last executing test programs: 13.895230533s ago: executing program 3 (id=1511): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000600)=0xfffffff8, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, 0x0, 0xa}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x49, 0x2, {0xa, 0x0, 0x6}}, 0x14) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) 12.76892712s ago: executing program 3 (id=1513): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x115200, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000000040)=0xffff) socket$key(0xf, 0x3, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(0x0, 0xc0, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r5, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @addr}, {0x0, 0x80, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x70) 11.369866312s ago: executing program 3 (id=1516): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 11.289817574s ago: executing program 4 (id=1518): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x1d0c, @ipv4={'\x00', '\xff\xff', @empty}, 0xf5c0}}, 0x0, 0x809}, &(0x7f0000000080)=0x90) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, &(0x7f0000000340)="1d7c", 0x2, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000180)}], 0x1}, 0x0) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000000400), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000d00)="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", 0x11d, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={'sha256\x00'}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@deltfilter={0x2c, 0x2d, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xe}, {0xd, 0xf5ad5efc75feabdd}, {0xb, 0xfff7}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20048840) syz_open_dev$sndpcmc(0x0, 0x1, 0x2) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) getsockopt(r7, 0x8, 0xffff, &(0x7f0000000000)=""/39, 0x0) msgctl$IPC_RMID(0x0, 0x0) 11.191522857s ago: executing program 2 (id=1519): syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c94", 0xcb}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e02801", 0x4d}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52", 0xc5}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b523983", 0x72}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x57, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11.143142518s ago: executing program 3 (id=1520): socket$nl_generic(0x10, 0x3, 0x10) openat$vicodec0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) socket(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5, 0x0, '~'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4) 10.752395857s ago: executing program 1 (id=1522): mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x0) write(r0, &(0x7f0000000000), 0x0) 9.823207459s ago: executing program 1 (id=1523): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000600)=0xfffffff8, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, 0x0, 0xa}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x49, 0x2, {0xa, 0x0, 0x6}}, 0x14) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) 9.641623723s ago: executing program 0 (id=1524): r0 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0xe, &(0x7f0000000180)=ANY=[], 0x0) recvmmsg(r0, &(0x7f0000008a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) 8.777952344s ago: executing program 1 (id=1525): r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) ptrace$setsig(0x4203, r2, 0xf4d, &(0x7f0000000040)={0xb, 0x4, 0x9}) syz_open_dev$sndctrl(&(0x7f0000000100), 0x8, 0x101201) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000240)="0c794a4993f52ae62259c12ea5b40766289ccbc982f55a72f0ba63a77b4bd02f3c1f52b4d0b38c227a1f13ff8a7a55a19dba2ba1ae5a48b76a6fe63b36223db6c18e7bbbff16734e", 0x0, 0x48) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e25, 0x31e, @dev={0xfe, 0x80, '\x00', 0x11}, 0x4}, 0x1c) close(0x3) 8.642049586s ago: executing program 2 (id=1526): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x115200, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000000040)=0xffff) socket$key(0xf, 0x3, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(0x0, 0xc0, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r5, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @addr}, {0x0, 0x80, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x70) 8.633537217s ago: executing program 4 (id=1527): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}, 0x18020000}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000180)={r0, 0x0, 0x440000, 0x0, 0x1, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 8.600491758s ago: executing program 0 (id=1528): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 8.170037488s ago: executing program 1 (id=1529): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x20600) 7.520029023s ago: executing program 2 (id=1530): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 7.088331953s ago: executing program 1 (id=1531): syz_open_dev$vcsn(0x0, 0x6, 0x200001) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone(0x80020200, 0x0, 0xfffffffffffffe3a, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x2, 0xfffff038}, {0x20, 0xe0, 0x0, 0x3}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) 6.973971426s ago: executing program 0 (id=1532): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000300)="09000000ffffffffb79e08da88a8a5a186dd6fbd", 0x0, 0x1000fe1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 6.942259217s ago: executing program 2 (id=1533): syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 6.722126422s ago: executing program 2 (id=1534): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) read(r0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) 6.685344292s ago: executing program 0 (id=1535): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'dummy0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000600)=0xfffffff8, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, 0x0, 0xa}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x49, 0x2, {0xa, 0x0, 0x6}}, 0x14) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) 5.167165169s ago: executing program 3 (id=1536): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x5) sendmmsg$inet(r1, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000e80)="2389", 0x2}], 0x1}}], 0x1, 0x4040040) 3.738004212s ago: executing program 2 (id=1537): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x1d0c, @ipv4={'\x00', '\xff\xff', @empty}, 0xf5c0}}, 0x0, 0x809}, &(0x7f0000000080)=0x90) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, &(0x7f0000000340)="1d7c", 0x2, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000180)}], 0x1}, 0x0) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000000400), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000d00)="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", 0x11d, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={'sha256\x00'}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@deltfilter={0x2c, 0x2d, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xe}, {0xd, 0xf5ad5efc75feabdd}, {0xb, 0xfff7}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20048840) syz_open_dev$sndpcmc(0x0, 0x1, 0x2) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) getsockopt(r7, 0x8, 0xffff, &(0x7f0000000000)=""/39, 0x0) msgctl$IPC_RMID(0x0, 0x0) 3.737164972s ago: executing program 0 (id=1538): r0 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0xe, &(0x7f0000000180)=ANY=[], 0x0) recvmmsg(r0, &(0x7f0000008a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) 3.736412313s ago: executing program 4 (id=1539): r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) ptrace$setsig(0x4203, r2, 0xf4d, &(0x7f0000000040)={0xb, 0x4, 0x9}) syz_open_dev$sndctrl(&(0x7f0000000100), 0x8, 0x101201) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000240)="0c794a4993f52ae62259c12ea5b40766289ccbc982f55a72f0ba63a77b4bd02f3c1f52b4d0b38c227a1f13ff8a7a55a19dba2ba1ae5a48b76a6fe63b36223db6c18e7bbbff16734e", 0x0, 0x48) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e25, 0x31e, @dev={0xfe, 0x80, '\x00', 0x11}, 0x4}, 0x1c) close(0x3) 3.465351559s ago: executing program 4 (id=1540): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x115200, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000000040)=0xffff) socket$key(0xf, 0x3, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(0x0, 0xc0, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r5, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @addr}, {0x0, 0x80, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x70) 3.439209309s ago: executing program 3 (id=1541): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) socket(0x2a, 0x80000, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0xb}}, './cgroup.cpu/cgroup.procs\x00'}) ppoll(&(0x7f00000003c0), 0x0, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000440)={[0x3ff]}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 2.412029133s ago: executing program 4 (id=1542): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x11e) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, &(0x7f0000000280)={0xffffffffffffffff, r1, 0x1}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r5, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="11072100ce145ba56a46191eaf185f69eff4c2ef3c431db62580942b3a9b9ef263220508723360d0dc779ccb3fdd7c43a566f0e03f9fab050aa5c7c15680762da29ef9604c5a1adffbdf357a770b2a4216132d8a928aee1a7d66d8fa428c6e1d9c3940e6dee1665f7541d355293335f8"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) 1.818074567s ago: executing program 0 (id=1543): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x68420, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x5, 0x0, 0x717e387b, 0x40, "1ae34e060100000000000000b240794233a5bd", 0x4, 0x2}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) r1 = fsopen(&(0x7f0000000340)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x7b) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0x9, 0x7, 0x66e7, 0xfff, 0x7, "8c0dc77e87de5ff6eb07c5109a38666f222caf", 0x5988, 0x1}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) 48.623059ms ago: executing program 1 (id=1544): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000005, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00003f1000/0x1000)=nil, 0x1000, 0x0, 0x1000000000000007, 0x10) 0s ago: executing program 4 (id=1545): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fddbdf253700000008000300", @ANYRES32=r1, @ANYBLOB="080026006c0900000800a0006c09000008005700881300000800a1000010000008"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x90) kernel console output (not intermixed with test programs): 33573][ T4278] Cannot create hsr debugfs directory [ 73.259705][ T4276] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.274894][ T4276] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.291985][ T4276] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.302170][ T4276] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.334767][ T4272] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.352539][ T4272] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.363535][ T4272] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.390303][ T4272] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.432522][ T4279] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.448935][ T4279] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.464137][ T4279] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.497445][ T4279] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.522644][ T4277] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.532847][ T4277] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.567325][ T4277] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.597837][ T4277] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.639387][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.699555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.711165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.720750][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.730468][ T4278] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.743175][ T4278] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.774700][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.784282][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.794630][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.802070][ T4320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.812108][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.822762][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.831494][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.838975][ T4320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.847086][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.867851][ T4278] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.880389][ T4278] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.894777][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.907843][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.917367][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.933223][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.942564][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.957496][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.976147][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.988113][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.023682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.033281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.051097][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.065758][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.078475][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.094285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.103261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.112812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.122105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.134549][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.144501][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.164075][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.173275][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.212098][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.223625][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.235928][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.245352][ T1064] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.253898][ T1064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.265330][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.275039][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.283868][ T1064] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.291026][ T1064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.300305][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.309622][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.319061][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.331281][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.344451][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.353709][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.362856][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.371397][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.393847][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.427016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.439209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.453887][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.461455][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.478919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.508332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.517951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.533150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.545431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.557884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.566511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.576164][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.583404][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.591803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.601889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.610582][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.617899][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.625732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.675104][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.691664][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.699889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.710861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.720149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.728744][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.735930][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.744385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.753525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.761725][ T4282] Bluetooth: hci0: command 0x041b tx timeout [ 74.767094][ T4287] Bluetooth: hci1: command 0x041b tx timeout [ 74.768953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.773837][ T4287] Bluetooth: hci2: command 0x041b tx timeout [ 74.784418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.798100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.807467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.815821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.835976][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.844784][ T4287] Bluetooth: hci3: command 0x041b tx timeout [ 74.851099][ T4282] Bluetooth: hci4: command 0x041b tx timeout [ 74.882267][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.900827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.911434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.928199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.944631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.955195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.970549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.983410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.992740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.002349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.011366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.020696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.030860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.039582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.048917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.069769][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.115623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.134360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.143758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.160393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.173849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.183751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.196713][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.222394][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.266376][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.308911][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.316497][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.349793][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.365206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.377256][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.384485][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.417447][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.437002][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.448868][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.465224][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.475588][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.482871][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.491773][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.524271][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.543126][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.598184][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.620432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.671955][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.687939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.700313][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.718841][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.729342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.738990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.754657][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.765769][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.775176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.783671][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.792103][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.804023][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.826419][ T4276] device veth0_vlan entered promiscuous mode [ 75.833537][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.845297][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.865374][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.882946][ T4272] device veth0_vlan entered promiscuous mode [ 75.898762][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.906279][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.914530][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.922939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.932399][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.941100][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.982001][ T4276] device veth1_vlan entered promiscuous mode [ 75.996458][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.013984][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.032299][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.040919][ T4272] device veth1_vlan entered promiscuous mode [ 76.063106][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.181361][ T4276] device veth0_macvtap entered promiscuous mode [ 76.195645][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.212328][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.222960][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.236304][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.250549][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.264011][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.273510][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.285699][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.297485][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.315822][ T4277] device veth0_vlan entered promiscuous mode [ 76.343714][ T4272] device veth0_macvtap entered promiscuous mode [ 76.353619][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.369663][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.378235][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.387354][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.396233][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.405102][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.414537][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.423102][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.452537][ T4276] device veth1_macvtap entered promiscuous mode [ 76.463810][ T4272] device veth1_macvtap entered promiscuous mode [ 76.484130][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.494058][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.504395][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.515098][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.535966][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.547620][ T4277] device veth1_vlan entered promiscuous mode [ 76.557304][ T4279] device veth0_vlan entered promiscuous mode [ 76.567890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.576365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.585769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.594761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.609974][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.620103][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.642164][ T4279] device veth1_vlan entered promiscuous mode [ 76.651008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.667614][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.712892][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.738487][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.753365][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.767814][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.824864][ T4272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.837103][ T4287] Bluetooth: hci2: command 0x040f tx timeout [ 76.843371][ T4287] Bluetooth: hci1: command 0x040f tx timeout [ 76.849740][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 76.856517][ T4272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.865514][ T4272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.874329][ T4272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.886007][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.895762][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.906098][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.915909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.926168][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.927299][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 76.937596][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.940698][ T4282] Bluetooth: hci3: command 0x040f tx timeout [ 76.957654][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.969928][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.980286][ T4277] device veth0_macvtap entered promiscuous mode [ 76.995338][ T4277] device veth1_macvtap entered promiscuous mode [ 77.004431][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.020398][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.031915][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.049817][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.069870][ T4276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.083222][ T4276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.093149][ T4276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.109747][ T4276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.154336][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.164097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.179163][ T4279] device veth0_macvtap entered promiscuous mode [ 77.218792][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.231297][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.244335][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.268861][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.280995][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.315057][ T4279] device veth1_macvtap entered promiscuous mode [ 77.332194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.341538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.351325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.360771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.390354][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.408187][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.423685][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.434609][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.445855][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.456799][ T4277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.465550][ T4277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.475721][ T4277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.485844][ T4277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.497677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.507265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.532425][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.541292][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.621526][ T4278] device veth0_vlan entered promiscuous mode [ 77.635553][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.635612][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.656123][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.658563][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.672817][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.681165][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.690462][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.700507][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.711402][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.722592][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.733185][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.743258][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.754215][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.766193][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.806073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.821609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.842926][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.853838][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.864850][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.875995][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.887775][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.898881][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.910515][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.934370][ T4278] device veth1_vlan entered promiscuous mode [ 77.943288][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.953138][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.953763][ T4333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.962849][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.983435][ T4333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.984127][ T4279] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.000229][ T4279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.009372][ T4279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.018192][ T4279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.047003][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.056474][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.072065][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.095563][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.124133][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.132506][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.142370][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.191508][ T4278] device veth0_macvtap entered promiscuous mode [ 78.200539][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.217221][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.263061][ T4278] device veth1_macvtap entered promiscuous mode [ 78.284273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.294319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.308097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.316383][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.354938][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.385015][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.400291][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.425045][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.426052][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.446017][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.458711][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.469960][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.481094][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.492672][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.503733][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.518221][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.554911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.572731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.583345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.602500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.642983][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.661890][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.711143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.718524][ T1064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.729448][ T1064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.737300][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.784274][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.551491][ T4357] Zero length message leads to an empty skb [ 79.887169][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 79.925241][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.941428][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.954246][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.972969][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.985029][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.001175][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.013240][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.077026][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.090974][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.140684][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.155843][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 80.162078][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 80.168750][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 80.174799][ T4289] Bluetooth: hci4: command 0x0419 tx timeout [ 80.291730][ T4278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.326681][ T4278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.335725][ T4278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.376647][ T4278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.598337][ T4374] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.026838][ T4318] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 82.820078][ T4380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.870867][ T4380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.914756][ T4318] usb 1-1: config index 0 descriptor too short (expected 93, got 92) [ 82.938108][ T4318] usb 1-1: config 1 has an invalid descriptor of length 154, skipping remainder of the config [ 82.949650][ T4318] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 82.961137][ T4318] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 83.000777][ T4318] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 83.021421][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.061294][ T4372] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 83.188235][ T4318] hub 1-1:1.0: bad descriptor, ignoring hub [ 83.195851][ T4318] hub: probe of 1-1:1.0 failed with error -5 [ 83.196988][ T4391] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4279] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  \x0b € £µùëoÏXÚ¥\x0d·)Çw- \x0dx)œÁl5ùî˜g¢Pšr\x09  €"[4391] [ 83.202751][ T4318] cdc_wdm 1-1:1.0: skipping garbage [ 83.249868][ T4318] cdc_wdm 1-1:1.0: skipping garbage [ 83.368082][ T4318] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 83.386687][ T4318] cdc_wdm 1-1:1.0: Unknown control protocol [ 83.496611][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.623973][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.726473][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.772095][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.914741][ T7] usb 1-1: USB disconnect, device number 2 [ 84.236715][ T4385] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.443914][ T4385] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.461064][ T4385] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 84.486759][ T4385] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.549423][ T4385] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.566656][ T4385] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.576716][ T4385] usb 3-1: Product: syz [ 84.580945][ T4385] usb 3-1: Manufacturer: syz [ 84.595834][ T4385] usb 3-1: SerialNumber: syz [ 84.637287][ T4385] cdc_mbim 3-1:1.0: skipping garbage [ 84.643896][ T4385] cdc_mbim 3-1:1.0: CDC Union missing and no IAD found [ 84.661124][ T4385] cdc_mbim 3-1:1.0: bind() failure [ 86.519588][ T4417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'. [ 86.807591][ T14] cfg80211: failed to load regulatory.db [ 87.146228][ T4318] usb 3-1: USB disconnect, device number 2 [ 87.512783][ T4425] netlink: 64 bytes leftover after parsing attributes in process `syz.2.19'. [ 87.606735][ T14] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.883947][ T14] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 87.907537][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.966898][ T14] usb 4-1: Product: syz [ 87.971455][ T14] usb 4-1: Manufacturer: syz [ 87.976131][ T14] usb 4-1: SerialNumber: syz [ 87.992381][ T4440] process 'syz.0.22' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 88.018639][ T4440] hpfs: Bad magic ... probably not HPFS [ 88.036677][ T4440] hpfs: Bad magic ... probably not HPFS [ 88.646610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 88.666613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 88.726627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 89.136613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 89.156617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 89.166606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 89.176604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 89.186606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 89.196609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 89.206615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 90.717205][ T14] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 90.781103][ T14] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 90.829156][ T14] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 91.077647][ T14] lan78xx: probe of 4-1:1.0 failed with error -71 [ 91.340613][ T14] usb 4-1: USB disconnect, device number 2 [ 92.097334][ T4466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 92.126674][ T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 92.526680][ T4385] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.213687][ T14] usb 3-1: unable to get BOS descriptor or descriptor too short [ 93.237378][ T14] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 93.255121][ T14] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 93.266758][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.276337][ T14] usb 3-1: Product: syz [ 93.281517][ T14] usb 3-1: Manufacturer: syz [ 93.286927][ T14] usb 3-1: SerialNumber: syz [ 93.398748][ T4385] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.419264][ T4385] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 93.437003][ T4385] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.497133][ T4385] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.525866][ T14] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 93.562222][ T4385] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.577124][ T14] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 93.603800][ T4385] usb 2-1: Product: syz [ 93.608244][ T14] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 93.617682][ T4385] usb 2-1: Manufacturer: syz [ 93.625716][ T4385] usb 2-1: SerialNumber: syz [ 93.633125][ T14] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 93.657051][ T4385] cdc_mbim 2-1:1.0: skipping garbage [ 93.662952][ T4385] cdc_mbim 2-1:1.0: CDC Union missing and no IAD found [ 93.680569][ T4385] cdc_mbim 2-1:1.0: bind() failure [ 93.722845][ T14] usb 3-1: USB disconnect, device number 3 [ 93.903710][ T4340] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.003877][ T4381] udevd[4381]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.124334][ T4340] usb 4-1: config 0 has an invalid interface number: 148 but max is 0 [ 94.144352][ T4340] usb 4-1: config 0 has no interface number 0 [ 94.169040][ T4340] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 94.186629][ T4340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.228900][ T4340] usb 4-1: config 0 descriptor?? [ 94.244398][ T4340] cp210x 4-1:0.148: cp210x converter detected [ 94.818312][ T4340] cp210x 4-1:0.148: failed to get vendor val 0x000e size 3: -121 [ 95.275125][ T4340] cp210x 4-1:0.148: failed to get vendor val 0x370c size 15: -71 [ 95.292316][ T4340] cp210x 4-1:0.148: GPIO initialisation failed: -71 [ 95.338634][ T4340] usb 4-1: cp210x converter now attached to ttyUSB0 [ 95.381514][ T4340] usb 4-1: USB disconnect, device number 3 [ 95.427833][ T4340] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 95.427905][ T4327] usb 2-1: USB disconnect, device number 2 [ 95.628252][ T4340] cp210x 4-1:0.148: device disconnected [ 95.826782][ T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.153556][ T14] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 96.235490][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.341528][ T14] usb 5-1: Product: syz [ 96.345787][ T14] usb 5-1: Manufacturer: syz [ 96.360383][ T4504] netlink: 16 bytes leftover after parsing attributes in process `syz.0.44'. [ 96.404435][ T14] usb 5-1: SerialNumber: syz [ 98.587696][ T14] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 98.841438][ T14] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 98.882271][ T14] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 98.992707][ T14] lan78xx: probe of 5-1:1.0 failed with error -71 [ 99.061857][ T14] usb 5-1: USB disconnect, device number 2 [ 100.308856][ T4551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.58'. [ 102.165677][ T4578] netlink: 16 bytes leftover after parsing attributes in process `syz.4.70'. [ 103.533573][ T4596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.77'. [ 103.912755][ T4606] netlink: 16 bytes leftover after parsing attributes in process `syz.2.83'. [ 104.510821][ T4618] netlink: 64 bytes leftover after parsing attributes in process `syz.2.87'. [ 108.630405][ T4680] overlayfs: missing 'workdir' [ 108.834627][ T4684] netlink: 64 bytes leftover after parsing attributes in process `syz.3.111'. [ 109.855767][ T4691] netlink: 'syz.0.112': attribute type 12 has an invalid length. [ 109.872125][ T4691] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 111.654866][ T4340] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.346847][ T4340] usb 3-1: device descriptor read/64, error -71 [ 112.636968][ T4340] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 112.820201][ T4340] usb 3-1: device descriptor read/64, error -71 [ 112.859850][ T4723] overlayfs: missing 'workdir' [ 112.947106][ T4340] usb usb3-port1: attempt power cycle [ 113.126663][ T4317] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.317012][ T4317] usb 2-1: Using ep0 maxpacket: 32 [ 113.324547][ T4317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 113.357220][ T4317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24819, setting to 1024 [ 113.396777][ T4317] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 113.416656][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.433986][ T4317] usb 2-1: config 0 descriptor?? [ 113.496856][ T4317] hub 2-1:0.0: USB hub found [ 113.681233][ T4317] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 113.901535][ T4317] usbhid 2-1:0.0: can't add hid device: -71 [ 114.008964][ T4317] usbhid: probe of 2-1:0.0 failed with error -71 [ 114.117610][ T4317] usb 2-1: USB disconnect, device number 3 [ 114.188597][ T4340] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 114.227443][ T4340] usb 3-1: device descriptor read/8, error -71 [ 114.862026][ T4750] ======================================================= [ 114.862026][ T4750] WARNING: The mand mount option has been deprecated and [ 114.862026][ T4750] and is ignored by this kernel. Remove the mand [ 114.862026][ T4750] option from the mount to silence this warning. [ 114.862026][ T4750] ======================================================= [ 115.504300][ T4755] netlink: 64 bytes leftover after parsing attributes in process `syz.2.131'. [ 116.716870][ T4766] overlayfs: missing 'lowerdir' [ 118.042564][ T4782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.142'. [ 120.571020][ T4829] netlink: 64 bytes leftover after parsing attributes in process `syz.1.155'. [ 123.036733][ T4319] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 123.246798][ T4319] usb 3-1: Using ep0 maxpacket: 32 [ 123.258353][ T4319] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 123.432451][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.738722][ T4319] usb 3-1: config 0 descriptor?? [ 123.848620][ T4319] gspca_main: sq930x-2.14.0 probing 041e:403c [ 124.221874][ T4891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.172'. [ 124.951246][ T4289] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 124.962040][ T4289] CPU: 1 PID: 4289 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 124.969639][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.979726][ T4289] Workqueue: hci1 hci_rx_work [ 124.984447][ T4289] Call Trace: [ 124.987762][ T4289] [ 124.990738][ T4289] dump_stack_lvl+0x188/0x24e [ 124.995475][ T4289] ? show_regs_print_info+0x12/0x12 [ 125.000726][ T4289] ? load_image+0x410/0x410 [ 125.005284][ T4289] sysfs_create_dir_ns+0x26a/0x290 [ 125.010533][ T4289] ? __lock_acquire+0x7c40/0x7c40 [ 125.015597][ T4289] ? sysfs_warn_dup+0xa0/0xa0 [ 125.020329][ T4289] ? mark_lock+0x94/0x320 [ 125.024708][ T4289] ? do_raw_spin_unlock+0x11d/0x230 [ 125.029938][ T4289] kobject_add_internal+0x617/0xca0 [ 125.035174][ T4289] kobject_add+0x160/0x230 [ 125.039625][ T4289] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 125.045302][ T4289] ? kobject_init+0x1c0/0x1c0 [ 125.050023][ T4289] ? get_device_parent+0x3ce/0x3e0 [ 125.055168][ T4289] device_add+0x470/0x1050 [ 125.059592][ T4289] hci_conn_add_sysfs+0xd1/0x1e0 [ 125.064533][ T4289] le_conn_complete_evt+0xfac/0x15c0 [ 125.069823][ T4289] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 125.076090][ T4289] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 125.081730][ T4289] ? mutex_unlock+0x10/0x10 [ 125.086229][ T4289] ? skb_pull_data+0xec/0x1f0 [ 125.090903][ T4289] hci_le_conn_complete_evt+0x183/0x440 [ 125.096454][ T4289] ? hci_remote_host_features_evt+0x230/0x230 [ 125.102619][ T4289] hci_event_packet+0x7b3/0x1290 [ 125.107740][ T4289] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 125.113372][ T4289] ? bis_list+0x280/0x280 [ 125.117707][ T4289] ? kcov_remote_start+0x1b1/0x7e0 [ 125.122851][ T4289] ? hci_send_to_monitor+0x9c/0x4a0 [ 125.128065][ T4289] hci_rx_work+0x3eb/0xd40 [ 125.132488][ T4289] ? _raw_spin_unlock+0x40/0x40 [ 125.137359][ T4289] ? process_one_work+0x7b4/0x1160 [ 125.142592][ T4289] process_one_work+0x8ab/0x1160 [ 125.147552][ T4289] ? worker_detach_from_pool+0x240/0x240 [ 125.153193][ T4289] ? _raw_spin_lock_irq+0xb7/0xf0 [ 125.158238][ T4289] ? _raw_spin_lock_irqsave+0x100/0x100 [ 125.163785][ T4289] ? wq_worker_running+0x97/0x190 [ 125.168830][ T4289] worker_thread+0xaf5/0x12a0 [ 125.173543][ T4289] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 125.179456][ T4289] kthread+0x29d/0x330 [ 125.183542][ T4289] ? worker_clr_flags+0x1a0/0x1a0 [ 125.188564][ T4289] ? kthread_blkcg+0xd0/0xd0 [ 125.193150][ T4289] ret_from_fork+0x1f/0x30 [ 125.197575][ T4289] [ 125.295334][ T4289] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 125.309167][ T4289] Bluetooth: hci1: failed to register connection device [ 125.321843][ T4894] netlink: 64 bytes leftover after parsing attributes in process `syz.0.174'. [ 125.346646][ T4319] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 125.417454][ T4319] sq930x: probe of 3-1:0.0 failed with error -71 [ 125.454688][ T4319] usb 3-1: USB disconnect, device number 8 [ 125.492230][ T4910] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.177'. [ 125.588580][ T126] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 125.789240][ T126] usb 5-1: config 0 has an invalid interface number: 148 but max is 0 [ 125.823052][ T126] usb 5-1: config 0 has no interface number 0 [ 126.547109][ T126] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 126.566745][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.593946][ T126] usb 5-1: config 0 descriptor?? [ 126.608744][ T126] cp210x 5-1:0.148: cp210x converter detected [ 127.715061][ T4289] Bluetooth: hci1: command 0x2016 tx timeout [ 127.726341][ T126] cp210x 5-1:0.148: failed to get vendor val 0x000e size 3: -32 [ 128.003967][ T126] cp210x 5-1:0.148: GPIO initialisation failed: -19 [ 128.090454][ T126] usb 5-1: cp210x converter now attached to ttyUSB0 [ 128.238904][ T126] usb 5-1: USB disconnect, device number 3 [ 128.575875][ T126] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 128.811539][ T126] cp210x 5-1:0.148: device disconnected [ 129.018553][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 129.229282][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.246656][ T4952] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.190'. [ 129.262881][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 129.327218][ T7] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 129.379290][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.810129][ T7] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 130.048708][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.190725][ T4959] kAFS: Can only specify source 'none' with -o dyn [ 130.340253][ T4957] input: syz1 as /devices/virtual/input/input5 [ 132.695907][ T7] usb 4-1: USB disconnect, device number 4 [ 132.841238][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.847654][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.928632][ T4969] netlink: 64 bytes leftover after parsing attributes in process `syz.3.197'. [ 134.213507][ T4986] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.203'. [ 134.228907][ T4987] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 136.577732][ T5008] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 136.606394][ T5008] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 138.107357][ T5038] netlink: 64 bytes leftover after parsing attributes in process `syz.1.220'. [ 138.379058][ T5052] netlink: 132 bytes leftover after parsing attributes in process `syz.3.222'. [ 139.085692][ T5054] overlayfs: failed to resolve './file1': -2 [ 139.151503][ T5059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 139.256967][ T4828] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 139.466108][ T4828] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 139.481770][ T4828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.496730][ T4828] usb 5-1: Product: syz [ 139.506990][ T4828] usb 5-1: Manufacturer: syz [ 139.516081][ T4828] usb 5-1: SerialNumber: syz [ 139.537518][ T4828] usb 5-1: config 0 descriptor?? [ 139.765658][ T4828] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 139.835975][ T5073] netlink: 'syz.2.232': attribute type 72 has an invalid length. [ 140.298166][ T5081] binder: BINDER_SET_CONTEXT_MGR already set [ 140.315545][ T5081] binder: 5078:5081 ioctl 4018620d 200000001000 returned -16 [ 140.440503][ T5083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 140.473293][ T4828] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 140.503238][ T4828] usb 5-1: USB disconnect, device number 4 [ 140.520121][ T5087] netlink: 'syz.0.238': attribute type 1 has an invalid length. [ 140.528145][ T4327] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 140.605235][ T5087] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.645082][ T5087] device bridge1 entered promiscuous mode [ 140.657629][ T5087] bond1: (slave bridge1): making interface the new active one [ 140.671455][ T5087] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 140.682802][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 140.719883][ T5089] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 140.750398][ T4327] usb 3-1: device descriptor read/64, error -71 [ 141.046760][ T4327] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 141.276842][ T4327] usb 3-1: device descriptor read/64, error -71 [ 141.421017][ T4327] usb usb3-port1: attempt power cycle [ 141.746682][ T4316] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 141.866724][ T4327] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 141.937397][ T4327] usb 3-1: device descriptor read/8, error -71 [ 141.950101][ T4316] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 141.979876][ T4316] usb 4-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 141.988600][ T4316] usb 4-1: Product: syz [ 141.993057][ T4316] usb 4-1: Manufacturer: syz [ 142.001492][ T4316] usb 4-1: config 0 descriptor?? [ 142.009677][ T4316] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 142.025252][ T4316] ftdi_sio ttyUSB0: unknown device type: 0xa446 [ 142.055096][ T5110] netlink: 64 bytes leftover after parsing attributes in process `syz.4.245'. [ 142.215188][ T4385] usb 4-1: USB disconnect, device number 5 [ 142.225813][ T4385] ftdi_sio 4-1:0.0: device disconnected [ 142.247397][ T4327] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 142.287645][ T4327] usb 3-1: device descriptor read/8, error -71 [ 142.407004][ T4327] usb usb3-port1: unable to enumerate USB device [ 142.466827][ T4316] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 142.553626][ T5122] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 143.507207][ T4316] usb 2-1: Using ep0 maxpacket: 8 [ 143.515348][ T4316] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.541524][ T4316] usb 2-1: config 0 has no interfaces? [ 143.577610][ T4316] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 143.594516][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.603745][ T4316] usb 2-1: Product: syz [ 143.615844][ T4316] usb 2-1: Manufacturer: syz [ 143.621547][ T4316] usb 2-1: SerialNumber: syz [ 143.628365][ T4316] usb 2-1: config 0 descriptor?? [ 143.926695][ T4983] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 144.014228][ T5137] netlink: 20 bytes leftover after parsing attributes in process `syz.3.256'. [ 144.128538][ T4983] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.156286][ T4983] usb 1-1: config 0 has no interfaces? [ 144.168665][ T4983] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 144.195321][ T4983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.214420][ T4983] usb 1-1: Product: syz [ 144.225497][ T4983] usb 1-1: Manufacturer: syz [ 144.235622][ T4983] usb 1-1: SerialNumber: syz [ 144.268034][ T4983] usb 1-1: config 0 descriptor?? [ 144.427966][ T5145] binder: BINDER_SET_CONTEXT_MGR already set [ 144.434726][ T5145] binder: 5144:5145 ioctl 4018620d 200000001000 returned -16 [ 145.219826][ T4385] usb 1-1: USB disconnect, device number 3 [ 145.306863][ T5028] usb 2-1: USB disconnect, device number 4 [ 145.341261][ T5151] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.261'. [ 146.466514][ T5166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.267'. [ 146.599276][ T5167] netlink: 64 bytes leftover after parsing attributes in process `syz.1.265'. [ 146.744062][ T5177] binder: BINDER_SET_CONTEXT_MGR already set [ 146.768838][ T5177] binder: 5176:5177 ioctl 4018620d 200000001000 returned -16 [ 147.091479][ T5188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 147.101033][ T5188] (unnamed net_device) (uninitialized): up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 147.220611][ T22] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 147.306774][ T4983] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 147.406694][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 147.430949][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.491527][ T22] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 147.502261][ T4983] usb 1-1: Using ep0 maxpacket: 32 [ 147.547381][ T4983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 148.947645][ T22] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 148.966889][ T4983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24819, setting to 1024 [ 149.057760][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.102712][ T4983] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 149.177169][ T22] usb 4-1: Product: syz [ 149.230759][ T22] usb 4-1: Manufacturer: syz [ 149.253955][ T4983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.301109][ T22] usb 4-1: SerialNumber: syz [ 149.428784][ T4983] usb 1-1: config 0 descriptor?? [ 149.434412][ T22] usb 4-1: config 0 descriptor?? [ 149.526084][ T4983] hub 1-1:0.0: USB hub found [ 149.590892][ T5199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.280'. [ 149.886349][ T4983] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 149.891432][ T5209] binder: BINDER_SET_CONTEXT_MGR already set [ 149.904770][ T5209] binder: 5207:5209 ioctl 4018620d 200000001000 returned -16 [ 149.906354][ T4983] usbhid 1-1:0.0: can't add hid device: -71 [ 149.920079][ T4983] usbhid: probe of 1-1:0.0 failed with error -71 [ 149.967744][ T4983] usb 1-1: USB disconnect, device number 4 [ 150.049133][ T5028] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 150.182711][ T5216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.288'. [ 150.192595][ T5216] netlink: 52 bytes leftover after parsing attributes in process `syz.4.288'. [ 150.238145][ T5028] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 150.254401][ T5028] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.273905][ T5028] usb 3-1: config 0 descriptor?? [ 150.290653][ T5028] cp210x 3-1:0.0: cp210x converter detected [ 150.372365][ T5220] netlink: 64 bytes leftover after parsing attributes in process `syz.4.290'. [ 150.691263][ T5028] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 150.718279][ T4327] usb 4-1: USB disconnect, device number 6 [ 150.956303][ T5028] usb 3-1: cp210x converter now attached to ttyUSB0 [ 151.143570][ T5028] usb 3-1: USB disconnect, device number 13 [ 151.271940][ T5028] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 151.876865][ T5232] netlink: 20 bytes leftover after parsing attributes in process `syz.1.293'. [ 151.918618][ T5028] cp210x 3-1:0.0: device disconnected [ 152.023145][ T5234] binder: BINDER_SET_CONTEXT_MGR already set [ 152.044187][ T5234] binder: 5233:5234 ioctl 4018620d 200000001000 returned -16 [ 153.423559][ T4983] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 153.678783][ T4983] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 153.718895][ T4983] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.733726][ T5261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.303'. [ 153.757957][ T4983] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 153.792134][ T4983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.813585][ T4983] usb 2-1: Product: syz [ 153.824157][ T4983] usb 2-1: Manufacturer: syz [ 153.829359][ T4983] usb 2-1: SerialNumber: syz [ 153.858317][ T5246] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 153.898061][ T4983] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 153.925140][ T4983] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 153.944224][ T4983] usbserial_generic 2-1:1.0: generic converter detected [ 153.967045][ T4983] usb 2-1: generic converter now attached to ttyUSB0 [ 154.003859][ T5271] netlink: 64 bytes leftover after parsing attributes in process `syz.3.306'. [ 154.074732][ T3597] usb 2-1: USB disconnect, device number 5 [ 154.097033][ T3597] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 154.120171][ T3597] usbserial_generic 2-1:1.0: device disconnected [ 157.007762][ T5314] Bluetooth: MGMT ver 1.22 [ 157.013263][ T5314] Bluetooth: hci0: unsupported parameter 255 [ 157.019786][ T5314] Bluetooth: hci0: unsupported parameter 255 [ 157.216453][ T5316] netlink: 64 bytes leftover after parsing attributes in process `syz.1.321'. [ 159.524610][ T22] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 160.516793][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 160.528500][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 160.978389][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24819, setting to 1024 [ 161.030801][ T22] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 161.073637][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.120124][ T22] usb 1-1: config 0 descriptor?? [ 161.159940][ T22] hub 1-1:0.0: USB hub found [ 161.551602][ T22] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 161.706435][ T22] usbhid 1-1:0.0: can't add hid device: -71 [ 161.848091][ T22] usbhid: probe of 1-1:0.0 failed with error -71 [ 162.128228][ T22] usb 1-1: USB disconnect, device number 5 [ 162.511894][ T5388] netlink: 'syz.2.344': attribute type 5 has an invalid length. [ 162.590232][ T5388] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.344'. [ 162.637594][ T5382] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 163.386737][ T3597] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 164.136706][ T3597] usb 1-1: Using ep0 maxpacket: 32 [ 164.143867][ T3597] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 164.173655][ T3597] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24819, setting to 1024 [ 164.240244][ T3597] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 164.270267][ T3597] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.298842][ T3597] usb 1-1: config 0 descriptor?? [ 164.318821][ T3597] hub 1-1:0.0: USB hub found [ 164.728002][ T3597] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 164.850047][ T3597] usbhid 1-1:0.0: can't add hid device: -71 [ 164.933166][ T3597] usbhid: probe of 1-1:0.0 failed with error -71 [ 164.946694][ T4261] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 165.120673][ T3597] usb 1-1: USB disconnect, device number 6 [ 165.627592][ T5455] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 165.634402][ T5455] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 165.646451][ T5455] vhci_hcd vhci_hcd.0: Device attached [ 165.664150][ T5454] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 165.670733][ T5454] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 165.698783][ T5459] virtio-fs: tag <> not found [ 165.717195][ T5454] vhci_hcd vhci_hcd.0: Device attached [ 165.726419][ T5456] vhci_hcd: connection closed [ 165.728941][ T4261] usb 4-1: Using ep0 maxpacket: 32 [ 165.741524][ T4396] vhci_hcd: stop threads [ 165.742246][ T5460] vhci_hcd: connection closed [ 165.746377][ T4396] vhci_hcd: release socket [ 165.761875][ T4261] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 165.786236][ T4396] vhci_hcd: disconnect device [ 165.793663][ T4261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.806765][ T4396] vhci_hcd: stop threads [ 165.811078][ T4396] vhci_hcd: release socket [ 165.821616][ T4261] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 165.838685][ T5028] vhci_hcd: vhci_device speed not set [ 165.844612][ T4396] vhci_hcd: disconnect device [ 167.015867][ T26] audit: type=1800 audit(1786080723.396:2): pid=5441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.372" name="idProduct" dev="configfs" ino=39010 res=0 errno=0 [ 167.283703][ T4261] gspca_nw80x: reg_w err -71 [ 167.299756][ T4261] nw80x: probe of 4-1:3.0 failed with error -71 [ 167.332421][ T4261] usb 4-1: USB disconnect, device number 7 [ 168.362625][ T5497] netlink: 64 bytes leftover after parsing attributes in process `syz.2.388'. [ 174.280621][ T5560] netlink: 64 bytes leftover after parsing attributes in process `syz.3.410'. [ 174.330825][ T4315] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 175.166866][ T4315] usb 5-1: Using ep0 maxpacket: 32 [ 175.195983][ T4315] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 175.239934][ T4315] usb 5-1: config 0 has no interface number 0 [ 175.249903][ T4315] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 175.275821][ T4315] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 175.312715][ T4315] usb 5-1: config 0 interface 85 has no altsetting 0 [ 175.343088][ T4315] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 175.363653][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.422070][ T4315] usb 5-1: Product: syz [ 175.442982][ T4315] usb 5-1: Manufacturer: syz [ 175.458321][ T4315] usb 5-1: SerialNumber: syz [ 175.482800][ T4315] usb 5-1: config 0 descriptor?? [ 177.416532][ C0] sched: RT throttling activated [ 177.528962][ T4315] appletouch 5-1:0.85: Geyser mode initialized. [ 177.539242][ T4315] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input6 [ 178.124201][ T4315] usb 5-1: USB disconnect, device number 5 [ 178.186164][ T4315] appletouch 5-1:0.85: input: appletouch disconnected [ 180.671642][ T26] audit: type=1326 audit(1786080737.056:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5621 comm="syz.2.429" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0079e0d9 code=0x7ffc0000 [ 180.727104][ T26] audit: type=1326 audit(1786080737.096:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5621 comm="syz.2.429" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0079e0d9 code=0x7ffc0000 [ 180.823305][ T26] audit: type=1326 audit(1786080737.096:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5621 comm="syz.2.429" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0079e0d9 code=0x7ffc0000 [ 180.861664][ T26] audit: type=1326 audit(1786080737.096:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5621 comm="syz.2.429" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0079e0d9 code=0x7ffc0000 [ 181.537804][ T26] audit: type=1326 audit(1786080737.096:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5621 comm="syz.2.429" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f1e0079e0d9 code=0x7ffc0000 [ 181.781632][ T26] audit: type=1326 audit(1786080737.096:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5621 comm="syz.2.429" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0079e0d9 code=0x7ffc0000 [ 181.846658][ T26] audit: type=1326 audit(1786080737.096:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5621 comm="syz.2.429" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0079e0d9 code=0x7ffc0000 [ 181.907211][ T4261] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 181.915696][ T26] audit: type=1326 audit(1786080737.096:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5621 comm="syz.2.429" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0079e0d9 code=0x7ffc0000 [ 181.976824][ T26] audit: type=1326 audit(1786080737.096:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5621 comm="syz.2.429" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0079e0d9 code=0x7ffc0000 [ 182.058835][ T26] audit: type=1326 audit(1786080737.096:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5621 comm="syz.2.429" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1e0079e0d9 code=0x7ffc0000 [ 182.116785][ T4261] usb 3-1: Using ep0 maxpacket: 8 [ 182.127925][ T4261] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 182.169853][ T4261] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 182.192235][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.210828][ T4261] usb 3-1: Product: syz [ 182.217331][ T4261] usb 3-1: Manufacturer: syz [ 182.233413][ T4261] usb 3-1: SerialNumber: syz [ 183.337678][ T4261] usb 3-1: config 0 descriptor?? [ 183.637231][ T5653] netlink: 'syz.1.440': attribute type 12 has an invalid length. [ 183.645095][ T5653] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 184.354208][ T3597] usb 3-1: USB disconnect, device number 14 [ 193.116725][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 193.116743][ T26] audit: type=1800 audit(1786080749.416:17): pid=5710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.449" name="/" dev="fuse" ino=4 res=0 errno=0 [ 195.133941][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.140354][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.655111][ T5197] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 197.546663][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 197.552915][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 197.559054][ T4289] Bluetooth: hci4: command 0x0406 tx timeout [ 197.565084][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 197.586595][ T4289] Bluetooth: hci3: command 0x0406 tx timeout [ 198.313388][ T5197] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.336082][ T5197] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 198.365827][ T5197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.386106][ T5197] usb 4-1: Product: syz [ 198.394292][ T5197] usb 4-1: Manufacturer: syz [ 198.409250][ T5197] usb 4-1: SerialNumber: syz [ 198.541095][ T5197] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 198.606665][ T22] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 198.759095][ T5197] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 198.834665][ T5197] usbserial_generic 4-1:1.0: device has no bulk endpoints [ 198.897016][ T5197] usb 4-1: USB disconnect, device number 8 [ 198.939534][ T22] usb 2-1: unable to get BOS descriptor or descriptor too short [ 198.964381][ T22] usb 2-1: config 11 has an invalid interface number: 45 but max is 0 [ 198.966483][ T5778] jffs2: notice: (5778) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 198.990079][ T22] usb 2-1: config 11 has no interface number 0 [ 198.996904][ T22] usb 2-1: config 11 interface 45 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 199.009141][ T22] usb 2-1: config 11 interface 45 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 199.020707][ T22] usb 2-1: config 11 interface 45 has no altsetting 0 [ 199.036774][ T22] usb 2-1: New USB device found, idVendor=13b1, idProduct=0045, bcdDevice=59.9f [ 199.048410][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.057143][ T22] usb 2-1: Product: syz [ 199.061413][ T22] usb 2-1: Manufacturer: syz [ 199.066123][ T22] usb 2-1: SerialNumber: syz [ 199.303207][ T22] usb 2-1: USB disconnect, device number 6 [ 200.909189][ T5790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.481'. [ 200.982794][ T5790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.481'. [ 201.029626][ T5790] netlink: 'syz.3.481': attribute type 19 has an invalid length. [ 201.059866][ T5790] netlink: 'syz.3.481': attribute type 20 has an invalid length. [ 201.846678][ T5028] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 202.208347][ T5028] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.223141][ T5028] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 202.240779][ T5028] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 202.259604][ T5028] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.273274][ T5028] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 202.282788][ T5028] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.495274][ T4327] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 202.701269][ T4327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.719346][ T4327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.734076][ T5028] gud: probe of 2-1:1.0 failed with error -71 [ 202.763943][ T5028] usb 2-1: USB disconnect, device number 7 [ 202.810672][ T4327] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.877433][ T4327] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.889853][ T4327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.917818][ T4327] usb 3-1: config 0 descriptor?? [ 203.056646][ T4261] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 203.244212][ T4261] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.261269][ T4261] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 203.299258][ T4261] usb 1-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 203.323930][ T4261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.340108][ T4327] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 203.397890][ T4327] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 203.421972][ T4261] mos7720 1-1:1.0: required endpoints missing [ 203.470735][ T4327] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 203.612243][ T4327] usb 1-1: USB disconnect, device number 7 [ 203.669543][ T4261] usb 3-1: USB disconnect, device number 15 [ 203.934647][ T5830] fido_id[5830]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 204.656839][ T32] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 205.288440][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.319962][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.371389][ T32] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 205.426860][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.475107][ T32] usb 3-1: config 0 descriptor?? [ 206.113998][ T32] usb 3-1: language id specifier not provided by device, defaulting to English [ 206.545654][ T32] uclogic 0003:256C:006D.0002: interface is invalid, ignoring [ 207.980832][ T32] usb 3-1: USB disconnect, device number 16 [ 208.336630][ T5197] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 208.616686][ T5197] usb 5-1: Using ep0 maxpacket: 8 [ 208.646343][ T5197] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.717147][ T5197] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 208.752679][ T5197] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 208.792986][ T5197] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 209.757040][ T5197] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 209.797013][ T5197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.901856][ T5197] hub 5-1:1.0: bad descriptor, ignoring hub [ 209.941776][ T5197] hub: probe of 5-1:1.0 failed with error -5 [ 209.972363][ T5197] cdc_wdm 5-1:1.0: skipping garbage [ 209.991307][ T5197] cdc_wdm 5-1:1.0: skipping garbage [ 210.018686][ T5197] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 210.026693][ T5197] cdc_wdm 5-1:1.0: Unknown control protocol [ 211.294936][ T4261] usb 5-1: USB disconnect, device number 6 [ 211.296557][ T5900] cdc_wdm 5-1:1.0: Error autopm - -16 [ 211.966663][ T4261] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 212.168540][ T4261] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.189348][ T4261] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 212.209686][ T4261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.263705][ T4261] usb 3-1: config 0 descriptor?? [ 212.502479][ T4261] usbhid 3-1:0.0: can't add hid device: -71 [ 212.562699][ T4261] usbhid: probe of 3-1:0.0 failed with error -71 [ 212.815976][ T4261] usb 3-1: USB disconnect, device number 17 [ 213.406859][ T5028] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 213.414574][ T4261] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 213.643556][ T4261] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.660099][ T4261] usb 3-1: New USB device found, idVendor=0458, idProduct=3303, bcdDevice= 0.40 [ 213.688444][ T5028] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.699170][ T5028] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 213.709626][ T4261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.727447][ T4261] usb 3-1: config 0 descriptor?? [ 213.746751][ T5028] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 213.792130][ T5028] usb 5-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 213.818010][ T5028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.856952][ T5028] mos7720 5-1:1.0: required endpoints missing [ 214.065860][ T5028] usb 5-1: USB disconnect, device number 7 [ 214.472946][ T4261] usbhid 3-1:0.0: can't add hid device: -71 [ 214.482182][ T4261] usbhid: probe of 3-1:0.0 failed with error -71 [ 214.518791][ T4261] usb 3-1: USB disconnect, device number 18 [ 214.549984][ T5972] netlink: 64 bytes leftover after parsing attributes in process `syz.0.547'. [ 214.780726][ T5978] netlink: 16 bytes leftover after parsing attributes in process `syz.4.549'. [ 216.889020][ T3597] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 217.106617][ T3597] usb 4-1: Using ep0 maxpacket: 8 [ 217.116492][ T3597] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 217.164754][ T3597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.181256][ T3597] usb 4-1: Product: syz [ 217.196192][ T3597] usb 4-1: Manufacturer: syz [ 217.202393][ T3597] usb 4-1: SerialNumber: syz [ 217.428931][ T3597] usb 4-1: config 0 descriptor?? [ 217.639962][ T3597] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 217.857700][ T3597] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 218.040593][ T5197] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 218.050821][ T3597] usb 4-1: USB disconnect, device number 9 [ 218.969464][ T5197] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.987568][ T26] audit: type=1326 audit(1786080775.376:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6022 comm="syz.0.566" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f450139e0d9 code=0x0 [ 219.011392][ T5197] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 219.021815][ T5197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.032327][ T5197] usb 2-1: config 0 descriptor?? [ 219.206748][ T4261] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 219.252253][ T5197] usbhid 2-1:0.0: can't add hid device: -71 [ 219.258885][ T5197] usbhid: probe of 2-1:0.0 failed with error -71 [ 219.266990][ T5197] usb 2-1: USB disconnect, device number 8 [ 219.366618][ T3597] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 219.366706][ T4327] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 219.424537][ T4261] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.437526][ T4261] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 219.449434][ T4261] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 219.464900][ T4261] usb 5-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 219.475931][ T4261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.491065][ T4261] mos7720 5-1:1.0: required endpoints missing [ 219.558281][ T3597] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 219.567533][ T3597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.578449][ T3597] usb 4-1: config 0 descriptor?? [ 219.582543][ T4327] usb 1-1: string descriptor 0 read error: -22 [ 219.585199][ T3597] cp210x 4-1:0.0: cp210x converter detected [ 219.595319][ T4327] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 219.604986][ T4327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.622070][ T4327] usb 1-1: MIDIStreaming interface descriptor not found [ 219.697034][ T22] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 219.716934][ T4319] usb 5-1: USB disconnect, device number 8 [ 219.826726][ T5197] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 219.900305][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.911748][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.921667][ T22] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 219.930827][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.942534][ T22] usb 3-1: config 0 descriptor?? [ 219.987377][ T3597] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 220.008326][ T5197] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.019382][ T5197] usb 2-1: New USB device found, idVendor=0458, idProduct=3303, bcdDevice= 0.40 [ 220.028591][ T5197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.040771][ T5197] usb 2-1: config 0 descriptor?? [ 220.200948][ T3597] usb 4-1: cp210x converter now attached to ttyUSB0 [ 220.389401][ T6038] netlink: 64 bytes leftover after parsing attributes in process `syz.4.571'. [ 220.403554][ T4261] usb 4-1: USB disconnect, device number 10 [ 220.419074][ T4261] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 220.430656][ T4261] cp210x 4-1:0.0: device disconnected [ 220.566425][ T22] usb 3-1: language id specifier not provided by device, defaulting to English [ 220.655076][ T5197] usbhid 2-1:0.0: can't add hid device: -71 [ 220.661284][ T5197] usbhid: probe of 2-1:0.0 failed with error -71 [ 220.669688][ T5197] usb 2-1: USB disconnect, device number 9 [ 220.773718][ T22] uclogic 0003:256C:006D.0003: failed retrieving Huion firmware version: -71 [ 220.782749][ T22] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 220.790695][ T22] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 220.800451][ T22] usb 3-1: USB disconnect, device number 19 [ 221.464606][ T6058] netlink: 16 bytes leftover after parsing attributes in process `syz.2.577'. [ 222.489850][ T4327] usb 1-1: USB disconnect, device number 8 [ 222.525751][ T6068] netlink: 64 bytes leftover after parsing attributes in process `syz.4.582'. [ 222.896746][ T22] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 223.056755][ T5028] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 223.082037][ T22] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.093729][ T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 223.105400][ T22] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 223.119893][ T22] usb 2-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 223.132971][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.141426][ T5197] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 223.764873][ T6086] sctp: failed to load transform for md5: -2 [ 223.880491][ T22] mos7720 2-1:1.0: required endpoints missing [ 223.938611][ T5028] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 223.966778][ T5028] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.007980][ T5028] usb 4-1: config 0 descriptor?? [ 224.033674][ T5028] cp210x 4-1:0.0: cp210x converter detected [ 224.046782][ T5197] usb 3-1: Using ep0 maxpacket: 16 [ 224.071994][ T22] usb 2-1: USB disconnect, device number 10 [ 224.082566][ T5197] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.124192][ T5197] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 224.141851][ T5197] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 224.152468][ T5197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.186781][ T5197] usb 3-1: Product: syz [ 224.205830][ T5197] usb 3-1: Manufacturer: syz [ 224.210919][ T5197] usb 3-1: SerialNumber: syz [ 224.424963][ T5028] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 224.935786][ T22] usb 3-1: USB disconnect, device number 20 [ 225.373796][ T5028] usb 4-1: cp210x converter now attached to ttyUSB0 [ 225.570071][ T5028] usb 4-1: USB disconnect, device number 11 [ 225.600026][ T5028] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 225.621439][ T5028] cp210x 4-1:0.0: device disconnected [ 227.689443][ T6132] binder: BINDER_SET_CONTEXT_MGR already set [ 227.695537][ T6132] binder: 6129:6132 ioctl 4018620d 200000001000 returned -16 [ 227.705736][ T6123] netlink: 64 bytes leftover after parsing attributes in process `syz.2.599'. [ 229.746638][ T5028] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 229.948658][ T5028] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 229.964599][ T5028] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.990333][ T5028] usb 2-1: config 0 descriptor?? [ 230.008638][ T5028] cp210x 2-1:0.0: cp210x converter detected [ 230.407311][ T5028] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 230.625240][ T5028] usb 2-1: cp210x converter now attached to ttyUSB0 [ 230.645139][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.618'. [ 230.725976][ T6172] device hsr_slave_0 left promiscuous mode [ 230.745091][ T6172] device hsr_slave_1 left promiscuous mode [ 230.828618][ T5028] usb 2-1: USB disconnect, device number 11 [ 230.911696][ T6178] netlink: 20 bytes leftover after parsing attributes in process `syz.2.620'. [ 231.204919][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.623'. [ 231.289539][ T5028] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 231.339619][ T5028] cp210x 2-1:0.0: device disconnected [ 233.336737][ T5197] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 233.368269][ T6222] netlink: 'syz.1.637': attribute type 4 has an invalid length. [ 233.528577][ T5197] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.566620][ T5197] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 233.616986][ T5197] usb 3-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 233.637938][ T5197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.677036][ T5197] mos7720 3-1:1.0: required endpoints missing [ 233.891246][ T5197] usb 3-1: USB disconnect, device number 21 [ 236.013022][ T5028] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 238.291784][ T5028] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 238.312852][ T5028] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 238.350930][ T5028] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 238.451176][ T5028] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.562955][ T5028] usb 1-1: Product: syz [ 238.607198][ T5028] usb 1-1: Manufacturer: syz [ 238.667139][ T5028] usb 1-1: SerialNumber: syz [ 239.205101][ T5028] usb 1-1: can't set config #1, error -71 [ 239.277909][ T5028] usb 1-1: USB disconnect, device number 9 [ 239.590682][ T6296] binder_alloc: 6294: binder_alloc_buf, no vma [ 240.466666][ T22] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 241.268458][ T22] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 241.286938][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.324117][ T22] usb 5-1: config 0 descriptor?? [ 241.352440][ T22] cp210x 5-1:0.0: cp210x converter detected [ 241.751152][ T22] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 242.056560][ T22] usb 5-1: cp210x converter now attached to ttyUSB0 [ 242.265906][ T22] usb 5-1: USB disconnect, device number 9 [ 242.345323][ T22] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 242.603016][ T22] cp210x 5-1:0.0: device disconnected [ 245.153627][ T6365] autofs4:pid:6365:autofs_fill_super: called with bogus options [ 245.164050][ T6366] binder: BINDER_SET_CONTEXT_MGR already set [ 245.179679][ T6366] binder: 6364:6366 ioctl 4018620d 200000001000 returned -16 [ 247.688355][ T6392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.692'. [ 248.598395][ T4993] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 249.053998][ T4993] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 249.073206][ T4993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.097577][ T4993] usb 5-1: config 0 descriptor?? [ 249.114281][ T4993] cp210x 5-1:0.0: cp210x converter detected [ 250.012158][ T4993] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 250.234225][ T4993] usb 5-1: cp210x converter now attached to ttyUSB0 [ 250.341566][ T6433] binder_alloc: 6432: binder_alloc_buf, no vma [ 250.440496][ T4993] usb 5-1: USB disconnect, device number 10 [ 250.486389][ T4993] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 250.511958][ T4993] cp210x 5-1:0.0: device disconnected [ 251.701459][ T6454] netlink: 308 bytes leftover after parsing attributes in process `syz.2.714'. [ 253.038507][ T4282] Bluetooth: hci2: Invalid handle: 0x20c9 > 0x0eff [ 253.456761][ T4993] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 253.672993][ T4993] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 253.690301][ T4993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.726147][ T4993] usb 2-1: config 0 descriptor?? [ 253.762156][ T4993] cp210x 2-1:0.0: cp210x converter detected [ 253.906960][ T4983] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 254.119035][ T4983] usb 1-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 254.145660][ T4983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.162191][ T4993] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 254.219137][ T4983] mos7720 1-1:1.0: Moschip 2 port adapter converter detected [ 254.383966][ T4993] usb 2-1: cp210x converter now attached to ttyUSB0 [ 254.428115][ T4983] usb 1-1: mos7720: usb_control_msg() failed: 0 [ 254.459778][ T4983] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 254.521147][ T4983] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB2 [ 254.615919][ T4993] usb 2-1: USB disconnect, device number 12 [ 254.664610][ T4983] usb 1-1: USB disconnect, device number 10 [ 254.670635][ C1] usb 1-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 254.707240][ T4993] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 254.773924][ T4993] cp210x 2-1:0.0: device disconnected [ 254.822593][ T4983] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 254.871940][ T4983] moschip7720 ttyUSB2: Moschip 2 port adapter converter now disconnected from ttyUSB2 [ 254.922391][ T4983] mos7720 1-1:1.0: device disconnected [ 255.376940][ T5028] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 255.605707][ T5028] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.630699][ T5028] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 255.671321][ T5028] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 255.719231][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.725618][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.743132][ T5028] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.771742][ T5028] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 255.794679][ T5028] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.344987][ T6561] binder: BINDER_SET_CONTEXT_MGR already set [ 257.352524][ T5028] gud 3-1:1.0: Failed to get properties (error=-71) [ 257.373267][ T5028] gud: probe of 3-1:1.0 failed with error -71 [ 257.386669][ T6561] binder: 6560:6561 ioctl 4018620d 200000001000 returned -16 [ 257.403801][ T5028] usb 3-1: USB disconnect, device number 22 [ 260.654138][ T6599] binder: BINDER_SET_CONTEXT_MGR already set [ 260.682667][ T6599] binder: 6598:6599 ioctl 4018620d 200000001000 returned -16 [ 261.356229][ T6610] netlink: 'syz.3.774': attribute type 2 has an invalid length. [ 262.712398][ T6630] binder: BINDER_SET_CONTEXT_MGR already set [ 262.759232][ T6630] binder: 6629:6630 ioctl 4018620d 200000001000 returned -16 [ 263.006765][ T4983] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 263.198433][ T4983] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 263.201090][ T6644] overlayfs: overlapping lowerdir path [ 263.219606][ T4983] usb 4-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 263.249085][ T4983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.301082][ T4983] mos7720 4-1:1.0: required endpoints missing [ 263.545115][ T4993] usb 4-1: USB disconnect, device number 12 [ 264.347912][ T6661] sctp: failed to load transform for md5: -2 [ 264.509580][ T6669] capability: warning: `syz.2.794' uses 32-bit capabilities (legacy support in use) [ 264.562150][ T6673] program syz.2.794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.888299][ T6682] overlayfs: overlapping lowerdir path [ 264.936198][ T6680] netlink: 64 bytes leftover after parsing attributes in process `syz.3.799'. [ 266.262675][ T6708] sctp: failed to load transform for md5: -2 [ 268.173616][ T6724] binder: BINDER_SET_CONTEXT_MGR already set [ 268.206731][ T6724] binder: 6723:6724 ioctl 4018620d 200000001000 returned -16 [ 268.318203][ T6731] overlayfs: overlapping lowerdir path [ 268.487264][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.816'. [ 271.520384][ T6754] netlink: 64 bytes leftover after parsing attributes in process `syz.3.823'. [ 271.696351][ T6763] binder_alloc: 6761: pid 6761 spamming oneway? 2 buffers allocated for a total size of 5120 [ 271.743780][ T6763] binder_alloc: 6761: pid 6761 spamming oneway? 3 buffers allocated for a total size of 5128 [ 272.219868][ T6770] overlayfs: overlapping lowerdir path [ 277.934213][ T4261] hid-generic 0000:0000:0006.0004: unknown main item tag 0x0 [ 277.952081][ T4261] hid-generic 0000:0000:0006.0004: unknown main item tag 0x0 [ 277.976613][ T4261] hid-generic 0000:0000:0006.0004: unknown main item tag 0x0 [ 277.990026][ T4261] hid-generic 0000:0000:0006.0004: unknown main item tag 0x0 [ 278.006827][ T4261] hid-generic 0000:0000:0006.0004: unknown main item tag 0x0 [ 278.043199][ T4261] hid-generic 0000:0000:0006.0004: hidraw0: HID v0.0d Device [syz0] on syz1 [ 278.993439][ T6834] fido_id[6834]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 279.504879][ T6845] autofs4:pid:6845:autofs_fill_super: called with bogus options [ 288.627390][ T6932] sctp: failed to load transform for md5: -2 [ 289.014149][ T6941] capability: warning: `syz.1.874' uses deprecated v2 capabilities in a way that may be insecure [ 289.956662][ T4385] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 291.507023][ T4385] usb 4-1: Using ep0 maxpacket: 16 [ 291.624929][ T4385] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.225302][ T4385] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 292.274674][ T4385] usb 4-1: string descriptor 0 read error: -71 [ 292.335395][ T4385] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 292.416730][ T4385] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.456602][ T4385] usb 4-1: can't set config #1, error -71 [ 292.483066][ T4385] usb 4-1: USB disconnect, device number 13 [ 294.660018][ T6982] block nbd2: NBD_DISCONNECT [ 294.790039][ T6980] sctp: failed to load transform for md5: -2 [ 295.227063][ T22] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 295.459696][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 295.489613][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.686050][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.866370][ T22] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 296.059042][ T22] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 296.151777][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.218526][ T22] usb 4-1: config 0 descriptor?? [ 296.556970][ T4993] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 296.760820][ T22] corsair-psu 0003:1B1C:1C03.0005: hidraw0: USB HID v0.00 Device [HID 1b1c:1c03] on usb-dummy_hcd.3-1/input0 [ 296.786810][ T4993] usb 1-1: Using ep0 maxpacket: 16 [ 296.811398][ T4993] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.824564][ T4993] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 296.837039][ T22] corsair-psu 0003:1B1C:1C03.0005: unable to initialize device (-38) [ 296.861047][ T4993] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 296.942726][ T22] corsair-psu: probe of 0003:1B1C:1C03.0005 failed with error -38 [ 296.963813][ T4993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.994559][ T22] usb 4-1: USB disconnect, device number 14 [ 297.000937][ T4993] usb 1-1: Product: syz [ 297.010042][ T4993] usb 1-1: Manufacturer: syz [ 297.014915][ T4993] usb 1-1: SerialNumber: syz [ 297.501935][ T7005] fido_id[7005]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 298.085049][ T4993] usb 1-1: USB disconnect, device number 11 [ 303.287032][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.908'. [ 303.356626][ T22] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 303.560976][ T22] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.585772][ T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 303.631759][ T22] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 303.682156][ T22] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 303.733097][ T22] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 303.767981][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.697377][ T4321] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 304.726878][ T22] gud 2-1:1.0: Failed to get properties (error=-71) [ 304.733592][ T22] gud: probe of 2-1:1.0 failed with error -71 [ 304.761320][ T22] usb 2-1: USB disconnect, device number 13 [ 304.906838][ T4321] usb 4-1: Using ep0 maxpacket: 16 [ 304.918008][ T4321] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.929094][ T4321] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 304.947699][ T4321] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 304.972546][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.997192][ T7097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.932'. [ 305.031759][ T4321] usb 4-1: Product: syz [ 305.036002][ T4321] usb 4-1: Manufacturer: syz [ 305.075815][ T4321] usb 4-1: SerialNumber: syz [ 306.514592][ T4385] usb 4-1: USB disconnect, device number 15 [ 308.134048][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.945'. [ 308.395891][ T22] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 308.661805][ T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 308.701282][ T22] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 308.716247][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.726597][ T4315] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 308.950592][ T22] qmi_wwan 1-1:1.0: cdc-wdm0: USB WDM device [ 309.089477][ T4315] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.111277][ T4315] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 309.446973][ T22] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, 2a:c7:f2:4d:12:2a [ 309.674606][ T22] usb 1-1: USB disconnect, device number 12 [ 309.814648][ T22] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device [ 309.887654][ T4315] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 309.896931][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.904973][ T4315] usb 3-1: Product: syz [ 309.910740][ T4315] usb 3-1: Manufacturer: syz [ 309.915388][ T4315] usb 3-1: SerialNumber: syz [ 310.183567][ T4385] usb 3-1: USB disconnect, device number 23 [ 310.268607][ T7166] PM: suspend entry (deep) [ 310.286618][ T4315] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 310.480725][ T4315] usb 4-1: Using ep0 maxpacket: 16 [ 310.493379][ T4315] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.518487][ T4315] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 310.552163][ T4315] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 310.569324][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.582965][ T4315] usb 4-1: Product: syz [ 310.588473][ T4315] usb 4-1: Manufacturer: syz [ 310.593197][ T4315] usb 4-1: SerialNumber: syz [ 310.599222][ T7166] Filesystems sync: 0.307 seconds [ 311.388426][ T22] usb 4-1: USB disconnect, device number 16 [ 311.749019][ T7166] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 311.805144][ T7166] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 311.891794][ T7166] Bluetooth: hci0: Suspend notifier action (3) failed: -4 [ 311.923095][ T7166] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 311.954904][ T7166] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 311.988285][ T7166] Bluetooth: hci1: Suspend notifier action (3) failed: -4 [ 312.022636][ T7166] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 312.054562][ T7166] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 312.086704][ T7166] Bluetooth: hci2: Suspend notifier action (3) failed: -4 [ 312.110608][ T7166] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 312.126786][ T7166] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 312.148557][ T7166] Bluetooth: hci3: Suspend notifier action (3) failed: -4 [ 312.151876][ T22] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 312.171993][ T7166] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 312.186736][ T7166] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 312.208281][ T7166] Bluetooth: hci4: Suspend notifier action (3) failed: -4 [ 312.245471][ T7166] Freezing user space processes [ 312.323810][ T7166] Freezing user space processes completed (elapsed 0.062 seconds) [ 312.331923][ T7166] OOM killer disabled. [ 312.335995][ T7166] Freezing remaining freezable tasks [ 312.357170][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 312.757325][ T4282] Bluetooth: hci0: command 0x0c1a tx timeout [ 313.956790][ T4282] Bluetooth: hci1: command 0x0c1a tx timeout [ 314.047222][ T4282] Bluetooth: hci2: command 0x0c1a tx timeout [ 314.126670][ T4282] Bluetooth: hci3: command 0x0c1a tx timeout [ 314.206639][ T4282] Bluetooth: hci4: command 0x0c1a tx timeout [ 314.837426][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 316.036650][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 316.116647][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 316.197197][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 316.276866][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 317.159587][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.165991][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.397529][ T22] usb 2-1: device descriptor read/all, error -110 [ 317.576672][ T22] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 317.726590][ T22] usb 2-1: device descriptor read/64, error -32 [ 317.848026][ T22] usb usb2-port1: attempt power cycle [ 318.266588][ T22] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 318.298397][ T22] usb 2-1: device descriptor read/8, error -32 [ 318.566562][ T22] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 318.596951][ T22] usb 2-1: device descriptor read/8, error -32 [ 318.727851][ T22] usb usb2-port1: unable to enumerate USB device [ 318.737284][ T7166] Freezing remaining freezable tasks completed (elapsed 6.395 seconds) [ 318.746146][ T7166] printk: Suspending console(s) (use no_console_suspend to debug) [ 318.870339][ T7166] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 318.909053][ T7166] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 318.947732][ T7166] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 318.987884][ T7166] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 319.027806][ T7166] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 319.067925][ T7166] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 319.118213][ T7166] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 319.158311][ T7166] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 319.197715][ T7166] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 319.238836][ T7166] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 319.277911][ T7166] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 319.327800][ T7166] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 319.367704][ T7166] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 319.418029][ T7166] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 319.459595][ T7166] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 319.508946][ T4383] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 319.740817][ T7166] ACPI: PM: Preparing to enter system sleep state S3 [ 319.741479][ T7166] ACPI: PM: Saving platform NVS memory [ 319.743005][ T7166] Disabling non-boot CPUs ... [ 319.767246][ T7166] smpboot: CPU 1 is now offline [ 319.805382][ T7166] ACPI: PM: Low-level resume complete [ 319.805440][ T7166] ACPI: PM: Restoring platform NVS memory [ 319.821560][ T7166] Enabling non-boot CPUs ... [ 319.822765][ T7166] x86: Booting SMP configuration: [ 319.822793][ T7166] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 319.847446][ T7166] CPU1 is up [ 319.848461][ T7166] ACPI: PM: Waking up from system sleep state S3 [ 320.192767][ T7166] OOM killer enabled. [ 320.193430][ T7166] Restarting tasks ... done. [ 320.235394][ T7166] random: crng reseeded on system resumption [ 320.237919][ T7166] PM: suspend exit [ 326.605762][ T7410] netlink: 16 bytes leftover after parsing attributes in process `syz.0.998'. [ 326.607376][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'. [ 329.031122][ T7426] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 332.392269][ T7463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1012'. [ 333.585695][ T4289] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 339.343270][ T7524] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 340.733120][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 340.741134][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 340.856180][ T7537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.299788][ T7564] program syz.1.1045 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.385227][ T7567] device vlan2 entered promiscuous mode [ 346.459595][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1054'. [ 350.491199][ T4289] Bluetooth: hci0: unexpected subevent 0x0e length: 30 > 15 [ 350.663599][ T7643] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1070'. [ 354.239652][ T4289] Bluetooth: hci1: unexpected subevent 0x0e length: 30 > 15 [ 358.788822][ T4289] Bluetooth: hci1: unexpected subevent 0x0e length: 30 > 15 [ 361.883965][ T7742] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4272] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7742] [ 362.324867][ T4289] Bluetooth: hci2: unexpected subevent 0x0e length: 30 > 15 [ 362.545176][ T4983] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 362.884901][ T4983] usb 4-1: Using ep0 maxpacket: 16 [ 362.892256][ T4983] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.350314][ T4983] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA1, skipping [ 363.574585][ T4983] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 363.587497][ T4983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.720317][ T4983] usb 4-1: Product: syz [ 363.724566][ T4983] usb 4-1: Manufacturer: syz [ 363.729591][ T4983] usb 4-1: SerialNumber: syz [ 363.741523][ T4983] usb 4-1: config 0 descriptor?? [ 363.750754][ T4983] appledisplay 4-1:0.0: Could not find int-in endpoint [ 363.760793][ T4983] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 363.981406][ T4983] usb 4-1: USB disconnect, device number 17 [ 373.531455][ T7879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1144'. [ 373.540989][ T7879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.476479][ T4993] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 374.496853][ T7879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.694856][ T4993] usb 4-1: Using ep0 maxpacket: 16 [ 374.702255][ T4993] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.763559][ T4993] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 374.788570][ T4993] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 374.820523][ T4993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.863343][ T4993] usb 4-1: Product: syz [ 374.884787][ T4993] usb 4-1: Manufacturer: syz [ 374.889418][ T4993] usb 4-1: SerialNumber: syz [ 375.965677][ T7909] 9pnet_fd: p9_fd_create_tcp (7909): problem binding to privport [ 376.840860][ T126] usb 4-1: USB disconnect, device number 18 [ 378.066887][ T7930] vxcan1: tx drop: invalid da for name 0x00000000000000f5 [ 378.617529][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.624251][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.863396][ T7966] device ip6erspan0 entered promiscuous mode [ 383.067057][ T7999] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 383.218557][ T8002] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1189'. [ 383.260337][ T8006] binder: BINDER_SET_CONTEXT_MGR already set [ 383.313108][ T8006] binder: 8005:8006 ioctl 4018620d 200000000040 returned -16 [ 384.716754][ T4289] Bluetooth: hci1: unexpected subevent 0x0e length: 30 > 15 [ 386.118648][ T8042] binder: BINDER_SET_CONTEXT_MGR already set [ 386.129042][ T8042] binder: 8039:8042 ioctl 4018620d 200000000040 returned -16 [ 386.481923][ T8048] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1204'. [ 387.574744][ T4289] Bluetooth: hci3: unexpected subevent 0x0e length: 30 > 15 [ 387.684777][ T7320] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 388.075370][ T7320] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 388.085327][ T7320] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 388.098736][ T7320] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 388.108182][ T7320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.116449][ T7320] usb 2-1: Product: syz [ 388.120645][ T7320] usb 2-1: Manufacturer: syz [ 388.125631][ T7320] usb 2-1: SerialNumber: syz [ 388.132780][ T7320] usb 2-1: config 0 descriptor?? [ 388.138893][ T8056] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 388.149882][ T8056] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 388.220001][ T4317] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 388.415012][ T4317] usb 4-1: Using ep0 maxpacket: 16 [ 388.422397][ T4317] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.449462][ T4317] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 388.462428][ T8082] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 388.475666][ T4317] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 388.498266][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.507910][ T8082] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 388.519001][ T4317] usb 4-1: Product: syz [ 388.523263][ T4317] usb 4-1: Manufacturer: syz [ 388.546254][ T4317] usb 4-1: SerialNumber: syz [ 388.943955][ T8090] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1218'. [ 389.353493][ T7320] Error reading MAC address [ 389.368619][ T7320] usb 2-1: USB disconnect, device number 18 [ 390.962050][ T7319] usb 4-1: USB disconnect, device number 19 [ 391.299493][ T8114] binder: 8109:8114 ioctl c0306201 0 returned -14 [ 392.076395][ T8123] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1230'. [ 392.739063][ T8136] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1233'. [ 393.679288][ T4289] Bluetooth: hci1: unexpected subevent 0x0e length: 30 > 15 [ 393.718183][ T8150] binder: 8149:8150 ioctl c0306201 0 returned -14 [ 394.312281][ T8170] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1244'. [ 394.537336][ T4993] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 394.844907][ T4993] usb 1-1: Using ep0 maxpacket: 32 [ 394.857941][ T4993] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 394.988161][ T4993] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.163821][ T4993] usb 1-1: config 0 has no interface number 0 [ 395.434878][ T4993] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 395.444381][ T4993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.466757][ T4993] usb 1-1: Product: syz [ 395.471018][ T4993] usb 1-1: Manufacturer: syz [ 395.476543][ T4993] usb 1-1: SerialNumber: syz [ 395.484177][ T4993] usb 1-1: config 0 descriptor?? [ 395.501527][ T8187] binder: 8186:8187 ioctl c0306201 0 returned -14 [ 395.526692][ T4993] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 395.703492][ T4993] usb 1-1: qt2_attach - failed to power on unit: -71 [ 395.728925][ T4993] quatech2: probe of 1-1:0.51 failed with error -71 [ 395.751026][ T4993] usb 1-1: USB disconnect, device number 13 [ 396.679356][ T8194] sctp: failed to load transform for md5: -2 [ 399.061207][ T8240] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1270'. [ 400.558800][ T8255] ftl_cs: FTL header not found. [ 400.809133][ T8255] block2mtd: mtd1: [/dev/loop0] erase_size = 0KiB [655] [ 401.655267][ T8283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1282'. [ 401.881555][ T4289] Bluetooth: hci3: unexpected subevent 0x0e length: 30 > 15 [ 403.063835][ T8307] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1291'. [ 404.706824][ T8341] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1303'. [ 407.519281][ T8377] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1315'. [ 409.410572][ T8395] hpfs: Bad magic ... probably not HPFS [ 409.424776][ T8395] hpfs: Bad magic ... probably not HPFS [ 411.880209][ T4993] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 412.086223][ T4993] usb 3-1: too many configurations: 156, using maximum allowed: 8 [ 412.104381][ T4993] usb 3-1: config index 0 descriptor too short (expected 120, got 72) [ 412.125843][ T4993] usb 3-1: config index 1 descriptor too short (expected 120, got 72) [ 412.154304][ T4993] usb 3-1: config index 2 descriptor too short (expected 120, got 72) [ 412.181797][ T4993] usb 3-1: config index 3 descriptor too short (expected 120, got 72) [ 412.207394][ T4993] usb 3-1: config index 4 descriptor too short (expected 120, got 72) [ 412.243477][ T4993] usb 3-1: config index 5 descriptor too short (expected 120, got 72) [ 412.260232][ T4993] usb 3-1: config index 6 descriptor too short (expected 120, got 72) [ 412.275968][ T4993] usb 3-1: config index 7 descriptor too short (expected 120, got 72) [ 412.312169][ T4993] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 412.372573][ T4993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.391513][ T4993] usb 3-1: Product: syz [ 412.411812][ T4993] usb 3-1: Manufacturer: syz [ 412.422025][ T4993] usb 3-1: SerialNumber: syz [ 412.525153][ T4993] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 412.722286][ T4993] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 413.033522][ T4828] usb 3-1: USB disconnect, device number 24 [ 413.818324][ T4993] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 413.839198][ T4993] ath9k_htc: Failed to initialize the device [ 413.873383][ T4828] usb 3-1: ath9k_htc: USB layer deinitialized [ 414.678375][ T4289] Bluetooth: hci2: unexpected subevent 0x0e length: 30 > 15 [ 414.975056][ T126] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 415.235006][ T126] usb 2-1: config 0 has an invalid descriptor of length 84, skipping remainder of the config [ 415.315526][ T126] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 415.324568][ T126] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 415.402696][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.433364][ T126] usb 2-1: config 0 descriptor?? [ 415.921467][ T8507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1361'. [ 418.645749][ T7320] usb 2-1: USB disconnect, device number 19 [ 419.402305][ T4289] Bluetooth: hci1: unexpected subevent 0x0e length: 30 > 15 [ 423.135921][ T8562] syz.0.1376 (8562) used greatest stack depth: 17664 bytes left [ 425.048850][ T8591] netlink: 'syz.3.1386': attribute type 1 has an invalid length. [ 425.959658][ T8591] device bond1 entered promiscuous mode [ 425.965914][ T8591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 425.985347][ T8596] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1386'. [ 428.354718][ T22] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 428.566388][ T22] usb 4-1: config 0 has an invalid descriptor of length 84, skipping remainder of the config [ 428.578786][ T22] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 428.604967][ T22] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 428.638869][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.684799][ T22] usb 4-1: config 0 descriptor?? [ 429.429537][ T4327] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 430.334834][ T4327] usb 1-1: Using ep0 maxpacket: 32 [ 430.341474][ T4327] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 430.358699][ T4327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.399537][ T4327] usb 1-1: config 0 descriptor?? [ 430.459804][ T4327] as10x_usb: device has been detected [ 430.473478][ T4327] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 430.625637][ T4327] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 430.693662][ T8666] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1408'. [ 430.751592][ T4327] as10x_usb: error during firmware upload part1 [ 430.930698][ T4327] Registered device nBox DVB-T Dongle [ 430.933863][ T4327] usb 1-1: USB disconnect, device number 14 [ 430.969075][ T4327] Unregistered device nBox DVB-T Dongle [ 431.013178][ T4327] as10x_usb: device has been disconnected [ 431.203691][ T4315] usb 4-1: USB disconnect, device number 20 [ 434.344166][ T8720] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1421'. [ 437.165313][ T4327] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 437.364836][ T4327] usb 2-1: Using ep0 maxpacket: 16 [ 437.377267][ T4327] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.460279][ T4327] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 437.558115][ T4327] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 437.602695][ T4327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.666021][ T4327] usb 2-1: config 0 descriptor?? [ 437.899479][ T8754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1434'. [ 440.056426][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.062785][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.841229][ T22] usb 2-1: USB disconnect, device number 20 [ 448.570163][ T8830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1458'. [ 449.143178][ T8835] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 453.794831][ T7320] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 454.004723][ T7320] usb 1-1: Using ep0 maxpacket: 16 [ 454.014348][ T7320] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.038782][ T7320] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 454.058854][ T7320] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 454.075021][ T7320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.887171][ T7320] usb 1-1: config 0 descriptor?? [ 456.465668][ T4828] usb 1-1: USB disconnect, device number 15 [ 460.544887][ T4828] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 460.814832][ T4828] usb 1-1: Using ep0 maxpacket: 16 [ 460.826242][ T4828] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.977715][ T4828] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 461.159144][ T4828] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 461.244369][ T4828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.374288][ T4828] usb 1-1: config 0 descriptor?? [ 461.566416][ T4828] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 463.362855][ T4828] usb 1-1: USB disconnect, device number 16 [ 466.724760][ T22] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 466.914705][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 466.927430][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.230430][ T22] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 467.278200][ T22] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 467.297692][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.331049][ T22] usb 2-1: config 0 descriptor?? [ 467.376436][ T22] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 469.243583][ T4828] usb 2-1: USB disconnect, device number 21 [ 480.123723][ T9111] mmap: syz.1.1544 (9111) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 480.187381][ T9111] [ 480.189773][ T9111] ====================================================== [ 480.196819][ T9111] WARNING: possible circular locking dependency detected [ 480.203860][ T9111] syzkaller #0 Not tainted [ 480.208304][ T9111] ------------------------------------------------------ [ 480.215355][ T9111] syz.1.1544/9111 is trying to acquire lock: [ 480.221366][ T9111] ffff888052b9fa80 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: process_measurement+0x3af/0x1c40 [ 480.232283][ T9111] [ 480.232283][ T9111] but task is already holding lock: [ 480.239667][ T9111] ffff888030321058 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 480.249796][ T9111] [ 480.249796][ T9111] which lock already depends on the new lock. [ 480.249796][ T9111] [ 480.260206][ T9111] [ 480.260206][ T9111] the existing dependency chain (in reverse order) is: [ 480.269240][ T9111] [ 480.269240][ T9111] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 480.276882][ T9111] down_read_killable+0x4c/0x340 [ 480.282430][ T9111] mmap_read_lock_killable+0x1d/0x60 [ 480.288269][ T9111] lock_mm_and_find_vma+0x2b1/0x2f0 [ 480.293999][ T9111] do_user_addr_fault+0x2e8/0xb20 [ 480.299593][ T9111] exc_page_fault+0x60/0x100 [ 480.304751][ T9111] asm_exc_page_fault+0x22/0x30 [ 480.310209][ T9111] fault_in_readable+0x13e/0x1f0 [ 480.315702][ T9111] fault_in_iov_iter_readable+0xbf/0x2f0 [ 480.321906][ T9111] generic_perform_write+0x1f1/0x5c0 [ 480.327755][ T9111] __generic_file_write_iter+0x148/0x2a0 [ 480.333912][ T9111] generic_file_write_iter+0xab/0x2e0 [ 480.339815][ T9111] vfs_write+0x482/0x9a0 [ 480.344638][ T9111] ksys_write+0x14d/0x260 [ 480.349490][ T9111] do_syscall_64+0x4c/0xa0 [ 480.354440][ T9111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 480.360852][ T9111] [ 480.360852][ T9111] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 480.369550][ T9111] __lock_acquire+0x2d18/0x7c40 [ 480.374946][ T9111] lock_acquire+0x1bb/0x4a0 [ 480.379976][ T9111] down_write+0x36/0x60 [ 480.384661][ T9111] process_measurement+0x3af/0x1c40 [ 480.390409][ T9111] ima_file_mmap+0xe9/0x140 [ 480.395433][ T9111] __se_sys_remap_file_pages+0x55a/0x7b0 [ 480.401598][ T9111] do_syscall_64+0x4c/0xa0 [ 480.406579][ T9111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 480.413026][ T9111] [ 480.413026][ T9111] other info that might help us debug this: [ 480.413026][ T9111] [ 480.423253][ T9111] Possible unsafe locking scenario: [ 480.423253][ T9111] [ 480.430697][ T9111] CPU0 CPU1 [ 480.436059][ T9111] ---- ---- [ 480.441414][ T9111] lock(&mm->mmap_lock); [ 480.445756][ T9111] lock(&sb->s_type->i_mutex_key#13); [ 480.453735][ T9111] lock(&mm->mmap_lock); [ 480.460578][ T9111] lock(&sb->s_type->i_mutex_key#13); [ 480.466038][ T9111] [ 480.466038][ T9111] *** DEADLOCK *** [ 480.466038][ T9111] [ 480.474172][ T9111] 1 lock held by syz.1.1544/9111: [ 480.479188][ T9111] #0: ffff888030321058 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 480.489715][ T9111] [ 480.489715][ T9111] stack backtrace: [ 480.495596][ T9111] CPU: 0 PID: 9111 Comm: syz.1.1544 Not tainted syzkaller #0 [ 480.502964][ T9111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 480.513012][ T9111] Call Trace: [ 480.516344][ T9111] [ 480.519314][ T9111] dump_stack_lvl+0x188/0x24e [ 480.524031][ T9111] ? load_image+0x410/0x410 [ 480.528547][ T9111] ? show_regs_print_info+0x12/0x12 [ 480.533743][ T9111] ? print_circular_bug+0x12b/0x1a0 [ 480.539112][ T9111] check_noncircular+0x296/0x330 [ 480.544050][ T9111] ? look_up_lock_class+0x75/0x140 [ 480.549165][ T9111] ? add_chain_block+0x9b0/0x9b0 [ 480.554105][ T9111] ? lockdep_lock+0xf1/0x1f0 [ 480.558700][ T9111] ? _find_first_zero_bit+0xd2/0x100 [ 480.564019][ T9111] __lock_acquire+0x2d18/0x7c40 [ 480.568878][ T9111] ? ima_match_policy+0x10d/0x21b0 [ 480.573994][ T9111] ? __lock_acquire+0x7c40/0x7c40 [ 480.579019][ T9111] ? verify_lock_unused+0x140/0x140 [ 480.584221][ T9111] ? ima_match_policy+0x10d/0x21b0 [ 480.589334][ T9111] ? ima_match_policy+0x211c/0x21b0 [ 480.594538][ T9111] lock_acquire+0x1bb/0x4a0 [ 480.599050][ T9111] ? process_measurement+0x3af/0x1c40 [ 480.604422][ T9111] ? __might_sleep+0xd0/0xd0 [ 480.609057][ T9111] ? read_lock_is_recursive+0x10/0x10 [ 480.614435][ T9111] ? ima_get_action+0x71/0xa0 [ 480.619116][ T9111] down_write+0x36/0x60 [ 480.623266][ T9111] ? process_measurement+0x3af/0x1c40 [ 480.628635][ T9111] process_measurement+0x3af/0x1c40 [ 480.633832][ T9111] ? ima_file_mmap+0x140/0x140 [ 480.638598][ T9111] ? aa_file_perm+0x112/0xf00 [ 480.643321][ T9111] ? mtree_load+0x100/0xa70 [ 480.647839][ T9111] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 480.653989][ T9111] ima_file_mmap+0xe9/0x140 [ 480.658493][ T9111] ? ima_file_free+0x3e0/0x3e0 [ 480.663253][ T9111] ? common_file_perm+0x171/0x1c0 [ 480.668278][ T9111] ? bpf_lsm_mmap_file+0x5/0x10 [ 480.673213][ T9111] ? security_mmap_file+0x11b/0x180 [ 480.678436][ T9111] __se_sys_remap_file_pages+0x55a/0x7b0 [ 480.684071][ T9111] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 480.689787][ T9111] ? lock_chain_count+0x20/0x20 [ 480.694641][ T9111] ? lockdep_hardirqs_on+0x94/0x140 [ 480.699833][ T9111] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 480.705550][ T9111] do_syscall_64+0x4c/0xa0 [ 480.709964][ T9111] ? clear_bhb_loop+0x60/0xb0 [ 480.714669][ T9111] ? clear_bhb_loop+0x60/0xb0 [ 480.719359][ T9111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 480.725337][ T9111] RIP: 0033:0x7f2f5f59e0d9 [ 480.729789][ T9111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.749504][ T9111] RSP: 002b:00007f2f60496028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 480.757949][ T9111] RAX: ffffffffffffffda RBX: 00007f2f5f825fa0 RCX: 00007f2f5f59e0d9 [ 480.765923][ T9111] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 00002000003f1000 [ 480.773890][ T9111] RBP: 00007f2f5f635024 R08: 0000000000000010 R09: 0000000000000000 [ 480.781859][ T9111] R10: 1000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 480.789835][ T9111] R13: 00007f2f5f826038 R14: 00007f2f5f825fa0 R15: 00007ffc39a653c8 [ 480.797825][ T9111]