remainder of the config [ 601.038329][ T1238] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 601.039738][ T1238] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 601.039770][ T1238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 601.039792][ T1238] usb 4-1: SerialNumber: syz [ 601.325743][ T9143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.325763][ T9143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.325793][ T9143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.336686][ T9143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.336704][ T9143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.336776][ T9143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.425190][ T1238] usb 4-1: 0:2 : does not exist [ 601.425261][ T1238] usb 4-1: unit 5 not found! [ 601.525201][ T1238] usb 4-1: USB disconnect, device number 27 [ 601.565053][ T5805] Bluetooth: hci5: command tx timeout [ 601.653061][ T8952] udevd[8952]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 602.383613][ T9308] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 603.615066][ T37] audit: type=1804 audit(1772216914.496:8): pid=9310 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.899" name="/newroot/204/bus/bus" dev="overlay" ino=1104 res=1 errno=0 [ 603.655782][ T5805] Bluetooth: hci5: command tx timeout [ 604.196397][ T5879] usb 5-1: USB disconnect, device number 22 [ 604.551864][ T9313] netlink: 181284 bytes leftover after parsing attributes in process `syz.4.900'. [ 605.727979][ T5805] Bluetooth: hci5: command tx timeout [ 606.352327][ T9323] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 611.060436][ T5805] Bluetooth: hci5: command tx timeout [ 611.911847][ T9143] hsr_slave_0: entered promiscuous mode [ 611.913230][ T9143] hsr_slave_1: entered promiscuous mode [ 611.914251][ T9143] debugfs: 'hsr0' already exists in 'hsr' [ 611.914277][ T9143] Cannot create hsr debugfs directory [ 612.195728][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.904'. [ 612.283936][ T9336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.904'. [ 613.400018][ T9344] ubi: mtd0 is already attached to ubi31 [ 613.401710][ T9344] netlink: 16 bytes leftover after parsing attributes in process `syz.3.908'. [ 614.142333][ T9353] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 615.693822][ T37] audit: type=1804 audit(1772216926.826:9): pid=9362 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.911" name="/newroot/205/bus/bus" dev="overlay" ino=1108 res=1 errno=0 [ 620.133347][ T8077] bridge_slave_1: left allmulticast mode [ 620.133379][ T8077] bridge_slave_1: left promiscuous mode [ 620.133648][ T8077] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.417325][ T9381] netlink: 181392 bytes leftover after parsing attributes in process `syz.4.916'. [ 620.536818][ T8077] bridge_slave_0: left allmulticast mode [ 620.536850][ T8077] bridge_slave_0: left promiscuous mode [ 620.537119][ T8077] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.675923][ T9385] overlayfs: failed to resolve './file2': -2 [ 620.694398][ T5879] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 621.785226][ T5906] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 621.790750][ T5879] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 621.790780][ T5879] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 621.792350][ T5879] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 621.792432][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 621.792455][ T5879] usb 2-1: SerialNumber: syz [ 622.187044][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 623.621510][ T5906] usb 5-1: device descriptor read/all, error -71 [ 624.622693][ T5879] usb 2-1: 0:2 : does not exist [ 624.622800][ T5879] usb 2-1: unit 5 not found! [ 624.695551][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.695625][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.805360][ T5879] usb 2-1: USB disconnect, device number 20 [ 625.073653][ T9378] udevd[9378]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 626.433033][ T37] audit: type=1804 audit(1772216937.586:10): pid=9407 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.922" name="/newroot/208/bus/bus" dev="overlay" ino=1132 res=1 errno=0 [ 628.775797][ T8077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 629.006243][ T8077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.398034][ T8077] bond0 (unregistering): Released all slaves [ 630.736211][ T9424] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 634.047490][ T9263] chnl_net:caif_netlink_parms(): no params data found [ 635.494938][ T8077] hsr_slave_0: left promiscuous mode [ 635.557188][ T8077] hsr_slave_1: left promiscuous mode [ 635.558265][ T8077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.895542][ T8077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.795853][ T8077] team0 (unregistering): Port device team_slave_1 removed [ 638.865813][ T8077] team0 (unregistering): Port device team_slave_0 removed [ 641.903880][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 641.913742][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 641.914171][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 641.921127][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 641.921936][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 642.048184][ T9263] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.048389][ T9263] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.048638][ T9263] bridge_slave_0: entered allmulticast mode [ 642.051741][ T9263] bridge_slave_0: entered promiscuous mode [ 642.101567][ T9263] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.101705][ T9263] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.101947][ T9263] bridge_slave_1: entered allmulticast mode [ 642.130919][ T9263] bridge_slave_1: entered promiscuous mode [ 642.259176][ T9263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.288364][ T9263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.601225][ T5804] Bluetooth: hci1: command tx timeout [ 645.897321][ T9263] team0: Port device team_slave_0 added [ 646.257582][ T37] audit: type=1804 audit(1772216957.376:11): pid=9506 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.942" name="/newroot/205/bus/bus" dev="overlay" ino=1125 res=1 errno=0 [ 648.108321][ T5804] Bluetooth: hci1: command tx timeout [ 648.282066][ T9263] team0: Port device team_slave_1 added [ 648.693215][ T9263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.693234][ T9263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.693263][ T9263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.069185][ T9263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.069205][ T9263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.069235][ T9263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.385241][ T5804] Bluetooth: hci1: command tx timeout [ 651.694181][ T9263] hsr_slave_0: entered promiscuous mode [ 651.716454][ T9525] netlink: 408 bytes leftover after parsing attributes in process `syz.4.948'. [ 651.718576][ T9263] hsr_slave_1: entered promiscuous mode [ 652.984883][ T5804] Bluetooth: hci1: command tx timeout [ 658.045495][ T9478] chnl_net:caif_netlink_parms(): no params data found [ 659.103971][ T37] audit: type=1804 audit(1772216970.236:12): pid=9567 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.956" name="/newroot/227/bus/bus" dev="overlay" ino=1236 res=1 errno=0 [ 660.948857][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.957'. [ 661.496795][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 661.522338][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 661.522873][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 661.524604][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 661.533092][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 663.645009][ T5805] Bluetooth: hci0: command tx timeout [ 664.908903][ T9478] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.908993][ T9478] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.909188][ T9478] bridge_slave_0: entered allmulticast mode [ 664.913785][ T9478] bridge_slave_0: entered promiscuous mode [ 665.050675][ T9607] trusted_key: encrypted_key: insufficient parameters specified [ 667.896314][ T5805] Bluetooth: hci0: command tx timeout [ 668.948751][ T9478] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.948843][ T9478] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.948991][ T9478] bridge_slave_1: entered allmulticast mode [ 668.960218][ T9478] bridge_slave_1: entered promiscuous mode [ 669.986962][ T5805] Bluetooth: hci0: command tx timeout [ 673.229107][ T5805] Bluetooth: hci0: command tx timeout [ 673.756618][ T9478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.838736][ T9478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.368433][ T37] audit: type=1804 audit(1772216985.846:13): pid=9646 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.975" name="/newroot/218/bus/bus" dev="overlay" ino=1200 res=1 errno=0 [ 678.100975][ T5804] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 681.159185][ T9478] team0: Port device team_slave_0 added [ 681.219446][ T9478] team0: Port device team_slave_1 added [ 681.336299][ T9478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.336316][ T9478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.336340][ T9478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.340552][ T9478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.340568][ T9478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.340592][ T9478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.969174][ T9478] hsr_slave_0: entered promiscuous mode [ 681.973225][ T9478] hsr_slave_1: entered promiscuous mode [ 681.991730][ T9478] debugfs: 'hsr0' already exists in 'hsr' [ 681.991761][ T9478] Cannot create hsr debugfs directory [ 682.369731][ T9570] chnl_net:caif_netlink_parms(): no params data found [ 682.605082][ T8077] bridge_slave_1: left allmulticast mode [ 682.605115][ T8077] bridge_slave_1: left promiscuous mode [ 682.605394][ T8077] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.708236][ T8077] bridge_slave_0: left allmulticast mode [ 682.708267][ T8077] bridge_slave_0: left promiscuous mode [ 682.708553][ T8077] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.799364][ T8077] bridge_slave_1: left allmulticast mode [ 682.799397][ T8077] bridge_slave_1: left promiscuous mode [ 682.799626][ T8077] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.136448][ T8077] bridge_slave_0: left allmulticast mode [ 684.136481][ T8077] bridge_slave_0: left promiscuous mode [ 684.136747][ T8077] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.859191][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 689.859265][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.485166][ T6306] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 691.634930][ T6306] usb 5-1: Using ep0 maxpacket: 32 [ 691.637737][ T6306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.637776][ T6306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.637800][ T6306] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 691.637848][ T6306] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 691.637873][ T6306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.694446][ T5804] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 691.761272][ T6306] usb 5-1: config 0 descriptor?? [ 691.885937][ T8077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.957016][ T8077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.007338][ T8077] bond0 (unregistering): Released all slaves [ 692.251750][ T6306] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0002/input/input8 [ 692.392838][ T6306] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0002/input/input9 [ 692.643737][ T8077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.440172][ T6306] kye 0003:0458:5011.0002: input,hiddev0,hidraw0: USB HID v0.04 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 695.439999][ T6306] usb 5-1: USB disconnect, device number 25 [ 695.607158][ T37] audit: type=1804 audit(1772217006.776:14): pid=9718 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.992" name="/newroot/224/bus/bus" dev="overlay" ino=1240 res=1 errno=0 [ 695.698911][ T8077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.941331][ T9719] fido_id[9719]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 699.253802][ T8077] bond0 (unregistering): Released all slaves [ 703.562893][ T5805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 703.576642][ T5805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 703.577075][ T5805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 703.578431][ T5805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 703.579222][ T5805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 704.075801][ T37] audit: type=1804 audit(1772217015.046:15): pid=9744 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.998" name="/newroot/239/bus/bus" dev="overlay" ino=1310 res=1 errno=0 [ 706.018328][ T5804] Bluetooth: hci5: command tx timeout [ 707.371239][ T37] audit: type=1804 audit(1772217017.996:16): pid=9754 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.999" name="/newroot/234/bus/bus" dev="overlay" ino=1271 res=1 errno=0 [ 709.375071][ T5804] Bluetooth: hci5: command tx timeout [ 709.955212][ T8077] hsr_slave_0: left promiscuous mode [ 709.975341][ T8077] hsr_slave_1: left promiscuous mode [ 709.976397][ T8077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.021261][ T8077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.370549][ T9772] input: syz0 as /devices/virtual/input/input10 [ 711.649729][ T5805] Bluetooth: hci5: command tx timeout [ 712.677798][ T9777] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 713.195018][ T8077] hsr_slave_0: left promiscuous mode [ 713.386205][ T8077] hsr_slave_1: left promiscuous mode [ 713.479624][ T8077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.820663][ T5805] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 714.976414][ T5805] Bluetooth: hci5: command tx timeout [ 715.216059][ T8077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.505045][ T5921] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 719.610067][ T8077] team0 (unregistering): Port device team_slave_1 removed [ 719.645813][ T8077] team0 (unregistering): Port device team_slave_0 removed [ 719.856255][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 720.051139][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 720.051776][ T5921] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 720.051924][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.807440][ T5921] usb 2-1: config 0 descriptor?? [ 720.826386][ T5921] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 721.168427][ T8077] team0 (unregistering): Port device team_slave_1 removed [ 721.266691][ T8077] team0 (unregistering): Port device team_slave_0 removed [ 721.688683][ T9570] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.688824][ T9570] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.689109][ T9570] bridge_slave_0: entered allmulticast mode [ 721.802575][ T9570] bridge_slave_0: entered promiscuous mode [ 722.604653][ T5879] usb 2-1: USB disconnect, device number 21 [ 722.668480][ T9823] trusted_key: encrypted_key: insufficient parameters specified [ 725.385008][ T5805] Bluetooth: hci2: command 0x0406 tx timeout [ 725.389576][ T36] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 725.389604][ T36] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 725.787275][ T9837] netlink: 408 bytes leftover after parsing attributes in process `syz.1.1017'. [ 725.861437][ T9740] chnl_net:caif_netlink_parms(): no params data found [ 727.408221][ T5805] Bluetooth: hci3: command 0x0406 tx timeout [ 727.412633][ T36] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 727.412661][ T36] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 727.704625][ T9740] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.713105][ T9740] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.713360][ T9740] bridge_slave_0: entered allmulticast mode [ 727.736025][ T9740] bridge_slave_0: entered promiscuous mode [ 727.739414][ T9740] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.739621][ T9740] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.739810][ T9740] bridge_slave_1: entered allmulticast mode [ 727.810028][ T9740] bridge_slave_1: entered promiscuous mode [ 728.749809][ T9740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.754440][ T9740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.872950][ T9740] team0: Port device team_slave_0 added [ 728.920512][ T9740] team0: Port device team_slave_1 added [ 729.216121][ T9740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.216146][ T9740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.216174][ T9740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.218362][ T9740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.218379][ T9740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.218407][ T9740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 730.765197][ T36] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 730.765228][ T36] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 730.977531][ T5805] Bluetooth: hci4: command 0x0406 tx timeout [ 731.976093][ T9869] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 734.272115][ T9882] netlink: 408 bytes leftover after parsing attributes in process `syz.4.1026'. [ 736.670284][ T9740] hsr_slave_0: entered promiscuous mode [ 736.671749][ T9740] hsr_slave_1: entered promiscuous mode [ 736.674200][ T9740] debugfs: 'hsr0' already exists in 'hsr' [ 736.674228][ T9740] Cannot create hsr debugfs directory [ 740.884837][ T37] audit: type=1804 audit(1772217052.046:17): pid=9894 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.1030" name="/newroot/250/bus/bus" dev="overlay" ino=1376 res=1 errno=0 [ 742.642489][ T9916] trusted_key: encrypted_key: insufficient parameters specified [ 749.477952][ T36] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 749.477984][ T36] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 750.155193][ T5805] Bluetooth: hci5: command 0x0c1a tx timeout [ 750.609800][ T5804] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 750.632145][ T5804] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 750.644101][ T5804] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 751.332391][ T5804] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 751.333145][ T5804] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 751.370524][ T5805] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 751.370950][ T5805] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 751.371343][ T5805] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 751.373547][ T5805] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 751.537490][ T5805] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 751.721417][ T9960] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 752.409684][ T1238] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 753.282219][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.282585][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.645894][ T5805] Bluetooth: hci6: command tx timeout [ 753.646434][ T1238] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.646461][ T1238] usb 4-1: config 0 has no interfaces? [ 754.854005][ T1238] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 754.854040][ T1238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.854063][ T1238] usb 4-1: Product: syz [ 754.854079][ T1238] usb 4-1: Manufacturer: syz [ 754.854094][ T1238] usb 4-1: SerialNumber: syz [ 755.046631][ T1238] usb 4-1: config 0 descriptor?? [ 756.594903][ T5805] Bluetooth: hci6: command tx timeout [ 756.664506][ T1238] usb 4-1: can't set config #0, error -71 [ 756.716515][ T1238] usb 4-1: USB disconnect, device number 28 [ 758.630710][ T5805] Bluetooth: hci6: command tx timeout [ 758.950252][T10001] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 759.520547][ T821] bridge_slave_0: left allmulticast mode [ 759.520571][ T821] bridge_slave_0: left promiscuous mode [ 759.520820][ T821] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.336885][ T5805] Bluetooth: hci6: command tx timeout [ 762.297560][ T821] bridge_slave_1: left allmulticast mode [ 762.297593][ T821] bridge_slave_1: left promiscuous mode [ 762.297869][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.696593][ T821] bridge_slave_0: left allmulticast mode [ 762.696640][ T821] bridge_slave_0: left promiscuous mode [ 762.696938][ T821] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.791691][ T821] bridge_slave_1: left allmulticast mode [ 762.791714][ T821] bridge_slave_1: left promiscuous mode [ 762.791909][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.876746][ T821] bridge_slave_0: left allmulticast mode [ 762.876786][ T821] bridge_slave_0: left promiscuous mode [ 762.877070][ T821] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.474906][ T36] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 763.635081][ T36] usb 2-1: Using ep0 maxpacket: 8 [ 763.817747][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 763.817980][ T36] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 763.818050][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.210318][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 764.214113][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 764.214509][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 764.249577][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 764.266884][ T36] usb 2-1: config 0 descriptor?? [ 764.273324][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 764.493698][ T36] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 764.872830][ T821] bond0 (unregistering): Released all slaves [ 765.641403][ T5921] usb 2-1: USB disconnect, device number 22 [ 766.405820][ T5804] Bluetooth: hci0: command tx timeout [ 768.623028][ T5804] Bluetooth: hci0: command tx timeout [ 770.528583][T10052] input: syz0 as /devices/virtual/input/input11 [ 770.585818][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.687152][ T5804] Bluetooth: hci0: command tx timeout [ 770.726908][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 772.993284][ T5804] Bluetooth: hci0: command tx timeout [ 775.585893][T10067] mmap: syz.3.1064 (10067) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 775.588494][ T821] bond0 (unregistering): Released all slaves [ 781.605801][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.085647][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.435409][ T821] bond0 (unregistering): Released all slaves [ 783.079607][T10062] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 783.079651][T10062] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 783.079681][T10062] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 783.125018][ T37] audit: type=1800 audit(1772217094.246:18): pid=10062 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1064" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 784.646464][T10096] syz.3.1071 (10096) used greatest stack depth: 16912 bytes left [ 785.283184][T10102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.302413][T10102] bond0: (slave rose0): Enslaving as an active interface with an up link [ 785.758114][ T821] hsr_slave_0: left promiscuous mode [ 785.794916][ T821] hsr_slave_1: left promiscuous mode [ 785.795866][ T821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.854197][ T821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.864889][ T809] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 785.975290][ T821] hsr_slave_0: left promiscuous mode [ 786.014919][ T809] usb 4-1: Using ep0 maxpacket: 8 [ 786.017223][ T809] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 786.017258][ T809] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 786.017285][ T809] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 786.017316][ T809] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 786.017359][ T809] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 786.017383][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.092575][ T821] hsr_slave_1: left promiscuous mode [ 786.093559][ T821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 786.137166][ T821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.296323][ T809] usb 4-1: usb_control_msg returned -32 [ 786.296378][ T809] usbtmc 4-1:16.0: can't read capabilities [ 786.356985][T10108] netlink: 408 bytes leftover after parsing attributes in process `syz.1.1075'. [ 786.930952][ T5804] Bluetooth: hci6: command 0x0c1a tx timeout [ 786.951797][ T36] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 786.951884][ T36] Bluetooth: hci6: Error when powering off device on rfkill (-110) [ 788.744302][ T810] usb 4-1: USB disconnect, device number 29 [ 788.746114][ T821] team0 (unregistering): Port device team_slave_1 removed [ 788.918048][ T821] team0 (unregistering): Port device team_slave_0 removed [ 790.156194][ T821] team0 (unregistering): Port device team_slave_1 removed [ 790.199152][ T821] team0 (unregistering): Port device team_slave_0 removed [ 790.341350][ T810] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 790.377774][T10118] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 790.377816][T10118] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 790.377837][T10118] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 790.504889][ T810] usb 4-1: Using ep0 maxpacket: 32 [ 790.520979][ T810] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 790.521002][ T810] usb 4-1: config 0 has no interface number 0 [ 790.529273][ T810] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 790.529308][ T810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.529329][ T810] usb 4-1: Product: syz [ 790.529345][ T810] usb 4-1: Manufacturer: syz [ 790.529361][ T810] usb 4-1: SerialNumber: syz [ 790.594389][ T810] usb 4-1: config 0 descriptor?? [ 792.372565][ T5804] Bluetooth: hci0: command 0x0c1a tx timeout [ 792.372887][ T36] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 792.372906][ T36] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 792.449044][ T810] radio-si470x 4-1:0.35: this is not a si470x device. [ 792.557071][ T810] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 792.585575][ T810] usb 4-1: USB disconnect, device number 30 [ 793.724930][ T810] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 793.746320][ T5805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 793.764416][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 793.766959][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 793.782195][ T5805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 793.881312][ T810] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.881344][ T810] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 793.913313][ T810] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 793.913347][ T810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.913369][ T810] usb 4-1: Product: syz [ 793.913443][ T810] usb 4-1: Manufacturer: syz [ 793.913460][ T810] usb 4-1: SerialNumber: syz [ 794.026553][ T810] usb 4-1: config 0 descriptor?? [ 794.097462][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 795.461024][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 795.592518][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 795.688069][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 795.782597][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 795.784109][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 796.969069][ T810] usb 4-1: USB disconnect, device number 31 [ 798.500339][ T5805] Bluetooth: hci1: command tx timeout [ 798.649848][T10034] chnl_net:caif_netlink_parms(): no params data found [ 799.981314][T10188] netlink: 408 bytes leftover after parsing attributes in process `syz.3.1088'. [ 800.274995][T10034] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.275132][T10034] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.275380][T10034] bridge_slave_0: entered allmulticast mode [ 800.278249][T10034] bridge_slave_0: entered promiscuous mode [ 800.565587][ T5805] Bluetooth: hci1: command tx timeout [ 800.610537][T10034] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.610678][T10034] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.610924][T10034] bridge_slave_1: entered allmulticast mode [ 800.613758][T10034] bridge_slave_1: entered promiscuous mode [ 800.635614][ T5906] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 801.055280][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 801.207820][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.207858][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.207883][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 801.207926][ T5906] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 801.207951][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.343521][ T5906] usb 5-1: config 0 descriptor?? [ 801.797327][ T5906] hid (null): invalid report_size 1537623447 [ 801.797355][ T5906] hid (null): invalid report_size 41892 [ 801.797382][ T5906] hid (null): invalid report_count 116873570 [ 802.517943][ T5906] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0003/input/input12 [ 802.562721][T10034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.579513][T10034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.576360][ T5906] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0003/input/input13 [ 804.131868][ T5805] Bluetooth: hci1: command tx timeout [ 804.160546][ T5906] kye 0003:0458:5011.0003: input,hiddev0,hidraw0: USB HID v0.04 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 804.178589][ T5906] usb 5-1: USB disconnect, device number 26 [ 804.391577][T10213] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 804.439487][T10224] fido_id[10224]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 804.489549][T10034] team0: Port device team_slave_0 added [ 804.519923][T10034] team0: Port device team_slave_1 added [ 804.554877][ T809] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 804.727303][ T809] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 804.730336][ T809] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 804.730369][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.730392][ T809] usb 2-1: Product: syz [ 804.730407][ T809] usb 2-1: Manufacturer: syz [ 804.730423][ T809] usb 2-1: SerialNumber: syz [ 804.787137][ T809] usb 2-1: config 0 descriptor?? [ 804.954927][ T5906] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 805.154912][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 805.157551][ T5906] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 805.157587][ T5906] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 805.157615][ T5906] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 805.157640][ T5906] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 805.157685][ T5906] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 805.157709][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.519078][ T5906] usb 5-1: usb_control_msg returned -32 [ 805.519130][ T5906] usbtmc 5-1:16.0: can't read capabilities [ 805.912404][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 806.153113][T10249] input: syz0 as /devices/virtual/input/input14 [ 806.223054][ T5804] Bluetooth: hci1: command tx timeout [ 806.570751][T10034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.570798][T10034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.570855][T10034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.691881][T10034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.691899][T10034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.691928][T10034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.919710][T10034] hsr_slave_0: entered promiscuous mode [ 806.920782][T10034] hsr_slave_1: entered promiscuous mode [ 806.958567][ T5802] usb 5-1: USB disconnect, device number 27 [ 806.996760][T10081] chnl_net:caif_netlink_parms(): no params data found [ 807.423363][ T5906] usb 2-1: USB disconnect, device number 23 [ 807.636064][T10259] netlink: 408 bytes leftover after parsing attributes in process `syz.1.1098'. [ 809.177876][T10081] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.178007][T10081] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.178187][T10081] bridge_slave_0: entered allmulticast mode [ 809.183952][T10081] bridge_slave_0: entered promiscuous mode [ 809.193423][ T5804] Bluetooth: hci1: command 0x0c1a tx timeout [ 809.221674][ T1238] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 809.221763][ T1238] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 809.245068][ T5802] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 809.298263][T10081] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.298393][T10081] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.298594][T10081] bridge_slave_1: entered allmulticast mode [ 809.334053][T10081] bridge_slave_1: entered promiscuous mode [ 809.593137][T10081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.649650][T10081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.651091][ T5802] usb 2-1: Using ep0 maxpacket: 32 [ 809.663067][ T5802] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 809.663159][ T5802] usb 2-1: config 0 has no interface number 0 [ 809.688486][ T5802] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 809.688519][ T5802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.688538][ T5802] usb 2-1: Product: syz [ 809.688553][ T5802] usb 2-1: Manufacturer: syz [ 809.688568][ T5802] usb 2-1: SerialNumber: syz [ 809.751239][ T5802] usb 2-1: config 0 descriptor?? [ 809.978944][T10276] input: syz0 as /devices/virtual/input/input15 [ 811.483027][ T5802] radio-si470x 2-1:0.35: DeviceID=0x9242 ChipID=0x0000 [ 811.483055][ T5802] radio-si470x 2-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 811.484136][ T5802] radio-si470x 2-1:0.35: si470x_get_report: usb_control_msg returned -32 [ 811.484158][ T5802] radio-si470x 2-1:0.35: si470x_get_scratch: si470x_get_report returned -32 [ 811.484480][ T5802] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 811.610043][ T5802] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 811.703386][ T5802] usb 2-1: USB disconnect, device number 24 [ 811.763936][T10081] team0: Port device team_slave_0 added [ 811.776279][T10081] team0: Port device team_slave_1 added [ 811.931900][T10081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 811.931918][T10081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 811.931942][T10081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 811.934358][T10081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 811.934375][T10081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 811.934404][T10081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.228384][T10081] hsr_slave_0: entered promiscuous mode [ 812.233826][T10081] hsr_slave_1: entered promiscuous mode [ 812.235021][T10081] debugfs: 'hsr0' already exists in 'hsr' [ 812.235076][T10081] Cannot create hsr debugfs directory [ 812.446649][T10283] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 813.705188][ T821] bridge_slave_1: left allmulticast mode [ 813.705220][ T821] bridge_slave_1: left promiscuous mode [ 813.705486][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.105119][ T821] bridge_slave_0: left allmulticast mode [ 817.105151][ T821] bridge_slave_0: left promiscuous mode [ 817.105403][ T821] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.216229][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 817.218034][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.455625][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 818.535605][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 818.576840][ T821] bond0 (unregistering): Released all slaves [ 818.613038][T10295] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 818.613075][T10295] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 818.613093][T10295] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 818.618733][T10304] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 818.618776][T10304] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 818.618798][T10304] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 818.624614][T10292] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 818.624657][T10292] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 818.624678][T10292] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 818.981932][T10317] netlink: 408 bytes leftover after parsing attributes in process `syz.3.1108'. [ 819.194872][ T809] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 819.374939][ T809] usb 2-1: Using ep0 maxpacket: 8 [ 819.377409][ T809] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 819.377447][ T809] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 819.377474][ T809] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 819.377500][ T809] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 819.377544][ T809] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 819.377568][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.451777][ T5906] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 819.621459][ T5906] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 819.621490][ T5906] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 819.621600][ T5906] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 819.662752][ T5906] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 819.663366][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 819.663390][ T5906] usb 5-1: SerialNumber: syz [ 819.731441][ T809] usb 2-1: usb_control_msg returned -32 [ 819.731493][ T809] usbtmc 2-1:16.0: can't read capabilities [ 819.894927][T10324] input: syz0 as /devices/virtual/input/input16 [ 820.402757][ T5906] usb 5-1: 0:2 : does not exist [ 820.402854][ T5906] usb 5-1: unit 5 not found! [ 820.559302][ T5906] usb 5-1: USB disconnect, device number 28 [ 820.920967][T10311] udevd[10311]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 821.145015][ T821] hsr_slave_0: left promiscuous mode [ 821.165961][ T821] hsr_slave_1: left promiscuous mode [ 821.166859][ T821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 821.215926][ T821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.968879][T10328] usb 2-1: USB disconnect, device number 25 [ 821.983105][ T821] team0 (unregistering): Port device team_slave_1 removed [ 822.436426][ T821] team0 (unregistering): Port device team_slave_0 removed [ 823.635807][T10341] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 824.846322][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 824.886155][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 824.890800][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 824.892967][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 824.893785][ T5805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 824.953706][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 824.954121][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 824.955147][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 824.960032][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 824.984215][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 828.141148][ T5804] Bluetooth: hci0: command tx timeout [ 833.138982][T10377] input: syz0 as /devices/virtual/input/input17 [ 833.695043][ T5804] Bluetooth: hci0: command tx timeout [ 834.275305][ T37] audit: type=1804 audit(1772217145.446:19): pid=10380 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.1123" name="/newroot/277/bus/bus" dev="overlay" ino=1526 res=1 errno=0 [ 834.826878][ T37] audit: type=1804 audit(1772217145.756:20): pid=10384 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.1124" name="/newroot/269/bus/bus" dev="overlay" ino=1505 res=1 errno=0 [ 835.404996][ T5906] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 835.591380][ T5906] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 835.591413][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.591433][ T5906] usb 4-1: Product: syz [ 835.591448][ T5906] usb 4-1: Manufacturer: syz [ 835.591462][ T5906] usb 4-1: SerialNumber: syz [ 835.598108][ T5906] usb 4-1: config 0 descriptor?? [ 835.724882][ T5804] Bluetooth: hci0: command tx timeout [ 835.822512][T10081] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 835.911594][T10081] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 835.972526][T10390] trusted_key: encrypted_key: insufficient parameters specified [ 836.094604][ T5906] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 836.174133][T10081] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 836.217556][T10081] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 836.713000][ T5906] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 837.085668][ T809] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 837.085702][ T809] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 837.338517][T10355] chnl_net:caif_netlink_parms(): no params data found [ 837.797039][ T821] bridge_slave_1: left allmulticast mode [ 837.797070][ T821] bridge_slave_1: left promiscuous mode [ 837.797327][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.861638][ T821] bridge_slave_0: left allmulticast mode [ 837.861676][ T821] bridge_slave_0: left promiscuous mode [ 837.861992][ T821] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.257734][ T5842] usb 4-1: USB disconnect, device number 32 [ 839.818451][T10418] input: syz0 as /devices/virtual/input/input18 [ 839.913355][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 840.264128][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 840.338366][ T821] bond0 (unregistering): Released all slaves [ 840.460725][T10355] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.464417][T10355] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.464643][T10355] bridge_slave_0: entered allmulticast mode [ 840.497507][T10355] bridge_slave_0: entered promiscuous mode [ 840.541011][T10355] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.541172][T10355] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.541413][T10355] bridge_slave_1: entered allmulticast mode [ 840.544235][T10355] bridge_slave_1: entered promiscuous mode [ 840.752606][T10355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.944925][ T821] hsr_slave_0: left promiscuous mode [ 841.007267][ T821] hsr_slave_1: left promiscuous mode [ 841.008252][ T821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.045827][ T821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 842.904917][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 842.923996][T10468] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 842.948741][T10468] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 842.956643][T10468] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 842.971464][T10468] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 842.972269][T10468] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 842.973318][ T821] team0 (unregistering): Port device team_slave_1 removed [ 843.040455][ T5804] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 843.043201][ T5804] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 843.065785][ T5804] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 843.116027][ T5804] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 843.116885][ T5804] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 843.316530][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 843.316586][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 843.316626][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 843.319003][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 843.319033][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 843.319054][ T9] usb 2-1: SerialNumber: syz [ 843.594171][ T9] usb 2-1: 0:2 : does not exist [ 843.594303][ T9] usb 2-1: unit 5 not found! [ 843.924206][ T821] team0 (unregistering): Port device team_slave_0 removed [ 844.466961][T10481] Can't find ip_set type hash:ma [ 844.701108][ T9] usb 2-1: USB disconnect, device number 26 [ 844.923632][T10311] udevd[10311]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 845.165021][T10468] Bluetooth: hci5: command tx timeout [ 845.284950][ T5842] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 845.372191][T10355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.100794][ T5842] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 846.100830][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.100852][ T5842] usb 4-1: Product: syz [ 846.100867][ T5842] usb 4-1: Manufacturer: syz [ 846.100882][ T5842] usb 4-1: SerialNumber: syz [ 846.140254][ T5842] usb 4-1: config 0 descriptor?? [ 846.349943][ T5842] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 846.549046][T10355] team0: Port device team_slave_0 added [ 846.579678][T10355] team0: Port device team_slave_1 added [ 846.838802][T10355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.838821][T10355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.838850][T10355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.855363][T10355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.855382][T10355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.855413][T10355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.182647][T10355] hsr_slave_0: entered promiscuous mode [ 847.216266][T10355] hsr_slave_1: entered promiscuous mode [ 847.880949][T10468] Bluetooth: hci5: command tx timeout [ 847.898604][ T5842] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 850.175379][T10328] usb 4-1: USB disconnect, device number 33 [ 850.574245][T10468] Bluetooth: hci5: command tx timeout [ 852.829380][T10468] Bluetooth: hci5: command tx timeout [ 855.494867][ T810] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 856.839411][ T810] usb 2-1: device descriptor read/all, error -71 [ 862.744866][ T1238] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 862.894949][ T1238] usb 4-1: Using ep0 maxpacket: 32 [ 862.897318][ T1238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.897355][ T1238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.897381][ T1238] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 862.897425][ T1238] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 862.897450][ T1238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.904255][ T1238] usb 4-1: config 0 descriptor?? [ 863.630014][ T1238] hid (null): invalid report_size 1537623447 [ 863.630049][ T1238] hid (null): invalid report_size 41892 [ 863.630078][ T1238] hid (null): invalid report_count 116873570 [ 863.732933][ T1238] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0004/input/input20 [ 863.782489][ T1238] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0004/input/input21 [ 863.870628][ T1238] kye 0003:0458:5011.0004: input,hiddev0,hidraw0: USB HID v0.04 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 863.916134][ T1238] usb 4-1: USB disconnect, device number 34 [ 864.447391][T10557] fido_id[10557]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 870.160239][T10466] chnl_net:caif_netlink_parms(): no params data found [ 876.408963][ T5842] ------------[ cut here ]------------ [ 876.408981][ T5842] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 876.409005][ T5842] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#1: kworker/1:4/5842 [ 876.409325][ T5842] Modules linked in: [ 876.409368][ T5842] CPU: 1 UID: 0 PID: 5842 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 876.409393][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 876.409409][ T5842] Workqueue: events drm_fb_helper_damage_work [ 876.409514][ T5842] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 876.409549][ T5842] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 7a d0 d4 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 876.409570][ T5842] RSP: 0018:ffffc900047af8e0 EFLAGS: 00010246 [ 876.409589][ T5842] RAX: 1ffff11004a5a600 RBX: ffffffff8f750d20 RCX: 0000000000000000 [ 876.409605][ T5842] RDX: ffffffff8bbf2f40 RSI: ffffffff8bc0ee40 RDI: ffffffff8f750d20 [ 876.409623][ T5842] RBP: ffffc900047af9c8 R08: 0000000000000000 R09: 0000000000000000 [ 876.409638][ T5842] R10: dffffc0000000000 R11: fffffbfff1ed45b7 R12: ffffffff8bc0ee40 [ 876.409655][ T5842] R13: ffff8880252d3000 R14: 0000000000000000 R15: ffffffff8bbf2f40 [ 876.409672][ T5842] FS: 0000000000000000(0000) GS:ffff888126442000(0000) knlGS:0000000000000000 [ 876.409691][ T5842] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 876.409706][ T5842] CR2: 00007fb1fd6a2921 CR3: 000000005878c000 CR4: 00000000003526f0 [ 876.409727][ T5842] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 876.409748][ T5842] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 876.409764][ T5842] Call Trace: [ 876.409779][ T5842] [ 876.409795][ T5842] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 876.409833][ T5842] ? __pfx_autoremove_wake_function+0x10/0x10 [ 876.409907][ T5842] ? rt_spin_unlock+0x160/0x200 [ 876.410017][ T5842] ? drm_vblank_get+0x147/0x260 [ 876.410053][ T5842] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 876.410086][ T5842] drm_fb_helper_damage_work+0x131/0x6f0 [ 876.410133][ T5842] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 876.410171][ T5842] ? lock_acquire+0x20b/0x2e0 [ 876.410213][ T5842] ? process_scheduled_works+0xa25/0x1830 [ 876.410244][ T5842] ? process_scheduled_works+0xa25/0x1830 [ 876.410277][ T5842] process_scheduled_works+0xb02/0x1830 [ 876.410342][ T5842] ? __pfx_process_scheduled_works+0x10/0x10 [ 876.410382][ T5842] ? assign_work+0x3d5/0x5e0 [ 876.410420][ T5842] worker_thread+0xa50/0xfc0 [ 876.410485][ T5842] kthread+0x388/0x470 [ 876.410510][ T5842] ? __pfx_worker_thread+0x10/0x10 [ 876.410540][ T5842] ? __pfx_kthread+0x10/0x10 [ 876.410566][ T5842] ret_from_fork+0x51e/0xb90 [ 876.410618][ T5842] ? __pfx_ret_from_fork+0x10/0x10 [ 876.410648][ T5842] ? __switch_to+0xc7d/0x1450 [ 876.410701][ T5842] ? __pfx_kthread+0x10/0x10 [ 876.410727][ T5842] ret_from_fork_asm+0x1a/0x30 [ 876.410787][ T5842] [ 876.410807][ T5842] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 876.410824][ T5842] CPU: 1 UID: 0 PID: 5842 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 876.410848][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 876.410862][ T5842] Workqueue: events drm_fb_helper_damage_work [ 876.410896][ T5842] Call Trace: [ 876.410905][ T5842] [ 876.410914][ T5842] vpanic+0x56c/0xa60 [ 876.410954][ T5842] ? __pfx__printk+0x10/0x10 [ 876.410978][ T5842] ? __pfx_vpanic+0x10/0x10 [ 876.411008][ T5842] ? is_bpf_text_address+0x292/0x2b0 [ 876.411058][ T5842] ? is_bpf_text_address+0x26/0x2b0 [ 876.411097][ T5842] panic+0xc5/0xd0 [ 876.411128][ T5842] ? __pfx_panic+0x10/0x10 [ 876.411172][ T5842] ? ret_from_fork_asm+0x1a/0x30 [ 876.411200][ T5842] __warn+0x315/0x4f0 [ 876.411232][ T5842] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 876.411268][ T5842] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 876.411305][ T5842] __report_bug+0x29a/0x540 [ 876.411400][ T5842] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 876.411434][ T5842] ? __pfx___report_bug+0x10/0x10 [ 876.411485][ T5842] report_bug_entry+0x19a/0x290 [ 876.411515][ T5842] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 876.411545][ T5842] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 876.411578][ T5842] handle_bug+0xca/0x200 [ 876.411653][ T5842] exc_invalid_op+0x1a/0x50 [ 876.411686][ T5842] asm_exc_invalid_op+0x1a/0x20 [ 876.411723][ T5842] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 876.411766][ T5842] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 7a d0 d4 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 876.411785][ T5842] RSP: 0018:ffffc900047af8e0 EFLAGS: 00010246 [ 876.411804][ T5842] RAX: 1ffff11004a5a600 RBX: ffffffff8f750d20 RCX: 0000000000000000 [ 876.411820][ T5842] RDX: ffffffff8bbf2f40 RSI: ffffffff8bc0ee40 RDI: ffffffff8f750d20 [ 876.411837][ T5842] RBP: ffffc900047af9c8 R08: 0000000000000000 R09: 0000000000000000 [ 876.411851][ T5842] R10: dffffc0000000000 R11: fffffbfff1ed45b7 R12: ffffffff8bc0ee40 [ 876.411868][ T5842] R13: ffff8880252d3000 R14: 0000000000000000 R15: ffffffff8bbf2f40 [ 876.411910][ T5842] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 876.411947][ T5842] ? __pfx_autoremove_wake_function+0x10/0x10 [ 876.411983][ T5842] ? rt_spin_unlock+0x160/0x200 [ 876.412010][ T5842] ? drm_vblank_get+0x147/0x260 [ 876.412046][ T5842] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 876.412078][ T5842] drm_fb_helper_damage_work+0x131/0x6f0 [ 876.412123][ T5842] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 876.412161][ T5842] ? lock_acquire+0x20b/0x2e0 [ 876.412195][ T5842] ? process_scheduled_works+0xa25/0x1830 [ 876.412225][ T5842] ? process_scheduled_works+0xa25/0x1830 [ 876.412258][ T5842] process_scheduled_works+0xb02/0x1830 [ 876.412323][ T5842] ? __pfx_process_scheduled_works+0x10/0x10 [ 876.412362][ T5842] ? assign_work+0x3d5/0x5e0 [ 876.412399][ T5842] worker_thread+0xa50/0xfc0 [ 876.412462][ T5842] kthread+0x388/0x470 [ 876.412485][ T5842] ? __pfx_worker_thread+0x10/0x10 [ 876.412514][ T5842] ? __pfx_kthread+0x10/0x10 [ 876.412540][ T5842] ret_from_fork+0x51e/0xb90 [ 876.412575][ T5842] ? __pfx_ret_from_fork+0x10/0x10 [ 876.412606][ T5842] ? __switch_to+0xc7d/0x1450 [ 876.412638][ T5842] ? __pfx_kthread+0x10/0x10 [ 876.412664][ T5842] ret_from_fork_asm+0x1a/0x30 [ 876.412705][ T5842] [ 876.413320][ T5842] Kernel Offset: disabled