last executing test programs: 12.617494078s ago: executing program 0 (id=460): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2102, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x95, 0x102) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto(r3, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dfbe2e614f51a07c00544d90a594972ba60e1b497f88dcdc1e45dd28c0678d803638e7bd70a8638136e52c5e932c4111d3c917fb22583198b00707e3a2e001260cbc2", 0xa9, 0x20000000, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff2}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc080) 12.57298859s ago: executing program 1 (id=461): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x0, 'bridge0\x00', {0x4}, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 12.324648322s ago: executing program 1 (id=464): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @local=@item_012={0x1, 0x2, 0x8, "11"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) read$hiddev(r2, &(0x7f0000000280)=""/52, 0x34) 10.918147181s ago: executing program 0 (id=470): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000400), 0x2000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r2, &(0x7f0000000280)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) recvmmsg(r2, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}], 0x40000000000034e, 0x40000023, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwrite64(r3, 0x0, 0x0, 0x26c) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0xfffffffd, 0x10, 0xf, 0xfffffffd}) socket$packet(0x11, 0x2, 0x300) 8.565569625s ago: executing program 3 (id=472): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs$userns(0xffffffffffffffff, 0x0) 8.418855171s ago: executing program 1 (id=473): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) getsockopt$inet6_opts(r4, 0x29, 0x36, 0x0, &(0x7f0000000000)) mount_setattr(r3, &(0x7f0000019080)='./file1\x00', 0x8800, &(0x7f00000190c0)={0x5, 0x8a, 0x180000, {r3}}, 0x20) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000019100)=ANY=[@ANYRES8=r4], 0x48) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) socket$alg(0x26, 0x5, 0x0) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) socket$alg(0x26, 0x5, 0x0) 8.279304909s ago: executing program 3 (id=474): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x2600}, {0xffffffffffffffff, 0x2046}, {r0, 0x10}, {0xffffffffffffffff, 0xa8}], 0x4, 0x0, 0x0, 0x0) 7.694179667s ago: executing program 0 (id=476): pipe(&(0x7f0000000000)) pipe(&(0x7f0000000140)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 7.453103068s ago: executing program 0 (id=477): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000130001"], 0xe0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r2, 0x0, 0x90) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20000005}, 0x8011) syz_open_dev$video4linux(0x0, 0x0, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) close(r7) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r8, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) recvmmsg(r8, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x40002102, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) 7.124265895s ago: executing program 2 (id=479): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b0000000000050010"], 0x30}}, 0x0) 7.062718847s ago: executing program 3 (id=480): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2102, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x95, 0x102) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto(r3, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dfbe2e614f51a07c00544d90a594972ba60e1b497f88dcdc1e45dd28c0678d803638e7bd70a8638136e52c5e932c4111d3c917fb22583198b00707e3a2e001260cbc2", 0xa9, 0x20000000, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff2}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc080) 6.929487404s ago: executing program 2 (id=481): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) 6.502924435s ago: executing program 0 (id=483): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @local=@item_012={0x1, 0x2, 0x8, "11"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f0000000240)) read$hiddev(r2, &(0x7f0000000280)=""/52, 0x34) 5.886724765s ago: executing program 2 (id=484): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 5.15154206s ago: executing program 1 (id=486): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000400), 0x2000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r2, &(0x7f0000000280)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) recvmmsg(r2, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}], 0x40000000000034e, 0x40000023, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwrite64(r3, 0x0, 0x0, 0x26c) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0xfffffffd, 0x10, 0xf, 0xfffffffd}) socket$packet(0x11, 0x2, 0x300) 5.127823691s ago: executing program 3 (id=487): pipe(&(0x7f0000000000)) pipe(&(0x7f0000000140)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 5.003928408s ago: executing program 3 (id=488): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x5000) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.799543377s ago: executing program 4 (id=489): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x0, 'bridge0\x00', {0x4}, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 4.578361798s ago: executing program 3 (id=490): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001440)={&(0x7f0000001240)=[0x0, 0x0, 0x0], &(0x7f0000001280)=[{}, {}, {}, {}], &(0x7f00000013c0)=[0x0], &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/consoles\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000f, 0x2010, r1, 0x200000ffd000) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f01f}) r5 = socket$kcm(0x11, 0x2, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x20, 0xd, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xb, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x8, 0x6, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x240, 0xe, 0x4, 0x3}}]}}}]}}]}}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f0000001780)={&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x4}}, 0x80, 0x0}, 0x11) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, 0x0) r6 = add_key$keyring(&(0x7f00000011c0), &(0x7f0000001200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$setperm(0x5, r6, 0x20000010) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4e21, 0x8, @mcast1, 0x7}, 0x54) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000002840)=ANY=[@ANYBLOB="0203000320020000ff0e00000000000002000900100000009d09000000000000030006000000000002"], 0x1100}, 0x1, 0x7}, 0x0) 4.428695895s ago: executing program 4 (id=491): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x2600}, {0xffffffffffffffff, 0x2046}, {r0, 0x10}, {0xffffffffffffffff, 0xa8}], 0x4, 0x0, 0x0, 0x0) 3.425316834s ago: executing program 4 (id=492): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x25dfdbfa}, 0x10}}, 0x0) 3.424457524s ago: executing program 1 (id=493): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000130001"], 0xe0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r2, 0x0, 0x90) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20000005}, 0x8011) syz_open_dev$video4linux(0x0, 0x0, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) close(r7) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r8, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) recvmmsg(r8, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x40002102, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) 3.262245772s ago: executing program 4 (id=494): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) 2.730811248s ago: executing program 2 (id=495): socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4048aec9, &(0x7f0000000080)={0x3}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1, 0x80000000, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) 2.644728412s ago: executing program 0 (id=496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x28}], 0x1}, 0x4) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 2.445396082s ago: executing program 1 (id=497): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2102, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x102) sched_setattr(0x0, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto(r3, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dfbe2e614f51a07c00544d90a594972ba60e1b497f88dcdc1e45dd28c0678d803638e7bd70a8638136e52c5e932c4111d3c917fb22583198b00707e3a2e001260cbc2", 0xa9, 0x20000000, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff2}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc080) 2.181590954s ago: executing program 4 (id=498): pipe(&(0x7f0000000000)) pipe(&(0x7f0000000140)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 1.951433836s ago: executing program 4 (id=499): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) getsockopt$inet6_opts(r4, 0x29, 0x36, 0x0, &(0x7f0000000000)) mount_setattr(r3, &(0x7f0000019080)='./file1\x00', 0x8800, &(0x7f00000190c0)={0x5, 0x8a, 0x180000, {r3}}, 0x20) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000019100)=ANY=[@ANYRES8=r4], 0x48) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) socket$alg(0x26, 0x5, 0x0) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) socket$alg(0x26, 0x5, 0x0) 697.852496ms ago: executing program 2 (id=500): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x3a98c2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {0x0}, 0x96000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=501): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x5000) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): an up link [ 67.860329][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.870377][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.879875][ T4268] device bridge_slave_0 entered promiscuous mode [ 67.897083][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 67.918214][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.926219][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.935891][ T4268] device bridge_slave_1 entered promiscuous mode [ 67.967788][ T4272] team0: Port device team_slave_0 added [ 68.004867][ T4272] team0: Port device team_slave_1 added [ 68.011329][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.019302][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.027715][ T4276] device bridge_slave_0 entered promiscuous mode [ 68.037793][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.057648][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.087772][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.095979][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.104375][ T4276] device bridge_slave_1 entered promiscuous mode [ 68.130280][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.137894][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.167095][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.180195][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.189575][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.199007][ T4279] device bridge_slave_0 entered promiscuous mode [ 68.225442][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.233133][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.261564][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.274043][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.282370][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.291053][ T4279] device bridge_slave_1 entered promiscuous mode [ 68.317057][ T4268] team0: Port device team_slave_0 added [ 68.337984][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.366320][ T4268] team0: Port device team_slave_1 added [ 68.382776][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.392865][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.400085][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.408884][ T4281] device bridge_slave_0 entered promiscuous mode [ 68.428884][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.459297][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.467603][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.475970][ T4281] device bridge_slave_1 entered promiscuous mode [ 68.497483][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.528136][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.546476][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.554941][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.586494][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.601537][ T4276] team0: Port device team_slave_0 added [ 68.610491][ T4276] team0: Port device team_slave_1 added [ 68.620346][ T4272] device hsr_slave_0 entered promiscuous mode [ 68.628255][ T4272] device hsr_slave_1 entered promiscuous mode [ 68.636915][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.659214][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.666744][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.695595][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.730357][ T4279] team0: Port device team_slave_0 added [ 68.746700][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.754564][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.785778][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.803497][ T4279] team0: Port device team_slave_1 added [ 68.818936][ T4281] team0: Port device team_slave_0 added [ 68.827533][ T4281] team0: Port device team_slave_1 added [ 68.834153][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.842176][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.870113][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.940702][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.948772][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.977270][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.006535][ T4276] device hsr_slave_0 entered promiscuous mode [ 69.013885][ T4276] device hsr_slave_1 entered promiscuous mode [ 69.021450][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.030251][ T4276] Cannot create hsr debugfs directory [ 69.036634][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.044916][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.074622][ T4277] Bluetooth: hci1: command 0x0409 tx timeout [ 69.081299][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.097431][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.105969][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.132534][ T4275] Bluetooth: hci2: command 0x0409 tx timeout [ 69.142384][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 69.152487][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.168682][ T4268] device hsr_slave_0 entered promiscuous mode [ 69.176434][ T4268] device hsr_slave_1 entered promiscuous mode [ 69.183697][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.191966][ T4268] Cannot create hsr debugfs directory [ 69.205392][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.213468][ T4275] Bluetooth: hci3: command 0x0409 tx timeout [ 69.221240][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.248387][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.372668][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 69.391007][ T4279] device hsr_slave_0 entered promiscuous mode [ 69.399521][ T4279] device hsr_slave_1 entered promiscuous mode [ 69.407496][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.416410][ T4279] Cannot create hsr debugfs directory [ 69.434501][ T4281] device hsr_slave_0 entered promiscuous mode [ 69.447007][ T4281] device hsr_slave_1 entered promiscuous mode [ 69.454076][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.462028][ T4281] Cannot create hsr debugfs directory [ 69.691239][ T4272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.703024][ T4272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.723018][ T4272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.741422][ T4272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.798268][ T4268] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.808711][ T4268] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.835044][ T4268] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.850825][ T4268] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.900016][ T4276] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.939073][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.946703][ T4276] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.972716][ T4276] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.998708][ T4276] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.010376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.023839][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.048856][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.075337][ T4279] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.108863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.120191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.131116][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.139345][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.149220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.160020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.169925][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.177396][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.186700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.195964][ T4279] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.207159][ T4279] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.241223][ T4279] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.265929][ T4281] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.285051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.301713][ T4281] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.317005][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.327734][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.344984][ T4281] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.359822][ T4281] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.373527][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.387196][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.413543][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.422067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.430705][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.439765][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.453799][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.467244][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.510985][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.520254][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.534270][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.545368][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.559914][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.586288][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.596502][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.608461][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.619670][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.629960][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.637642][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.646204][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.657507][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.669719][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.677943][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.689429][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.699269][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.707929][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.718895][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.738650][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.764412][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.776518][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.789921][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.805659][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.819317][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.835058][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.845389][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.855890][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.879760][ T4268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.903997][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.921351][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.931454][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.941203][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.954153][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.965101][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.973875][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.983950][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.024590][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.061262][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.077977][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.087980][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.096147][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.128596][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.142805][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 71.175782][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.196582][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.206413][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.214361][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 71.223248][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 71.253735][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.269359][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.292952][ T4275] Bluetooth: hci3: command 0x041b tx timeout [ 71.293965][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.314168][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.321834][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.334610][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.347471][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.358857][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.369113][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.379766][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.389315][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.400599][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.409695][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.418791][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.431648][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.449608][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.460505][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.463538][ T4275] Bluetooth: hci4: command 0x041b tx timeout [ 71.489979][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.500630][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.515346][ T4276] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.528066][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.555355][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.568502][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.578869][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.593970][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.601932][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.614591][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.625547][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.635272][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.646082][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.656266][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.665938][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.678102][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.688171][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.698786][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.719759][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.738916][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.753319][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.797469][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.813170][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.821698][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.839718][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.850006][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.862943][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.870280][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.879046][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.903704][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.916177][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.954534][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.972870][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.981863][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.989653][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.999100][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.008579][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.018444][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.026382][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.060063][ T4272] device veth0_vlan entered promiscuous mode [ 72.078162][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.103248][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.118420][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.158475][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.168872][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.185544][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.198761][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.230896][ T4268] device veth0_vlan entered promiscuous mode [ 72.241436][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.251527][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.268095][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.281149][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.296951][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.307877][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.325765][ T4272] device veth1_vlan entered promiscuous mode [ 72.362561][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.371307][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.382118][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.390915][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.400227][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.410568][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.421501][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.429861][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.442938][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.459467][ T4268] device veth1_vlan entered promiscuous mode [ 72.478926][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.491199][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.502688][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.511999][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.521540][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.532031][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.540929][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.589956][ T4281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.603599][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.614134][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.624443][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.634825][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.644616][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.654765][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.691550][ T4272] device veth0_macvtap entered promiscuous mode [ 72.708242][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.718181][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.753217][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.763696][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.774139][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.783887][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.794415][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.803453][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.812932][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.825805][ T4268] device veth0_macvtap entered promiscuous mode [ 72.836695][ T4276] device veth0_vlan entered promiscuous mode [ 72.854297][ T4272] device veth1_macvtap entered promiscuous mode [ 72.869892][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.880508][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.898424][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.917011][ T4268] device veth1_macvtap entered promiscuous mode [ 72.929301][ T4276] device veth1_vlan entered promiscuous mode [ 72.955706][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.978737][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.989905][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.999646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.028310][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.041332][ T4279] device veth0_vlan entered promiscuous mode [ 73.048991][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.062646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.070917][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.080102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.089661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.102174][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.114985][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.129701][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.144873][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.157424][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.166669][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.177486][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.186738][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.202930][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.214578][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.222602][ T4275] Bluetooth: hci1: command 0x040f tx timeout [ 73.226547][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.260993][ T4276] device veth0_macvtap entered promiscuous mode [ 73.270273][ T4272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.280285][ T4272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.290778][ T4272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.301307][ T4272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.302605][ T4275] Bluetooth: hci0: command 0x040f tx timeout [ 73.317306][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 73.326745][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.338407][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.348981][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.357983][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.373153][ T4275] Bluetooth: hci3: command 0x040f tx timeout [ 73.374398][ T4268] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.390035][ T4268] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.399939][ T4268] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.410174][ T4268] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.428375][ T4279] device veth1_vlan entered promiscuous mode [ 73.439096][ T4276] device veth1_macvtap entered promiscuous mode [ 73.462891][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.471589][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.481178][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.496547][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.505830][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.532648][ T4275] Bluetooth: hci4: command 0x040f tx timeout [ 73.550405][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.589873][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.613621][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.629522][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.642025][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.659517][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.699792][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.720841][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.731263][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.744600][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.759281][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.770493][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.782864][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.795275][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.830281][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.853602][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.873005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.891961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.938758][ T4276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.954888][ T4276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.969266][ T4276] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.984198][ T4276] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.014958][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.026358][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.040600][ T4279] device veth0_macvtap entered promiscuous mode [ 74.062667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.079951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.109104][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.114112][ T4279] device veth1_macvtap entered promiscuous mode [ 74.142449][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.152015][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.173858][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.207262][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.226382][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.248521][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.283958][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.296592][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.305641][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.315389][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.326958][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.339112][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.349554][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.361950][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.374610][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.394423][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.407043][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.418728][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.443547][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.459239][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.470910][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.483554][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.499522][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.511634][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.524406][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.536413][ T4279] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.545539][ T4279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.556067][ T4279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.567375][ T4279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.602508][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.625317][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.643754][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.664479][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.685827][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.696804][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.725391][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.756509][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.788152][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.853528][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.861926][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.895777][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.905365][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.913856][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.931667][ T4281] device veth0_vlan entered promiscuous mode [ 74.967626][ T4351] netlink: 'syz.0.6': attribute type 9 has an invalid length. [ 74.986440][ T4351] netlink: 'syz.0.6': attribute type 7 has an invalid length. [ 75.006393][ T4351] netlink: 'syz.0.6': attribute type 8 has an invalid length. [ 75.039323][ T4281] device veth1_vlan entered promiscuous mode [ 75.119587][ T4321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.148725][ T4321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.173577][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.188465][ T4355] Zero length message leads to an empty skb [ 75.213460][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.230829][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.292799][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 75.315718][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.316332][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.335480][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.350436][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.371017][ T4360] process 'syz.0.7' launched './file0' with NULL argv: empty string added [ 75.381536][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 75.381574][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 75.405315][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.421666][ T4281] device veth0_macvtap entered promiscuous mode [ 75.436861][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.451533][ T4281] device veth1_macvtap entered promiscuous mode [ 75.458734][ T4275] Bluetooth: hci3: command 0x0419 tx timeout [ 75.574568][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.613436][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 75.630123][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.665946][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.679080][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.691951][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.704934][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.715627][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.736970][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.883821][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.913403][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.922057][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.010949][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.055222][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.093431][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.133164][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.181540][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.214176][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.253631][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.289749][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.339629][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.391905][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.424867][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.483754][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.530845][ T4281] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.551468][ T4281] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.606185][ T4281] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.644205][ T4281] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.860656][ T4308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.888590][ T4308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.924717][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.953045][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.969579][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.990974][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.746262][ T4378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9'. [ 80.090777][ T4412] netlink: 14 bytes leftover after parsing attributes in process `syz.3.17'. [ 80.164076][ T4403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 80.210716][ T4420] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.407290][ T4424] netlink: 44 bytes leftover after parsing attributes in process `syz.4.19'. [ 80.463826][ T4403] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.463958][ T4403] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.463988][ T4403] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.464015][ T4403] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.508530][ T4403] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.508576][ T4403] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.508604][ T4403] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.508631][ T4403] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.583022][ T4427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.666302][ T4427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.688440][ T4427] netlink: 168 bytes leftover after parsing attributes in process `syz.4.19'. [ 80.811329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 81.224548][ T4417] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18'. [ 81.224578][ T4417] netlink: 'syz.1.18': attribute type 7 has an invalid length. [ 81.224586][ T4417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18'. [ 81.227239][ T4417] device ip6gretap0 entered promiscuous mode [ 81.227934][ T4417] device syz_tun entered promiscuous mode [ 81.229344][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 81.325862][ T4403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 81.516743][ T4403] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.516785][ T4403] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.516814][ T4403] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.516842][ T4403] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.568762][ T4403] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.568805][ T4403] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.568830][ T4403] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.568857][ T4403] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.757532][ T4313] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.772360][ T2168] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.952976][ T4313] usb 4-1: Using ep0 maxpacket: 32 [ 81.956893][ T2168] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.956968][ T2168] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.957140][ T2168] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.957177][ T4313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.957179][ T2168] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.957202][ T2168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.957203][ T4313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.957229][ T4313] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 81.957251][ T4313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.962420][ T4313] usb 4-1: config 0 descriptor?? [ 81.964570][ T2168] usb 2-1: config 0 descriptor?? [ 82.125613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 82.380551][ T2168] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 82.400750][ T4313] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 82.400773][ T4313] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 82.405003][ T4313] ft260 0003:0403:6030.0002: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 82.412062][ T2168] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 82.687305][ T4433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'. [ 82.687325][ T4433] bond0: option arp_all_targets: invalid value (172) [ 82.699738][ T4257] usb 2-1: USB disconnect, device number 2 [ 82.818081][ T4437] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 82.818183][ T4437] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 82.911256][ T4447] fido_id[4447]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 82.926091][ T4313] ft260 0003:0403:6030.0002: chip code: 0000 0000 [ 83.332474][ T4313] ft260 0003:0403:6030.0002: failed to retrieve status: -32 [ 83.376276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 83.376307][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 83.376798][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 83.528149][ T4313] ft260 0003:0403:6030.0002: failed to reset I2C controller: -71 [ 83.549319][ T4313] usb 4-1: USB disconnect, device number 2 [ 83.588563][ T4455] device syzkaller0 entered promiscuous mode [ 83.612785][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.825039][ T4458] fido_id[4458]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 84.254304][ T4463] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.272912][ T4463] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.403582][ T4462] netlink: 'syz.4.29': attribute type 16 has an invalid length. [ 84.403606][ T4462] netlink: 'syz.4.29': attribute type 17 has an invalid length. [ 84.490647][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.490784][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.523767][ T4462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.555034][ T4470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.31'. [ 84.856590][ T4474] netlink: 'syz.4.33': attribute type 1 has an invalid length. [ 84.907510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.279265][ T4478] mmap: syz.4.34 (4478) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 85.662385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.801564][ T4481] team0: Port device vlan2 added [ 85.892574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.341063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.352423][ T14] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.562345][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 86.569780][ T14] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 86.607504][ T14] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 86.649382][ T14] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 86.687519][ T14] usb 4-1: Product: syz [ 86.727609][ T14] usb 4-1: Manufacturer: syz [ 86.762415][ T14] usb 4-1: SerialNumber: syz [ 86.932008][ T14] usb 4-1: config 0 descriptor?? [ 86.952036][ T4490] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 86.973588][ T14] hub 4-1:0.0: bad descriptor, ignoring hub [ 87.029266][ T14] hub: probe of 4-1:0.0 failed with error -5 [ 87.217938][ T125] cfg80211: failed to load regulatory.db [ 87.891128][ T4508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.924416][ T4508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.976354][ T4513] IPVS: rr: FWM 3 0x00000003 - no destination available [ 88.206725][ T41] usb 4-1: USB disconnect, device number 3 [ 88.570297][ T4522] netlink: 14 bytes leftover after parsing attributes in process `syz.4.48'. [ 89.693696][ T41] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.994005][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.053319][ T41] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 90.082530][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.173404][ T41] usb 1-1: config 0 descriptor?? [ 90.398908][ T41] usbhid 1-1:0.0: can't add hid device: -71 [ 90.446477][ T41] usbhid: probe of 1-1:0.0 failed with error -71 [ 90.485295][ T41] usb 1-1: USB disconnect, device number 2 [ 90.992383][ T41] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.179944][ T4558] netlink: 'syz.1.60': attribute type 16 has an invalid length. [ 91.193631][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.198692][ T4558] netlink: 'syz.1.60': attribute type 17 has an invalid length. [ 91.219917][ T41] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.277927][ T41] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.290550][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.304401][ T41] usb 1-1: config 0 descriptor?? [ 91.321020][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.339109][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.357555][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.374419][ T4558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.602357][ T2168] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.802371][ T2168] usb 5-1: Using ep0 maxpacket: 32 [ 91.811212][ T2168] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 91.851759][ T2168] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 91.875406][ T2168] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 91.888697][ T2168] usb 5-1: Product: syz [ 91.894724][ T2168] usb 5-1: Manufacturer: syz [ 91.899716][ T2168] usb 5-1: SerialNumber: syz [ 91.920772][ T2168] usb 5-1: config 0 descriptor?? [ 91.937296][ T4562] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 91.953106][ T2168] hub 5-1:0.0: bad descriptor, ignoring hub [ 91.967149][ T2168] hub: probe of 5-1:0.0 failed with error -5 [ 92.124455][ T41] usbhid 1-1:0.0: can't add hid device: -71 [ 92.139019][ T41] usbhid: probe of 1-1:0.0 failed with error -71 [ 92.168048][ T41] usb 1-1: USB disconnect, device number 3 [ 92.898476][ T4580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.926229][ T4580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.119280][ T4586] netlink: 14 bytes leftover after parsing attributes in process `syz.0.69'. [ 93.179656][ T128] usb 5-1: USB disconnect, device number 2 [ 94.203371][ T2168] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.403782][ T2168] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.441925][ T2168] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 94.484326][ T2168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.542507][ T2168] usb 3-1: config 0 descriptor?? [ 94.758914][ T2168] usbhid 3-1:0.0: can't add hid device: -71 [ 94.768827][ T2168] usbhid: probe of 3-1:0.0 failed with error -71 [ 94.810803][ T2168] usb 3-1: USB disconnect, device number 2 [ 95.220163][ T4612] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 95.332601][ T2168] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.523720][ T2168] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.536548][ T2168] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.555517][ T2168] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.574638][ T2168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.597917][ T2168] usb 3-1: config 0 descriptor?? [ 96.002463][ T125] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 96.057714][ T4626] device syzkaller0 entered promiscuous mode [ 96.198987][ T125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.221214][ T125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.245081][ T125] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.264936][ T125] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.279347][ T125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.299597][ T125] usb 4-1: config 0 descriptor?? [ 96.418212][ T2168] usbhid 3-1:0.0: can't add hid device: -71 [ 96.432015][ T2168] usbhid: probe of 3-1:0.0 failed with error -71 [ 96.490699][ T2168] usb 3-1: USB disconnect, device number 3 [ 96.739939][ T125] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xe [ 96.768092][ T125] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x4 [ 96.779982][ T125] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 96.804857][ T125] plantronics 0003:047F:FFFF.0003: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 96.946178][ T41] usb 4-1: USB disconnect, device number 4 [ 97.228093][ T4636] fido_id[4636]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 97.315287][ T4646] netlink: 'syz.2.91': attribute type 10 has an invalid length. [ 97.572506][ T4646] device veth0_vlan left promiscuous mode [ 97.618997][ T4646] device veth0_vlan entered promiscuous mode [ 97.649360][ T4646] team0: Device veth0_vlan failed to register rx_handler [ 97.850085][ T4646] syz.2.91 (4646) used greatest stack depth: 20528 bytes left [ 97.875004][ T4654] device syzkaller0 entered promiscuous mode [ 101.146169][ T4312] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.364110][ T4312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.385774][ T4312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.401145][ T4312] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.417767][ T4312] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.430297][ T4312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.459919][ T4312] usb 5-1: config 0 descriptor?? [ 101.888605][ T4312] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xe [ 101.902464][ T4312] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x4 [ 101.913922][ T4312] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 101.951776][ T4312] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 102.462343][ T125] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.506948][ T4710] tipc: Started in network mode [ 102.517222][ T4710] tipc: Node identity ac14140f, cluster identity 4711 [ 102.530942][ T4710] tipc: New replicast peer: 255.255.255.255 [ 102.540641][ T4710] tipc: Enabled bearer , priority 10 [ 102.664213][ T125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.715182][ T125] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 102.762473][ T125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.782299][ T125] usb 1-1: config 0 descriptor?? [ 102.972449][ T4312] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 102.997228][ T125] usbhid 1-1:0.0: can't add hid device: -71 [ 103.008123][ T125] usbhid: probe of 1-1:0.0 failed with error -71 [ 103.048495][ T125] usb 1-1: USB disconnect, device number 4 [ 103.204966][ T4312] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 103.223964][ T4312] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 103.246431][ T4312] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.271417][ T4312] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 103.283696][ T4312] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 103.292671][ T4312] usb 3-1: Product: syz [ 103.297264][ T4312] usb 3-1: Manufacturer: syz [ 103.307704][ T4312] usb 3-1: SerialNumber: syz [ 103.350830][ T4312] usb 3-1: config 0 descriptor?? [ 103.375832][ T4312] usb 3-1: selecting invalid altsetting 0 [ 103.572452][ T125] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 103.663727][ T4337] tipc: Node number set to 2886997007 [ 103.784135][ T125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.810839][ T125] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.825983][ T125] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.857170][ T125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.921115][ T125] usb 1-1: config 0 descriptor?? [ 103.924312][ T4714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.980400][ T4714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.050023][ T14] usb 5-1: USB disconnect, device number 3 [ 104.173332][ T4313] usb 3-1: USB disconnect, device number 4 [ 104.750818][ T125] usbhid 1-1:0.0: can't add hid device: -71 [ 104.762438][ T125] usbhid: probe of 1-1:0.0 failed with error -71 [ 104.811871][ T125] usb 1-1: USB disconnect, device number 5 [ 104.872349][ T4312] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.064122][ T4312] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 105.087353][ T4312] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.113561][ T4312] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 105.129082][ T4312] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.152399][ T4312] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 105.162100][ T4312] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 105.191320][ T4312] usb 2-1: Product: syz [ 105.206270][ T4312] usb 2-1: Manufacturer: syz [ 105.241117][ T4734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.115'. [ 105.259939][ T4312] cdc_wdm 2-1:1.0: skipping garbage [ 105.277638][ T4312] cdc_wdm 2-1:1.0: skipping garbage [ 105.310418][ T4312] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 105.318422][ T4312] cdc_wdm 2-1:1.0: Unknown control protocol [ 105.479268][ T4312] usb 2-1: USB disconnect, device number 3 [ 105.767368][ T4748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.115'. [ 106.122341][ T4312] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 106.337602][ T4312] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 106.350777][ T4312] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.382051][ T4312] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 106.405389][ T4312] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.457093][ T4312] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 106.472284][ T4313] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 106.510692][ T4312] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 106.541191][ T4312] usb 2-1: Product: syz [ 106.566789][ T4312] usb 2-1: Manufacturer: syz [ 106.586008][ T4312] cdc_wdm 2-1:1.0: skipping garbage [ 106.603907][ T4312] cdc_wdm 2-1:1.0: skipping garbage [ 106.622723][ T4312] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 106.632346][ T4312] cdc_wdm 2-1:1.0: Unknown control protocol [ 106.689886][ T4313] usb 5-1: config index 0 descriptor too short (expected 56802, got 36) [ 106.732264][ T4313] usb 5-1: config 27 has too many interfaces: 239, using maximum allowed: 32 [ 106.770220][ T4313] usb 5-1: config 27 has an invalid descriptor of length 92, skipping remainder of the config [ 106.800722][ T4313] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 239 [ 106.821814][ T4313] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 106.846675][ T4313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.348026][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 107.355037][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 107.361668][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 107.368818][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 107.375830][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 107.383109][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 107.390183][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 107.397495][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 107.404704][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 107.412034][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 107.419217][ T4312] usb 2-1: USB disconnect, device number 4 [ 107.808787][ T4759] netlink: 7 bytes leftover after parsing attributes in process `syz.2.122'. [ 109.222065][ T4776] IPVS: rr: FWM 3 0x00000003 - no destination available [ 109.285204][ T4780] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 109.376431][ T4780] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 110.088510][ T4313] usb 5-1: string descriptor 0 read error: -71 [ 110.133453][ T4313] usb 5-1: USB disconnect, device number 4 [ 110.752506][ T125] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 110.973858][ T125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.001469][ T125] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 111.049035][ T125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.090472][ T125] usb 2-1: config 0 descriptor?? [ 111.315802][ T125] usbhid 2-1:0.0: can't add hid device: -71 [ 111.345945][ T125] usbhid: probe of 2-1:0.0 failed with error -71 [ 111.384008][ T125] usb 2-1: USB disconnect, device number 5 [ 111.882333][ T125] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 111.969535][ T4813] loop2: detected capacity change from 0 to 32768 [ 111.987389][ T4813] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.136 (4813) [ 112.031226][ T4813] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 112.042658][ T4813] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 112.053101][ T4813] BTRFS info (device loop2): setting nodatacow, compression disabled [ 112.061738][ T4813] BTRFS info (device loop2): enabling auto defrag [ 112.068912][ T4813] BTRFS info (device loop2): max_inline at 0 [ 112.075129][ T4813] BTRFS info (device loop2): using free space tree [ 112.085895][ T125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.263349][ T125] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.404907][ T125] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.523279][ T125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.816546][ T125] usb 2-1: config 0 descriptor?? [ 113.285225][ T4276] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 113.692328][ T125] usbhid 2-1:0.0: can't add hid device: -71 [ 113.698671][ T125] usbhid: probe of 2-1:0.0 failed with error -71 [ 113.781774][ T125] usb 2-1: USB disconnect, device number 6 [ 114.310702][ T4872] loop7: detected capacity change from 0 to 16384 [ 114.431730][ T4876] netlink: 16 bytes leftover after parsing attributes in process `syz.0.143'. [ 114.505323][ T4876] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.520592][ T4874] loop7: detected capacity change from 16384 to 16383 [ 114.887723][ T4870] block device autoloading is deprecated and will be removed. [ 115.440730][ T4885] binder_alloc: 4883: binder_alloc_buf, no vma [ 115.818306][ T4893] IPVS: rr: FWM 3 0x00000003 - no destination available [ 116.298420][ T4899] loop4: detected capacity change from 0 to 256 [ 117.040573][ T4910] loop4: detected capacity change from 0 to 1024 [ 117.082239][ T4910] ======================================================= [ 117.082239][ T4910] WARNING: The mand mount option has been deprecated and [ 117.082239][ T4910] and is ignored by this kernel. Remove the mand [ 117.082239][ T4910] option from the mount to silence this warning. [ 117.082239][ T4910] ======================================================= [ 117.352033][ T4910] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 117.965829][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 118.622345][ T14] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 118.825286][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.849160][ T14] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 118.868398][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.891055][ T14] usb 5-1: config 0 descriptor?? [ 119.110309][ T14] usbhid 5-1:0.0: can't add hid device: -71 [ 119.120374][ T14] usbhid: probe of 5-1:0.0 failed with error -71 [ 119.142834][ T14] usb 5-1: USB disconnect, device number 5 [ 119.175337][ T4312] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 119.362328][ T4312] usb 3-1: Using ep0 maxpacket: 16 [ 119.369782][ T4312] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.385933][ T4312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.398615][ T4312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 119.416580][ T4312] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 119.428499][ T4312] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.447736][ T4312] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 119.466300][ T4312] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 119.475142][ T4312] usb 3-1: Manufacturer: syz [ 119.499257][ T4312] usb 3-1: config 0 descriptor?? [ 119.692278][ T14] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 119.914342][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.985528][ T14] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 120.042840][ T14] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.085433][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.102406][ T4312] rc_core: IR keymap rc-hauppauge not found [ 120.119209][ T4312] Registered IR keymap rc-empty [ 120.146667][ T14] usb 5-1: config 0 descriptor?? [ 120.174307][ T4312] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 120.237673][ T4312] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 120.262871][ T4940] binder_alloc: 4939: binder_alloc_buf, no vma [ 120.283228][ T4312] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 120.350096][ T4312] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 120.470801][ T4312] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 120.534711][ T4312] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 120.603010][ T4312] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 120.648558][ T4312] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 120.695575][ T4312] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 120.744477][ T4312] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 120.796764][ T4312] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 120.832370][ T4312] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 120.832381][ T125] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 120.895740][ T4312] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 120.944387][ T4312] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 120.994840][ T4312] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 121.005543][ T14] usbhid 5-1:0.0: can't add hid device: -71 [ 121.025578][ T14] usbhid: probe of 5-1:0.0 failed with error -71 [ 121.026643][ T4312] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 121.057654][ T125] usb 4-1: config index 0 descriptor too short (expected 56802, got 36) [ 121.072399][ T14] usb 5-1: USB disconnect, device number 6 [ 121.084859][ T125] usb 4-1: config 27 has too many interfaces: 239, using maximum allowed: 32 [ 121.119040][ T4312] usb 3-1: USB disconnect, device number 5 [ 121.124859][ T125] usb 4-1: config 27 has an invalid descriptor of length 92, skipping remainder of the config [ 121.167257][ T125] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 239 [ 121.202258][ T125] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 121.232721][ T125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.945833][ T4970] tipc: Started in network mode [ 121.976312][ T4970] tipc: Node identity ac14140f, cluster identity 4711 [ 121.989632][ T4970] tipc: New replicast peer: 255.255.255.255 [ 122.007119][ T4970] tipc: Enabled bearer , priority 10 [ 122.367028][ T4974] netlink: 16 bytes leftover after parsing attributes in process `syz.0.170'. [ 122.392664][ T14] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 122.606186][ T14] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 122.665095][ T14] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 122.692446][ T14] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.716416][ T4976] binder_alloc: 4975: binder_alloc_buf, no vma [ 122.727980][ T14] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 122.738428][ T14] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 122.748118][ T14] usb 2-1: Product: syz [ 122.761856][ T14] usb 2-1: Manufacturer: syz [ 122.793742][ T14] usb 2-1: SerialNumber: syz [ 122.820871][ T14] usb 2-1: config 0 descriptor?? [ 122.831892][ T14] usb 2-1: selecting invalid altsetting 0 [ 123.002449][ T14] tipc: Node number set to 2886997007 [ 123.171855][ T4984] loop4: detected capacity change from 0 to 1024 [ 123.182886][ T4984] EXT4-fs: Ignoring removed orlov option [ 124.878574][ T4984] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 125.167003][ T4972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.286565][ T125] usb 4-1: string descriptor 0 read error: -71 [ 125.491976][ T4972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.532392][ T125] usb 4-1: USB disconnect, device number 5 [ 125.682037][ T4312] usb 2-1: USB disconnect, device number 7 [ 125.809965][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 127.482364][ T128] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 127.686144][ T128] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.734860][ T128] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 127.764912][ T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.766176][ T5013] loop0: detected capacity change from 0 to 2048 [ 127.823853][ T128] usb 5-1: config 0 descriptor?? [ 127.925263][ T5013] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.049086][ T128] usbhid 5-1:0.0: can't add hid device: -71 [ 128.062427][ T128] usbhid: probe of 5-1:0.0 failed with error -71 [ 128.100445][ T128] usb 5-1: USB disconnect, device number 7 [ 128.625062][ T128] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 128.826011][ T128] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.861013][ T128] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.969542][ T128] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.010676][ T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.071031][ T128] usb 5-1: config 0 descriptor?? [ 129.204750][ T5033] netlink: 16 bytes leftover after parsing attributes in process `syz.1.182'. [ 129.963385][ T128] usbhid 5-1:0.0: can't add hid device: -71 [ 129.970484][ T128] usbhid: probe of 5-1:0.0 failed with error -71 [ 130.003983][ T128] usb 5-1: USB disconnect, device number 8 [ 130.942311][ T4856] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 131.006946][ T5043] loop3: detected capacity change from 0 to 32768 [ 131.151640][ T4856] usb 2-1: config index 0 descriptor too short (expected 56802, got 36) [ 131.191998][ T4856] usb 2-1: config 27 has too many interfaces: 239, using maximum allowed: 32 [ 131.217807][ T4856] usb 2-1: config 27 has an invalid descriptor of length 92, skipping remainder of the config [ 131.229420][ T4856] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 239 [ 131.239321][ T4856] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 131.249946][ T4856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.284741][ T5043] XFS (loop3): Mounting V5 Filesystem [ 131.566140][ T5043] XFS (loop3): Ending clean mount [ 131.756706][ T5071] loop4: detected capacity change from 0 to 4096 [ 131.936796][ T5071] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 132.024312][ T4272] XFS (loop3): Unmounting Filesystem [ 133.294912][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.302387][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.437812][ T5101] netlink: 16 bytes leftover after parsing attributes in process `syz.0.193'. [ 133.721099][ T4856] usb 2-1: string descriptor 0 read error: -71 [ 133.740752][ T4856] usb 2-1: USB disconnect, device number 8 [ 134.242408][ T4856] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 134.443933][ T4856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.482448][ T4856] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 134.527458][ T4856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.568489][ T4856] usb 2-1: config 0 descriptor?? [ 134.795324][ T4856] usbhid 2-1:0.0: can't add hid device: -71 [ 134.801975][ T4856] usbhid: probe of 2-1:0.0 failed with error -71 [ 134.862503][ T4856] usb 2-1: USB disconnect, device number 9 [ 135.325236][ T26] audit: type=1326 audit(1773871949.242:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5132 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53c99c799 code=0x7ffc0000 [ 135.372486][ T4856] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 135.383263][ T26] audit: type=1326 audit(1773871949.302:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5132 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53c99c799 code=0x7ffc0000 [ 135.383468][ T26] audit: type=1326 audit(1773871949.302:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5132 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53c99c799 code=0x7ffc0000 [ 135.387228][ T26] audit: type=1326 audit(1773871949.302:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5132 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fd53c99c799 code=0x7ffc0000 [ 135.387781][ T26] audit: type=1326 audit(1773871949.302:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5132 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53c99c799 code=0x7ffc0000 [ 135.388030][ T26] audit: type=1326 audit(1773871949.302:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5132 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53c99c799 code=0x7ffc0000 [ 135.388247][ T26] audit: type=1326 audit(1773871949.302:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5132 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd53c99c799 code=0x7ffc0000 [ 135.388352][ T26] audit: type=1326 audit(1773871949.302:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5132 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd53c99c799 code=0x7ffc0000 [ 135.576107][ T4856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.576142][ T4856] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 135.576176][ T4856] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.576196][ T4856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.578014][ T4856] usb 2-1: config 0 descriptor?? [ 136.012239][ T4312] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 136.387788][ T4856] usbhid 2-1:0.0: can't add hid device: -71 [ 136.387882][ T4856] usbhid: probe of 2-1:0.0 failed with error -71 [ 136.392723][ T4856] usb 2-1: USB disconnect, device number 10 [ 136.513968][ T4312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.542442][ T4312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.588594][ T4312] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.632875][ T4312] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.651057][ T4312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.689948][ T4312] usb 5-1: config 0 descriptor?? [ 137.090862][ T5167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.205'. [ 137.116538][ T4312] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xe [ 137.139137][ T4312] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x4 [ 137.198203][ T4312] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 137.251756][ T4312] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 137.358637][ T4312] usb 5-1: USB disconnect, device number 9 [ 137.657179][ T5168] fido_id[5168]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 137.792399][ T4856] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 138.033919][ T4856] usb 2-1: config index 0 descriptor too short (expected 56802, got 36) [ 138.065734][ T5181] IPVS: rr: FWM 3 0x00000003 - no destination available [ 138.078710][ T4856] usb 2-1: config 27 has too many interfaces: 239, using maximum allowed: 32 [ 138.134527][ T4856] usb 2-1: config 27 has an invalid descriptor of length 92, skipping remainder of the config [ 138.160981][ T4856] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 239 [ 138.226134][ T4856] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 138.287039][ T4856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.391723][ T5190] netlink: 14 bytes leftover after parsing attributes in process `syz.3.209'. [ 139.257557][ T5207] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.368487][ T5207] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.195018][ T5230] device syzkaller0 entered promiscuous mode [ 140.472642][ T4856] usb 2-1: string descriptor 0 read error: -71 [ 140.504826][ T4856] usb 2-1: USB disconnect, device number 11 [ 141.302325][ T14] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 141.512407][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 141.521543][ T14] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 141.544283][ T14] usb 5-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 141.560819][ T14] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 141.571787][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.952285][ T4313] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 142.155671][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.194142][ T4313] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 142.236122][ T4313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.293707][ T4313] usb 1-1: config 0 descriptor?? [ 142.521394][ T4313] usbhid 1-1:0.0: can't add hid device: -71 [ 142.532387][ T4313] usbhid: probe of 1-1:0.0 failed with error -71 [ 142.608102][ T4313] usb 1-1: USB disconnect, device number 6 [ 143.102879][ T4313] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 143.293815][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.326401][ T4313] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 143.362435][ T4313] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.372964][ T4313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.384297][ T4313] usb 1-1: config 0 descriptor?? [ 143.930661][ T5287] tipc: Enabling of bearer rejected, already enabled [ 144.066654][ T4856] usb 5-1: USB disconnect, device number 10 [ 144.200821][ T4313] usbhid 1-1:0.0: can't add hid device: -71 [ 144.220608][ T4313] usbhid: probe of 1-1:0.0 failed with error -71 [ 144.282109][ T4313] usb 1-1: USB disconnect, device number 7 [ 145.440587][ T5300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'. [ 145.572853][ T5300] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.572878][ T5300] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.572905][ T5300] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.572920][ T5300] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.674394][ T5300] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.674431][ T5300] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.674458][ T5300] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.674485][ T5300] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.786349][ T5300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'. [ 145.800217][ T5300] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.800258][ T5300] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.800287][ T5300] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.800315][ T5300] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.821458][ T5300] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.821498][ T5300] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.821527][ T5300] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.821555][ T5300] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.944035][ T4856] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 146.125540][ T4856] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 576, setting to 64 [ 146.128096][ T4856] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 146.128123][ T4856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.128134][ T4856] usb 5-1: Product: syz [ 146.128143][ T4856] usb 5-1: Manufacturer: syz [ 146.128150][ T4856] usb 5-1: SerialNumber: syz [ 146.131090][ T5312] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 146.336819][ T5312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.336966][ T5312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.342392][ T5312] xt_hashlimit: size too large, truncated to 1048576 [ 146.662267][ T4337] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 146.844033][ T4337] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 146.844062][ T4337] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.844080][ T4337] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 146.844112][ T4337] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.845442][ T4337] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 146.845468][ T4337] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 146.845487][ T4337] usb 3-1: Product: syz [ 146.845502][ T4337] usb 3-1: Manufacturer: syz [ 146.850477][ T4337] cdc_wdm 3-1:1.0: skipping garbage [ 146.850500][ T4337] cdc_wdm 3-1:1.0: skipping garbage [ 146.854907][ T4337] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 146.854930][ T4337] cdc_wdm 3-1:1.0: Unknown control protocol [ 147.054745][ T4313] usb 3-1: USB disconnect, device number 6 [ 147.632473][ T4313] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 148.531869][ T4313] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 148.845066][ T4313] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.929342][ T4313] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 149.028419][ T4313] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.073671][ T4313] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 149.100134][ T4313] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 149.127854][ T5334] tipc: Enabling of bearer rejected, already enabled [ 149.146866][ T4313] usb 3-1: Product: syz [ 149.151709][ T4313] usb 3-1: Manufacturer: syz [ 149.208281][ T4313] cdc_wdm 3-1:1.0: skipping garbage [ 149.228552][ T4313] cdc_wdm 3-1:1.0: skipping garbage [ 149.249702][ T4313] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 149.270239][ T4313] cdc_wdm 3-1:1.0: Unknown control protocol [ 149.427456][ T125] usb 3-1: USB disconnect, device number 7 [ 151.140909][ T4856] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 152.324965][ T5368] device syzkaller0 entered promiscuous mode [ 152.489192][ T4856] usb 5-1: USB disconnect, device number 11 [ 152.521506][ T4856] usblp0: removed [ 153.263140][ T4856] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 153.475087][ T4856] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 153.505164][ T4856] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.544573][ T4856] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 153.575208][ T4856] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.628539][ T4856] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 153.669227][ T4856] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 153.699636][ T4856] usb 5-1: Product: syz [ 153.717614][ T4856] usb 5-1: Manufacturer: syz [ 153.745848][ T4856] cdc_wdm 5-1:1.0: skipping garbage [ 153.762833][ T4856] cdc_wdm 5-1:1.0: skipping garbage [ 153.801013][ T4856] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 153.820781][ T4856] cdc_wdm 5-1:1.0: Unknown control protocol [ 153.947906][ T4856] usb 5-1: USB disconnect, device number 12 [ 154.532295][ T4856] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 154.766333][ T4856] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 154.789405][ T4856] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.800704][ T128] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 154.846945][ T4856] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 154.880443][ T4856] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.914432][ T4856] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 154.966793][ T4856] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 154.994267][ T128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.027128][ T4856] usb 5-1: Product: syz [ 155.037258][ T128] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 155.052367][ T4856] usb 5-1: Manufacturer: syz [ 155.073211][ T128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.091931][ T4856] cdc_wdm 5-1:1.0: skipping garbage [ 155.112418][ T4856] cdc_wdm 5-1:1.0: skipping garbage [ 155.139712][ T128] usb 1-1: config 0 descriptor?? [ 155.157720][ T4856] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 155.192347][ T4856] cdc_wdm 5-1:1.0: Unknown control protocol [ 155.378539][ T128] usbhid 1-1:0.0: can't add hid device: -71 [ 155.392372][ T128] usbhid: probe of 1-1:0.0 failed with error -71 [ 155.450309][ T128] usb 1-1: USB disconnect, device number 8 [ 155.644637][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 155.652259][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 155.660501][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 155.668344][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 155.676950][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 155.684662][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 155.702323][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 155.710036][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 155.722592][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 155.730136][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 155.736750][ T4852] usb 5-1: USB disconnect, device number 13 [ 156.055328][ T128] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 156.264377][ T128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.330604][ T128] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.395741][ T128] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.449864][ T128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.514048][ T128] usb 1-1: config 0 descriptor?? [ 156.762429][ T4852] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 156.791329][ T5418] device syzkaller0 entered promiscuous mode [ 156.977391][ T4852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.003721][ T4852] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 157.046930][ T4852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.113738][ T4852] usb 3-1: config 0 descriptor?? [ 157.337224][ T128] usbhid 1-1:0.0: can't add hid device: -71 [ 157.347300][ T4852] usbhid 3-1:0.0: can't add hid device: -71 [ 157.364409][ T128] usbhid: probe of 1-1:0.0 failed with error -71 [ 157.371430][ T4852] usbhid: probe of 3-1:0.0 failed with error -71 [ 157.423608][ T128] usb 1-1: USB disconnect, device number 9 [ 157.431703][ T4852] usb 3-1: USB disconnect, device number 8 [ 157.548525][ T5425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.269'. [ 157.912294][ T4852] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 158.117455][ T4852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.248946][ T4852] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 158.316174][ T4852] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 158.345196][ T4852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.377197][ T4852] usb 3-1: config 0 descriptor?? [ 159.192710][ T4852] usbhid 3-1:0.0: can't add hid device: -71 [ 159.272492][ T4852] usbhid: probe of 3-1:0.0 failed with error -71 [ 159.334362][ T4852] usb 3-1: USB disconnect, device number 9 [ 160.012397][ T4337] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 160.095246][ T5456] device syzkaller0 entered promiscuous mode [ 160.233943][ T4337] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 160.263606][ T4337] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.309058][ T4337] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 160.321937][ T4337] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.349455][ T4337] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 160.365667][ T4337] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 160.384284][ T4337] usb 1-1: Product: syz [ 160.395177][ T4337] usb 1-1: Manufacturer: syz [ 160.406462][ T4337] cdc_wdm 1-1:1.0: skipping garbage [ 160.443202][ T4337] cdc_wdm 1-1:1.0: skipping garbage [ 160.456327][ T4337] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 160.469396][ T4337] cdc_wdm 1-1:1.0: Unknown control protocol [ 160.513981][ T5463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.281'. [ 160.610967][ T128] usb 1-1: USB disconnect, device number 10 [ 160.983589][ T4852] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 161.175564][ T4852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.192483][ T128] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 161.283156][ T4852] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 161.327782][ T4852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.366458][ T4852] usb 5-1: config 0 descriptor?? [ 161.445360][ T128] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 161.464912][ T128] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.490558][ T128] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 161.514894][ T128] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.571109][ T128] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 161.609114][ T4852] usbhid 5-1:0.0: can't add hid device: -71 [ 161.620850][ T4852] usbhid: probe of 5-1:0.0 failed with error -71 [ 161.631439][ T128] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 161.708253][ T4852] usb 5-1: USB disconnect, device number 14 [ 161.715427][ T128] usb 1-1: Product: syz [ 161.719926][ T128] usb 1-1: Manufacturer: syz [ 161.775682][ T128] cdc_wdm 1-1:1.0: skipping garbage [ 161.816950][ T128] cdc_wdm 1-1:1.0: skipping garbage [ 161.862513][ T128] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 161.884059][ T128] cdc_wdm 1-1:1.0: Unknown control protocol [ 162.143679][ T5476] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.154072][ T5476] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.202352][ T4852] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 162.252296][ T5477] netlink: 'syz.2.285': attribute type 16 has an invalid length. [ 162.266408][ T5477] netlink: 'syz.2.285': attribute type 17 has an invalid length. [ 162.293323][ T5477] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 162.304307][ T5477] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 162.319021][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 162.326373][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 162.333182][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 162.340415][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 162.346980][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 162.353962][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 162.363345][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 162.370730][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 162.379968][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 162.387310][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 162.393995][ T4854] usb 1-1: USB disconnect, device number 11 [ 162.425803][ T4852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.438179][ T5477] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.475207][ T4852] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.561227][ T4852] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.609626][ T4852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.631041][ T4852] usb 5-1: config 0 descriptor?? [ 163.443765][ T4852] usbhid 5-1:0.0: can't add hid device: -71 [ 163.468796][ T4852] usbhid: probe of 5-1:0.0 failed with error -71 [ 163.498691][ T5503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.293'. [ 163.517140][ T4852] usb 5-1: USB disconnect, device number 15 [ 163.813800][ T5506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.294'. [ 166.243442][ T5545] netlink: 16 bytes leftover after parsing attributes in process `syz.4.307'. [ 167.969630][ T5574] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.014154][ T5574] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.167551][ T5575] netlink: 'syz.1.314': attribute type 16 has an invalid length. [ 168.252329][ T5575] netlink: 'syz.1.314': attribute type 17 has an invalid length. [ 168.374721][ T5575] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 168.447969][ T5575] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 168.498446][ T5575] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.153051][ T5601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.322'. [ 171.265568][ T5631] netlink: 'syz.4.331': attribute type 16 has an invalid length. [ 171.319873][ T5631] netlink: 'syz.4.331': attribute type 17 has an invalid length. [ 171.384980][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 171.430223][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 171.529610][ T5631] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.222350][ T4854] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 172.440312][ T4854] usb 5-1: config index 0 descriptor too short (expected 56802, got 36) [ 172.497845][ T4854] usb 5-1: config 27 has too many interfaces: 239, using maximum allowed: 32 [ 172.590599][ T4854] usb 5-1: config 27 has an invalid descriptor of length 92, skipping remainder of the config [ 172.611813][ T4854] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 239 [ 172.622409][ T4854] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 172.622949][ T5653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 172.672259][ T4854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.093306][ T4854] usb 5-1: string descriptor 0 read error: -71 [ 176.134102][ T4854] usb 5-1: USB disconnect, device number 16 [ 176.477632][ T5698] IPVS: rr: FWM 3 0x00000003 - no destination available [ 176.697497][ T5705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'. [ 178.601620][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.630100][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.740100][ T5722] netlink: 'syz.3.354': attribute type 16 has an invalid length. [ 178.813972][ T5722] netlink: 'syz.3.354': attribute type 17 has an invalid length. [ 178.958132][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 179.041204][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 179.109072][ T5722] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.352472][ T128] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 179.483650][ T5732] device syzkaller0 entered promiscuous mode [ 179.551448][ T5736] IPVS: rr: FWM 3 0x00000003 - no destination available [ 179.565722][ T128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.602653][ T128] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 179.683096][ T128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.735197][ T128] usb 2-1: config 0 descriptor?? [ 179.946947][ T128] usbhid 2-1:0.0: can't add hid device: -71 [ 179.962311][ T128] usbhid: probe of 2-1:0.0 failed with error -71 [ 179.991555][ T128] usb 2-1: USB disconnect, device number 12 [ 180.563496][ T128] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 180.769537][ T128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.801244][ T128] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 180.840154][ T128] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 180.928641][ T128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.010123][ T128] usb 2-1: config 0 descriptor?? [ 181.655393][ T4313] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 181.844785][ T128] usbhid 2-1:0.0: can't add hid device: -71 [ 181.855592][ T4313] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 576, setting to 64 [ 181.875910][ T128] usbhid: probe of 2-1:0.0 failed with error -71 [ 181.904163][ T4313] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 181.919921][ T128] usb 2-1: USB disconnect, device number 13 [ 181.956938][ T4313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.038055][ T4313] usb 1-1: Product: syz [ 182.048395][ T4313] usb 1-1: Manufacturer: syz [ 182.068601][ T4313] usb 1-1: SerialNumber: syz [ 182.090203][ T5764] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 182.311745][ T5764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.322597][ T5764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.371754][ T5764] xt_hashlimit: size too large, truncated to 1048576 [ 182.649309][ T5778] device syzkaller0 entered promiscuous mode [ 183.840158][ T5798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.377'. [ 186.123388][ T5815] netlink: 'syz.1.381': attribute type 16 has an invalid length. [ 186.188456][ T5815] netlink: 'syz.1.381': attribute type 17 has an invalid length. [ 186.362675][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 186.387130][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 186.478532][ T5815] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.012414][ T4311] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 187.137598][ T4313] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 187.228739][ T4311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.263274][ T4854] usb 1-1: USB disconnect, device number 12 [ 187.270143][ T4311] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 187.296740][ T5821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.384'. [ 187.305861][ T4854] usblp0: removed [ 187.316475][ T4311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.340949][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 187.356049][ T4311] usb 2-1: config 0 descriptor?? [ 187.570190][ T4311] usbhid 2-1:0.0: can't add hid device: -71 [ 187.589108][ T4311] usbhid: probe of 2-1:0.0 failed with error -71 [ 187.622466][ T4311] usb 2-1: USB disconnect, device number 14 [ 188.152260][ T4311] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 188.344712][ T4311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.392386][ T4311] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 188.434834][ T4311] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 188.454205][ T5843] IPVS: rr: FWM 3 0x00000003 - no destination available [ 188.468596][ T4311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.507727][ T4311] usb 2-1: config 0 descriptor?? [ 189.332655][ T4311] usbhid 2-1:0.0: can't add hid device: -71 [ 189.339459][ T4311] usbhid: probe of 2-1:0.0 failed with error -71 [ 189.382598][ T4311] usb 2-1: USB disconnect, device number 15 [ 189.892261][ T4312] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 190.102311][ T4312] usb 3-1: Using ep0 maxpacket: 16 [ 190.118717][ T4312] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 190.230914][ T4312] usb 3-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 190.291520][ T4312] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 190.302076][ T4312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.338056][ T4312] usbhid 3-1:128.0: couldn't find an input interrupt endpoint [ 190.474495][ T4854] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 190.482717][ T5869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.400'. [ 190.703831][ T4854] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 576, setting to 64 [ 190.726680][ T4854] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 190.760433][ T4854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.783983][ T4854] usb 2-1: Product: syz [ 190.796552][ T4854] usb 2-1: Manufacturer: syz [ 190.807809][ T4854] usb 2-1: SerialNumber: syz [ 190.839653][ T5865] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 191.060732][ T5865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.105729][ T5865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.162969][ T5865] xt_hashlimit: size too large, truncated to 1048576 [ 191.410710][ T5877] IPVS: rr: FWM 3 0x00000003 - no destination available [ 191.692216][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 191.698834][ T4273] Bluetooth: hci0: command 0x0406 tx timeout [ 191.699789][ T4275] Bluetooth: hci4: command 0x0406 tx timeout [ 191.699820][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 191.706207][ T4273] Bluetooth: hci3: command 0x0406 tx timeout [ 192.720771][ T4312] usb 3-1: USB disconnect, device number 10 [ 194.736798][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.744467][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.770970][ T5914] netlink: 'syz.4.411': attribute type 16 has an invalid length. [ 195.861449][ T4854] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 195.892297][ T5914] netlink: 'syz.4.411': attribute type 17 has an invalid length. [ 195.999527][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 196.010151][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 196.029148][ T5914] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.270718][ T4337] usb 2-1: USB disconnect, device number 16 [ 196.292361][ T4337] usblp0: removed [ 196.632276][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'. [ 196.658686][ T5928] IPVS: rr: FWM 3 0x00000003 - no destination available [ 196.852251][ T4312] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 197.042556][ T4312] usb 5-1: Using ep0 maxpacket: 16 [ 197.057293][ T4312] usb 5-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 197.103107][ T4312] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 197.128881][ T4312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.179626][ T4312] usbhid 5-1:128.0: couldn't find an input interrupt endpoint [ 199.372249][ T4311] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 199.564119][ T4311] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 576, setting to 64 [ 199.593205][ T4311] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 199.629277][ T4854] usb 5-1: USB disconnect, device number 17 [ 199.648109][ T4311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.666652][ T4311] usb 1-1: Product: syz [ 199.675198][ T4311] usb 1-1: Manufacturer: syz [ 199.680726][ T4311] usb 1-1: SerialNumber: syz [ 199.693646][ T5959] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 199.906465][ T5959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.929012][ T5959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.999849][ T5959] xt_hashlimit: size too large, truncated to 1048576 [ 200.133943][ T5975] IPVS: rr: FWM 3 0x00000003 - no destination available [ 201.924749][ T5991] netlink: 'syz.4.434': attribute type 16 has an invalid length. [ 201.965376][ T5991] netlink: 'syz.4.434': attribute type 17 has an invalid length. [ 202.026086][ T5991] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 202.086391][ T5991] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.202268][ T4312] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 203.412257][ T4312] usb 3-1: Using ep0 maxpacket: 16 [ 203.420490][ T4312] usb 3-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.491941][ T4312] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 203.528545][ T4312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.586573][ T4312] usbhid 3-1:128.0: couldn't find an input interrupt endpoint [ 203.732350][ T14] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 203.925738][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.966295][ T14] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 204.007330][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.040321][ T14] usb 2-1: config 0 descriptor?? [ 204.289049][ T14] usbhid 2-1:0.0: can't add hid device: -71 [ 204.298216][ T14] usbhid: probe of 2-1:0.0 failed with error -71 [ 204.323123][ T14] usb 2-1: USB disconnect, device number 17 [ 204.624774][ T4311] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 204.652803][ T4311] usb 1-1: USB disconnect, device number 13 [ 204.708881][ T4311] usblp0: removed [ 204.862237][ T14] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 205.073978][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.098921][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.128813][ T6032] netlink: 'syz.3.447': attribute type 16 has an invalid length. [ 205.139026][ T14] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.149384][ T6032] netlink: 'syz.3.447': attribute type 17 has an invalid length. [ 205.158008][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.173013][ T6032] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 205.183292][ T14] usb 2-1: config 0 descriptor?? [ 205.200362][ T6032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.600229][ T14] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 205.625506][ T14] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 205.960818][ T4311] usb 3-1: USB disconnect, device number 11 [ 207.158663][ T4312] usb 2-1: USB disconnect, device number 18 [ 207.596478][ T6061] IPVS: rr: FWM 3 0x00000003 - no destination available [ 208.713888][ T14] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 208.739617][ T6076] netlink: 'syz.1.461': attribute type 16 has an invalid length. [ 208.754160][ T6076] netlink: 'syz.1.461': attribute type 17 has an invalid length. [ 208.767101][ T6076] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 208.787519][ T6076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.820406][ T6074] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 208.927388][ T14] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 576, setting to 64 [ 208.960615][ T14] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 208.984359][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.997818][ T14] usb 3-1: Product: syz [ 209.005557][ T14] usb 3-1: Manufacturer: syz [ 209.010724][ T14] usb 3-1: SerialNumber: syz [ 209.029801][ T6068] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 209.212252][ T4856] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 209.254810][ T6068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.272488][ T6068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.289702][ T6068] xt_hashlimit: size too large, truncated to 1048576 [ 209.404005][ T4856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.421616][ T4856] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 209.432246][ T4312] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 209.440707][ T4856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.453529][ T4856] usb 2-1: config 0 descriptor?? [ 209.625585][ T4312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.667861][ T4856] usbhid 2-1:0.0: can't add hid device: -71 [ 209.682250][ T4312] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 209.691988][ T4312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.703847][ T4856] usbhid: probe of 2-1:0.0 failed with error -71 [ 209.753071][ T4856] usb 2-1: USB disconnect, device number 19 [ 209.777662][ T4312] usb 5-1: config 0 descriptor?? [ 210.005019][ T4312] usbhid 5-1:0.0: can't add hid device: -71 [ 210.011232][ T4312] usbhid: probe of 5-1:0.0 failed with error -71 [ 210.050472][ T4312] usb 5-1: USB disconnect, device number 18 [ 210.274235][ T4856] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 210.484038][ T4856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.546485][ T4856] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 210.592208][ T4312] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 210.616893][ T4856] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.628689][ T4856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.646007][ T4856] usb 2-1: config 0 descriptor?? [ 210.794416][ T4312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.831775][ T4312] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 210.890374][ T4312] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.953009][ T4312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.007497][ T4312] usb 5-1: config 0 descriptor?? [ 211.092877][ T4856] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 211.134399][ T4856] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 211.839662][ T4312] usbhid 5-1:0.0: can't add hid device: -71 [ 211.857032][ T4312] usbhid: probe of 5-1:0.0 failed with error -71 [ 211.902012][ T4312] usb 5-1: USB disconnect, device number 19 [ 212.722985][ T4312] usb 2-1: USB disconnect, device number 20 [ 213.600180][ T6119] netlink: 'syz.4.475': attribute type 16 has an invalid length. [ 213.640583][ T6119] netlink: 'syz.4.475': attribute type 17 has an invalid length. [ 213.702083][ T6119] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 213.725624][ T6119] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.983723][ T14] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 214.010781][ T14] usb 3-1: USB disconnect, device number 12 [ 214.045993][ T14] usblp0: removed [ 214.153691][ T6126] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 215.062371][ T4856] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 215.264672][ T4856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.302314][ T4856] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 215.342214][ T4856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.374932][ T4856] usb 1-1: config 0 descriptor?? [ 215.621578][ T4856] usbhid 1-1:0.0: can't add hid device: -71 [ 215.632331][ T4856] usbhid: probe of 1-1:0.0 failed with error -71 [ 215.712227][ T4856] usb 1-1: USB disconnect, device number 14 [ 215.842361][ T4313] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 216.022204][ T4313] usb 3-1: device descriptor read/64, error -71 [ 216.232290][ T4856] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 216.292340][ T4313] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 216.388543][ T6158] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 216.434579][ T4856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.452323][ T4313] usb 3-1: device descriptor read/64, error -71 [ 216.469787][ T4856] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 216.501351][ T4856] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.520593][ T4856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.524429][ T6162] netlink: 'syz.4.489': attribute type 16 has an invalid length. [ 216.540305][ T4856] usb 1-1: config 0 descriptor?? [ 216.569555][ T6162] netlink: 'syz.4.489': attribute type 17 has an invalid length. [ 216.580898][ T4313] usb usb3-port1: attempt power cycle [ 216.638411][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 216.691472][ T6162] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.942321][ T128] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 216.954547][ T4856] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 216.970230][ T4856] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 217.002332][ T4313] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 217.047620][ T4313] usb 3-1: device descriptor read/8, error -71 [ 217.146995][ T128] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 576, setting to 64 [ 217.167662][ T128] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 217.177761][ T128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.192265][ T128] usb 4-1: Product: syz [ 217.196855][ T128] usb 4-1: Manufacturer: syz [ 217.206332][ T128] usb 4-1: SerialNumber: syz [ 217.229433][ T6164] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 217.322266][ T4313] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 217.363696][ T4313] usb 3-1: device descriptor read/8, error -71 [ 217.458668][ T6164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.482442][ T4313] usb usb3-port1: unable to enumerate USB device [ 217.482590][ T6164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.527848][ T6164] xt_hashlimit: size too large, truncated to 1048576 [ 218.529452][ T4312] usb 1-1: USB disconnect, device number 15 [ 218.729976][ T6183] device syzkaller0 entered promiscuous mode [ 221.471922][ T6204] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 221.501803][ T6204] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 221.531846][ T6204] ------------[ cut here ]------------ [ 221.538296][ T6204] WARNING: CPU: 0 PID: 6204 at arch/x86/kvm/x86.c:11259 kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 221.539484][ T128] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 221.550138][ T6204] Modules linked in: [ 221.550197][ T6204] CPU: 0 PID: 6204 Comm: syz.2.501 Not tainted syzkaller #0 [ 221.550221][ T6204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 221.550237][ T6204] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 221.550268][ T6204] Code: e8 47 4e c3 00 e9 4e ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c db e5 ff ff 4c 89 ff e8 0c 4e c3 00 e9 ce e5 ff ff e8 32 63 72 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ae eb [ 221.550289][ T6204] RSP: 0018:ffffc90003387c48 EFLAGS: 00010287 [ 221.550309][ T6204] RAX: ffffffff81100f7e RBX: ffff8880577927c0 RCX: 0000000000080000 [ 221.550325][ T6204] RDX: ffffc9000cae9000 RSI: 00000000000003bf RDI: 00000000000003c0 [ 221.550339][ T6204] RBP: ffff8880564aa000 R08: dffffc0000000000 R09: 1ffffffff215ec6a [ 221.550355][ T6204] R10: dffffc0000000000 R11: fffffbfff215ec6b R12: ffff888057792ab4 [ 221.550371][ T6204] R13: ffff888057792898 R14: dffffc0000000000 R15: 0000000000000000 [ 221.550386][ T6204] FS: 00007ff960e126c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 221.550405][ T6204] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 221.550420][ T6204] CR2: 00007ff960defff8 CR3: 0000000028b72000 CR4: 00000000003526f0 [ 221.550436][ T6204] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 221.619842][ T128] usb 4-1: USB disconnect, device number 6 [ 221.621486][ T6204] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 221.722043][ T6204] Call Trace: [ 221.725717][ T6204] [ 221.729070][ T6204] ? mutex_lock_nested+0x10/0x10 [ 221.734745][ T6204] ? kvm_arch_vcpu_ioctl_run+0x139/0x2390 [ 221.741149][ T6204] kvm_vcpu_ioctl+0x8f7/0xc10 [ 221.746433][ T6204] ? xa_release+0x50/0x50 [ 221.751286][ T6204] ? __fget_files+0x28/0x4b0 [ 221.756345][ T6204] ? __fget_files+0x28/0x4b0 [ 221.761673][ T6204] ? bpf_lsm_file_ioctl+0x5/0x10 [ 221.767033][ T6204] ? security_file_ioctl+0x7c/0xa0 [ 221.772751][ T6204] ? xa_release+0x50/0x50 [ 221.777437][ T6204] __se_sys_ioctl+0xfa/0x170 [ 221.782449][ T6204] do_syscall_64+0x4c/0xa0 [ 221.787547][ T6204] ? clear_bhb_loop+0x60/0xb0 [ 221.792919][ T6204] ? clear_bhb_loop+0x60/0xb0 [ 221.797891][ T6204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.804323][ T6204] RIP: 0033:0x7ff95ff9c799 [ 221.809216][ T6204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.831533][ T6204] RSP: 002b:00007ff960e12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.841888][ T6204] RAX: ffffffffffffffda RBX: 00007ff960215fa0 RCX: 00007ff95ff9c799 [ 221.850865][ T6204] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 221.860466][ T6204] RBP: 00007ff960032c99 R08: 0000000000000000 R09: 0000000000000000 [ 221.869531][ T6204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.880075][ T6204] R13: 00007ff960216038 R14: 00007ff960215fa0 R15: 00007fff4faceeb8 [ 221.889210][ T6204] [ 221.892734][ T6204] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 221.900886][ T6204] CPU: 0 PID: 6204 Comm: syz.2.501 Not tainted syzkaller #0 [ 221.909320][ T6204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 221.920627][ T6204] Call Trace: [ 221.924343][ T6204] [ 221.928442][ T6204] dump_stack_lvl+0x188/0x24e [ 221.934467][ T6204] ? memcpy+0x3c/0x60 [ 221.938883][ T6204] ? show_regs_print_info+0x12/0x12 [ 221.945867][ T6204] ? load_image+0x400/0x400 [ 221.951198][ T6204] panic+0x2e5/0x730 [ 221.955394][ T6204] ? bpf_jit_dump+0xd0/0xd0 [ 221.960250][ T6204] __warn+0x2f8/0x4f0 [ 221.964513][ T6204] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 221.971273][ T6204] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 221.977809][ T6204] report_bug+0x2ba/0x4f0 [ 221.982943][ T6204] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 221.989288][ T6204] handle_bug+0x3a/0x70 [ 221.993986][ T6204] exc_invalid_op+0x16/0x40 [ 221.998686][ T6204] asm_exc_invalid_op+0x16/0x20 [ 222.004706][ T6204] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 222.011475][ T6204] Code: e8 47 4e c3 00 e9 4e ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c db e5 ff ff 4c 89 ff e8 0c 4e c3 00 e9 ce e5 ff ff e8 32 63 72 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ae eb [ 222.034580][ T6204] RSP: 0018:ffffc90003387c48 EFLAGS: 00010287 [ 222.041263][ T6204] RAX: ffffffff81100f7e RBX: ffff8880577927c0 RCX: 0000000000080000 [ 222.049420][ T6204] RDX: ffffc9000cae9000 RSI: 00000000000003bf RDI: 00000000000003c0 [ 222.057935][ T6204] RBP: ffff8880564aa000 R08: dffffc0000000000 R09: 1ffffffff215ec6a [ 222.066256][ T6204] R10: dffffc0000000000 R11: fffffbfff215ec6b R12: ffff888057792ab4 [ 222.075183][ T6204] R13: ffff888057792898 R14: dffffc0000000000 R15: 0000000000000000 [ 222.083906][ T6204] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 222.090380][ T6204] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 222.096722][ T6204] ? mutex_lock_nested+0x10/0x10 [ 222.101863][ T6204] ? kvm_arch_vcpu_ioctl_run+0x139/0x2390 [ 222.108149][ T6204] kvm_vcpu_ioctl+0x8f7/0xc10 [ 222.113271][ T6204] ? xa_release+0x50/0x50 [ 222.117875][ T6204] ? __fget_files+0x28/0x4b0 [ 222.122762][ T6204] ? __fget_files+0x28/0x4b0 [ 222.127638][ T6204] ? bpf_lsm_file_ioctl+0x5/0x10 [ 222.133553][ T6204] ? security_file_ioctl+0x7c/0xa0 [ 222.138933][ T6204] ? xa_release+0x50/0x50 [ 222.143710][ T6204] __se_sys_ioctl+0xfa/0x170 [ 222.148511][ T6204] do_syscall_64+0x4c/0xa0 [ 222.152966][ T6204] ? clear_bhb_loop+0x60/0xb0 [ 222.158170][ T6204] ? clear_bhb_loop+0x60/0xb0 [ 222.163473][ T6204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.169539][ T6204] RIP: 0033:0x7ff95ff9c799 [ 222.174131][ T6204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.194811][ T6204] RSP: 002b:00007ff960e12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.203997][ T6204] RAX: ffffffffffffffda RBX: 00007ff960215fa0 RCX: 00007ff95ff9c799 [ 222.213148][ T6204] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 222.222256][ T6204] RBP: 00007ff960032c99 R08: 0000000000000000 R09: 0000000000000000 [ 222.230453][ T6204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.239059][ T6204] R13: 00007ff960216038 R14: 00007ff960215fa0 R15: 00007fff4faceeb8 [ 222.247850][ T6204] [ 222.251744][ T6204] Kernel Offset: disabled [ 222.256577][ T6204] Rebooting in 86400 seconds..