last executing test programs: 14.881620872s ago: executing program 4 (id=3310): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000480)={0x20, 0x14, 0x2, "0410"}, 0x0, 0x0}) 11.954793907s ago: executing program 2 (id=3317): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) socket$key(0xf, 0x3, 0x2) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000340)={&(0x7f00000000c0)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x1, 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1) socket$rxrpc(0x21, 0x2, 0x2) 11.184128808s ago: executing program 4 (id=3318): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0x80d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "37a55358cbfec0e9d412939d8317fcdc"}, @TCA_CT_PARMS={0x18, 0x1, {0x2, 0x8, 0xffffffffffffffff, 0x4, 0x8}}, @TCA_CT_LABELS={0x14, 0x7, "a31a5744c98714e0c10894427408df27"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4004885) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004c00)=""/102392, 0x18ff8) r5 = socket(0x23, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) socket(0x11, 0x800000003, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75", 0x24) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x4044004) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000183b9220b113420016580102030109021b00010000000009040000012e459e00090504", @ANYRESDEC], 0x0) 11.037013811s ago: executing program 2 (id=3320): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x40, 0x3, 0x1}, 0x18) process_vm_writev(r2, &(0x7f0000000440), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x541082, 0x0) ioctl$TUNSETLINK(r5, 0x400454cc, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0xc0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) 9.633357442s ago: executing program 1 (id=3323): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)={0x0, 0x0}) timer_create(0x7, &(0x7f00000004c0)={0x0, 0x2, 0x4, @tid=r1}, &(0x7f0000000500)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./cgroup\x00', 0x0, 0x1a0c000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000100)=0x5000) syz_open_procfs$userns(0x0, &(0x7f0000000780)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, 0x0, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 8.300736972s ago: executing program 0 (id=3325): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f00000003c0)="a293f2b99c0d060fc3e9dea863223ef8863cf6a32f3410a41d0008d44c1d865a5e", 0x21}, {0x0}, {&(0x7f0000000440)="d6faf389daa84950c5", 0x9}, {&(0x7f0000000480)="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", 0x2e7}], 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 8.219004594s ago: executing program 1 (id=3326): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r7, 0x1, 0xfffffffd, 0x1000, {0x7}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x890) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xa8) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) syz_init_net_socket$ax25(0x3, 0x2, 0xce) 7.909723069s ago: executing program 0 (id=3327): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x20000000) 7.114660821s ago: executing program 1 (id=3328): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000480)={0x20, 0x14, 0x2, "0410"}, 0x0, 0x0}) 6.956621244s ago: executing program 4 (id=3329): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000100)={{}, "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"}) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0xa2, 0xcff, 0x8, 0x7, 0x1, "b4dc017afe2b917b"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x4e24, @loopback=0x7f000000}}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r5, 0x1) read(r5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000001100)={0x8, 0xc, 0x0, 'queue0\x00', 0x9}) fsopen(&(0x7f0000000100)='ecryptfs\x00', 0x0) 6.879078715s ago: executing program 0 (id=3330): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 6.744015467s ago: executing program 2 (id=3331): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00'}, 0x90) syslog(0x2, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x19d1, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x8000000, 0x8000000}, &(0x7f0000000080), &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020a0003070000000000000000de3f0005001a"], 0x38}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000706e703000000000100000000000300050001000700"], 0x1c}}, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xa0000) 6.5074187s ago: executing program 4 (id=3332): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000100085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2af, @void, @value}, 0x94) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r1 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xaee2, 0x10, 0xffffffff, 0x16}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) userfaultfd(0x0) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) listen(0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x30, 0x1c, 0xc07, 0x2000, 0x0, {0x2, 0x0, 0x0, r7, 0x8, 0x10}, [@NDA_DST_IPV6={0x14, 0x1, @empty}]}, 0x30}}, 0x20024090) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 5.751341982s ago: executing program 3 (id=3333): ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8, @ANYBLOB="01"], 0x20}}, 0x0) 5.541878375s ago: executing program 2 (id=3334): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0xfff6, 0x3, 0xbfff, 0x0, "ec28a144f13d7607"}) r1 = socket(0x10, 0xa, 0x4) recvmsg(r1, &(0x7f0000000b80)={&(0x7f00000001c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000480)=""/29, 0x1d}, {&(0x7f0000000780)=""/182, 0xb6}, {&(0x7f0000000880)=""/35, 0x23}, {&(0x7f00000008c0)=""/181, 0xb5}], 0x8, &(0x7f0000000b00)=""/66, 0x42}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x100) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) unshare(0x20000400) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r5, 0x58}, 0x10) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='hfsplus\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, 0x0, &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x40, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8a}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r8 = syz_open_pts(r0, 0x0) r9 = dup3(r8, r0, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x44) 4.638677159s ago: executing program 4 (id=3335): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000008}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x20000001}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x47, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xb, 0x0, 0x8000806f, 0x7, 0x5, 0x1, 0x7, 0x10000005, 0x3e, 0x8c, 0x1000006, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x206c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x6, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac4, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x4, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x40005, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1000]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.703692494s ago: executing program 1 (id=3336): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)={0x0, 0x0}) timer_create(0x7, &(0x7f00000004c0)={0x0, 0x2, 0x4, @tid=r1}, &(0x7f0000000500)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./cgroup\x00', 0x0, 0x1a0c000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000100)=0x5000) syz_open_procfs$userns(0x0, &(0x7f0000000780)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, 0x0, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 3.702418444s ago: executing program 0 (id=3337): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f00000003c0)="a293f2b99c0d060fc3e9dea863223ef8863cf6a32f3410a41d0008d44c1d865a5e", 0x21}, {0x0}, {&(0x7f0000000440)="d6faf389daa84950c5", 0x9}, {&(0x7f0000000480)="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", 0x2e7}], 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 3.693891614s ago: executing program 2 (id=3338): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r7, 0x1, 0xfffffffd, 0x1000, {0x7}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x890) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xa8) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) syz_init_net_socket$ax25(0x3, 0x2, 0xce) 3.686044394s ago: executing program 3 (id=3339): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000080)=0x20) r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000080)={0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000004c0000000000000064670f7f1d"], 0x4c}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 3.480550837s ago: executing program 4 (id=3340): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0x80d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "37a55358cbfec0e9d412939d8317fcdc"}, @TCA_CT_PARMS={0x18, 0x1, {0x2, 0x8, 0xffffffffffffffff, 0x4, 0x8}}, @TCA_CT_LABELS={0x14, 0x7, "a31a5744c98714e0c10894427408df27"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4004885) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004c00)=""/102392, 0x18ff8) r5 = socket(0x23, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) socket(0x11, 0x800000003, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75", 0x24) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x4044004) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000183b9220b113420016580102030109021b00010000000009040000012e459e00090504", @ANYRESDEC], 0x0) 2.437320333s ago: executing program 2 (id=3341): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x40, 0x3, 0x1}, 0x18) process_vm_writev(r2, &(0x7f0000000440), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x541082, 0x0) ioctl$TUNSETLINK(r5, 0x400454cc, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0xc0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) 2.332074045s ago: executing program 3 (id=3342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000100)={{}, "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"}) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0xa2, 0xcff, 0x8, 0x7, 0x1, "b4dc017afe2b917b"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x4e24, @loopback=0x7f000000}}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r5, 0x1) read(r5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000001100)={0x8, 0xc, 0x0, 'queue0\x00', 0x9}) fsopen(&(0x7f0000000100)='ecryptfs\x00', 0x0) 1.723478434s ago: executing program 0 (id=3343): bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x40000) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0) 1.550797546s ago: executing program 1 (id=3344): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00'}, 0x90) syslog(0x2, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_io_uring_setup(0x19d1, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x8000000, 0x8000000}, &(0x7f0000000080), &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020a0003070000000000000000de3f0005001a"], 0x38}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) io_uring_enter(r0, 0xa3d, 0x0, 0x48, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xa0000) 1.479579218s ago: executing program 3 (id=3345): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x20, 0x8, 0x8, 0xffffffff, {{0x5, 0x4, 0x2, 0x3, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYBLOB="01000000000000000000390000000800", @ANYRES32=r3, @ANYBLOB], 0x40}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={0x0, 0x30}}, 0x20004000) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r4, &(0x7f0000000480), &(0x7f0000000180)=""/55}, 0x20) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0], &(0x7f0000033840), 0x0, 0x1, 0x0, 0x0, r6}) r7 = memfd_create(0x0, 0x3) ftruncate(r7, 0xffff) utimes(&(0x7f0000000000)='./file0\x00', 0x0) 410.610564ms ago: executing program 1 (id=3346): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x10000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 377.469905ms ago: executing program 3 (id=3347): setuid(0xee00) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd}, {0xb}, {0x4, 0xffe0}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x6, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x4, 0x3, 0x7, 0x2, 0x4, 0x34}}, {0x4}}]}]}, 0x68}}, 0x0) 292.875686ms ago: executing program 3 (id=3348): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000480)={0x20, 0x14, 0x2, "0410"}, 0x0, 0x0}) 0s ago: executing program 0 (id=3349): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0xfff6, 0x3, 0xbfff, 0x0, "ec28a144f13d7607"}) r1 = socket(0x10, 0xa, 0x4) recvmsg(r1, &(0x7f0000000b80)={&(0x7f00000001c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000480)=""/29, 0x1d}, {&(0x7f0000000780)=""/182, 0xb6}, {&(0x7f0000000880)=""/35, 0x23}, {&(0x7f00000008c0)=""/181, 0xb5}], 0x8, &(0x7f0000000b00)=""/66, 0x42}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x100) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) unshare(0x20000400) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r5, 0x58}, 0x10) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='hfsplus\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, 0x0, &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x40, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8a}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r8 = syz_open_pts(r0, 0x0) r9 = dup3(r8, r0, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x44) kernel console output (not intermixed with test programs): 4519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.144743][ T4519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.211810][T14391] lo speed is unknown, defaulting to 1000 [ 1183.217713][T14391] lo speed is unknown, defaulting to 1000 [ 1183.223975][T14391] lo speed is unknown, defaulting to 1000 [ 1183.238326][T14391] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1183.716851][T14391] lo speed is unknown, defaulting to 1000 [ 1183.732849][T14391] lo speed is unknown, defaulting to 1000 [ 1183.739435][T14391] lo speed is unknown, defaulting to 1000 [ 1183.745968][T14391] lo speed is unknown, defaulting to 1000 [ 1183.752390][T14391] lo speed is unknown, defaulting to 1000 [ 1183.986896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1184.159377][T10000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.185735][T10000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.455225][T10000] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1184.813074][T14396] kvm [14395]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x80 [ 1184.888407][T14396] kvm [14395]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 1184.950241][T14396] kvm [14395]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 1185.139098][T14407] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1185.165014][T14407] hfsplus: unable to find HFS+ superblock [ 1185.307863][ T14] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 1185.525831][ T14] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1185.558323][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.640039][ T14] usb 3-1: config 0 descriptor?? [ 1185.699726][ T14] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1185.917346][ T5769] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1186.114329][ T14] gp8psk: usb in 137 operation failed. [ 1186.140317][ T14] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1186.163986][ T5769] usb 1-1: no configurations [ 1186.168646][ T5769] usb 1-1: can't read configurations, error -22 [ 1186.201248][ T14] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1186.367493][ T5769] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1186.582411][ T5769] usb 1-1: no configurations [ 1186.588286][ T5769] usb 1-1: can't read configurations, error -22 [ 1186.638513][ T5769] usb usb1-port1: attempt power cycle [ 1187.125432][ T5769] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1187.193747][ T5769] usb 1-1: no configurations [ 1187.237027][ T5769] usb 1-1: can't read configurations, error -22 [ 1187.613677][ T5769] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1187.666788][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 1187.666805][ T26] audit: type=1326 audit(1749706555.532:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.3.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa058e929 code=0x7ffc0000 [ 1187.676547][ T5769] usb 1-1: no configurations [ 1187.731165][ T5769] usb 1-1: can't read configurations, error -22 [ 1187.742435][ T26] audit: type=1326 audit(1749706555.579:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.3.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa058e929 code=0x7ffc0000 [ 1187.771341][ T5769] usb usb1-port1: unable to enumerate USB device [ 1188.720881][ T26] audit: type=1326 audit(1749706555.579:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.3.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa058e929 code=0x7ffc0000 [ 1188.743642][ T26] audit: type=1326 audit(1749706555.579:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.3.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa058e929 code=0x7ffc0000 [ 1188.766580][ T26] audit: type=1326 audit(1749706555.579:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.3.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4fa058e929 code=0x7ffc0000 [ 1188.789596][ T26] audit: type=1326 audit(1749706555.579:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.3.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4fa058e963 code=0x7ffc0000 [ 1188.811897][ T26] audit: type=1326 audit(1749706555.579:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.3.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4fa058e963 code=0x7ffc0000 [ 1188.834485][ T26] audit: type=1326 audit(1749706555.579:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.3.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa058e929 code=0x7ffc0000 [ 1188.857874][ T26] audit: type=1326 audit(1749706555.579:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.3.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa058e929 code=0x7ffc0000 [ 1188.889246][ T26] audit: type=1326 audit(1749706555.598:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.3.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4fa058e929 code=0x7ffc0000 [ 1188.964342][ T14] usb 3-1: USB disconnect, device number 43 [ 1189.049146][T14429] fuse: Bad value for 'rootmode' [ 1189.766873][T14440] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 1190.920680][ T4357] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1191.134487][ T4357] usb 2-1: Using ep0 maxpacket: 32 [ 1191.144457][ T4357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 1191.192986][ T4357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 1191.248770][ T4357] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1191.286609][ T4357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.358013][T14444] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1191.453736][ T4357] usb 2-1: Product: syz [ 1191.464535][ T4357] usb 2-1: Manufacturer: syz [ 1191.475346][ T4357] usb 2-1: SerialNumber: syz [ 1191.552685][T14449] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1191.562644][T14449] hfsplus: unable to find HFS+ superblock [ 1192.061089][ T4357] usb 2-1: config 0 descriptor?? [ 1192.106374][T14444] cramfs: wrong magic [ 1192.350161][ T4357] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1192.367649][ T9] usb 2-1: Failed to submit usb control message: -71 [ 1192.400638][ T9] usb 2-1: unable to send the bmi data to the device: -71 [ 1192.410425][ T4357] usb 2-1: USB disconnect, device number 41 [ 1192.566879][ T9] usb 2-1: unable to get target info from device [ 1192.742390][ T9] usb 2-1: could not get target info (-71) [ 1192.753620][ T9] usb 2-1: could not probe fw (-71) [ 1193.207295][T14464] ALSA: mixer_oss: invalid OSS volume 'ިc">#a6\9/[\' [ 1193.442221][ T9787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1193.469262][ T9787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1193.483200][ T9787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1193.491593][ T9787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1193.511309][ T9787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1193.522166][ T9787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1193.544641][T14471] fuse: Bad value for 'rootmode' [ 1193.559348][ T4357] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1193.699749][T14466] lo speed is unknown, defaulting to 1000 [ 1193.754776][T14466] lo speed is unknown, defaulting to 1000 [ 1193.779202][ T4357] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 1193.861352][ T4357] usb 4-1: config 0 has no interface number 0 [ 1193.867513][ T4357] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1193.879658][ T4357] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1193.900853][ T4357] usb 4-1: config 0 interface 255 has no altsetting 0 [ 1194.038939][ T4357] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1194.048693][ T4357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.073671][ T4357] usb 4-1: config 0 descriptor?? [ 1194.091974][ T4357] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 1194.473458][ T4357] usb 4-1: USB disconnect, device number 47 [ 1195.775345][ T4266] Bluetooth: hci2: command 0x0409 tx timeout [ 1196.820569][T14466] chnl_net:caif_netlink_parms(): no params data found [ 1197.987122][ T4266] Bluetooth: hci2: command 0x041b tx timeout [ 1198.891704][T14518] fuse: Unknown parameter 'group_i00000000000000000000' [ 1199.581011][T14466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.605116][T14466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.662548][T14466] device bridge_slave_0 entered promiscuous mode [ 1199.824808][T14466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.873797][T14466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.950012][T14466] device bridge_slave_1 entered promiscuous mode [ 1200.092489][T14466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1200.154571][T14466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1200.230572][ T4266] Bluetooth: hci2: command 0x040f tx timeout [ 1201.135315][T14466] team0: Port device team_slave_0 added [ 1201.734950][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1201.911806][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1202.075056][T14466] team0: Port device team_slave_1 added [ 1202.434451][ T4266] Bluetooth: hci2: command 0x0419 tx timeout [ 1202.535263][T14466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1202.548008][T14466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1202.686745][T14466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1202.880930][T14466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1202.908249][T14466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1203.032154][T14466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1203.100489][ T32] device hsr_slave_0 left promiscuous mode [ 1203.131193][ T32] device hsr_slave_1 left promiscuous mode [ 1203.147282][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1203.155430][T14565] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 1203.224145][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1203.345497][ T32] device bridge_slave_1 left promiscuous mode [ 1203.375935][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.421965][ T32] device bridge_slave_0 left promiscuous mode [ 1203.429976][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.726431][T14579] binder: 14578:14579 ioctl c0306201 200000001440 returned -11 [ 1204.099625][T14574] loop4: detected capacity change from 0 to 2048 [ 1204.198885][ T32] bond3 (unregistering): Released all slaves [ 1204.285181][T14574] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1204.300067][T14574] EXT4-fs (loop4): unmounting filesystem. [ 1204.460628][ T32] bond2 (unregistering): Released all slaves [ 1204.471802][ T32] bond1 (unregistering): Released all slaves [ 1204.619906][T14594] fuse: Bad value for 'user_id' [ 1204.927852][ T32] team0 (unregistering): Port device team_slave_1 removed [ 1205.028991][ T32] team0 (unregistering): Port device team_slave_0 removed [ 1205.116264][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1205.224847][ T32] bond0 (unregistering): (slave c1): Releasing backup interface [ 1207.818063][ T32] bond0 (unregistering): Released all slaves [ 1207.980941][T14576] netlink: 'syz.2.2979': attribute type 1 has an invalid length. [ 1208.115412][T14580] device veth3 entered promiscuous mode [ 1208.144110][T14580] bond6: (slave veth3): Enslaving as a backup interface with a down link [ 1208.315870][T14466] device hsr_slave_0 entered promiscuous mode [ 1208.342427][T14466] device hsr_slave_1 entered promiscuous mode [ 1208.472424][T14466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1208.539442][T14466] Cannot create hsr debugfs directory [ 1210.431222][T14639] netlink: 'syz.1.2997': attribute type 1 has an invalid length. [ 1210.510982][T14639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2997'. [ 1210.591750][T13222] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1210.797535][T13222] usb 5-1: config 0 has an invalid interface number: 187 but max is 0 [ 1210.816138][T13222] usb 5-1: config 0 has no interface number 0 [ 1210.843820][T13222] usb 5-1: config 0 interface 187 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1210.881662][T13222] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 1210.912058][T13222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.947116][T13222] usb 5-1: Product: syz [ 1210.951429][T13222] usb 5-1: Manufacturer: syz [ 1210.973180][T14466] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1210.985544][T13222] usb 5-1: SerialNumber: syz [ 1211.011776][T13222] usb 5-1: config 0 descriptor?? [ 1211.020706][T14636] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1211.038058][T14466] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1211.085516][T14466] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1211.161999][T14466] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1215.274554][ T5769] usb 5-1: USB disconnect, device number 53 [ 1215.458448][T14466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1216.530926][T14466] 8021q: adding VLAN 0 to HW filter on device team0 [ 1216.585701][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1216.607276][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1216.675576][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1216.691999][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1216.851194][T13925] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.858409][T13925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1219.087844][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1219.108651][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1219.143056][T13925] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.150276][T13925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1219.161866][T14681] fuse: Bad value for 'fd' [ 1219.741247][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1219.772085][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1219.813933][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1219.824517][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1219.836712][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1219.883562][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1219.919599][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1220.010897][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1220.177356][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1220.620008][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1220.673196][T14466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1220.719011][T14466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1221.326890][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1221.372533][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1225.473522][T14466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1226.148649][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1226.176636][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1226.437979][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1226.465997][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1226.698518][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1227.402660][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1227.469081][T14733] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 1227.478356][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1227.509377][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1227.570380][T14466] device veth0_vlan entered promiscuous mode [ 1227.644078][T14466] device veth1_vlan entered promiscuous mode [ 1227.822312][T14466] device veth0_macvtap entered promiscuous mode [ 1227.843882][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1227.866259][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1227.906096][T14466] device veth1_macvtap entered promiscuous mode [ 1227.960673][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1227.975089][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1228.012008][T14466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1228.043707][T14466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.085903][T14466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1228.345325][T14763] loop4: detected capacity change from 0 to 2048 [ 1229.139584][T14466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1229.171388][T13222] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1229.232545][T14466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1229.358172][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 1229.358190][ T26] audit: type=1326 audit(1749706594.501:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14757 comm="syz.2.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25b18e929 code=0x7fc00000 [ 1229.435887][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1229.446932][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1229.457965][T14466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1229.471960][T13222] usb 4-1: Using ep0 maxpacket: 32 [ 1229.477245][T14466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1229.487430][T14466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1229.498328][T14466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1229.522147][T13222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1229.545566][T14466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1229.559263][T13222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1229.569678][T14466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1229.580454][T13222] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1229.592167][T14466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1229.614998][T13222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.632792][T14466] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.662516][T13222] usb 4-1: config 0 descriptor?? [ 1229.678537][T13222] hub 4-1:0.0: USB hub found [ 1229.685360][T14466] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.715842][T14466] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.725516][T14466] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.767051][ T4572] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1229.817305][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1229.835116][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1229.894209][T13222] hub 4-1:0.0: 1 port detected [ 1229.902225][ T3585] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1230.068739][T14078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1230.111304][T14078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1230.184465][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1230.264510][ T4385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1230.290134][ T4385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1230.417997][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1230.609178][ T3585] usb 2-1: config 0 has an invalid interface number: 187 but max is 0 [ 1230.696595][ T3585] usb 2-1: config 0 has no interface number 0 [ 1230.699803][ T3585] usb 2-1: config 0 interface 187 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1230.733509][ T3585] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 1230.733567][ T3585] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.733589][ T3585] usb 2-1: Product: syz [ 1230.733618][ T3585] usb 2-1: Manufacturer: syz [ 1230.735780][ T3585] usb 2-1: SerialNumber: syz [ 1230.752205][ T3585] usb 2-1: config 0 descriptor?? [ 1230.752894][T14771] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1231.035496][ T14] usb 4-1: USB disconnect, device number 48 [ 1234.127864][T10412] usb 2-1: USB disconnect, device number 42 [ 1237.067373][ T4345] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.700997][T13969] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1237.712051][ T9787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1237.720633][T13969] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1237.765600][T13969] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1237.774770][ T9787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1237.783985][T13969] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1238.457076][ T4345] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.520799][T14826] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 1238.583695][T14830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3037'. [ 1239.226799][T14830] device veth5 entered promiscuous mode [ 1239.279040][ T4345] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.554225][ T4345] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.604470][T14835] lo speed is unknown, defaulting to 1000 [ 1239.611896][T14835] lo speed is unknown, defaulting to 1000 [ 1240.162415][ T4266] Bluetooth: hci0: command 0x0409 tx timeout [ 1240.504072][ T4298] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1240.729945][ T4298] usb 3-1: config 0 has an invalid interface number: 187 but max is 0 [ 1240.738202][ T4298] usb 3-1: config 0 has no interface number 0 [ 1240.866922][ T4298] usb 3-1: config 0 interface 187 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1240.982809][ T4298] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 1241.006584][ T4298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.014728][ T4298] usb 3-1: Product: syz [ 1241.023135][ T4298] usb 3-1: Manufacturer: syz [ 1241.029347][ T4298] usb 3-1: SerialNumber: syz [ 1241.047963][ T4298] usb 3-1: config 0 descriptor?? [ 1241.054253][T14854] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1241.600404][T14871] ALSA: mixer_oss: invalid OSS volume 'ިc">#a6\9/[\' [ 1242.545572][T13235] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1242.610455][T14877] fuse: Invalid rootmode [ 1242.666598][T14835] chnl_net:caif_netlink_parms(): no params data found [ 1242.666641][T14879] binder: BINDER_SET_CONTEXT_MGR already set [ 1242.695099][T14879] binder: 14878:14879 ioctl 4018620d 200000000040 returned -16 [ 1242.776999][T13235] usb 2-1: Using ep0 maxpacket: 8 [ 1242.794137][T13235] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.903219][T14835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.918455][T14835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.945089][T14835] device bridge_slave_0 entered promiscuous mode [ 1242.967630][T13235] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1242.983085][T13235] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x76, skipping [ 1242.993775][T13235] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1243.008848][T13235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.022078][T14835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.034793][T14835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.037316][T13235] hub 2-1:1.0: bad descriptor, ignoring hub [ 1243.046666][T14835] device bridge_slave_1 entered promiscuous mode [ 1243.055669][T13235] hub: probe of 2-1:1.0 failed with error -5 [ 1243.069897][T13235] cdc_wdm 2-1:1.0: skipping garbage [ 1243.075169][T13235] cdc_wdm 2-1:1.0: skipping garbage [ 1243.107240][T13235] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1243.291721][T14868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.848768][T14868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1243.904260][T10412] usb 3-1: USB disconnect, device number 44 [ 1244.110349][T14898] Bluetooth: MGMT ver 1.22 [ 1244.162315][ T14] usb 2-1: USB disconnect, device number 43 [ 1244.450210][T14835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1244.460365][ T93] block nbd2: Attempted send on invalid socket [ 1244.467166][ T93] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 1244.472443][T14835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1244.477506][T14902] SQUASHFS error: Failed to read block 0x0: -5 [ 1244.491883][T14902] unable to read squashfs_super_block [ 1244.835018][T13969] Bluetooth: hci0: command 0x040f tx timeout [ 1245.122332][ T4345] IPVS: stopping backup sync thread 5566 ... [ 1246.100725][T14835] team0: Port device team_slave_0 added [ 1246.183756][T14922] ALSA: mixer_oss: invalid OSS volume 'ިc">#a6\9/[\' [ 1246.432360][T14835] team0: Port device team_slave_1 added [ 1246.569972][T14925] fuse: Bad value for 'fd' [ 1246.601410][T14835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1246.620879][T14835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1246.690292][T14835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1247.089064][T13969] Bluetooth: hci0: command 0x0419 tx timeout [ 1247.751525][T14933] fuse: Invalid rootmode [ 1247.856025][T14835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1247.869150][T14835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.895710][T14835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1247.995631][ T4345] device batadv0 left promiscuous mode [ 1248.030961][ T4345] device bond0 left promiscuous mode [ 1248.090775][ T4345] device bond_slave_0 left promiscuous mode [ 1248.102619][ T4345] device bond_slave_1 left promiscuous mode [ 1248.155291][ T4345] device hsr_slave_0 left promiscuous mode [ 1248.183515][ T4345] device hsr_slave_1 left promiscuous mode [ 1248.224504][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1248.257009][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1248.293698][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1248.334586][ T4345] device bridge_slave_1 left promiscuous mode [ 1248.394295][ T4345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.417584][ T4345] device bridge_slave_0 left promiscuous mode [ 1248.431809][ T4345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.449140][T14912] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 1248.761886][ T4345] device veth1_macvtap left promiscuous mode [ 1248.872402][ T4345] device veth0_macvtap left promiscuous mode [ 1248.954596][ T4345] device veth1_vlan left promiscuous mode [ 1249.116590][ T4345] device veth0_vlan left promiscuous mode [ 1249.150375][T14928] loop2: detected capacity change from 0 to 2048 [ 1249.233826][T14928] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1249.258571][T14928] EXT4-fs (loop2): unmounting filesystem. [ 1249.514012][ T4345] bond2 (unregistering): Released all slaves [ 1249.528495][ T4345] bond1 (unregistering): Released all slaves [ 1250.115632][ T4345] team0 (unregistering): Port device team_slave_1 removed [ 1250.176909][ T4345] team0 (unregistering): Port device team_slave_0 removed [ 1250.251086][ T4345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1250.321857][ T4345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1251.002089][ T4345] bond0 (unregistering): Released all slaves [ 1251.174738][T13222] lo speed is unknown, defaulting to 1000 [ 1251.343556][T14835] device hsr_slave_0 entered promiscuous mode [ 1251.391704][T14835] device hsr_slave_1 entered promiscuous mode [ 1253.183399][ T4298] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1253.364283][ T4298] usb 5-1: device descriptor read/64, error -71 [ 1254.362380][T14973] fuse: Unknown parameter '0x0000000000000003' [ 1254.487077][ T4298] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1254.679283][ T4298] usb 5-1: device descriptor read/64, error -71 [ 1254.819180][ T4298] usb usb5-port1: attempt power cycle [ 1254.998242][T14990] fuse: Bad value for 'fd' [ 1255.042789][ T5769] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1255.233226][T14835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1255.256573][ T5769] usb 2-1: Using ep0 maxpacket: 32 [ 1255.270972][ T5769] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1255.273566][T14835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1255.289824][ T4298] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1255.313579][T14835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1255.321300][ T4298] usb 5-1: device descriptor read/8, error -71 [ 1255.351218][T14835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1255.356621][ T5769] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1255.392685][ T5769] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1255.425469][ T5769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.465577][ T5769] usb 2-1: config 0 descriptor?? [ 1255.502187][ T5769] hub 2-1:0.0: USB hub found [ 1255.594299][T14835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1255.641621][ T4298] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1255.665128][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1255.684793][ T4298] usb 5-1: device descriptor read/8, error -71 [ 1255.685325][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1255.712320][ T5769] hub 2-1:0.0: 1 port detected [ 1255.760347][T14835] 8021q: adding VLAN 0 to HW filter on device team0 [ 1255.825845][ T4298] usb usb5-port1: unable to enumerate USB device [ 1255.833082][T10120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1255.866366][T10120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1255.925957][T10120] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.933264][T10120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1256.012881][T10120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1256.032846][T10120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1256.088034][T10120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1256.118583][T10120] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.125793][T10120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1256.375592][T10412] hub 2-1:0.0: activate --> -90 [ 1256.393231][T10120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1256.597598][T13222] usb 2-1: USB disconnect, device number 44 [ 1257.214629][T10412] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 1257.263406][T10120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1257.293318][T10120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1257.336498][T10120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1257.364337][T10120] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1257.388947][T15008] i2c i2c-0: Invalid block write size 34 [ 1257.416723][ T26] audit: type=1326 audit(1749706620.767:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15009 comm="syz.4.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb94b8e929 code=0x7ffc0000 [ 1257.454514][T10000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1257.476329][T10000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1258.481269][ T26] audit: type=1326 audit(1749706620.805:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15009 comm="syz.4.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb94b8e929 code=0x7ffc0000 [ 1258.509689][T10000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1258.525537][T10000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1258.535078][ T26] audit: type=1326 audit(1749706620.805:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15009 comm="syz.4.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb94b8e929 code=0x7ffc0000 [ 1258.547927][T15014] fuse: Unknown parameter '0x0000000000000003' [ 1258.580276][T10000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1258.650296][T10000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1258.685091][ T26] audit: type=1326 audit(1749706620.814:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15009 comm="syz.4.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7feb94b8e929 code=0x7ffc0000 [ 1258.685922][T15008] netlink: 'syz.2.3075': attribute type 1 has an invalid length. [ 1258.842333][ T26] audit: type=1326 audit(1749706620.814:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15009 comm="syz.4.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feb94b8e963 code=0x7ffc0000 [ 1258.910127][T14835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1259.740223][ T26] audit: type=1326 audit(1749706620.814:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15009 comm="syz.4.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feb94b8e963 code=0x7ffc0000 [ 1260.059970][T15030] ALSA: mixer_oss: invalid OSS volume 'ިc">#a6\9/[\' [ 1260.977764][ T26] audit: type=1326 audit(1749706621.768:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15009 comm="syz.4.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb94b8e929 code=0x7ffc0000 [ 1261.154278][ T26] audit: type=1326 audit(1749706621.768:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15009 comm="syz.4.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb94b8e929 code=0x7ffc0000 [ 1261.199889][ T26] audit: type=1326 audit(1749706621.768:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15009 comm="syz.4.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb94b8e929 code=0x7ffc0000 [ 1262.030860][ T4297] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1262.408549][ T4297] usb 5-1: Using ep0 maxpacket: 16 [ 1262.416002][ T4297] usb 5-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 1262.437467][ T4297] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1262.539309][T15056] netlink: 'syz.1.3087': attribute type 1 has an invalid length. [ 1262.909585][ T4297] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1262.946556][ T4297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.973382][ T4297] usb 5-1: Product: syz [ 1263.089502][ T4297] usb 5-1: Manufacturer: syz [ 1263.099067][ T4297] usb 5-1: SerialNumber: syz [ 1263.789651][T15059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3087'. [ 1263.851803][T15056] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1263.901049][T15056] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3087'. [ 1263.922865][T15067] fuse: Unknown parameter '0x0000000000000003' [ 1264.046125][ T4297] usb 5-1: 0:2 : does not exist [ 1264.069906][ T4297] usb 5-1: USB disconnect, device number 58 [ 1264.327429][ T4270] udevd[4270]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1264.474653][T15056] bond1 (unregistering): Released all slaves [ 1264.527449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1264.534967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1264.556750][T14835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1264.668870][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1264.709579][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1264.767101][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1264.783982][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1264.831236][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1264.850352][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1264.860091][T14835] device veth0_vlan entered promiscuous mode [ 1264.882126][T14835] device veth1_vlan entered promiscuous mode [ 1265.687954][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1265.762847][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1265.773046][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1265.822715][T14835] device veth0_macvtap entered promiscuous mode [ 1265.843000][ T4298] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1265.873719][T14835] device veth1_macvtap entered promiscuous mode [ 1265.897945][T15083] ALSA: mixer_oss: invalid OSS volume 'ިc">#a6\9/[\' [ 1266.015538][ T4298] usb 3-1: device descriptor read/64, error -71 [ 1266.042737][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1266.055992][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1266.068373][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1266.080991][T14835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1266.091866][T14835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1266.114986][T14835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1266.126003][T14835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1266.136625][T14835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1266.148293][T14835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1266.160184][T14835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1266.172960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1266.266343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1266.353615][ T4298] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 1266.414376][T14835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.423341][T14835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.724203][T14835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.744124][T14835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.877519][ T4298] usb 3-1: device descriptor read/64, error -71 [ 1267.016384][ T4298] usb usb3-port1: attempt power cycle [ 1267.026519][T10000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1267.075991][T10000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1267.119540][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1267.149471][ T4374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1267.158890][ T4374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1267.186325][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1267.349468][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1267.380175][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1267.475951][ T4298] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 1268.370837][ T4298] usb 3-1: device descriptor read/8, error -71 [ 1269.724450][T15104] fuse: Unknown parameter '0x0000000000000003' [ 1269.906494][ T26] kauditd_printk_skb: 32 callbacks suppressed [ 1269.906506][ T26] audit: type=1326 audit(1749706632.460:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15106 comm="syz.0.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe502b8e929 code=0x7ffc0000 [ 1270.058863][ T26] audit: type=1326 audit(1749706632.488:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15106 comm="syz.0.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe502b8e929 code=0x7ffc0000 [ 1270.177405][ T26] audit: type=1326 audit(1749706632.497:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15106 comm="syz.0.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe502b8e929 code=0x7ffc0000 [ 1270.212793][ T26] audit: type=1326 audit(1749706632.497:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15106 comm="syz.0.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe502b8e929 code=0x7ffc0000 [ 1270.236464][ T26] audit: type=1326 audit(1749706632.497:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15106 comm="syz.0.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe502b8e929 code=0x7ffc0000 [ 1270.266279][ T26] audit: type=1326 audit(1749706632.497:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15106 comm="syz.0.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe502b8e963 code=0x7ffc0000 [ 1271.111340][ T26] audit: type=1326 audit(1749706632.497:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15106 comm="syz.0.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe502b8e963 code=0x7ffc0000 [ 1271.134065][ T26] audit: type=1326 audit(1749706632.497:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15106 comm="syz.0.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe502b8e929 code=0x7ffc0000 [ 1271.156411][ C1] vkms_vblank_simulate: vblank timer overrun [ 1271.166128][ T26] audit: type=1326 audit(1749706632.516:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15106 comm="syz.0.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe502b8e929 code=0x7ffc0000 [ 1271.200365][T15116] ALSA: mixer_oss: invalid OSS volume 'ިc">#a6\9/[\' [ 1271.271125][T13969] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1271.281479][T13969] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1271.295983][T13969] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1271.371310][T13969] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1271.380851][T13969] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1271.388220][T13969] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1271.456627][T15121] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1271.525891][T15121] hfsplus: unable to find HFS+ superblock [ 1271.608344][ T26] audit: type=1326 audit(1749706632.525:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15106 comm="syz.0.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe502b8e929 code=0x7ffc0000 [ 1271.672071][ T4385] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1272.209567][ T4385] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.361331][T15117] lo speed is unknown, defaulting to 1000 [ 1272.484412][ T4385] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1272.530140][ T4385] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.554031][ T4297] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 1273.496168][ T4297] usb 3-1: no configurations [ 1273.503528][ T4297] usb 3-1: can't read configurations, error -22 [ 1273.575149][ T4385] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1273.591084][T13969] Bluetooth: hci3: command 0x0409 tx timeout [ 1273.613452][ T4385] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.709260][ T4297] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 1273.718002][T15136] fuse: Unknown parameter '0xffffffffffffffff' [ 1273.731726][ T4385] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1273.778521][ T4385] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.924076][ T4297] usb 3-1: no configurations [ 1273.928872][ T4297] usb 3-1: can't read configurations, error -22 [ 1273.962538][ T4297] usb usb3-port1: attempt power cycle [ 1274.510688][ T4297] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 1274.557592][ T4297] usb 3-1: no configurations [ 1274.562302][ T4297] usb 3-1: can't read configurations, error -22 [ 1274.724487][ T4297] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 1274.766444][ T4297] usb 3-1: no configurations [ 1274.766594][ T4297] usb 3-1: can't read configurations, error -22 [ 1274.770162][ T4297] usb usb3-port1: unable to enumerate USB device [ 1275.150431][T15117] chnl_net:caif_netlink_parms(): no params data found [ 1275.347610][T15140] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 1275.814750][T13969] Bluetooth: hci3: command 0x041b tx timeout [ 1276.814462][T15169] siw: device registration error -23 [ 1278.038236][ T4266] Bluetooth: hci3: command 0x040f tx timeout [ 1278.430950][T15186] fuse: Unknown parameter '0x0000000000000003' [ 1278.626295][T13235] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1278.859778][T13235] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 1278.965058][T13235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1279.125407][T13235] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1279.236555][T13235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.245042][T13235] usb 1-1: Product: syz [ 1279.249596][T13235] usb 1-1: Manufacturer: syz [ 1279.254257][T13235] usb 1-1: SerialNumber: syz [ 1279.264099][T15117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1279.279187][T13235] usb 1-1: config 0 descriptor?? [ 1279.302001][T15117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.318763][T15117] device bridge_slave_0 entered promiscuous mode [ 1279.437473][T15117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1279.451889][T15117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.482101][T15117] device bridge_slave_1 entered promiscuous mode [ 1279.508388][ T3585] usb 1-1: USB disconnect, device number 47 [ 1279.588880][ T5769] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1279.802476][ T5769] usb 2-1: Using ep0 maxpacket: 32 [ 1279.821354][ T5769] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1279.863488][ T5769] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1279.895377][ T5769] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1279.921766][ T5769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.938738][T15117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1279.963761][ T5769] usb 2-1: config 0 descriptor?? [ 1279.966180][T15117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1279.985780][ T5769] hub 2-1:0.0: USB hub found [ 1280.128272][T15208] i2c i2c-0: Invalid block write size 34 [ 1280.190224][T15208] netlink: 'syz.2.3128': attribute type 1 has an invalid length. [ 1280.198552][T13235] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 1280.202460][ T5769] hub 2-1:0.0: 1 port detected [ 1280.268528][T15208] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1280.275486][ T4266] Bluetooth: hci3: command 0x0419 tx timeout [ 1280.444476][T13235] usb 4-1: no configurations [ 1280.449145][T13235] usb 4-1: can't read configurations, error -22 [ 1280.518581][ T4266] Bluetooth: hci5: command 0x0406 tx timeout [ 1280.636031][T13235] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 1280.861141][T13235] usb 4-1: no configurations [ 1280.865995][T13235] usb 4-1: can't read configurations, error -22 [ 1280.873894][T13235] usb usb4-port1: attempt power cycle [ 1280.892376][ T3585] hub 2-1:0.0: activate --> -90 [ 1280.920277][T15117] team0: Port device team_slave_0 added [ 1281.025821][T15117] team0: Port device team_slave_1 added [ 1281.085047][ T6209] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1281.108441][ T3585] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 1281.128776][ T3585] usb 2-1: USB disconnect, device number 45 [ 1281.201245][T15117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1281.221065][T15117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1281.248006][T15117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1281.248214][ T4385] IPVS: stopping backup sync thread 5200 ... [ 1281.260790][T15117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1281.276765][T15117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1281.309784][T15117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1281.331080][ T6209] usb 1-1: Using ep0 maxpacket: 32 [ 1281.341624][T13235] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 1281.350824][ T6209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 1281.390602][ T6209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 1281.406832][T13235] usb 4-1: no configurations [ 1281.411931][T13235] usb 4-1: can't read configurations, error -22 [ 1281.454075][ T6209] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1281.497682][ T6209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.506604][ T6209] usb 1-1: Product: syz [ 1281.510807][ T6209] usb 1-1: Manufacturer: syz [ 1281.540888][ T6209] usb 1-1: SerialNumber: syz [ 1281.550813][ T6209] usb 1-1: config 0 descriptor?? [ 1281.663313][ T6209] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1281.706293][T13235] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1281.750491][T13235] usb 4-1: no configurations [ 1281.755248][T13235] usb 4-1: can't read configurations, error -22 [ 1281.794934][T13235] usb usb4-port1: unable to enumerate USB device [ 1281.867053][ T4503] usb 1-1: Failed to submit usb control message: -71 [ 1281.874966][T13235] usb 1-1: USB disconnect, device number 48 [ 1281.888453][ T4503] usb 1-1: unable to send the bmi data to the device: -71 [ 1281.922056][ T4503] usb 1-1: unable to get target info from device [ 1281.928482][ T4503] usb 1-1: could not get target info (-71) [ 1282.092712][ T4503] usb 1-1: could not probe fw (-71) [ 1282.229553][T15117] device hsr_slave_0 entered promiscuous mode [ 1282.278682][T15117] device hsr_slave_1 entered promiscuous mode [ 1282.310963][T15117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1282.354191][T15117] Cannot create hsr debugfs directory [ 1282.477839][ T4385] device hsr_slave_0 left promiscuous mode [ 1282.505257][ T4385] device hsr_slave_1 left promiscuous mode [ 1282.643007][T15234] fuse: Unknown parameter 'fd0x0000000000000003' [ 1282.675830][ T4385] device veth1_macvtap left promiscuous mode [ 1282.684034][ T4385] device veth0_macvtap left promiscuous mode [ 1282.710175][ T4385] device veth1_vlan left promiscuous mode [ 1282.731438][ T4385] device veth0_vlan left promiscuous mode [ 1282.956026][ T6209] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1283.161386][ T6209] usb 2-1: config 0 has an invalid interface number: 187 but max is 0 [ 1283.177211][ T6209] usb 2-1: config 0 has no interface number 0 [ 1283.196194][ T6209] usb 2-1: config 0 interface 187 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1283.219873][ T6209] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 1283.247693][ T6209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.294395][ T6209] usb 2-1: Product: syz [ 1283.332424][ T6209] usb 2-1: Manufacturer: syz [ 1283.375154][ T6209] usb 2-1: SerialNumber: syz [ 1283.497080][ T6209] usb 2-1: config 0 descriptor?? [ 1283.552013][T15236] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1284.549421][ T26] kauditd_printk_skb: 41 callbacks suppressed [ 1284.549437][ T26] audit: type=1326 audit(1749706646.145:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15255 comm="syz.2.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25b18e929 code=0x7ffc0000 [ 1284.674307][ T26] audit: type=1326 audit(1749706646.229:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15255 comm="syz.2.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25b18e929 code=0x7ffc0000 [ 1284.716721][ T26] audit: type=1326 audit(1749706646.229:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15255 comm="syz.2.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25b18e929 code=0x7ffc0000 [ 1284.756805][ T26] audit: type=1326 audit(1749706646.229:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15255 comm="syz.2.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff25b18e929 code=0x7ffc0000 [ 1285.294285][ T4385] bond3 (unregistering): Released all slaves [ 1285.305956][ T26] audit: type=1326 audit(1749706646.229:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15255 comm="syz.2.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff25b18e963 code=0x7ffc0000 [ 1285.360639][ T26] audit: type=1326 audit(1749706646.229:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15255 comm="syz.2.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff25b18e963 code=0x7ffc0000 [ 1285.433123][ T4385] bond2 (unregistering): Released all slaves [ 1285.469089][ T26] audit: type=1326 audit(1749706646.247:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15255 comm="syz.2.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25b18e929 code=0x7ffc0000 [ 1285.492336][ T26] audit: type=1326 audit(1749706646.247:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15255 comm="syz.2.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff25b18e929 code=0x7ffc0000 [ 1285.515129][ T26] audit: type=1326 audit(1749706646.257:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15255 comm="syz.2.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25b18e929 code=0x7ffc0000 [ 1285.538160][ T26] audit: type=1326 audit(1749706646.257:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15255 comm="syz.2.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff25b18e929 code=0x7ffc0000 [ 1285.623220][T15263] i2c i2c-0: Invalid block write size 34 [ 1285.765927][ T4385] bond1 (unregistering): Released all slaves [ 1285.908452][ T6209] usb 2-1: USB disconnect, device number 46 [ 1287.593780][T15278] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 1288.074304][T15282] loop3: detected capacity change from 0 to 2048 [ 1288.279430][T15282] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1288.341414][T15282] EXT4-fs (loop3): unmounting filesystem. [ 1289.280472][ T4385] bond0 (unregistering): Released all slaves [ 1289.390602][ T4297] lo speed is unknown, defaulting to 1000 [ 1289.426203][T15263] netlink: 'syz.2.3140': attribute type 1 has an invalid length. [ 1291.668381][ T5769] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1291.847905][T15301] syz.1.3151 uses obsolete (PF_INET,SOCK_PACKET) [ 1292.198524][ T5769] usb 1-1: config 0 has an invalid interface number: 187 but max is 0 [ 1292.230538][ T5769] usb 1-1: config 0 has no interface number 0 [ 1292.422108][ T5769] usb 1-1: config 0 interface 187 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1292.485185][T15301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3151'. [ 1292.507779][ T5769] usb 1-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 1292.551838][ T5769] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.573298][ T5769] usb 1-1: Product: syz [ 1292.584272][ T5769] usb 1-1: Manufacturer: syz [ 1292.595638][ T5769] usb 1-1: SerialNumber: syz [ 1292.647345][ T5769] usb 1-1: config 0 descriptor?? [ 1292.676457][T15304] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1294.963659][T15089] usb 1-1: USB disconnect, device number 49 [ 1295.108072][T15334] netlink: 'syz.0.3158': attribute type 1 has an invalid length. [ 1295.255501][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3158'. [ 1295.401140][T15334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1295.561792][T15334] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3158'. [ 1296.535178][T15089] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1296.732287][T15334] bond1 (unregistering): Released all slaves [ 1296.842944][ T93] block nbd1: Attempted send on invalid socket [ 1296.854670][ T93] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1296.856359][T15089] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.864830][T15354] SQUASHFS error: Failed to read block 0x0: -5 [ 1296.885395][T15354] unable to read squashfs_super_block [ 1296.971402][T15089] usb 4-1: config 0 has no interfaces? [ 1296.977135][T15089] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1296.988213][T15089] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.008725][T15089] usb 4-1: config 0 descriptor?? [ 1297.177012][T15117] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1297.247688][T15117] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1297.363759][T15117] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1297.394492][T15117] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1297.698918][T15117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1297.706407][T15365] netlink: 'syz.2.3166': attribute type 13 has an invalid length. [ 1297.812882][T15368] fuse: Unknown parameter 'use00000000000000000000' [ 1298.666590][ T6209] usb 4-1: USB disconnect, device number 53 [ 1299.328568][T15365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.335822][T15365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.853324][T15365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1299.908065][T15365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1300.399340][T15365] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.408578][T15365] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.418063][T15365] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.427055][T15365] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.808892][T15383] netlink: 'syz.0.3172': attribute type 1 has an invalid length. [ 1300.853531][T15384] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1300.890385][T15117] 8021q: adding VLAN 0 to HW filter on device team0 [ 1300.936160][T13201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1300.959319][T13201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1301.021810][T13201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1301.092249][T13201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1301.151630][T13201] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.158914][T13201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1301.266140][T13201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1301.900701][T13201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1301.909867][T13201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1301.919117][T13201] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.926255][T13201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1301.955418][T13201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1302.191555][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1302.252592][T10854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1302.307572][T10854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1302.467045][T10854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1302.491787][T10854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1302.558965][T10854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1302.948164][T10854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1303.095373][ T93] block nbd0: Attempted send on invalid socket [ 1303.101815][ T93] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1303.123629][T15405] SQUASHFS error: Failed to read block 0x0: -5 [ 1303.171936][T10854] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1303.173184][T15405] unable to read squashfs_super_block [ 1303.306299][T15117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1303.396381][T10854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1303.412358][T10854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1303.425015][T15410] fuse: Unknown parameter 'user_i00000000000000000000' [ 1303.696016][ T5769] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 1303.925257][ T5769] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1304.535905][ T5769] usb 4-1: config 0 has no interfaces? [ 1304.547212][ T5769] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1304.613084][ T5769] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.676095][ T5769] usb 4-1: config 0 descriptor?? [ 1305.060488][T15420] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 1305.304845][T15434] lo speed is unknown, defaulting to 1000 [ 1305.311012][T15434] lo speed is unknown, defaulting to 1000 [ 1305.324726][T15434] lo speed is unknown, defaulting to 1000 [ 1305.385437][T15434] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1305.519217][ T4298] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1305.556417][T15434] lo speed is unknown, defaulting to 1000 [ 1305.569143][T15434] lo speed is unknown, defaulting to 1000 [ 1305.580771][T15434] lo speed is unknown, defaulting to 1000 [ 1305.590445][T15434] lo speed is unknown, defaulting to 1000 [ 1305.598443][T15434] lo speed is unknown, defaulting to 1000 [ 1305.844561][ T4298] usb 1-1: Using ep0 maxpacket: 16 [ 1305.853663][ T4298] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.875465][ T4298] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1305.914375][ T4298] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1305.982855][ T4298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.019492][ T4298] usb 1-1: Product: syz [ 1306.019611][ T4298] usb 1-1: Manufacturer: syz [ 1306.019779][ T4298] usb 1-1: SerialNumber: syz [ 1306.060562][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1306.060757][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1306.088914][T15117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1306.307322][ T4298] usb 1-1: 0:2 : does not exist [ 1306.326727][ T4298] usb 1-1: USB disconnect, device number 50 [ 1306.458096][T15438] loop2: detected capacity change from 0 to 2048 [ 1306.548660][ T4270] udevd[4270]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1306.588073][T15438] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1306.696321][T15438] EXT4-fs (loop2): unmounting filesystem. [ 1306.774096][ T4298] usb 4-1: USB disconnect, device number 54 [ 1308.629780][T15470] fuse: Unknown parameter 'user_i00000000000000000000' [ 1309.687657][ T4298] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1309.787149][T10854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1309.932133][ T4298] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.941765][T10854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1309.949645][ T4298] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1309.959603][ T4298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.297302][ T4298] usb 2-1: config 0 descriptor?? [ 1310.323024][ T4298] pwc: Askey VC010 type 2 USB webcam detected. [ 1310.353237][T10854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1310.362962][T10854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1310.392221][T15117] device veth0_vlan entered promiscuous mode [ 1310.410636][T15488] tipc: Started in network mode [ 1310.416396][T15488] tipc: Node identity , cluster identity 4711 [ 1310.473131][T15488] tipc: Failed to set node id, please configure manually [ 1310.545768][T15488] tipc: Enabling of bearer rejected, failed to enable media [ 1310.577136][T10854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1310.635090][T10854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1310.650069][T15117] device veth1_vlan entered promiscuous mode [ 1310.682589][T13201] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1310.706111][T13201] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1310.725739][T13201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1310.752692][ T4298] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1310.800248][T13201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1310.800303][ T4298] pwc: recv_control_msg error -32 req 02 val 2700 [ 1310.830839][ T4298] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1310.869471][T13222] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 1310.904748][ T4298] pwc: recv_control_msg error -32 req 04 val 1000 [ 1310.971768][ T4298] pwc: recv_control_msg error -32 req 04 val 1300 [ 1311.008449][T15117] device veth0_macvtap entered promiscuous mode [ 1311.066026][ T4298] pwc: recv_control_msg error -32 req 04 val 1400 [ 1311.088301][T13222] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.102665][T13201] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1311.164860][T13222] usb 3-1: config 0 has no interfaces? [ 1311.195310][ T4298] pwc: recv_control_msg error -32 req 02 val 2000 [ 1311.216195][T15117] device veth1_macvtap entered promiscuous mode [ 1311.243881][T13222] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1311.279064][ T4298] pwc: recv_control_msg error -32 req 02 val 2100 [ 1311.351142][T13222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.367811][ T4298] pwc: recv_control_msg error -32 req 04 val 1500 [ 1311.453683][ T4298] pwc: recv_control_msg error -32 req 02 val 2500 [ 1311.535987][T13222] usb 3-1: config 0 descriptor?? [ 1311.580690][ T4298] pwc: recv_control_msg error -32 req 02 val 2400 [ 1311.653314][T15117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1311.692112][ T4298] pwc: recv_control_msg error -32 req 02 val 2600 [ 1311.776120][ T4298] pwc: recv_control_msg error -32 req 02 val 2900 [ 1311.791691][T15117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.945522][T15117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1312.068339][T15117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1312.120088][ T4298] pwc: recv_control_msg error -71 req 04 val 1100 [ 1312.170053][ T4298] pwc: recv_control_msg error -71 req 04 val 1200 [ 1312.237875][T15117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1312.343460][ T4298] pwc: Registered as video103. [ 1312.361388][T15117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1312.445512][ T4298] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 1312.511358][T15117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1312.573779][T15117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1312.584528][T15117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1312.594834][T15117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1312.612567][T15117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1312.622553][T15117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1312.643665][T15117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1312.647369][ T4298] usb 2-1: USB disconnect, device number 47 [ 1312.666521][T15117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1312.674219][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1312.694352][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1312.726684][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1312.873162][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1312.995415][T15117] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.005529][T15117] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.014732][T15117] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.027451][T15117] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.749678][ T52] block nbd1: Attempted send on invalid socket [ 1313.757838][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 1313.767441][T15525] SQUASHFS error: Failed to read block 0x0: -5 [ 1313.773634][T15525] unable to read squashfs_super_block [ 1313.870060][T10120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.958762][T10120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1313.987242][ T5517] usb 3-1: USB disconnect, device number 53 [ 1314.030018][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1314.075689][ T4811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.115600][ T4811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.168573][T13756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1315.554110][ T5769] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1315.730342][ T6209] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1315.801365][T15547] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3097'. [ 1315.814298][T15547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3097'. [ 1316.149998][ T6209] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1316.296089][ T5769] usb 2-1: config 0 has an invalid interface number: 187 but max is 0 [ 1316.396884][ T5769] usb 2-1: config 0 has no interface number 0 [ 1316.414580][ T6209] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1316.475271][ T5769] usb 2-1: config 0 interface 187 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1316.509213][ T6209] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1316.526683][ T5769] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 1316.539079][ T6209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.550411][ T5769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.579269][ T6209] usb 3-1: config 0 descriptor?? [ 1316.586185][ T5769] usb 2-1: Product: syz [ 1316.621034][ T5769] usb 2-1: Manufacturer: syz [ 1316.626099][T15538] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1316.646414][ T6209] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1316.664853][ T5769] usb 2-1: SerialNumber: syz [ 1316.705513][ T5769] usb 2-1: config 0 descriptor?? [ 1316.739332][T15537] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1316.827950][T15555] ALSA: mixer_oss: invalid OSS volume 'ڨIPŒߎAkX!`=UW' [ 1316.858460][T15555] ALSA: mixer_oss: invalid OSS volume 'Ni)E{:T%cB' [ 1316.896835][T15555] ALSA: mixer_oss: invalid OSS volume 'fE,MT8PדT}'Wl{' [ 1316.906713][T15555] ALSA: mixer_oss: invalid OSS volume ';y@]>#a6\9/[\' [ 1317.561516][ T6209] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1317.811389][ T6209] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1317.865799][ T6209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.959698][ T6209] usb 4-1: config 0 descriptor?? [ 1317.992354][ T6209] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1318.031800][ T52] block nbd0: Attempted send on invalid socket [ 1318.038062][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 1318.047569][T15569] SQUASHFS error: Failed to read block 0x0: -5 [ 1318.053848][T15569] unable to read squashfs_super_block [ 1318.078812][T15564] block device autoloading is deprecated and will be removed. [ 1318.417004][ T6209] gspca_cpia1: usb_control_msg 03, error -32 [ 1318.424116][ T6209] cpia1 4-1:0.0: unexpected state after lo power cmd: 01 [ 1318.669870][ T5517] usb 2-1: USB disconnect, device number 48 [ 1320.156775][ T6204] usb 3-1: USB disconnect, device number 54 [ 1320.602501][ T6209] gspca_cpia1: usb_control_msg 02, error -71 [ 1321.284778][ T6209] gspca_cpia1: usb_control_msg 05, error -71 [ 1321.305578][ T6209] cpia1 4-1:0.0: unexpected systemstate: 01 [ 1321.344870][ T6209] usb 4-1: USB disconnect, device number 55 [ 1321.647930][T15600] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3218'. [ 1321.665535][T15600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3218'. [ 1321.817065][ T6209] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1322.116630][ T6209] usb 4-1: Using ep0 maxpacket: 32 [ 1322.175953][ T6209] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1322.211853][ T6209] usb 4-1: config 0 has no interface number 0 [ 1322.218125][ T6209] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1322.258779][ T6209] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1322.305327][ T6209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.184982][ T6209] usb 4-1: Product: syz [ 1323.189219][ T6209] usb 4-1: Manufacturer: syz [ 1323.227440][ T6209] usb 4-1: SerialNumber: syz [ 1323.415886][ T6209] usb 4-1: config 0 descriptor?? [ 1324.307559][ T4266] Bluetooth: hci2: command 0x0406 tx timeout [ 1324.745303][ T6209] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1326.117464][ T6209] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1326.130925][ T6209] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1326.138870][ T6209] f81534: probe of 4-1:0.12 failed with error -71 [ 1326.152915][ T6209] usb 4-1: USB disconnect, device number 56 [ 1326.295816][ T6204] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1326.310554][T13969] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1326.324006][T13969] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1326.332452][T13969] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1326.342087][T13969] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1326.349689][T13969] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1326.356964][T13969] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1326.568846][T15634] lo speed is unknown, defaulting to 1000 [ 1327.023785][ T6204] usb 1-1: Using ep0 maxpacket: 16 [ 1327.038718][ T6204] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.078519][ T6204] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1327.093693][ T6204] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1327.104818][ T6204] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.208126][ T6204] usb 1-1: Product: syz [ 1327.212784][ T6204] usb 1-1: Manufacturer: syz [ 1327.217621][ T6204] usb 1-1: SerialNumber: syz [ 1327.518240][ T52] block nbd3: Attempted send on invalid socket [ 1327.524907][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 1327.534405][T15657] SQUASHFS error: Failed to read block 0x0: -5 [ 1327.540715][T15657] unable to read squashfs_super_block [ 1327.559825][ T6204] usb 1-1: 0:2 : does not exist [ 1327.568710][ T6204] usb 1-1: unit 11 not found! [ 1327.592399][ T6204] usb 1-1: USB disconnect, device number 51 [ 1327.659983][T15659] ALSA: mixer_oss: invalid OSS volume 'ڨIPŒߎAkX!`=UW' [ 1327.733531][T15659] ALSA: mixer_oss: invalid OSS volume 'Ni)E{:T%cB' [ 1327.766216][T15659] ALSA: mixer_oss: invalid OSS volume 'fE,MT8PדT}'Wl{' [ 1327.824455][T15659] ALSA: mixer_oss: invalid OSS volume ';y@]>#a6\9/[\' [ 1327.871528][T15634] chnl_net:caif_netlink_parms(): no params data found [ 1327.984559][T15666] binder: 15664:15666 ioctl c0306201 0 returned -14 [ 1328.082890][ T4270] udevd[4270]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1328.585279][ T4266] Bluetooth: hci1: command 0x0409 tx timeout [ 1328.615898][ T6209] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1328.949744][ T6209] usb 1-1: Using ep0 maxpacket: 32 [ 1328.983633][ T6209] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1329.075279][ T6209] usb 1-1: config 0 has no interface number 0 [ 1329.116165][ T6209] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1329.160758][ T6209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.257022][ T5517] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 1329.269913][ T6209] usb 1-1: Product: syz [ 1329.274210][ T6209] usb 1-1: Manufacturer: syz [ 1329.279762][ T6209] usb 1-1: SerialNumber: syz [ 1329.286451][ T6209] usb 1-1: config 0 descriptor?? [ 1329.294777][T15634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.303882][ T6209] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1329.312988][T15634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.332132][T15634] device bridge_slave_0 entered promiscuous mode [ 1329.523586][ T6209] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1329.539106][ T6209] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1329.567400][T15634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.592730][ T5517] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1329.605136][T15634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.636066][ T5517] usb 2-1: not running at top speed; connect to a high speed hub [ 1329.677876][ T5517] usb 2-1: config 4 has an invalid interface number: 32 but max is 0 [ 1329.700765][T15634] device bridge_slave_1 entered promiscuous mode [ 1329.731745][ T5517] usb 2-1: config 4 has no interface number 0 [ 1329.755550][ T5517] usb 2-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50 [ 1329.770736][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 1329.795720][ T6204] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1329.805987][ T5517] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.844149][ T5517] usb 2-1: Product: syz [ 1329.854855][ T5517] usb 2-1: Manufacturer: syz [ 1329.872791][ T5517] usb 2-1: SerialNumber: syz [ 1329.987428][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1329.987843][T15089] usb 1-1: USB disconnect, device number 52 [ 1330.094176][ T6204] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1330.216491][ T6204] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.249713][ T5517] usb 2-1: Found UVC 0.02 device syz (17dc:0202) [ 1330.297061][ T5517] usb 2-1: No valid video chain found. [ 1330.329907][T15089] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1330.420866][ T6204] usb 5-1: config 0 descriptor?? [ 1330.517353][ T5517] usb 2-1: USB disconnect, device number 49 [ 1330.671099][ T6204] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1330.710432][T15089] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1330.733471][T15634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1330.802649][T15089] quatech2 1-1:0.51: device disconnected [ 1330.852189][ T4266] Bluetooth: hci1: command 0x041b tx timeout [ 1331.149718][ T6204] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 1331.383716][ T6204] gspca_cpia1: usb_control_msg 01, error -32 [ 1331.550894][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 1331.550936][ T26] audit: type=1326 audit(1749706690.118:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15705 comm="syz.1.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9232b8e929 code=0x7ffc0000 [ 1331.699490][T15634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1331.723965][ T6204] gspca_cpia1: usb_control_msg 02, error -71 [ 1331.730995][ T26] audit: type=1326 audit(1749706690.118:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15705 comm="syz.1.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9232b8e929 code=0x7ffc0000 [ 1331.759220][ T7] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1331.779918][ T26] audit: type=1326 audit(1749706690.118:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15705 comm="syz.1.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9232b8e929 code=0x7ffc0000 [ 1331.811444][ T6204] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 1331.927890][ T6204] usb 5-1: USB disconnect, device number 59 [ 1332.099116][ T26] audit: type=1326 audit(1749706690.127:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15705 comm="syz.1.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9232b8e963 code=0x7ffc0000 [ 1332.473645][ T26] audit: type=1326 audit(1749706690.127:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15705 comm="syz.1.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9232b8e963 code=0x7ffc0000 [ 1332.495980][ T26] audit: type=1326 audit(1749706690.127:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15705 comm="syz.1.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9232b8e929 code=0x7ffc0000 [ 1332.518462][ T26] audit: type=1326 audit(1749706690.127:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15705 comm="syz.1.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9232b8e929 code=0x7ffc0000 [ 1332.541072][ T26] audit: type=1326 audit(1749706690.127:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15705 comm="syz.1.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9232b8e929 code=0x7ffc0000 [ 1332.564368][ T26] audit: type=1326 audit(1749706690.127:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15705 comm="syz.1.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9232b8e929 code=0x7ffc0000 [ 1332.586976][ T26] audit: type=1326 audit(1749706690.127:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15705 comm="syz.1.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9232b8e929 code=0x7ffc0000 [ 1332.678274][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 1332.685423][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.712364][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1332.737852][T15714] ALSA: mixer_oss: invalid OSS volume 'ިc"><ڨIPŒߎA' [ 1332.741077][ T7] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1332.763618][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.817166][ T7] usb 4-1: Product: syz [ 1332.821396][ T7] usb 4-1: Manufacturer: syz [ 1332.824265][T15714] ALSA: mixer_oss: invalid OSS volume 'Ni)E{:T%cB' [ 1332.825994][ T7] usb 4-1: SerialNumber: syz [ 1332.870480][T15714] ALSA: mixer_oss: invalid OSS volume 'fE,MT8PדT}'Wl{' [ 1332.954768][T15714] ALSA: mixer_oss: invalid OSS volume ';y@]>#a6\9/[\' [ 1332.992183][T15634] team0: Port device team_slave_0 added [ 1333.033745][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1333.040655][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1333.042011][ T4266] Bluetooth: hci1: command 0x040f tx timeout [ 1333.071253][ T7] usb 4-1: 0:2 : does not exist [ 1333.100870][ T7] usb 4-1: unit 11 not found! [ 1333.143629][ T7] usb 4-1: USB disconnect, device number 57 [ 1333.198262][T15634] team0: Port device team_slave_1 added [ 1333.210555][ T4270] udevd[4270]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1333.360677][T15634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1333.394319][T15634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1333.440886][T15726] fuse: Bad value for 'fd' [ 1333.455988][T15634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1333.637725][T15634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1333.640136][ T6204] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1333.658066][T15634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1333.685890][ T4389] IPVS: stopping backup sync thread 4450 ... [ 1333.770410][T15634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1333.884668][ T6204] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.992329][ T6204] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1333.992372][ T6204] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1333.992397][ T6204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.994519][ T6204] usb 2-1: config 0 descriptor?? [ 1335.254462][ T4266] Bluetooth: hci1: command 0x0419 tx timeout [ 1337.238575][T13923] usb 2-1: USB disconnect, device number 50 [ 1337.313427][T15634] device hsr_slave_0 entered promiscuous mode [ 1337.323497][T15634] device hsr_slave_1 entered promiscuous mode [ 1337.332586][T15634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1337.340586][T15634] Cannot create hsr debugfs directory [ 1338.444845][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 1338.444861][ T26] audit: type=1326 audit(1749706696.572:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15760 comm="syz.3.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb0718e929 code=0x7ffc0000 [ 1339.276566][ T26] audit: type=1326 audit(1749706697.330:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15760 comm="syz.3.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb0718e929 code=0x7ffc0000 [ 1339.298973][ C0] vkms_vblank_simulate: vblank timer overrun [ 1339.306254][ T26] audit: type=1326 audit(1749706697.348:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15760 comm="syz.3.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb0718e929 code=0x7ffc0000 [ 1339.343606][ T26] audit: type=1326 audit(1749706697.348:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15760 comm="syz.3.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb0718e929 code=0x7ffc0000 [ 1339.522754][ T26] audit: type=1326 audit(1749706697.348:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15760 comm="syz.3.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7feb0718e929 code=0x7ffc0000 [ 1339.604373][ T26] audit: type=1326 audit(1749706697.348:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15760 comm="syz.3.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feb0718e963 code=0x7ffc0000 [ 1339.626970][ T26] audit: type=1326 audit(1749706697.348:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15760 comm="syz.3.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feb0718e963 code=0x7ffc0000 [ 1339.648677][T15765] ALSA: mixer_oss: invalid OSS volume 'ިc"><ڨIPŒߎA' [ 1339.650362][ T26] audit: type=1326 audit(1749706697.367:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15760 comm="syz.3.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb0718e929 code=0x7ffc0000 [ 1339.665271][T15765] ALSA: mixer_oss: invalid OSS volume 'Ni)E{:T%cB' [ 1339.680865][ T26] audit: type=1326 audit(1749706697.442:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15760 comm="syz.3.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb0718e929 code=0x7ffc0000 [ 1339.710421][ T26] audit: type=1326 audit(1749706697.442:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15760 comm="syz.3.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb0718e929 code=0x7ffc0000 [ 1339.733821][T15765] ALSA: mixer_oss: invalid OSS volume 'fE,MT8PדT}'Wl{' [ 1339.742206][T15765] ALSA: mixer_oss: invalid OSS volume ';y@]>#a6\9/[\' [ 1340.288134][T15779] netlink: 'syz.3.3260': attribute type 6 has an invalid length. [ 1340.482966][ T6204] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1340.717575][ T6204] usb 5-1: Using ep0 maxpacket: 16 [ 1340.740636][ T6204] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.061509][ T6204] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1341.115493][ T6204] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1341.171686][ T4389] device hsr_slave_0 left promiscuous mode [ 1341.194555][T15767] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 1341.203020][ T6204] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.233376][ T6204] usb 5-1: Product: syz [ 1341.237609][ T6204] usb 5-1: Manufacturer: syz [ 1341.251757][ T6204] usb 5-1: SerialNumber: syz [ 1341.303710][ T4389] device hsr_slave_1 left promiscuous mode [ 1341.328074][T15787] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3263'. [ 1341.348905][T15787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3263'. [ 1341.367586][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1341.394825][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1341.432839][ T4389] device bridge_slave_1 left promiscuous mode [ 1341.442907][ T4389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1341.471675][ T4389] device bridge_slave_0 left promiscuous mode [ 1341.481422][ T4389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.602138][ T6204] usb 5-1: 0:2 : does not exist [ 1341.616933][ T6204] usb 5-1: unit 11 not found! [ 1341.997252][ T6204] usb 5-1: USB disconnect, device number 60 [ 1342.619173][T15798] i2c i2c-0: Invalid block write size 34 [ 1342.621455][ T4270] udevd[4270]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1343.167299][ T4389] bond7 (unregistering): Released all slaves [ 1343.420895][ T4389] bond6 (unregistering): (slave veth3): Releasing backup interface [ 1343.531431][ T4389] bond6 (unregistering): Released all slaves [ 1347.521357][ T4389] bond5 (unregistering): Released all slaves [ 1348.136212][T15834] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3272'. [ 1348.145313][T15834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3272'. [ 1348.397826][ T4389] bond4 (unregistering): Released all slaves [ 1348.541381][ T4389] bond3 (unregistering): Released all slaves [ 1348.597547][ T6209] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1348.696697][ T4389] bond2 (unregistering): Released all slaves [ 1348.792074][ T6209] usb 1-1: Using ep0 maxpacket: 32 [ 1348.800389][ T6209] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1348.808801][ T6209] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1348.817871][ T6209] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1348.830204][ T6209] usb 1-1: config 1 has no interface number 0 [ 1348.836434][ T6209] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1348.847548][ T6209] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 58431, setting to 1024 [ 1348.858814][ T6209] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1348.872624][ T6209] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1348.881885][ T6209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.906754][T15836] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1348.907133][ T4389] bond1 (unregistering): Released all slaves [ 1348.918666][ T6209] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1349.149031][T15836] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1349.201883][ T6209] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1349.444288][T15089] usb 1-1: USB disconnect, device number 53 [ 1349.459797][ T4389] team0 (unregistering): Port device team_slave_1 removed [ 1349.459824][T15089] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1349.516554][ T4389] team0 (unregistering): Port device team_slave_0 removed [ 1349.563259][ T4389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1349.607055][ T4389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1350.135237][ T4389] bond0 (unregistering): Released all slaves [ 1350.270459][T15791] device veth0 entered promiscuous mode [ 1350.280864][T15792] device veth0 left promiscuous mode [ 1350.576993][T15843] fuse: Unknown parameter '0x0000000000000003' [ 1350.954735][T13222] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1352.663904][T13222] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.680384][T13222] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1352.693367][T13222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.718759][T13222] usb 4-1: config 0 descriptor?? [ 1352.765900][T13222] pwc: Askey VC010 type 2 USB webcam detected. [ 1353.088360][T15862] ALSA: mixer_oss: invalid OSS volume 'ިc">#a6\9/[\' [ 1353.240335][T13222] pwc: recv_control_msg error -32 req 02 val 2700 [ 1353.244667][T13222] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1353.247437][T13222] pwc: recv_control_msg error -32 req 04 val 1000 [ 1353.248021][T13222] pwc: recv_control_msg error -32 req 04 val 1300 [ 1353.248598][T13222] pwc: recv_control_msg error -32 req 04 val 1400 [ 1353.249201][T13222] pwc: recv_control_msg error -32 req 02 val 2000 [ 1353.250372][T13222] pwc: recv_control_msg error -32 req 02 val 2100 [ 1353.250987][T13222] pwc: recv_control_msg error -32 req 04 val 1500 [ 1353.251584][T13222] pwc: recv_control_msg error -32 req 02 val 2500 [ 1353.252149][T13222] pwc: recv_control_msg error -32 req 02 val 2400 [ 1353.252747][T13222] pwc: recv_control_msg error -32 req 02 val 2600 [ 1353.739341][T13222] pwc: recv_control_msg error -71 req 02 val 2800 [ 1353.751532][T13222] pwc: recv_control_msg error -71 req 04 val 1100 [ 1353.766489][T13222] pwc: recv_control_msg error -71 req 04 val 1200 [ 1353.785148][T13222] pwc: Registered as video103. [ 1353.815143][T13222] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 1353.828560][T13222] usb 4-1: USB disconnect, device number 58 [ 1356.492625][T15893] siw: device registration error -23 [ 1357.439505][T15634] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1357.461588][T15634] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1357.607749][T15634] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1357.694359][T15089] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 1357.926691][T15089] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1357.927354][T15634] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1357.936014][T15089] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1357.952183][T15089] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.978078][T15089] usb 4-1: config 0 descriptor?? [ 1358.397384][T15634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1358.459601][T15634] 8021q: adding VLAN 0 to HW filter on device team0 [ 1358.500251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1358.522625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1358.658510][T13201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1358.713667][T13201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1358.733746][T13201] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.741103][T13201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1358.757961][T13201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1358.806394][T13201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1358.821514][T13201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1358.832683][T13201] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.837905][T13222] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1358.839926][T13201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1358.910038][T13201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1358.954080][T10000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1358.963092][ T5769] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1359.047845][T10000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1359.064700][T10000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1359.074738][T13222] usb 2-1: config 0 has no interfaces? [ 1359.080358][T13222] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1359.084821][T10000] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1359.104109][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1359.112837][T13222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.122167][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1359.139348][T13222] usb 2-1: config 0 descriptor?? [ 1359.156937][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1359.162015][ T5769] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1359.186222][ T5769] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1359.186366][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1359.206861][ T5769] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.216490][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1359.226750][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1359.236074][ T5769] usb 1-1: config 0 descriptor?? [ 1359.243305][T15634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1359.251108][ T5769] pwc: Askey VC010 type 2 USB webcam detected. [ 1359.685064][ T5769] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1359.699882][ T5769] pwc: recv_control_msg error -32 req 02 val 2700 [ 1359.718963][ T5769] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1359.736996][ T5769] pwc: recv_control_msg error -32 req 04 val 1000 [ 1359.755119][ T5769] pwc: recv_control_msg error -32 req 04 val 1300 [ 1359.783158][ T5769] pwc: recv_control_msg error -32 req 04 val 1400 [ 1359.830105][ T5769] pwc: recv_control_msg error -32 req 02 val 2000 [ 1359.851286][T10854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1359.867709][ T5769] pwc: recv_control_msg error -32 req 02 val 2100 [ 1359.874600][T10854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1359.891840][ T5769] pwc: recv_control_msg error -32 req 04 val 1500 [ 1359.915229][T15634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1359.926836][ T5769] pwc: recv_control_msg error -32 req 02 val 2500 [ 1359.955381][ T5769] pwc: recv_control_msg error -32 req 02 val 2400 [ 1359.985611][ T5769] pwc: recv_control_msg error -32 req 02 val 2600 [ 1360.057075][T15634] device veth0_vlan entered promiscuous mode [ 1360.119041][T10854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1360.136314][T10854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1360.239614][T15947] siw: device registration error -23 [ 1360.416794][T13222] usb 2-1: USB disconnect, device number 51 [ 1360.925883][T13222] usb 4-1: USB disconnect, device number 59 [ 1360.988409][ T5769] pwc: recv_control_msg error -71 req 02 val 2800 [ 1361.004147][ T5769] pwc: recv_control_msg error -71 req 04 val 1100 [ 1361.011225][ T5769] pwc: recv_control_msg error -71 req 04 val 1200 [ 1361.014314][T10854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1361.026342][ T5769] pwc: Registered as video103. [ 1361.038684][ T5769] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 1361.070083][T10854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1361.083383][ T5769] usb 1-1: USB disconnect, device number 54 [ 1361.281888][T10854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1361.363296][T10854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1361.492430][T15634] device veth1_vlan entered promiscuous mode [ 1361.662786][T10854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1361.693611][T10854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1361.737080][T15634] device veth0_macvtap entered promiscuous mode [ 1361.799603][T15634] device veth1_macvtap entered promiscuous mode [ 1361.869404][T15965] Driver unsupported XDP return value 0 on prog (id 419) dev N/A, expect packet loss! [ 1361.964902][T15634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1361.994725][T15952] sctp: failed to load transform for md5: -2 [ 1362.013143][ T4298] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 1362.072143][T15634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.195216][ T4298] usb 1-1: device descriptor read/64, error -71 [ 1362.238174][T15634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1362.392955][T15634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.515877][ T4298] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 1362.594103][T15634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1362.685515][T15634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.729781][ T4298] usb 1-1: device descriptor read/64, error -71 [ 1362.764932][T15634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1362.810422][T15634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.831568][T15634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1362.859957][ T4298] usb usb1-port1: attempt power cycle [ 1362.875684][T15975] fuse: Unknown parameter '0x0000000000000003' [ 1362.932583][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1362.940961][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1362.995734][T15979] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1363.093309][T15979] hfsplus: unable to find HFS+ superblock [ 1363.138349][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1363.193684][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1363.498914][ T4298] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 1363.525132][T15634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.536714][ T4298] usb 1-1: device descriptor read/8, error -71 [ 1363.566888][T15634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.605368][T15634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.664772][T15634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.716734][T15634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.760728][T15634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.775012][T15634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.807438][T15634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.830334][ T4298] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 1363.875186][ T4298] usb 1-1: device descriptor read/8, error -71 [ 1363.892008][T15634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1363.908644][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1363.939331][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1363.976552][T15634] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.012330][ T4298] usb usb1-port1: unable to enumerate USB device [ 1364.029713][T15634] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.063101][T15634] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.096438][T15634] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.882336][T13222] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 1365.539737][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.562637][T13222] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1365.604376][T13222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.614173][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.673261][T13222] usb 5-1: config 0 descriptor?? [ 1365.683519][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1365.699404][T13222] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1365.725552][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.737281][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.751807][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1365.824200][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 1365.824217][ T26] audit: type=1326 audit(1749706722.174:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16011 comm="syz.1.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9232b8e929 code=0x7ffc0000 [ 1365.914590][T13222] gp8psk: usb in 128 operation failed. [ 1365.932003][T13222] gp8psk: usb in 137 operation failed. [ 1365.969481][ T9542] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1366.022931][T13222] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1366.124740][T13222] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1366.179771][ T26] audit: type=1326 audit(1749706722.174:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16011 comm="syz.1.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9232b8e929 code=0x7ffc0000 [ 1366.212805][ T9542] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1366.282730][ T9542] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1366.400585][ T9542] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.504058][ T26] audit: type=1326 audit(1749706722.193:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16011 comm="syz.1.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9232b8e929 code=0x7ffc0000 [ 1366.569742][ T9542] usb 4-1: config 0 descriptor?? [ 1366.687103][ T9542] pwc: Askey VC010 type 2 USB webcam detected. [ 1366.740278][ T26] audit: type=1326 audit(1749706722.193:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16011 comm="syz.1.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9232b8e929 code=0x7ffc0000 [ 1366.763359][ T26] audit: type=1326 audit(1749706722.193:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16011 comm="syz.1.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9232b8e963 code=0x7ffc0000 [ 1366.786019][ T26] audit: type=1326 audit(1749706722.193:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16011 comm="syz.1.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9232b8e963 code=0x7ffc0000 [ 1366.809563][ T26] audit: type=1326 audit(1749706722.193:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16011 comm="syz.1.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9232b8e929 code=0x7ffc0000 [ 1366.831922][ C0] vkms_vblank_simulate: vblank timer overrun [ 1366.839204][ T26] audit: type=1326 audit(1749706722.193:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16011 comm="syz.1.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9232b8e929 code=0x7ffc0000 [ 1366.861679][ T26] audit: type=1326 audit(1749706722.193:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16011 comm="syz.1.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9232b8e929 code=0x7ffc0000 [ 1366.884024][ C0] vkms_vblank_simulate: vblank timer overrun [ 1366.896438][ T26] audit: type=1326 audit(1749706722.193:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16011 comm="syz.1.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9232b8e929 code=0x7ffc0000 [ 1366.918856][ C0] vkms_vblank_simulate: vblank timer overrun [ 1367.099089][ T9542] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1367.151992][ T9542] pwc: recv_control_msg error -32 req 02 val 2700 [ 1367.247251][ T9542] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1367.343481][ T9542] pwc: recv_control_msg error -32 req 04 val 1000 [ 1367.567784][ T9542] pwc: recv_control_msg error -32 req 04 val 1300 [ 1367.582375][ T9542] pwc: recv_control_msg error -32 req 04 val 1400 [ 1367.592499][ T9542] pwc: recv_control_msg error -32 req 02 val 2000 [ 1367.600590][ T9542] pwc: recv_control_msg error -32 req 02 val 2100 [ 1367.631354][ T9542] pwc: recv_control_msg error -32 req 04 val 1500 [ 1367.655514][ T4298] usb 5-1: USB disconnect, device number 61 [ 1367.668817][ T9542] pwc: recv_control_msg error -32 req 02 val 2500 [ 1367.733283][ T9542] pwc: recv_control_msg error -32 req 02 val 2400 [ 1367.791214][ T9542] pwc: recv_control_msg error -32 req 02 val 2600 [ 1368.038860][ T9542] pwc: recv_control_msg error -71 req 02 val 2800 [ 1368.065788][ T9542] pwc: recv_control_msg error -71 req 04 val 1100 [ 1368.085474][ T9542] pwc: recv_control_msg error -71 req 04 val 1200 [ 1368.136057][ T9542] pwc: Registered as video103. [ 1368.187709][ T9542] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17 [ 1368.407567][ T9542] usb 4-1: USB disconnect, device number 60 [ 1368.483287][T16034] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1368.493022][T16034] hfsplus: unable to find HFS+ superblock [ 1368.716041][T13923] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1368.940542][T13923] usb 5-1: Using ep0 maxpacket: 32 [ 1368.949930][T13923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 1369.015950][T16039] tmpfs: Unknown parameter 'usrquota' [ 1369.090091][T13923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 1369.183989][T13923] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1369.228477][T13923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.294073][T13923] usb 5-1: Product: syz [ 1369.298293][T13923] usb 5-1: Manufacturer: syz [ 1369.302906][T13923] usb 5-1: SerialNumber: syz [ 1369.318644][T16037] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 1369.381572][T13923] usb 5-1: config 0 descriptor?? [ 1369.539268][ T9542] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 1369.922202][ T9542] usb 4-1: device descriptor read/64, error -71 [ 1370.242269][ T9542] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 1370.292026][T13923] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1370.504903][ T9] usb 5-1: Failed to submit usb control message: -71 [ 1370.534424][ T9] usb 5-1: unable to send the bmi data to the device: -71 [ 1370.541982][ T9] usb 5-1: unable to get target info from device [ 1370.552077][T13923] usb 5-1: USB disconnect, device number 62 [ 1370.565642][ T9542] usb 4-1: device descriptor read/64, error -71 [ 1370.603175][ T9] usb 5-1: could not get target info (-71) [ 1370.627139][ T9] usb 5-1: could not probe fw (-71) [ 1370.712463][T16065] ALSA: mixer_oss: invalid OSS volume 'ިc">#a6\9/[\' [ 1371.837733][ T9542] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 1371.881338][ T9542] usb 4-1: device descriptor read/8, error -71 [ 1372.083459][ T4298] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 1372.179735][ T9542] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 1372.329604][ T9542] usb 4-1: device descriptor read/8, error -71 [ 1372.362836][ T4298] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1372.608943][ T6209] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1372.831827][ T6209] usb 1-1: Using ep0 maxpacket: 32 [ 1372.844263][ T6209] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1372.922973][ T6209] usb 1-1: config 0 has no interface number 0 [ 1373.049394][ T6209] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1373.063795][ T9542] usb usb4-port1: unable to enumerate USB device [ 1373.070870][ T4298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.081140][ T4298] usb 2-1: config 0 descriptor?? [ 1373.090134][ T4298] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1373.126941][ T6209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.146234][ T6209] usb 1-1: Product: syz [ 1373.157064][ T6209] usb 1-1: Manufacturer: syz [ 1373.172668][ T6209] usb 1-1: SerialNumber: syz [ 1373.203769][ T6209] usb 1-1: config 0 descriptor?? [ 1373.215124][T16094] netlink: 'syz.3.3333': attribute type 1 has an invalid length. [ 1373.307797][ T4298] gp8psk: usb in 128 operation failed. [ 1373.315839][ T4298] gp8psk: usb in 137 operation failed. [ 1373.379600][ T6209] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1373.556088][ T6209] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1373.705843][ T6209] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1373.771426][T16083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.847515][T16083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.911630][ T4266] Bluetooth: hci0: command 0x0406 tx timeout [ 1374.100632][ T4298] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1374.101958][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 1374.111131][ T4298] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1374.153222][T16097] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3333'. [ 1374.329978][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1374.330570][ T9542] usb 1-1: USB disconnect, device number 59 [ 1374.349214][T16105] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1374.358945][T16105] hfsplus: unable to find HFS+ superblock [ 1374.525778][ T9542] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1374.750436][ T9542] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1374.981615][ T9542] quatech2 1-1:0.51: device disconnected [ 1375.154096][ T6209] usb 2-1: USB disconnect, device number 52 [ 1375.216930][T16113] ALSA: mixer_oss: invalid OSS volume 'ިc">#a6\9/[\' [ 1378.462665][ T4298] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1378.765226][ T4298] usb 5-1: Using ep0 maxpacket: 32 [ 1378.772012][ T4298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 1378.819601][ T4298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 1378.840931][T16129] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 1378.880608][ T4298] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1378.900305][ T4298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.909790][ T4298] usb 5-1: Product: syz [ 1378.914162][ T4298] usb 5-1: Manufacturer: syz [ 1378.923241][ T4298] usb 5-1: SerialNumber: syz [ 1378.929453][T16146] [ 1378.930729][ T4298] usb 5-1: config 0 descriptor?? [ 1378.931811][T16146] ====================================================== [ 1378.943790][T16146] WARNING: possible circular locking dependency detected [ 1378.950826][T16146] 6.1.141-syzkaller #0 Not tainted [ 1378.955942][T16146] ------------------------------------------------------ [ 1378.962978][T16146] syz.1.3346/16146 is trying to acquire lock: [ 1378.969051][T16146] ffff88807e4a08e0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x33c/0x1a10 [ 1378.979807][T16146] [ 1378.979807][T16146] but task is already holding lock: [ 1378.987197][T16146] ffff88801c733d58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 1378.997247][T16146] [ 1378.997247][T16146] which lock already depends on the new lock. [ 1378.997247][T16146] [ 1379.007652][T16146] [ 1379.007652][T16146] the existing dependency chain (in reverse order) is: [ 1379.016693][T16146] [ 1379.016693][T16146] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 1379.024276][T16146] down_read_killable+0x4c/0x340 [ 1379.029768][T16146] mmap_read_lock_killable+0x1d/0x60 [ 1379.035600][T16146] lock_mm_and_find_vma+0x2b1/0x2f0 [ 1379.041333][T16146] do_user_addr_fault+0x2db/0xb10 [ 1379.046895][T16146] exc_page_fault+0x60/0x100 [ 1379.052021][T16146] asm_exc_page_fault+0x22/0x30 [ 1379.057417][T16146] fault_in_readable+0xf3/0x1f0 [ 1379.062810][T16146] fault_in_iov_iter_readable+0xbb/0x2e0 [ 1379.069041][T16146] generic_perform_write+0x1d2/0x560 [ 1379.074875][T16146] __generic_file_write_iter+0x172/0x430 [ 1379.081059][T16146] generic_file_write_iter+0xab/0x2e0 [ 1379.086985][T16146] vfs_write+0x44c/0x960 [ 1379.091751][T16146] ksys_write+0x143/0x240 [ 1379.096598][T16146] do_syscall_64+0x4c/0xa0 [ 1379.101543][T16146] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1379.107968][T16146] [ 1379.107968][T16146] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 1379.116660][T16146] __lock_acquire+0x2cf8/0x7c50 [ 1379.122038][T16146] lock_acquire+0x1b4/0x490 [ 1379.127064][T16146] down_write+0x36/0x60 [ 1379.131739][T16146] process_measurement+0x33c/0x1a10 [ 1379.137498][T16146] ima_file_mmap+0x104/0x150 [ 1379.142608][T16146] __se_sys_remap_file_pages+0x53e/0x770 [ 1379.148765][T16146] do_syscall_64+0x4c/0xa0 [ 1379.153798][T16146] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1379.160234][T16146] [ 1379.160234][T16146] other info that might help us debug this: [ 1379.160234][T16146] [ 1379.170467][T16146] Possible unsafe locking scenario: [ 1379.170467][T16146] [ 1379.178092][T16146] CPU0 CPU1 [ 1379.183467][T16146] ---- ---- [ 1379.188841][T16146] lock(&mm->mmap_lock); [ 1379.193174][T16146] lock(&sb->s_type->i_mutex_key#12); [ 1379.201154][T16146] lock(&mm->mmap_lock); [ 1379.207998][T16146] lock(&sb->s_type->i_mutex_key#12); [ 1379.213459][T16146] [ 1379.213459][T16146] *** DEADLOCK *** [ 1379.213459][T16146] [ 1379.221597][T16146] 1 lock held by syz.1.3346/16146: [ 1379.226713][T16146] #0: ffff88801c733d58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 1379.237165][T16146] [ 1379.237165][T16146] stack backtrace: [ 1379.243070][T16146] CPU: 0 PID: 16146 Comm: syz.1.3346 Not tainted 6.1.141-syzkaller #0 [ 1379.251218][T16146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1379.261280][T16146] Call Trace: [ 1379.264559][T16146] [ 1379.267499][T16146] dump_stack_lvl+0x168/0x22e [ 1379.272188][T16146] ? load_image+0x3b0/0x3b0 [ 1379.276687][T16146] ? show_regs_print_info+0x12/0x12 [ 1379.281893][T16146] ? print_circular_bug+0x12b/0x1a0 [ 1379.287100][T16146] check_noncircular+0x274/0x310 [ 1379.292045][T16146] ? add_chain_block+0x940/0x940 [ 1379.296986][T16146] ? lockdep_lock+0xdc/0x1e0 [ 1379.301588][T16146] ? _find_first_zero_bit+0xcf/0x100 [ 1379.306885][T16146] __lock_acquire+0x2cf8/0x7c50 [ 1379.311769][T16146] ? ima_match_policy+0x104/0x2100 [ 1379.316887][T16146] ? verify_lock_unused+0x140/0x140 [ 1379.322090][T16146] ? ima_match_policy+0x207a/0x2100 [ 1379.327295][T16146] ? __schedule+0x10b7/0x40d0 [ 1379.331995][T16146] lock_acquire+0x1b4/0x490 [ 1379.336503][T16146] ? process_measurement+0x33c/0x1a10 [ 1379.341902][T16146] ? __might_sleep+0xd0/0xd0 [ 1379.346508][T16146] ? __schedule+0x10f1/0x40d0 [ 1379.351183][T16146] ? read_lock_is_recursive+0x10/0x10 [ 1379.356558][T16146] ? ima_get_action+0x71/0xa0 [ 1379.361238][T16146] down_write+0x36/0x60 [ 1379.365397][T16146] ? process_measurement+0x33c/0x1a10 [ 1379.370768][T16146] process_measurement+0x33c/0x1a10 [ 1379.375971][T16146] ? ima_file_mmap+0x150/0x150 [ 1379.380733][T16146] ? aa_file_perm+0x117/0xec0 [ 1379.385421][T16146] ? mtree_load+0xeb/0xa40 [ 1379.389845][T16146] ? mtree_load+0x90a/0xa40 [ 1379.394348][T16146] ? aa_get_current_label+0x110/0x1d0 [ 1379.399737][T16146] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 1379.405892][T16146] ima_file_mmap+0x104/0x150 [ 1379.410530][T16146] ? ima_file_free+0x3e0/0x3e0 [ 1379.415293][T16146] ? common_file_perm+0x171/0x1c0 [ 1379.420322][T16146] ? bpf_lsm_mmap_file+0x5/0x10 [ 1379.425169][T16146] ? security_mmap_file+0x11b/0x180 [ 1379.430373][T16146] __se_sys_remap_file_pages+0x53e/0x770 [ 1379.436014][T16146] ? __se_sys_futex+0x14a/0x440 [ 1379.440892][T16146] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 1379.446622][T16146] ? lock_chain_count+0x20/0x20 [ 1379.451527][T16146] ? lockdep_hardirqs_on+0x94/0x140 [ 1379.456733][T16146] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 1379.462468][T16146] do_syscall_64+0x4c/0xa0 [ 1379.466919][T16146] ? clear_bhb_loop+0x60/0xb0 [ 1379.471601][T16146] ? clear_bhb_loop+0x60/0xb0 [ 1379.476281][T16146] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1379.482180][T16146] RIP: 0033:0x7f9232b8e929 [ 1379.486594][T16146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1379.506213][T16146] RSP: 002b:00007f92339c8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 1379.514632][T16146] RAX: ffffffffffffffda RBX: 00007f9232db5fa0 RCX: 00007f9232b8e929 [ 1379.522613][T16146] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 00002000006ca000 [ 1379.530626][T16146] RBP: 00007f9232c10b39 R08: 0000000000010000 R09: 0000000000000000 [ 1379.538643][T16146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1379.546610][T16146] R13: 0000000000000000 R14: 00007f9232db5fa0 R15: 00007fffaab9e0c8 [ 1379.554582][T16146] [ 1379.557623][ C0] vkms_vblank_simulate: vblank timer overrun [ 1379.651991][ T4298] usb 5-1: can't set config #0, error -71 [ 1379.667294][ T4298] usb 5-1: USB disconnect, device number 63 [ 1379.737942][ T14] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 1379.748069][T16151] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1379.758084][T16151] hfsplus: unable to find HFS+ superblock [ 1380.883315][ T14] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1380.892651][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.903435][ T14] usb 4-1: config 0 descriptor?? [ 1380.910594][ T14] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1381.125777][ T14] gp8psk: usb in 128 operation failed. [ 1381.132481][ T14] gp8psk: usb in 137 operation failed. [ 1381.138002][ T14] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1381.148504][ T14] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1382.228680][ T9542] usb 4-1: USB disconnect, device number 65