last executing test programs: 56.082649473s ago: executing program 4 (id=5496): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 55.975637473s ago: executing program 4 (id=5497): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xb, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) memfd_create(&(0x7f0000000740)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x1aX\x87\xf5\x1aP\x06\x9a\xa9\xa0\x98 )\xe3\xa1\xa2\xb1D\xe0\x15S\x89/m\xb71%\x80\x04Q\x1dN\xb0\x19\x81\x16@\xc0\xc4\"g\xd7Z\xb3\x17\xd1\xe7\x1b\xbd\xdck\x95\x16\x17\x95\xce\xa6\x92_\xe4\x9a\xaeA-\x02\x161\x8c\xe7\xa6.)\xadpM\x19\x1c\xcd\xf6S\x9a(:\x90\xb1\x8ft\xeb#\x82\x17\x8d\x00\xcaY\xe9\xf7\xee\x91\bx\x80\xa4\xa0\x16\b\x8b,\xdb\x88\x1e\xc1m\x91\xf0S\xc4\xc9\xefEBT\x8e\xff6\xff\xbb\xd4\xbe&\xf5St\v\xe1\x98;q\\\x1c\xe9\xcc\xfeV\xc3M5\xa9\xec\xc9\x8a\xee7\xbb\xa4\x1f\xc8\xfb\xaar15\xdf\\\xf4d\xc0\xc7\xf3\x88\x13\x94^01\xfc_\x91B\xacp\x8f\xfdx\xa5\xa9_t\x86\xe3%\xf1q\x00\x89c\x05H\x92\xa6\x93je\xfa\xd148\xd0N7', 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0xc0000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x12) 55.855332869s ago: executing program 4 (id=5498): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x8e}]}) 55.762511457s ago: executing program 4 (id=5499): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}]}]}, 0x44}}, 0x0) 55.694378962s ago: executing program 4 (id=5501): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000) 55.541853869s ago: executing program 4 (id=5503): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x14f) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setreuid(0x0, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x29) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r5, 0x0) accept4$inet6(r4, 0x0, 0x0, 0x100000) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53049c4) syz_emit_ethernet(0x20e, &(0x7f0000002680)={@broadcast, @link_local, @val={@val={0x88a8, 0x4, 0x0, 0x3}, {0x8100, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x1d0, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, {[@routing={0x1, 0x10, 0x1, 0x1, 0x0, [@local, @local, @mcast1, @private2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2c}, @dev={0xfe, 0x80, '\x00', 0xb}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @routing={0x6, 0x0, 0x2, 0x4}, @routing={0x3a, 0x0, 0x0, 0x3c}, @dstopts={0x1d}, @dstopts={0x3b, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x57}]}, @srh={0x2b, 0xc, 0x4, 0x6, 0x1, 0x60, 0x7f, [@empty, @mcast2, @private2, @loopback, @dev={0xfe, 0x80, '\x00', 0x34}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @srh={0x33, 0x6, 0x4, 0x3, 0x6, 0x10, 0x3, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @loopback]}, @dstopts={0x3c, 0x2, '\x00', [@hao={0xc9, 0x10, @empty}]}, @fragment={0x3c, 0x0, 0x1, 0x0, 0x0, 0x4, 0x68}], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x2b, 0x0, @private0, @private0, [@hopopts={0x0, 0x3, '\x00', [@pad1, @ra={0x5, 0x2, 0x2}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) close(r6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4024587b, &(0x7f0000000440)={{r0, &(0x7f00000000c0)='!\x00', 0x40200, &(0x7f0000000100)={@align=0x8, {0x101, 0x7, 0xa94, 0x9}}, 0xdb00000, &(0x7f0000000140), &(0x7f0000000180)=0x945}, 0x2, &(0x7f0000000400)=[{0x2, 0x8000, &(0x7f00000001c0)='--+\'\xd6]$]:%\'^]$\x00', &(0x7f0000000200)="ddffd3ab9f4b2ee225ddd8fb30b52990e393567dec007d75fb0b787f5f8f799bc6ab85e26ec5267725a7afdccbb38da0078428a7e22e7e28082fa43641450250f82db6fa9ea2eb0904d735d77af77281442e8ab4bc49f4ac3059d5c8b73050dc09d65ccbbda787e0c8e6c8e5c506c108004f2452e3cb654be01f983992865e69f95c3c6d106f4a1ba6631a760d4d2739197daf7b8e56a3908bba1da4ed69fbc9f475a52a33d22915ffbc72666beeae764375", 0xb2, 0x8}, {0x1, 0x9, &(0x7f00000002c0)='![)&\x00', &(0x7f0000000300)="b0bf2b386e33174213634fb80e2263ae4fb25a10f1e76a67d7ce315ff5eb9a8722e96e66b54b6c9e26ce4b0bd23a813e47b5665d96556a0f7b3075e091090456f22db6300895cd66f40d02ef36db648494c92f74b72a9912758efd91f3e99444082c9c9268b910f739dd71fa57819351f5e8284aa4f19577a0ae3f66a276d38aeb29c4bf0df3cea2be760be6e5d8b6b09d42e0fe9761636e24c99f3cd119b8a510b5f20d191fcf2e3e0b628159b13fec81a900bbc77f891a6cf9a5f75611f46bbfa224746523730172e09d86f02ff08404149f43c1c89127028ba51e0dc83dccfe8a0702211be24b633fce70f8a9b6280d70dfc94f3b171117", 0xf9, 0x10}]}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) 40.46077287s ago: executing program 32 (id=5503): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x14f) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setreuid(0x0, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x29) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r5, 0x0) accept4$inet6(r4, 0x0, 0x0, 0x100000) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53049c4) syz_emit_ethernet(0x20e, &(0x7f0000002680)={@broadcast, @link_local, @val={@val={0x88a8, 0x4, 0x0, 0x3}, {0x8100, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x1d0, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, {[@routing={0x1, 0x10, 0x1, 0x1, 0x0, [@local, @local, @mcast1, @private2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2c}, @dev={0xfe, 0x80, '\x00', 0xb}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @routing={0x6, 0x0, 0x2, 0x4}, @routing={0x3a, 0x0, 0x0, 0x3c}, @dstopts={0x1d}, @dstopts={0x3b, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x57}]}, @srh={0x2b, 0xc, 0x4, 0x6, 0x1, 0x60, 0x7f, [@empty, @mcast2, @private2, @loopback, @dev={0xfe, 0x80, '\x00', 0x34}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @srh={0x33, 0x6, 0x4, 0x3, 0x6, 0x10, 0x3, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @loopback]}, @dstopts={0x3c, 0x2, '\x00', [@hao={0xc9, 0x10, @empty}]}, @fragment={0x3c, 0x0, 0x1, 0x0, 0x0, 0x4, 0x68}], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x2b, 0x0, @private0, @private0, [@hopopts={0x0, 0x3, '\x00', [@pad1, @ra={0x5, 0x2, 0x2}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) close(r6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4024587b, &(0x7f0000000440)={{r0, &(0x7f00000000c0)='!\x00', 0x40200, &(0x7f0000000100)={@align=0x8, {0x101, 0x7, 0xa94, 0x9}}, 0xdb00000, &(0x7f0000000140), &(0x7f0000000180)=0x945}, 0x2, &(0x7f0000000400)=[{0x2, 0x8000, &(0x7f00000001c0)='--+\'\xd6]$]:%\'^]$\x00', &(0x7f0000000200)="ddffd3ab9f4b2ee225ddd8fb30b52990e393567dec007d75fb0b787f5f8f799bc6ab85e26ec5267725a7afdccbb38da0078428a7e22e7e28082fa43641450250f82db6fa9ea2eb0904d735d77af77281442e8ab4bc49f4ac3059d5c8b73050dc09d65ccbbda787e0c8e6c8e5c506c108004f2452e3cb654be01f983992865e69f95c3c6d106f4a1ba6631a760d4d2739197daf7b8e56a3908bba1da4ed69fbc9f475a52a33d22915ffbc72666beeae764375", 0xb2, 0x8}, {0x1, 0x9, &(0x7f00000002c0)='![)&\x00', &(0x7f0000000300)="b0bf2b386e33174213634fb80e2263ae4fb25a10f1e76a67d7ce315ff5eb9a8722e96e66b54b6c9e26ce4b0bd23a813e47b5665d96556a0f7b3075e091090456f22db6300895cd66f40d02ef36db648494c92f74b72a9912758efd91f3e99444082c9c9268b910f739dd71fa57819351f5e8284aa4f19577a0ae3f66a276d38aeb29c4bf0df3cea2be760be6e5d8b6b09d42e0fe9761636e24c99f3cd119b8a510b5f20d191fcf2e3e0b628159b13fec81a900bbc77f891a6cf9a5f75611f46bbfa224746523730172e09d86f02ff08404149f43c1c89127028ba51e0dc83dccfe8a0702211be24b633fce70f8a9b6280d70dfc94f3b171117", 0xf9, 0x10}]}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) 8.307275724s ago: executing program 1 (id=5891): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000600), 0x0, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x220, 0x0, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@arp={@multicast2, @remote, 0xffffff00, 0xff, 0x6, 0x0, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x6, 0x1, 0x4, 0x4, 0x9, 0x7ff, 'veth0\x00', 'vcan0\x00', {}, {0xff}, 0x0, 0x210}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1, 0x4}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x2, 0xffffffff}}}, {{@arp={@multicast2, @multicast1, 0xffffff00, 0xff, 0x4, 0x10, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x3, 0x6, 0x4, 0x2, 0x1, 0xfffa, 'rose0\x00', 'veth0\x00', {0xff}, {}, 0x0, 0x90}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @loopback, @broadcast, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x2, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket(0x2, 0xa, 0x300) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet(0x2, 0x4000000000000001, 0x100) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0x0, &(0x7f0000000240)={0x77359400}, 0x0, 0x1) 6.755759781s ago: executing program 1 (id=5898): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20040900) 6.078570595s ago: executing program 3 (id=5907): prlimit64(0x0, 0x3, &(0x7f0000000140)={0xa, 0x8b}, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) mmap(&(0x7f00000a7000/0x3000)=nil, 0x3000, 0x8, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r2 = request_key(&(0x7f00000002c0)='rxrpc_s\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)='@^!-.[+-\x00', 0xfffffffffffffff8) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f00000001c0)={0x0, "bf99637e3b7863d8c1e78907e194561bd8cf2b124b500c254f2b39587748eb0ea3222da1608275d51b51b337264fb6da4d7356279e60b3930ecbd2ab6fd8e344", 0x2f}, 0x48, r2) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'vcan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xd4}}, 0x0) 6.030122902s ago: executing program 1 (id=5908): setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x813) r2 = syz_create_resource$binfmt(&(0x7f0000000280)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_elf32(r3, &(0x7f0000000600)=ANY=[], 0x858) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) syz_usb_connect$midi(0x2, 0x31, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x9e8, 0x62, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0xff, 0x40, 0x28, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x3, [], [{{0x9, 0x5, 0x85, 0x3, 0x8, 0x6, 0xd1, 0x18, {0x4}}}]}}}}}]}}, 0x0) mq_getsetattr(r4, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc2}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', 0x0) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) mq_timedreceive(r4, &(0x7f0000000500)=""/4096, 0x1000, 0x6, &(0x7f0000000240)={0x77359400}) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x300, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x60046, 0x40088}}, 0x20}, 0x1, 0x0, 0x0, 0xc4}, 0x4020) 3.394591384s ago: executing program 3 (id=5914): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {0xd, 0xfff1}, {0xfff3, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 3.228402526s ago: executing program 3 (id=5916): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 2.921863383s ago: executing program 1 (id=5917): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x1d, 0x67726ae92d7f756f}, 0xa8) 2.743706541s ago: executing program 1 (id=5920): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x200001, 0x5, 0x3, 0x0, 'syz0\x00'}, 0x5, 0x400, 0x1, 0x0, 0x37, 0x9, 'syz0\x00', 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.463116231s ago: executing program 1 (id=5922): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905"], 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x6c, 0x0, 0x1, 0x20000002, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd9b9fafd212acc2a}], @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800040001"], 0x3c}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x2) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 2.452413868s ago: executing program 5 (id=5923): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000000000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)="3a04cb8e74055bacb81cd8b1e9954252bee7963f941bd8768c4b82e30052a53fc1c4478abad40b86bfde59fb7fd6c9c3ecbbe8fc5310f9a6f1df585ec753296ca7fcb5622f0ee20de52c60dd2fba88adc9ee6a3001ef1dabcfa29c913e020cdf43c824a4f448634f1add51488084695c07062f3c1d121e5d5fcbc5c25f2b907a912a61ece088b76ba9781a33237084f3a9c18af752d210fa739a049d876767c273ef1070722a65ac8e062f05c0e6e11ef229a5a1c9a6e6fd7326ca7c7621c78df857c0a2f3c88dff78cc4ac96ee53c5842929d03bdaa819167", 0xd9}, {&(0x7f0000000800)="acc863bb6891c5060730bd6284608c799dc6f72d957cb30bc135e7297422f6d4db2d3a65331495c57f69e60218d4a3e0f1fd624c80296f39e047ebfd7ee483", 0x3f}], 0x2, &(0x7f0000000880)=[@mark={{0x10, 0x1, 0x24, 0x9}}, @txtime={{0x14, 0x1, 0x3d, 0x80000000}}, @timestamping={{0x10, 0x1, 0x25, 0x8}}, @txtime={{0x14, 0x1, 0x3d, 0x6}}, @txtime={{0x14, 0x1, 0x3d, 0x7fffffff}}, @timestamping={{0x10, 0x1, 0x25, 0xde}}], 0x6c}}, {{&(0x7f0000000900)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000003080)=[{&(0x7f0000002080)="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", 0x1000}], 0x1, &(0x7f00000030c0)=[@txtime={{0x14, 0x1, 0x3d, 0x4}}], 0x14}}], 0x2, 0x40010) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="0100000040fc51c64400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r1, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.13415206s ago: executing program 5 (id=5924): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.028273403s ago: executing program 3 (id=5925): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) 1.919023857s ago: executing program 5 (id=5927): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000080", 0x64, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x4d, 0x0, @wg=@response={0x2, 0x0, 0x0, "eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb", "201f3a70a41ef6c2fca06a9bd768d5f1", {"76c19815002000000000000000001000", "9514b06796dbf2ea9e520f1475c8f65b"}}}}}}}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x304}, "55706e44cacc494f", "24ff0573669961d742cbfb62b94f9592", 'U~\'T', "d5c0017c6ee203ad"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(r0, r5, 0x0, 0xffffffff004) 1.859715s ago: executing program 3 (id=5928): syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 1.639318178s ago: executing program 3 (id=5930): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBLED(r3, 0x4b65, 0x8) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x2000040) 1.283000871s ago: executing program 0 (id=5931): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x9, 0xff, 0x3, 0x2, 0x0, 0x70bd2a, 0x25dfdbfb}, 0x10}}, 0x480c0) 1.089738656s ago: executing program 0 (id=5933): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001300)) io_setup(0x205, &(0x7f0000002500)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) r3 = dup2(r2, r1) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0x3fb, r3, 0x0, 0x0, 0x7, 0x0, 0x4, r3}]) 786.785078ms ago: executing program 0 (id=5935): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc01c5869, &(0x7f0000000300)={r2, &(0x7f00000001c0)='-&:\xd8\x00', 0x80002, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$kcm(0x29, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000080), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) 775.878893ms ago: executing program 2 (id=5936): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c491}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 671.886715ms ago: executing program 2 (id=5937): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1a, 0x0, @local, 0x2}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x8, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x8}}}}}}, 0x0) 610.761469ms ago: executing program 0 (id=5938): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) 551.21959ms ago: executing program 2 (id=5939): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x30000, &(0x7f0000000040)={&(0x7f0000000140)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1a, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socket(0x10, 0x803, 0x0) 515.813066ms ago: executing program 0 (id=5940): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109540, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {0xd, 0xfff1}, {0xfff3, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 393.51475ms ago: executing program 2 (id=5941): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 392.09115ms ago: executing program 5 (id=5942): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000007fc0)={0x2020}, 0x2020) 287.904461ms ago: executing program 0 (id=5943): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x74) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 152.434301ms ago: executing program 5 (id=5944): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e22, 0x3, 'nq\x00', 0x2, 0x4, 0x38}, {@multicast2, 0x4e22, 0x2, 0x8, 0x80012d58, 0x12d5c}}, 0x44) 79.068202ms ago: executing program 2 (id=5945): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002540)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="cca9efaa32a4009ea301f8c4cd3e8a2800daf9f7fcadfe677fe774109efbab5e9a00a08f6145640ff49d2c711fdf719ea8daa38a5306ddbf11a6ed1b53f931d8853c57a829aababd627e4f252059df3a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000340)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x0, 0x0, 0x0}) 78.838164ms ago: executing program 5 (id=5946): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) pipe2(&(0x7f0000000000), 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r3, 0x8001}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 0s ago: executing program 2 (id=5947): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r2, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x14}], 0x1}, 0x4011) kernel console output (not intermixed with test programs): evsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.655819][T13205] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.656075][ T48] vhci_hcd vhci_hcd.1: stop threads [ 1036.695639][ T48] vhci_hcd vhci_hcd.1: release socket [ 1036.706346][ T48] vhci_hcd vhci_hcd.1: disconnect device [ 1036.740971][T21759] binder: 21758:21759 ioctl c01c5868 800001c0 returned -22 [ 1037.638481][ T142] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.668478][ T142] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.698119][ T142] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.726861][ T142] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.237882][T21790] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4987'. [ 1038.417856][T16145] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1038.573449][T16145] usb 5-1: device descriptor read/64, error -71 [ 1038.843606][T16145] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1038.998399][T21807] netlink: 'syz.0.4990': attribute type 1 has an invalid length. [ 1039.004653][T16145] usb 5-1: device descriptor read/64, error -71 [ 1039.153783][T16145] usb usb5-port1: attempt power cycle [ 1039.523327][T16145] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1039.616493][T16145] usb 5-1: device descriptor read/8, error -71 [ 1039.884264][T16145] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1039.914701][T16145] usb 5-1: device descriptor read/8, error -71 [ 1040.034316][T16145] usb usb5-port1: unable to enumerate USB device [ 1040.054817][T21832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.064363][T21832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.214332][T21832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1040.236979][T21832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1040.371656][T11341] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.382989][T11341] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.397737][T21838] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1040.403151][T11341] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.413087][T21838] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1040.443611][T21838] vhci_hcd vhci_hcd.0: Device attached [ 1040.456955][T11341] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.559209][T21838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1040.570744][T21838] 8021q: adding VLAN 0 to HW filter on device team0 [ 1040.591928][T21838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1040.703398][T16145] usb 40-1: SetAddress Request (11) to port 0 [ 1040.709595][T16145] usb 40-1: new SuperSpeed USB device number 11 using vhci_hcd [ 1040.744225][T21138] usb 36-1: device descriptor read/8, error -110 [ 1040.798971][T21838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1040.848012][T21838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1040.939827][T21838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1040.973572][T21838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1041.030902][T21838] veth1_vlan: left promiscuous mode [ 1041.082861][T21838] veth0_vlan: left promiscuous mode [ 1041.111569][T21838] veth0_vlan: entered promiscuous mode [ 1041.145944][T21138] usb usb36-port1: attempt power cycle [ 1041.160415][T21838] veth1_vlan: entered promiscuous mode [ 1041.249701][T21838] veth1_macvtap: left promiscuous mode [ 1041.280515][T21838] veth0_macvtap: left promiscuous mode [ 1041.310616][T21838] veth0_macvtap: entered promiscuous mode [ 1041.340390][T21846] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4999'. [ 1041.354547][T21838] veth1_macvtap: entered promiscuous mode [ 1041.402451][T21838] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1041.434720][T21838] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1041.475806][T21838] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1041.512359][T21838] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1041.540639][T21838] mac80211_hwsim hwsim14 wlan0: left promiscuous mode [ 1041.584561][T21838] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 1041.635448][T21838] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1041.670774][T11341] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.677957][T11341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.714033][T21138] usb usb36-port1: unable to enumerate USB device [ 1041.723866][T11341] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.731004][T11341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.852744][ T142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.870288][T21839] vhci_hcd: connection reset by peer [ 1041.884093][ T142] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.895129][T13207] vhci_hcd vhci_hcd.3: stop threads [ 1041.906384][T13207] vhci_hcd vhci_hcd.3: release socket [ 1041.922791][T13207] vhci_hcd vhci_hcd.3: disconnect device [ 1041.964540][T11341] bridge0: port 3(team0) entered blocking state [ 1041.970958][T11341] bridge0: port 3(team0) entered forwarding state [ 1042.008181][ T142] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.035212][T13203] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.365104][T21879] netlink: 'syz.2.5010': attribute type 1 has an invalid length. [ 1043.443613][T21879] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1043.476421][T21881] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1043.760937][T21895] netlink: 'syz.4.5016': attribute type 1 has an invalid length. [ 1043.889822][T21895] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1044.443790][T21909] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1044.450332][T21909] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1044.593841][T19885] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 1044.617915][T21909] vhci_hcd vhci_hcd.0: Device attached [ 1044.785293][T19885] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1044.796822][T21914] bridge0: port 3(team0) entered disabled state [ 1044.810582][T21905] block device autoloading is deprecated and will be removed. [ 1044.828396][T19885] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1044.881002][T19885] usb 2-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1044.947846][T19885] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1044.981447][T19885] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1045.015353][T21914] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.023064][T19885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.108187][T19885] usb 2-1: config 0 descriptor?? [ 1045.356054][T21914] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.282054][T21910] vhci_hcd: connection reset by peer [ 1046.297853][T11341] vhci_hcd vhci_hcd.3: stop threads [ 1046.314742][T11341] vhci_hcd vhci_hcd.3: release socket [ 1046.339092][T16145] usb 40-1: device descriptor read/8, error -110 [ 1046.347493][T11341] vhci_hcd vhci_hcd.3: disconnect device [ 1046.746711][T16145] usb usb40-port1: attempt power cycle [ 1046.850697][T19885] usbhid 2-1:0.0: can't add hid device: -71 [ 1046.866104][T19885] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1046.908470][T19885] usb 2-1: USB disconnect, device number 55 [ 1046.936023][T21934] netlink: 'syz.2.5028': attribute type 1 has an invalid length. [ 1047.056490][T21934] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1047.132552][T21936] bond6: (slave veth0_to_bond): Releasing backup interface [ 1047.355846][T16145] usb usb40-port1: unable to enumerate USB device [ 1047.805640][ T2174] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1047.969102][ T2174] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1047.979035][ T2174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.987751][ T2174] usb 5-1: Product: syz [ 1047.999867][ T2174] usb 5-1: Manufacturer: syz [ 1048.011755][ T2174] usb 5-1: SerialNumber: syz [ 1048.560657][T21947] syz.2.5030 (21947): drop_caches: 2 [ 1048.672705][ T2174] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 1048.707352][ T2174] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1048.762914][ T2174] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1048.794542][ T2174] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1048.853015][ T2174] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1048.883365][ T2174] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1048.921796][ T2174] usb 5-1: USB disconnect, device number 37 [ 1049.186383][T21975] netlink: 'syz.2.5041': attribute type 1 has an invalid length. [ 1049.323067][T21975] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1049.543671][T21988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5046'. [ 1049.575328][T21988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5046'. [ 1049.684859][T21988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5046'. [ 1049.696911][T21988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5046'. [ 1049.838521][T21988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5046'. [ 1049.854948][T21988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5046'. [ 1049.870037][T21998] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1049.876573][T21998] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1049.901192][T21998] vhci_hcd vhci_hcd.0: Device attached [ 1050.166928][ T2174] usb 40-1: SetAddress Request (15) to port 0 [ 1050.181907][ T2174] usb 40-1: new SuperSpeed USB device number 15 using vhci_hcd [ 1050.233041][T22009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5050'. [ 1050.412379][T22011] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5051'. [ 1050.741775][T21999] vhci_hcd: connection reset by peer [ 1050.762913][T13205] vhci_hcd vhci_hcd.3: stop threads [ 1050.772534][T13205] vhci_hcd vhci_hcd.3: release socket [ 1050.788109][T13205] vhci_hcd vhci_hcd.3: disconnect device [ 1050.800270][T22024] netlink: 'syz.4.5056': attribute type 1 has an invalid length. [ 1050.834139][T22024] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1050.855318][T22024] macvlan2: entered promiscuous mode [ 1050.861188][T22024] macvlan2: entered allmulticast mode [ 1050.868294][T22024] bond4: entered promiscuous mode [ 1050.879062][T22024] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1050.888185][T22024] bond4: left promiscuous mode [ 1051.976747][T22042] syzkaller0: entered promiscuous mode [ 1051.988401][T22042] syzkaller0: entered allmulticast mode [ 1052.425911][T22047] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5065'. [ 1053.288413][T22069] vhci_hcd vhci_hcd.0: port 0 already used [ 1053.616011][T22069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1053.712599][T22080] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5076'. [ 1053.730627][T22069] 8021q: adding VLAN 0 to HW filter on device team0 [ 1053.835801][T22069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1054.051235][T22091] netlink: 'syz.4.5079': attribute type 1 has an invalid length. [ 1054.268718][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.275154][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.469641][T22069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1054.480871][T22069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1054.551461][T22069] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1054.562026][T22069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1054.630049][T22069] veth1_vlan: left promiscuous mode [ 1054.645598][T22069] veth0_vlan: left promiscuous mode [ 1054.662676][T22069] veth0_vlan: entered promiscuous mode [ 1054.686140][T22069] veth1_vlan: entered promiscuous mode [ 1054.714214][T22069] veth1_macvtap: left promiscuous mode [ 1054.735954][T22069] veth0_macvtap: left promiscuous mode [ 1054.755653][T22069] veth0_macvtap: entered promiscuous mode [ 1054.779415][T22069] veth1_macvtap: entered promiscuous mode [ 1054.826308][T22069] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1054.858248][T22069] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1054.867845][T22069] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1054.876969][T22069] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1054.889198][T22069] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1054.898187][T22069] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1054.908672][T22069] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1054.918985][T22069] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1054.926693][T22069] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1054.937436][T13207] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.944588][T13207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1054.988455][T13207] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.995607][T13207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1055.092548][T22091] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1055.095238][T11341] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.157053][T11341] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.181644][T11341] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.198398][T11341] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.306645][ T2174] usb 40-1: device descriptor read/8, error -110 [ 1055.574889][ T5743] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1055.704950][ T2174] usb usb40-port1: attempt power cycle [ 1055.738603][ T5743] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1055.753253][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.773244][ T5743] usb 4-1: Product: syz [ 1055.777456][ T5743] usb 4-1: Manufacturer: syz [ 1055.782034][ T5743] usb 4-1: SerialNumber: syz [ 1055.790843][ T5743] usb 4-1: config 0 descriptor?? [ 1055.801798][ T5743] hub 4-1:0.0: bad descriptor, ignoring hub [ 1055.808291][ T5743] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1056.002878][ T5743] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1056.030363][ T5743] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1056.042659][ T5743] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1056.056639][ T5743] usb 4-1: media controller created [ 1056.084089][ T5743] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1056.224597][ T5743] DVB: Unable to find symbol dib7000p_attach() [ 1056.238837][ T5743] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1056.267180][ T2174] usb usb40-port1: unable to enumerate USB device [ 1056.368770][T22130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5092'. [ 1056.384061][ T5743] rc_core: IR keymap rc-dib0700-rc5 not found [ 1056.402460][ T5743] Registered IR keymap rc-empty [ 1056.408427][ T5743] dvb-usb: could not initialize remote control. [ 1056.426491][ T5743] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1056.460263][T22134] netlink: 'syz.0.5094': attribute type 1 has an invalid length. [ 1056.502678][T22106] i2c i2c-1: Invalid block size returned: 188 [ 1056.593031][T22134] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1056.664165][T22139] macvlan2: entered promiscuous mode [ 1056.686014][T22139] macvlan2: entered allmulticast mode [ 1056.715125][T22139] bond1: entered promiscuous mode [ 1056.740795][T16145] usb 4-1: USB disconnect, device number 48 [ 1056.768892][T22139] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1056.817854][T22139] bond1: left promiscuous mode [ 1056.915709][T16145] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1057.073792][ T5743] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1057.233333][ T5743] usb 2-1: Using ep0 maxpacket: 8 [ 1057.265642][ T5743] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.291635][ T5743] usb 2-1: config 0 has no interfaces? [ 1057.314452][ T5743] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1057.349965][ T5743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.390209][ T5743] usb 2-1: config 0 descriptor?? [ 1057.830386][T22151] netlink: 'syz.2.5099': attribute type 1 has an invalid length. [ 1057.901465][T22151] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1058.514640][T22167] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5104'. [ 1059.389168][T22185] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5111'. [ 1059.607029][T22193] netlink: 457 bytes leftover after parsing attributes in process `syz.2.5115'. [ 1059.801609][T21138] usb 2-1: USB disconnect, device number 56 [ 1059.982248][T22201] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1059.988805][T22201] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1060.008167][T22201] vhci_hcd vhci_hcd.0: Device attached [ 1060.154310][T22206] bridge_slave_0: left allmulticast mode [ 1060.171975][T22206] bridge_slave_0: left promiscuous mode [ 1060.188034][T22206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.222832][T22210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5119'. [ 1060.246057][T22206] bridge_slave_1: left promiscuous mode [ 1060.270645][T22206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.291436][T22206] bond0: (slave bond_slave_0): Releasing backup interface [ 1060.303442][T19885] usb 42-1: SetAddress Request (30) to port 0 [ 1060.326857][T22206] bond0: (slave bond_slave_1): Releasing backup interface [ 1060.348628][T19885] usb 42-1: new SuperSpeed USB device number 30 using vhci_hcd [ 1060.398861][T22206] team0: Port device team_slave_0 removed [ 1060.436057][T22206] team0: Port device team_slave_1 removed [ 1060.459181][T22206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1060.489739][T22206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1060.516865][T22206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1060.546077][T22206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.574808][T22206] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1060.866999][T22208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.926300][T22208] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.974361][T22218] netlink: 'syz.0.5122': attribute type 1 has an invalid length. [ 1061.062922][T22208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1061.459455][T22208] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1061.484252][T22208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1061.638905][T22208] veth1_vlan: left promiscuous mode [ 1061.703450][T22208] veth0_vlan: left promiscuous mode [ 1061.729859][T22208] veth0_vlan: entered promiscuous mode [ 1061.823611][T22208] veth1_vlan: entered promiscuous mode [ 1061.938746][T22208] veth1_macvtap: left promiscuous mode [ 1061.998477][T22224] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5124'. [ 1062.012373][T22208] veth0_macvtap: left promiscuous mode [ 1062.061489][T22208] veth0_macvtap: entered promiscuous mode [ 1062.109903][T22208] veth1_macvtap: entered promiscuous mode [ 1062.264096][T22208] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1062.306652][T22208] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1062.348448][T22208] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1062.384060][T22208] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1062.439187][T22208] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1062.472419][T22208] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1062.488141][T22208] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1062.564658][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.578786][T22202] vhci_hcd: connection reset by peer [ 1062.596938][T13207] vhci_hcd vhci_hcd.4: stop threads [ 1062.604824][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.620008][T13207] vhci_hcd vhci_hcd.4: release socket [ 1062.635669][T13207] vhci_hcd vhci_hcd.4: disconnect device [ 1062.700125][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.739678][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.923151][T22232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5127'. [ 1063.223392][ T5743] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1063.386662][ T5743] usb 5-1: Using ep0 maxpacket: 8 [ 1063.405643][ T5743] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.423285][ T5743] usb 5-1: config 0 has no interfaces? [ 1063.430268][ T5743] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1063.453277][ T5743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.466421][ T5743] usb 5-1: config 0 descriptor?? [ 1065.141419][T22257] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5136'. [ 1065.477558][T19885] usb 42-1: device descriptor read/8, error -110 [ 1065.582026][T22265] syzkaller0: entered promiscuous mode [ 1065.588620][T22265] syzkaller0: entered allmulticast mode [ 1065.894404][T19885] usb usb42-port1: attempt power cycle [ 1065.925583][T22278] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1065.932149][T22278] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1065.989797][ T5743] usb 5-1: USB disconnect, device number 38 [ 1066.067445][T22278] vhci_hcd vhci_hcd.0: Device attached [ 1066.321153][T22282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1066.329152][ T2174] usb 34-1: SetAddress Request (10) to port 0 [ 1066.336158][ T2174] usb 34-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1066.446140][T22282] 8021q: adding VLAN 0 to HW filter on device team0 [ 1066.464067][T19885] usb usb42-port1: unable to enumerate USB device [ 1066.594437][T22282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1066.756512][T22282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1066.788192][T22282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1066.815213][T22282] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1066.828006][T22282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1066.868637][T22282] veth1_vlan: left promiscuous mode [ 1066.881763][T22282] veth0_vlan: left promiscuous mode [ 1066.893019][T22282] veth0_vlan: entered promiscuous mode [ 1066.920886][T22282] veth1_vlan: entered promiscuous mode [ 1066.945110][T22282] veth1_macvtap: left promiscuous mode [ 1066.957573][T22282] veth0_macvtap: left promiscuous mode [ 1066.969324][T22282] veth0_macvtap: entered promiscuous mode [ 1066.982160][T22282] veth1_macvtap: entered promiscuous mode [ 1067.003387][ T5743] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1067.016138][T22282] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1067.024279][T22282] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1067.037900][T22282] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1067.048982][T22282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1067.115494][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.122636][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.146616][T22279] vhci_hcd: connection reset by peer [ 1067.162529][T13203] vhci_hcd vhci_hcd.0: stop threads [ 1067.169671][ T5743] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.179809][T13203] vhci_hcd vhci_hcd.0: release socket [ 1067.186529][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.193735][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.202053][ T5743] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.205115][T13203] vhci_hcd vhci_hcd.0: disconnect device [ 1067.212497][ T5743] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1067.273571][ T5743] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1067.299415][ T5743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.329364][T13210] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.340681][ T5743] usb 4-1: config 0 descriptor?? [ 1067.349965][T13210] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.395687][T13210] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.418403][T13210] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.555678][T19885] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1067.743431][T19885] usb 5-1: Using ep0 maxpacket: 8 [ 1067.751249][T19885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.790432][ T5743] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1067.812073][T19885] usb 5-1: config 0 has no interfaces? [ 1067.833554][T19885] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1067.855340][T19885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.901134][T19885] usb 5-1: config 0 descriptor?? [ 1068.032289][ T5743] usb 4-1: USB disconnect, device number 49 [ 1068.798285][T22344] netlink: 'syz.2.5171': attribute type 1 has an invalid length. [ 1069.537081][T22364] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1069.543645][T22364] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1069.573355][T22369] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5181'. [ 1069.811998][T22364] vhci_hcd vhci_hcd.0: Device attached [ 1070.113335][ T5366] usb 40-1: SetAddress Request (19) to port 0 [ 1070.211364][ T5366] usb 40-1: new SuperSpeed USB device number 19 using vhci_hcd [ 1070.307155][T19885] usb 5-1: USB disconnect, device number 39 [ 1070.751937][T22387] netlink: 'syz.4.5185': attribute type 1 has an invalid length. [ 1070.967820][T22366] vhci_hcd: connection reset by peer [ 1070.979277][T13203] vhci_hcd vhci_hcd.3: stop threads [ 1070.991820][T13203] vhci_hcd vhci_hcd.3: release socket [ 1071.014831][T13203] vhci_hcd vhci_hcd.3: disconnect device [ 1071.145918][T22396] netlink: 'syz.0.5190': attribute type 1 has an invalid length. [ 1071.291612][T22402] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5192'. [ 1071.475148][ T2174] usb 34-1: device descriptor read/8, error -110 [ 1071.623367][T19884] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1071.709116][T22370] Bluetooth: hci2: command 0x0406 tx timeout [ 1071.741476][T19885] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1071.751229][T22413] blktrace: Concurrent blktraces are not allowed on sg0 [ 1071.793913][T19884] usb 2-1: Using ep0 maxpacket: 8 [ 1071.806882][T19884] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.823149][T19884] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1071.834511][T19884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.859572][T19884] usb 2-1: config 0 descriptor?? [ 1071.876214][T19884] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 1071.885579][ T2174] usb usb34-port1: attempt power cycle [ 1071.933369][T19885] usb 5-1: Using ep0 maxpacket: 8 [ 1071.944149][T19885] usb 5-1: config 0 has no interfaces? [ 1071.954384][T19885] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1071.964739][T19885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.975611][T19885] usb 5-1: Product: syz [ 1071.981030][T19885] usb 5-1: Manufacturer: syz [ 1071.987338][T19885] usb 5-1: SerialNumber: syz [ 1071.999315][T19885] usb 5-1: config 0 descriptor?? [ 1072.088085][T22420] netlink: 'syz.2.5199': attribute type 1 has an invalid length. [ 1072.231969][T19885] usb 5-1: USB disconnect, device number 40 [ 1072.359571][T22432] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5205'. [ 1072.474519][ T2174] usb usb34-port1: unable to enumerate USB device [ 1072.703334][ T5743] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1072.856091][ T5743] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1072.866483][ T5743] usb 1-1: config 1 has an invalid descriptor of length 241, skipping remainder of the config [ 1072.877573][ T5743] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 118, changing to 7 [ 1072.891103][ T5743] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 50432, setting to 1024 [ 1072.913131][ T5743] usb 1-1: string descriptor 0 read error: -22 [ 1072.919970][ T5743] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1072.929394][ T5743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.053276][ T2174] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1073.226485][ T2174] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 1073.234927][ T2174] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.245307][ T2174] usb 5-1: config 0 has no interface number 0 [ 1073.251463][ T2174] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1073.262695][ T2174] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1073.273429][ T2174] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1073.289261][ T2174] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1073.298445][ T2174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.307220][ T2174] usb 5-1: Product: syz [ 1073.311426][ T2174] usb 5-1: Manufacturer: syz [ 1073.316121][ T2174] usb 5-1: SerialNumber: syz [ 1073.323813][ T2174] usb 5-1: config 0 descriptor?? [ 1073.549273][ T5743] usb 1-1: 1:1: cannot get freq at ep 0x1 [ 1073.774992][ T5743] usb 1-1: USB disconnect, device number 55 [ 1073.814016][T22453] netlink: 'syz.3.5212': attribute type 1 has an invalid length. [ 1073.919488][T22453] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1073.942014][ T2174] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1073.961384][T22456] bond2: (slave veth0_to_bond): Releasing backup interface [ 1073.964640][ T2174] usb 5-1: USB disconnect, device number 41 [ 1074.034457][T22459] vhci_hcd vhci_hcd.0: port 0 already used [ 1074.162649][T22466] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1074.169186][T22466] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1074.208011][T22466] vhci_hcd vhci_hcd.0: Device attached [ 1074.224406][T22467] vhci_hcd: connection closed [ 1074.224716][T13207] vhci_hcd vhci_hcd.0: stop threads [ 1074.238357][T13207] vhci_hcd vhci_hcd.0: release socket [ 1074.246529][T13207] vhci_hcd vhci_hcd.0: disconnect device [ 1074.372099][ T5743] usb 2-1: USB disconnect, device number 57 [ 1075.128060][T22490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1075.183271][T16144] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1075.274575][T22494] netlink: 'syz.3.5223': attribute type 1 has an invalid length. [ 1075.304637][ T5366] usb 40-1: device descriptor read/8, error -110 [ 1075.349133][T22494] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1075.363267][T16144] usb 5-1: Using ep0 maxpacket: 16 [ 1075.379381][T16144] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 1075.388857][T16144] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.401042][T16144] usb 5-1: config 0 has no interface number 0 [ 1075.407496][T16144] usb 5-1: config 0 interface 34 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1075.424654][T16144] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1075.442564][T16144] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.451144][T16144] usb 5-1: Product: syz [ 1075.458077][T16144] usb 5-1: Manufacturer: syz [ 1075.462792][T16144] usb 5-1: SerialNumber: syz [ 1075.480958][T16144] usb 5-1: config 0 descriptor?? [ 1075.508474][T16144] asix 5-1:0.34: probe with driver asix failed with error -22 [ 1075.693688][T19884] usb 5-1: USB disconnect, device number 42 [ 1075.704106][ T5366] usb usb40-port1: attempt power cycle [ 1076.276427][ T5366] usb usb40-port1: unable to enumerate USB device [ 1076.363312][T16144] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1076.513506][T16144] usb 1-1: Using ep0 maxpacket: 8 [ 1076.526769][T16144] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.547644][T16144] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1076.572029][T16144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.597883][T16144] usb 1-1: config 0 descriptor?? [ 1076.614426][T16144] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 1076.873330][T16144] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 1077.046021][T22528] vhci_hcd vhci_hcd.0: port 0 already used [ 1077.048052][T16144] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1077.068531][T16144] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.080060][T16144] usb 4-1: Product: syz [ 1077.086094][T16144] usb 4-1: Manufacturer: syz [ 1077.092290][T16144] usb 4-1: SerialNumber: syz [ 1077.101988][T16144] usb 4-1: config 0 descriptor?? [ 1077.315274][T16144] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1078.730831][T16144] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1078.764019][T16144] usb 4-1: USB disconnect, device number 50 [ 1079.105096][T16144] usb 1-1: USB disconnect, device number 56 [ 1079.297251][T22567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5249'. [ 1079.356400][T22567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5249'. [ 1079.376656][T22567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5249'. [ 1079.431193][T22567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5249'. [ 1079.460235][T22567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5249'. [ 1079.754515][T22580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5253'. [ 1080.163489][T22586] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1080.170038][T22586] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1080.417623][T22586] vhci_hcd vhci_hcd.0: Device attached [ 1080.673336][ T5366] usb 40-1: SetAddress Request (23) to port 0 [ 1080.742518][ T5366] usb 40-1: new SuperSpeed USB device number 23 using vhci_hcd [ 1081.192257][T22587] vhci_hcd: connection reset by peer [ 1081.207962][ T48] vhci_hcd vhci_hcd.3: stop threads [ 1081.213836][ T48] vhci_hcd vhci_hcd.3: release socket [ 1081.240794][ T48] vhci_hcd vhci_hcd.3: disconnect device [ 1082.901358][T22637] netlink: 'syz.0.5281': attribute type 1 has an invalid length. [ 1082.932044][T22637] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1083.631946][T22655] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1083.638500][T22655] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1083.652387][T22655] vhci_hcd vhci_hcd.0: Device attached [ 1083.923717][ T2174] usb 42-1: SetAddress Request (34) to port 0 [ 1083.925279][T16144] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1083.929899][ T2174] usb 42-1: new SuperSpeed USB device number 34 using vhci_hcd [ 1084.100388][T22656] vhci_hcd: connection reset by peer [ 1084.106500][T13207] vhci_hcd vhci_hcd.4: stop threads [ 1084.113959][T16144] usb 2-1: Using ep0 maxpacket: 8 [ 1084.119090][T13207] vhci_hcd vhci_hcd.4: release socket [ 1084.128394][T16144] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.138847][T13207] vhci_hcd vhci_hcd.4: disconnect device [ 1084.148489][T16144] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1084.161582][T16144] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1084.176951][T16144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.205381][T16144] usb 2-1: config 0 descriptor?? [ 1084.219301][T16144] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 1084.466577][T22672] netlink: 'syz.2.5284': attribute type 1 has an invalid length. [ 1084.500561][T22672] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1084.726941][T22678] netlink: 'syz.2.5296': attribute type 1 has an invalid length. [ 1084.872897][T22678] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1085.823296][T19885] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1085.863447][ T5366] usb 40-1: device descriptor read/8, error -110 [ 1085.983737][T19885] usb 4-1: Using ep0 maxpacket: 8 [ 1085.994900][T19885] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.033404][T19885] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1086.051628][T19885] usb 4-1: config 1 has no interface number 0 [ 1086.060033][T19885] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1086.097780][T19885] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1086.107384][T19885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.123437][T19885] usb 4-1: Product: syz [ 1086.133309][T19885] usb 4-1: Manufacturer: syz [ 1086.143410][T19885] usb 4-1: SerialNumber: syz [ 1086.265492][ T5366] usb usb40-port1: attempt power cycle [ 1086.361919][T22721] netlink: 'syz.4.5302': attribute type 1 has an invalid length. [ 1086.488489][T19885] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1086.577023][T20681] udevd[20681]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1086.667744][T21138] usb 2-1: USB disconnect, device number 58 [ 1086.834637][ T5366] usb usb40-port1: unable to enumerate USB device [ 1087.421459][T13095] Bluetooth: hci4: unexpected event for opcode 0x2019 [ 1087.708963][T11341] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.718873][T11341] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.730037][T11341] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.733856][T22750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1087.757896][T22751] netlink: 'syz.0.5313': attribute type 1 has an invalid length. [ 1087.780829][T11341] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.630503][T19883] usb 4-1: USB disconnect, device number 51 [ 1088.984808][ T2174] usb 42-1: device descriptor read/8, error -110 [ 1089.023327][T19885] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1089.058717][T22778] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1089.096872][T22781] netlink: 'syz.0.5326': attribute type 1 has an invalid length. [ 1089.187642][T19885] usb 2-1: Using ep0 maxpacket: 32 [ 1089.198862][T19885] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1089.214168][T19885] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.227659][T19885] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1089.241418][T19885] usb 2-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= 0.40 [ 1089.252459][T19885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.261275][T19885] usb 2-1: Product: syz [ 1089.265834][T22775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1089.265867][T19885] usb 2-1: Manufacturer: syz [ 1089.278423][T19885] usb 2-1: SerialNumber: syz [ 1089.297951][T22775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1089.298999][T19885] usb 2-1: BAAD SPEAKERPHONE c_chmask mismatch [ 1089.374590][T19885] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1089.385709][T19885] snd_usb_podhd 2-1:1.0: Line 6 POD HD500 found [ 1089.392153][T19885] usb 2-1: selecting invalid altsetting 1 [ 1089.399707][ T2174] usb usb42-port1: attempt power cycle [ 1089.407433][T19885] snd_usb_podhd 2-1:1.0: set_interface failed [ 1089.414196][T19885] snd_usb_podhd 2-1:1.0: Line 6 POD HD500 now disconnected [ 1089.421882][T19885] snd_usb_podhd 2-1:1.0: probe with driver snd_usb_podhd failed with error -22 [ 1089.453898][T20681] udevd[20681]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1089.524235][T19885] usb 2-1: USB disconnect, device number 59 [ 1089.638086][T13205] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.653373][T13205] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.670104][T13205] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.700637][T13205] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.806428][T22792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1089.848377][T22792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1089.964412][ T2174] usb usb42-port1: unable to enumerate USB device [ 1090.123300][ T5366] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1090.314147][ T5366] usb 1-1: Using ep0 maxpacket: 8 [ 1090.321272][ T5366] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.338084][ T5366] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1090.359845][ T5366] usb 1-1: config 1 has no interface number 0 [ 1090.373332][ T5366] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1090.396396][ T5366] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1090.406230][ T5366] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.414499][ T5366] usb 1-1: Product: syz [ 1090.418704][ T5366] usb 1-1: Manufacturer: syz [ 1090.426014][ T5366] usb 1-1: SerialNumber: syz [ 1090.740648][ T5366] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1090.782449][T20681] udevd[20681]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1091.357799][T22823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1091.378927][T22826] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1091.463489][T13095] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1091.473780][T13095] Bluetooth: hci4: Injecting HCI hardware error event [ 1091.482041][T13095] Bluetooth: hci4: hardware error 0x00 [ 1092.095122][T22837] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1092.908036][ T5366] usb 1-1: USB disconnect, device number 57 [ 1093.054377][ T30] audit: type=1800 audit(1780113215.568:100): pid=22854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5357" name="file1" dev="tmpfs" ino=821 res=0 errno=0 [ 1093.354018][T22870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5363'. [ 1093.543516][T13095] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1093.624484][T21138] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1093.751837][ T30] audit: type=1326 audit(1780113216.268:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22873 comm="syz.3.5365" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 1093.779653][ T30] audit: type=1326 audit(1780113216.268:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22873 comm="syz.3.5365" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 1093.805860][T21138] usb 2-1: config 0 has no interfaces? [ 1093.811515][T21138] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1093.820867][ T30] audit: type=1326 audit(1780113216.298:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22873 comm="syz.3.5365" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=103 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 1093.845432][T21138] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.859608][T21138] usb 2-1: config 0 descriptor?? [ 1093.880182][ T30] audit: type=1326 audit(1780113216.298:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22873 comm="syz.3.5365" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 1093.905454][ T30] audit: type=1326 audit(1780113216.298:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22873 comm="syz.3.5365" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 1093.931136][ T30] audit: type=1326 audit(1780113216.298:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22873 comm="syz.3.5365" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 1093.966130][ T30] audit: type=1326 audit(1780113216.298:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22873 comm="syz.3.5365" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 1093.990461][ T30] audit: type=1326 audit(1780113216.298:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22873 comm="syz.3.5365" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 1094.015593][ T30] audit: type=1326 audit(1780113216.298:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22873 comm="syz.3.5365" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 1094.074571][T22880] netlink: 'syz.2.5368': attribute type 1 has an invalid length. [ 1094.104619][T19885] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1094.263333][T19885] usb 4-1: Using ep0 maxpacket: 8 [ 1094.272406][T19885] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.288597][T19885] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1094.298082][T19885] usb 4-1: config 1 has no interface number 0 [ 1094.305346][T19885] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1094.318240][T19885] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1094.328198][T19885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.336549][T19885] usb 4-1: Product: syz [ 1094.340981][T19885] usb 4-1: Manufacturer: syz [ 1094.346100][T19885] usb 4-1: SerialNumber: syz [ 1094.433394][ T2174] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1094.593563][ T2174] usb 1-1: Using ep0 maxpacket: 8 [ 1094.604848][ T2174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1094.623315][ T2174] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1094.643235][ T2174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.656037][ T2174] usb 1-1: config 0 descriptor?? [ 1094.675832][ T2174] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 1094.972641][T19885] usb 4-1: USB disconnect, device number 52 [ 1096.413121][T19885] usb 2-1: USB disconnect, device number 60 [ 1096.873278][ T5366] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1097.053254][ T5366] usb 2-1: Using ep0 maxpacket: 8 [ 1097.066766][ T5366] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.097119][ T5366] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1097.122171][ T5366] usb 2-1: config 1 has no interface number 0 [ 1097.140827][ T5366] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1097.172310][ T5366] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1097.191944][ T5366] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.202372][T21138] usb 1-1: USB disconnect, device number 58 [ 1097.216556][ T5366] usb 2-1: Product: syz [ 1097.225309][ T5366] usb 2-1: Manufacturer: syz [ 1097.239338][ T5366] usb 2-1: SerialNumber: syz [ 1097.318698][T22940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.326376][T22940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.399220][T22940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1097.414130][T22940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1097.532216][ T48] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.542002][ T48] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.562834][ T48] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.590870][ T48] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.819455][T22948] fuse: Bad value for 'fd' [ 1097.994644][ T5743] usb 2-1: USB disconnect, device number 61 [ 1098.018888][T22951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1098.108923][T22951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1099.243591][ T5743] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1099.393733][ T5743] usb 4-1: Using ep0 maxpacket: 8 [ 1099.408753][ T5743] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1099.419827][ T5743] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1099.429942][ T5743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.441397][ T5743] usb 4-1: config 0 descriptor?? [ 1099.467257][ T5743] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 1102.004514][T19885] usb 4-1: USB disconnect, device number 53 [ 1102.304689][T23039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5417'. [ 1102.818974][T23053] syzkaller0: entered promiscuous mode [ 1102.829460][T23055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5423'. [ 1102.843520][T23053] syzkaller0: entered allmulticast mode [ 1102.886126][T23055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5423'. [ 1103.011605][T23055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5423'. [ 1103.042871][T23055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5423'. [ 1103.281382][T23055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5423'. [ 1103.315317][T23055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5423'. [ 1104.044663][T23071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5428'. [ 1104.084032][T23071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5428'. [ 1104.583276][T16145] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1104.755002][T16145] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1104.782884][T16145] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.804862][T16145] usb 2-1: Product: syz [ 1104.814366][T16145] usb 2-1: Manufacturer: syz [ 1104.826600][T16145] usb 2-1: SerialNumber: syz [ 1104.851857][T16145] usb 2-1: config 0 descriptor?? [ 1104.874498][T16145] hub 2-1:0.0: bad descriptor, ignoring hub [ 1104.890923][T16145] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1105.089712][T16145] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1105.166426][T16145] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1105.196682][T16145] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1105.221303][T16145] usb 2-1: media controller created [ 1105.267227][T16145] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1105.474752][T16145] DVB: Unable to find symbol dib7000p_attach() [ 1105.511462][T16145] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1105.703941][T16145] rc_core: IR keymap rc-dib0700-rc5 not found [ 1105.720667][T16145] Registered IR keymap rc-empty [ 1105.734853][T16145] dvb-usb: could not initialize remote control. [ 1105.749786][T16145] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1106.077941][T16145] usb 2-1: USB disconnect, device number 62 [ 1106.142010][T16145] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1106.180879][T23133] netlink: 'syz.4.5453': attribute type 10 has an invalid length. [ 1106.190653][T23133] syz_tun: entered promiscuous mode [ 1106.204492][T23133] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1106.213807][T13207] bond0: (slave syz_tun): interface is now down [ 1106.252515][T13207] bond0: now running without any active interface! [ 1106.395095][T23144] kvm: MWAIT instruction emulated as NOP! [ 1107.987484][T23183] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5472'. [ 1109.070550][T23212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5485'. [ 1109.623797][T16145] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1109.753527][ T5743] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 1109.783415][T16145] usb 2-1: Using ep0 maxpacket: 8 [ 1109.792030][T16145] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1109.801611][T16145] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1109.815132][T16145] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1109.826368][T16145] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1109.841879][T16145] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1109.851314][T16145] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.859777][T16145] usb 2-1: Product: syz [ 1109.864517][T16145] usb 2-1: Manufacturer: syz [ 1109.869152][T16145] usb 2-1: SerialNumber: syz [ 1109.876016][T16145] usb 2-1: config 0 descriptor?? [ 1109.882420][T23222] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1109.915705][ T5743] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1109.933992][ T5743] usb 4-1: not running at top speed; connect to a high speed hub [ 1109.954620][ T5743] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1109.963271][ T5743] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1109.981813][ T5743] usb 4-1: config 14 has no interface number 0 [ 1109.994776][ T5743] usb 4-1: config 14 has no interface number 1 [ 1110.013299][ T5743] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1110.033314][ T5743] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1110.063224][ T5743] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 1110.083225][ T5743] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1110.113242][ T5743] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1110.121992][T16145] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1110.131095][ T5743] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1110.157139][T16145] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input67 [ 1110.169377][ T5743] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1110.183356][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.210791][ T5743] usb 4-1: Product: syz [ 1110.223276][ T5743] usb 4-1: Manufacturer: syz [ 1110.233334][ T5743] usb 4-1: SerialNumber: syz [ 1110.447630][ C0] powermate: config urb returned -71 [ 1110.448106][ T5366] usb 2-1: USB disconnect, device number 63 [ 1110.452976][ C0] powermate: usb_submit_urb(config) failed [ 1110.459160][ C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1110.675772][ T5743] legousbtower 4-1:14.57: interrupt endpoints not found [ 1110.725502][T23245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5496'. [ 1111.081322][ T5743] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1111.107450][ T5743] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1111.371808][ T5366] usb 4-1: USB disconnect, device number 54 [ 1111.399370][ T5366] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 1112.203640][ T5366] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1112.363621][ T5366] usb 4-1: Using ep0 maxpacket: 8 [ 1112.370676][ T5366] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1112.382307][ T5366] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1112.392498][ T5366] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.406667][ T5366] usb 4-1: config 0 descriptor?? [ 1112.630427][ T5366] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1112.833074][ T5743] usb 4-1: USB disconnect, device number 55 [ 1112.839104][ C0] iowarrior 4-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 1113.758571][T23332] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5535'. [ 1114.009972][T23343] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1114.016519][T23343] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1114.041252][T23343] vhci_hcd vhci_hcd.0: Device attached [ 1114.204812][T23347] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1114.303282][ T5366] usb 36-1: SetAddress Request (18) to port 0 [ 1114.352700][ T5366] usb 36-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1114.376588][T23343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1114.448750][T23343] 8021q: adding VLAN 0 to HW filter on device team0 [ 1114.486329][T23343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1114.648252][T23343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.692673][T23343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.764718][T23343] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1114.785616][T23343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1114.840754][T23343] veth1_vlan: left promiscuous mode [ 1114.858002][T23343] veth0_vlan: left promiscuous mode [ 1114.878145][T23343] veth0_vlan: entered promiscuous mode [ 1114.905934][T23343] veth1_vlan: entered promiscuous mode [ 1114.941142][T23343] veth1_macvtap: left promiscuous mode [ 1114.962148][T23343] veth0_macvtap: left promiscuous mode [ 1114.981815][T23343] veth0_macvtap: entered promiscuous mode [ 1115.001998][T23343] veth1_macvtap: entered promiscuous mode [ 1115.038846][T23343] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1115.062658][T23343] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1115.082554][T23343] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1115.103115][T23343] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1115.118327][T23343] mac80211_hwsim hwsim20 wlan0: left promiscuous mode [ 1115.135896][T23343] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 1115.157721][T23350] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1115.172796][T13203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.180040][T13203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1115.214263][T13203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.221442][T13203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.291305][T23344] vhci_hcd: connection reset by peer [ 1115.291336][T13207] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.321706][T13209] vhci_hcd vhci_hcd.1: stop threads [ 1115.343050][T13209] vhci_hcd vhci_hcd.1: release socket [ 1115.370134][T13207] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.387385][T13209] vhci_hcd vhci_hcd.1: disconnect device [ 1115.411409][T13207] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.420498][T13207] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.710287][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.716809][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.553699][T23389] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5557'. [ 1117.967965][T23415] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1117.974514][T23415] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1118.038654][T23415] vhci_hcd vhci_hcd.0: Device attached [ 1118.129187][T23418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1118.160264][T23418] 8021q: adding VLAN 0 to HW filter on device team0 [ 1118.195833][T23418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1118.314685][ T2174] usb 34-1: SetAddress Request (14) to port 0 [ 1118.342237][T23418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1118.350902][ T2174] usb 34-1: new SuperSpeed USB device number 14 using vhci_hcd [ 1118.350952][T23396] syz.3.5559 (23396): drop_caches: 2 [ 1118.381930][T23418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1118.422840][T23418] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1118.462725][T23418] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1118.514728][T23418] veth1_vlan: left promiscuous mode [ 1118.534497][T23418] veth0_vlan: left promiscuous mode [ 1118.553666][T23418] veth0_vlan: entered promiscuous mode [ 1118.585959][T23418] veth1_vlan: entered promiscuous mode [ 1118.622405][T23418] veth1_macvtap: left promiscuous mode [ 1118.644135][T23418] veth0_macvtap: left promiscuous mode [ 1118.665362][T23418] veth0_macvtap: entered promiscuous mode [ 1118.686668][T23418] veth1_macvtap: entered promiscuous mode [ 1118.723555][T23418] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1118.745672][T23418] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1118.768141][T23418] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1118.785473][T23418] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1118.803655][T23418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1118.819871][T23418] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1118.843920][T13203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.851085][T13203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1118.861611][T13203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.868805][T13203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1118.907721][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.916588][T23416] vhci_hcd: connection reset by peer [ 1118.922422][T13203] vhci_hcd vhci_hcd.0: stop threads [ 1118.942690][T13203] vhci_hcd vhci_hcd.0: release socket [ 1118.949647][T13205] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.958536][T13203] vhci_hcd vhci_hcd.0: disconnect device [ 1118.975789][T13205] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.001249][T13205] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.105781][T23432] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1119.134216][T23436] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1119.463743][ T5366] usb 36-1: device descriptor read/8, error -110 [ 1119.634923][T23459] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.642271][T23459] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.771016][T23459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1119.793615][T23459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1119.880083][ T5366] usb usb36-port1: attempt power cycle [ 1119.956238][T13207] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.974961][T16144] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1119.988618][T13207] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.018126][T13207] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.046680][T13207] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.166188][T16144] usb 1-1: config 0 has no interfaces? [ 1120.171852][T16144] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1120.205902][T16144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.229318][T16144] usb 1-1: config 0 descriptor?? [ 1120.444555][ T5366] usb usb36-port1: unable to enumerate USB device [ 1120.686454][T23489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1120.751055][T23489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1120.766709][T23489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1120.778690][T23489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1122.529738][T23534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5618'. [ 1122.568093][T23534] bond12: (slave veth0_to_bond): Releasing backup interface [ 1122.658295][T23537] syz.2.5619 (23537): drop_caches: 2 [ 1122.737076][ T5743] usb 1-1: USB disconnect, device number 59 [ 1123.221721][T23555] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1123.228269][T23555] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1123.276786][T23555] vhci_hcd vhci_hcd.0: Device attached [ 1123.319401][T23560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.331422][T23560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.446064][T23564] netlink: 'syz.3.5630': attribute type 1 has an invalid length. [ 1123.488759][T23564] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1123.516418][T23564] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1123.866193][T23556] vhci_hcd: connection reset by peer [ 1123.877345][T13209] vhci_hcd vhci_hcd.0: stop threads [ 1123.898514][T13209] vhci_hcd vhci_hcd.0: release socket [ 1123.912438][ T2174] usb 34-1: device descriptor read/8, error -110 [ 1123.919679][T13209] vhci_hcd vhci_hcd.0: disconnect device [ 1124.314582][ T2174] usb usb34-port1: attempt power cycle [ 1124.423931][T22370] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1124.440914][T22370] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1124.448946][T22370] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1124.461392][T22370] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1124.471421][T22370] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1124.886806][ T2174] usb usb34-port1: unable to enumerate USB device [ 1124.973305][ T5743] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1125.006078][T23585] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.013363][T23585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.020707][T23585] bridge_slave_0: entered allmulticast mode [ 1125.029875][T23585] bridge_slave_0: entered promiscuous mode [ 1125.047005][T23585] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.062080][T23585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.081514][T23585] bridge_slave_1: entered allmulticast mode [ 1125.097529][T23585] bridge_slave_1: entered promiscuous mode [ 1125.133471][ T5743] usb 1-1: Using ep0 maxpacket: 8 [ 1125.144728][ T5743] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.164681][ T5743] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1125.179237][T23585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1125.188491][ T5743] usb 1-1: config 1 has no interface number 0 [ 1125.194728][ T5743] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1125.209658][T23585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1125.221448][ T5743] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1125.241906][ T5743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.262173][ T5743] usb 1-1: Product: syz [ 1125.268140][ T5743] usb 1-1: Manufacturer: syz [ 1125.276105][T23585] team0: Port device team_slave_0 added [ 1125.281720][ T5743] usb 1-1: SerialNumber: syz [ 1125.306776][T23585] team0: Port device team_slave_1 added [ 1125.371242][T23585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.378435][T23585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.405070][T23585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.418637][T23585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.426455][T23585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.453612][T23585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1125.594124][T23585] hsr_slave_0: entered promiscuous mode [ 1125.610967][T23585] hsr_slave_1: entered promiscuous mode [ 1125.620849][T23585] debugfs: 'hsr0' already exists in 'hsr' [ 1125.633813][T23585] Cannot create hsr debugfs directory [ 1125.651831][ T5743] usb 1-1: USB disconnect, device number 60 [ 1125.722382][T20725] udevd[20725]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1125.777644][T23605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1125.846510][T23606] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1125.937345][T23608] macvlan3: entered promiscuous mode [ 1125.950199][T23608] macvlan3: entered allmulticast mode [ 1125.963092][T23608] bond1: entered promiscuous mode [ 1125.973060][T23608] veth0_to_bond: entered promiscuous mode [ 1125.987225][T23608] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1126.113030][T23608] bond1: left promiscuous mode [ 1126.124084][T23608] veth0_to_bond: left promiscuous mode [ 1126.364520][T23621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5648'. [ 1126.409023][T23621] ipvlan2: entered allmulticast mode [ 1126.425412][T23621] syz_tun: entered allmulticast mode [ 1126.437156][T23623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5650'. [ 1126.514736][T22370] Bluetooth: hci3: command tx timeout [ 1126.568647][T13095] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1126.586073][T13095] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1126.597826][T13095] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1126.607770][T13095] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1126.617406][T13095] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1127.103394][T19883] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1127.238245][T23626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1127.252454][T23626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1127.263600][T19883] usb 2-1: Using ep0 maxpacket: 8 [ 1127.278414][T19883] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.297894][T19883] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1127.327353][T19883] usb 2-1: config 1 has no interface number 0 [ 1127.344874][T19883] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1127.369614][T19883] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1127.384596][T19883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.393778][T19883] usb 2-1: Product: syz [ 1127.397973][T19883] usb 2-1: Manufacturer: syz [ 1127.402566][T19883] usb 2-1: SerialNumber: syz [ 1127.520572][T13209] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.543919][T13209] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.598240][T13209] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.627944][T13209] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.726448][T23648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5660'. [ 1127.824181][T19883] usb 2-1: USB disconnect, device number 64 [ 1127.849268][T23646] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1127.981208][T23649] bond5: (slave veth0_to_bond): Releasing backup interface [ 1128.017489][T23649] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1128.121677][T23651] macvlan3: entered promiscuous mode [ 1128.133389][T23651] macvlan3: entered allmulticast mode [ 1128.145810][T23651] bond6: entered promiscuous mode [ 1128.160805][T23651] veth0_to_bond: entered promiscuous mode [ 1128.168081][T23651] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1128.176190][T23651] bond6: left promiscuous mode [ 1128.181132][T23651] veth0_to_bond: left promiscuous mode [ 1128.593697][T22370] Bluetooth: hci3: command tx timeout [ 1128.668479][T22370] Bluetooth: hci4: command tx timeout [ 1128.821766][T23670] netlink: 'syz.3.5666': attribute type 1 has an invalid length. [ 1128.938088][T23098] bond0: (slave syz_tun): Releasing backup interface [ 1129.000979][T23670] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1129.018236][T23673] bond6: (slave veth0_to_bond): Releasing backup interface [ 1129.032542][T23673] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1129.228779][T19883] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1129.384480][T19883] usb 1-1: Using ep0 maxpacket: 8 [ 1129.405102][T19883] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.425016][T19883] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1129.441582][T19883] usb 1-1: config 1 has no interface number 0 [ 1129.466214][T19883] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1129.506445][T19883] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1129.529146][T19883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.558731][T19883] usb 1-1: Product: syz [ 1129.573438][T19883] usb 1-1: Manufacturer: syz [ 1129.583459][T19883] usb 1-1: SerialNumber: syz [ 1129.639456][T23585] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1129.668001][T23585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1129.685475][T23629] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.704240][T23629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.715215][T23629] bridge_slave_0: entered allmulticast mode [ 1129.735348][T23629] bridge_slave_0: entered promiscuous mode [ 1129.745315][T23585] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1129.757610][T23585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1129.773989][T23629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.782022][T23629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.795781][T23629] bridge_slave_1: entered allmulticast mode [ 1129.803829][T23629] bridge_slave_1: entered promiscuous mode [ 1129.828869][T23585] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1129.850638][T23585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1129.887440][T23585] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1129.907748][T23585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1129.927332][T23629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1129.940861][T23629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1130.004728][T23629] team0: Port device team_slave_0 added [ 1130.027430][T23629] team0: Port device team_slave_1 added [ 1130.182848][T23629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1130.191184][T23629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.218170][T23629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1130.235354][T23629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1130.242462][T23629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.249995][T19883] usb 1-1: USB disconnect, device number 61 [ 1130.281166][T23629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1130.433697][ T5743] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1130.447370][T23629] hsr_slave_0: entered promiscuous mode [ 1130.458891][T23629] hsr_slave_1: entered promiscuous mode [ 1130.467812][T23629] debugfs: 'hsr0' already exists in 'hsr' [ 1130.475954][T23629] Cannot create hsr debugfs directory [ 1130.595278][ T5743] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1130.604382][ T5743] usb 2-1: config 0 has no interface number 0 [ 1130.613690][ T5743] usb 2-1: too many endpoints for config 0 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 1130.641105][ T5743] usb 2-1: config 0 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1130.663365][T22370] Bluetooth: hci3: command tx timeout [ 1130.673681][ T5743] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1130.690198][ T5743] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1130.704315][T23585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1130.710952][ T5743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.730819][ T5743] usb 2-1: config 0 descriptor?? [ 1130.757660][T22370] Bluetooth: hci4: command tx timeout [ 1130.825739][T23585] 8021q: adding VLAN 0 to HW filter on device team0 [ 1130.856824][T13209] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.864006][T13209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1130.898699][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.905869][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1130.951847][ T5743] usb 2-1: string descriptor 0 read error: -71 [ 1130.981193][ T5743] usb 2-1: selecting invalid altsetting 1 [ 1131.022998][ T5743] dvb_ttusb_budget: ttusb_init_controller: error [ 1131.029792][ T5743] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1131.219207][ T5743] DVB: Unable to find symbol cx22700_attach() [ 1131.299515][T23629] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1131.340742][ T5743] DVB: Unable to find symbol tda10046_attach() [ 1131.355172][T23629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1131.364961][ T5743] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1131.382017][T23629] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1131.392208][ T5743] usb 2-1: USB disconnect, device number 65 [ 1131.408597][T23629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1131.448656][T23629] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1131.487290][T23629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1131.505633][T23629] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1131.539156][T23629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1131.572469][T23585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1131.815611][T23585] veth0_vlan: entered promiscuous mode [ 1131.854412][T23585] veth1_vlan: entered promiscuous mode [ 1131.976300][T23585] veth0_macvtap: entered promiscuous mode [ 1132.006449][T23629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1132.027689][T23585] veth1_macvtap: entered promiscuous mode [ 1132.070070][T23629] 8021q: adding VLAN 0 to HW filter on device team0 [ 1132.102111][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.109314][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1132.170448][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.177664][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1132.218685][T23585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1132.255764][T23585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1132.297541][T13209] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.320687][T13209] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.365700][T13209] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.395907][T13209] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.726250][T13205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1132.744090][T22370] Bluetooth: hci3: command tx timeout [ 1132.761899][T13205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1132.798462][T23629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1132.827168][T22370] Bluetooth: hci4: command tx timeout [ 1132.878075][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1132.927591][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.042631][T23629] veth0_vlan: entered promiscuous mode [ 1133.111399][T23629] veth1_vlan: entered promiscuous mode [ 1133.234927][T23629] veth0_macvtap: entered promiscuous mode [ 1133.265953][T23629] veth1_macvtap: entered promiscuous mode [ 1133.346830][T23629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1133.382925][T23629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1133.441490][T13207] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.475578][T13207] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.511149][T13207] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.536277][T13207] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.683750][T16144] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1133.735856][T21138] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1133.770405][T13207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.781581][T13207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.868217][T13209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.893321][T13209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.901562][T16144] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1133.915211][T16144] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1133.926672][T21138] usb 2-1: config 0 has no interfaces? [ 1133.932726][T21138] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1133.942730][T16144] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1133.957364][T21138] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.970733][T16144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.995879][T21138] usb 2-1: config 0 descriptor?? [ 1134.027869][T23743] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1134.055521][T23747] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1134.062058][T23747] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1134.107244][T16144] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1134.227820][T23747] vhci_hcd vhci_hcd.0: Device attached [ 1134.447407][T23750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1134.489239][T23750] 8021q: adding VLAN 0 to HW filter on device team0 [ 1134.537095][T23750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1134.544319][T19886] usb 34-1: SetAddress Request (18) to port 0 [ 1134.560822][T19886] usb 34-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1134.580727][T19883] usb 3-1: USB disconnect, device number 23 [ 1134.750830][T23750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1134.796045][T23750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1134.877340][T23750] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1134.898845][T23750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1134.916500][T22370] Bluetooth: hci4: command tx timeout [ 1134.951910][T23750] veth1_vlan: left promiscuous mode [ 1134.969529][T23750] veth0_vlan: left promiscuous mode [ 1134.988987][T23750] veth0_vlan: entered promiscuous mode [ 1135.016241][T23750] veth1_vlan: entered promiscuous mode [ 1135.055953][T23750] veth1_macvtap: left promiscuous mode [ 1135.074489][T23750] veth0_macvtap: left promiscuous mode [ 1135.082289][T23750] veth0_macvtap: entered promiscuous mode [ 1135.101022][T23750] veth1_macvtap: entered promiscuous mode [ 1135.116134][T23750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1135.134039][T23750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1135.155389][T23750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1135.174428][T23750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1135.189618][T23750] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1135.207518][T23750] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1135.228345][T23750] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1135.255248][T23748] vhci_hcd: connection reset by peer [ 1135.262006][T13207] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.269176][T13207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1135.281349][T13203] vhci_hcd vhci_hcd.0: stop threads [ 1135.293415][T13203] vhci_hcd vhci_hcd.0: release socket [ 1135.303525][T13203] vhci_hcd vhci_hcd.0: disconnect device [ 1135.312476][T13207] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.319669][T13207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1135.402163][T11341] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.412888][T11341] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.491910][T23764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5690'. [ 1135.517176][T23764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5690'. [ 1135.544408][T23762] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1135.565109][T11341] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.617257][T23764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1135.655592][T23764] bond1: (slave bond0): making interface the new active one [ 1135.708014][T23764] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1135.739718][T11341] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.901177][T23776] bridge0: port 4(syz_tun) entered blocking state [ 1135.910739][T23778] netlink: 'syz.2.5696': attribute type 1 has an invalid length. [ 1135.918804][T23776] bridge0: port 4(syz_tun) entered disabled state [ 1135.978372][T23776] syz_tun: entered promiscuous mode [ 1136.002171][T23780] bridge0: port 3(veth0_to_bond) entered blocking state [ 1136.011503][T23780] bridge0: port 3(veth0_to_bond) entered disabled state [ 1136.020224][T23780] veth0_to_bond: entered allmulticast mode [ 1136.036252][T23780] veth0_to_bond: entered promiscuous mode [ 1136.050198][T23778] macvlan2: entered promiscuous mode [ 1136.057357][T23778] macvlan2: entered allmulticast mode [ 1136.069607][T23778] bridge0: port 4(macvlan2) entered blocking state [ 1136.091449][T23778] bridge0: port 4(macvlan2) entered disabled state [ 1136.499804][T21138] usb 2-1: USB disconnect, device number 66 [ 1136.613279][T16144] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1136.814663][T16144] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1136.849573][T16144] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1136.884265][T16144] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1136.913124][T23815] netlink: 'syz.5.5713': attribute type 1 has an invalid length. [ 1136.921183][T16144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.937637][T23788] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1136.960107][T16144] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1137.310967][T23830] veth0_to_bond: left allmulticast mode [ 1137.317548][T23830] veth0_to_bond: left promiscuous mode [ 1137.328811][T23830] bridge0: port 3(veth0_to_bond) entered disabled state [ 1137.344381][T21138] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1137.525935][T21138] usb 4-1: config 0 has no interfaces? [ 1137.533059][T21138] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1137.557003][T21138] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.587592][T21138] usb 4-1: config 0 descriptor?? [ 1137.736716][T23848] netlink: 'syz.5.5727': attribute type 1 has an invalid length. [ 1137.753061][T23848] macvlan2: entered promiscuous mode [ 1137.759087][T23848] macvlan2: entered allmulticast mode [ 1137.784033][ T5366] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1137.808702][T19883] usb 4-1: USB disconnect, device number 56 [ 1137.946299][ T5366] usb 2-1: Using ep0 maxpacket: 8 [ 1137.956241][ T5366] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1137.977801][ T5366] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1138.005196][ T5366] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1138.033139][ T5366] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1138.061665][ T5366] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1138.075607][ T5366] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.093521][ T5366] usb 2-1: Product: syz [ 1138.104533][ T5366] usb 2-1: Manufacturer: syz [ 1138.122547][ T5366] usb 2-1: SerialNumber: syz [ 1138.144782][ T5366] usb 2-1: config 0 descriptor?? [ 1138.158262][T23840] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1138.383375][ T5366] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1138.444851][ T5366] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input72 [ 1138.493795][ C1] powermate: config urb returned -71 [ 1138.499924][ C1] powermate: config urb returned -71 [ 1138.507250][ C1] powermate: config urb returned -71 [ 1138.513282][ C1] powermate: config urb returned -71 [ 1138.560358][ T5366] usb 2-1: USB disconnect, device number 67 [ 1138.566419][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1138.892860][T23875] netlink: 'syz.3.5739': attribute type 1 has an invalid length. [ 1138.993029][T23875] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1139.079130][T23880] bond7: (slave veth0_to_bond): Releasing backup interface [ 1139.108167][T23880] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1139.129256][T23883] macvlan3: entered promiscuous mode [ 1139.138029][T23883] macvlan3: entered allmulticast mode [ 1139.146181][T23883] bond8: entered promiscuous mode [ 1139.151295][T23883] veth0_to_bond: entered promiscuous mode [ 1139.174311][T23883] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1139.189475][T23883] bond8: left promiscuous mode [ 1139.195421][T23883] veth0_to_bond: left promiscuous mode [ 1139.313270][T19885] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1139.436235][ T5743] usb 1-1: USB disconnect, device number 62 [ 1139.481007][T19885] usb 3-1: config 0 has no interfaces? [ 1139.493299][T19885] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1139.514609][T19885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.544045][ T5366] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1139.553981][T19885] usb 3-1: config 0 descriptor?? [ 1139.626765][T19886] usb 34-1: device descriptor read/8, error -110 [ 1139.713285][ T5366] usb 6-1: Using ep0 maxpacket: 8 [ 1139.720276][ T5366] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1139.729225][ T5366] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1139.739864][ T5366] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1139.750460][ T5366] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1139.762580][ T5366] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1139.795498][ T5366] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1139.815281][T19883] usb 3-1: USB disconnect, device number 24 [ 1139.821265][ T5366] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.833697][T19885] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1139.874790][ T5743] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1139.993293][T19885] usb 2-1: Using ep0 maxpacket: 32 [ 1140.001107][T19885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.013768][T19885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1140.025954][T19886] usb usb34-port1: attempt power cycle [ 1140.033047][T19885] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1140.045294][T19885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.053273][ T5743] usb 1-1: Using ep0 maxpacket: 8 [ 1140.060206][ T5743] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1140.067138][ T5366] usb 6-1: usb_control_msg returned -32 [ 1140.076158][T19885] usb 2-1: config 0 descriptor?? [ 1140.083082][ T5366] usbtmc 6-1:16.0: can't read capabilities [ 1140.092551][T19885] hub 2-1:0.0: USB hub found [ 1140.093929][ T5743] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1140.123395][ T5743] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1140.135880][ T5743] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1140.151455][ T5743] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1140.168158][ T5743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.176376][ T5743] usb 1-1: Product: syz [ 1140.180551][ T5743] usb 1-1: Manufacturer: syz [ 1140.186958][ T5743] usb 1-1: SerialNumber: syz [ 1140.197586][ T5743] usb 1-1: config 0 descriptor?? [ 1140.213677][T23905] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1140.438755][ T5743] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1140.456906][ T5743] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input73 [ 1140.585627][T19886] usb usb34-port1: unable to enumerate USB device [ 1140.655569][ C0] powermate: config urb returned -71 [ 1140.657568][T19886] usb 1-1: USB disconnect, device number 63 [ 1140.660885][ C0] powermate: usb_submit_urb(config) failed [ 1140.660939][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1140.693646][ T5366] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1140.831356][T23929] bond1: option mode: unable to set because the bond device has slaves [ 1140.841194][T23929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5761'. [ 1140.851703][T23929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5761'. [ 1140.866746][T23927] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 1140.867099][T23929] bond1: (slave bond0): Releasing active interface [ 1140.879764][ T5366] usb 4-1: Using ep0 maxpacket: 32 [ 1140.887934][ T5366] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 1140.898436][ T5366] usb 4-1: config 0 has no interface number 0 [ 1140.907029][ T5366] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1140.918408][ T5366] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1140.939801][ T5366] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1140.950427][ T5366] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1140.967312][ T5366] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1140.976467][ T5366] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.987777][ T5366] usb 4-1: Product: syz [ 1140.992353][ T5366] usb 4-1: Manufacturer: syz [ 1140.999385][ T5366] usb 4-1: SerialNumber: syz [ 1141.008555][ T5366] usb 4-1: config 0 descriptor?? [ 1141.025707][ T5366] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input74 [ 1141.061142][T23935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5763'. [ 1141.072138][ T5366] usb 6-1: USB disconnect, device number 2 [ 1141.230471][T21138] usb 4-1: USB disconnect, device number 57 [ 1141.242189][T23939] netlink: 'syz.0.5765': attribute type 1 has an invalid length. [ 1141.287563][T23939] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1141.307491][T23939] bond3: (slave veth0_to_bond): Releasing backup interface [ 1141.321132][T23939] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1141.347085][T23939] macvlan2: entered promiscuous mode [ 1141.352486][T23939] macvlan2: entered allmulticast mode [ 1141.358883][T23939] bond4: entered promiscuous mode [ 1141.364192][T23939] veth0_to_bond: entered promiscuous mode [ 1141.370636][T23939] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1141.378392][T23939] bond4: left promiscuous mode [ 1141.383574][T23939] veth0_to_bond: left promiscuous mode [ 1141.393269][ T5743] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1141.548774][ T5743] usb 3-1: config 0 has no interfaces? [ 1141.554635][ T5743] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1141.564773][ T5743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.578469][ T5743] usb 3-1: config 0 descriptor?? [ 1141.897557][ T5366] usb 3-1: USB disconnect, device number 25 [ 1142.074886][ T2174] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1142.234977][ T2174] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1142.245299][ T2174] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1142.257870][ T2174] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1142.271638][ T2174] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1142.281005][ T2174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.289134][ T2174] usb 4-1: Product: syz [ 1142.293742][ T2174] usb 4-1: Manufacturer: syz [ 1142.298391][ T2174] usb 4-1: SerialNumber: syz [ 1142.306858][ T2174] usb 4-1: config 0 descriptor?? [ 1142.312438][T23951] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1142.320074][T23951] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1142.329966][ T2174] usb 4-1: ucan: probing device on interface #0 [ 1142.469670][T23953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5769'. [ 1142.491523][T23953] bond4: (slave veth0_to_bond): Releasing backup interface [ 1142.680346][T23962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5772'. [ 1142.689644][T23962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5772'. [ 1142.702321][T23957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1142.714727][T23958] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1142.751283][T23957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1142.807195][T23951] bridge0: port 5(netdevsim0) entered blocking state [ 1142.821649][T19885] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1142.849928][T23951] bridge0: port 5(netdevsim0) entered disabled state [ 1142.875253][T23951] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1142.877800][T19885] usbhid 2-1:0.0: can't add hid device: -71 [ 1142.919401][T19885] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1142.932641][T23951] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1142.977960][T19885] usb 2-1: USB disconnect, device number 68 [ 1143.000705][T23972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5777'. [ 1143.060294][ T2174] usb 4-1: ucan: could not read protocol version, ret=-71 [ 1143.074415][ T2174] usb 4-1: ucan: probe failed; try to update the device firmware [ 1143.088792][ T2174] usb 4-1: USB disconnect, device number 58 [ 1143.143933][T16145] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1143.303405][T16145] usb 6-1: Using ep0 maxpacket: 8 [ 1143.312586][T16145] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1143.322527][T16145] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1143.335050][T16145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1143.346694][T16145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1143.360965][T16145] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1143.370568][T16145] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.388697][T16145] usb 6-1: Product: syz [ 1143.397066][T16145] usb 6-1: Manufacturer: syz [ 1143.401681][T16145] usb 6-1: SerialNumber: syz [ 1143.411560][T16145] usb 6-1: config 0 descriptor?? [ 1143.418077][T23967] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1143.653373][ T5743] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1143.698599][T16145] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1143.767945][T16145] input: Griffin SoundKnob as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input75 [ 1143.977561][ T5743] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1143.990123][ C0] powermate: config urb returned -71 [ 1143.990603][T19883] usb 6-1: USB disconnect, device number 3 [ 1143.995428][ C0] powermate: usb_submit_urb(config) failed [ 1143.995480][ C0] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1144.052271][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.092609][ T5743] usb 3-1: Product: syz [ 1144.113011][ T5743] usb 3-1: Manufacturer: syz [ 1144.132324][ T5743] usb 3-1: SerialNumber: syz [ 1144.385294][ T5743] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1144.431242][ T5743] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1144.465765][ T5743] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1144.538892][ T5743] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1144.619365][ T5743] usb 3-1: USB disconnect, device number 26 [ 1144.785992][T24002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5788'. [ 1144.845152][T24002] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5788'. [ 1144.857896][T24000] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1145.085573][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1145.085585][ T30] audit: type=1326 audit(1780113267.598:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24004 comm="syz.0.5789" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af01c code=0x7ffc0000 [ 1145.180503][ T30] audit: type=1326 audit(1780113267.688:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24004 comm="syz.0.5789" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70af01c code=0x7ffc0000 [ 1145.373076][ T30] audit: type=1326 audit(1780113267.888:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24004 comm="syz.0.5789" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af01c code=0x7ffc0000 [ 1145.413949][ T30] audit: type=1326 audit(1780113267.888:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24004 comm="syz.0.5789" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af01c code=0x7ffc0000 [ 1145.446760][ T30] audit: type=1326 audit(1780113267.938:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24004 comm="syz.0.5789" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70af01c code=0x7ffc0000 [ 1145.591042][ T30] audit: type=1326 audit(1780113267.938:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24004 comm="syz.0.5789" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af01c code=0x7ffc0000 [ 1145.683302][ T2174] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1145.708281][ T30] audit: type=1326 audit(1780113268.158:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24004 comm="syz.0.5789" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70af01c code=0x7ffc0000 [ 1145.857698][ T2174] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1145.887488][ T2174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.919080][T24027] program syz.5.5798 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1145.928515][ T2174] usb 2-1: Product: syz [ 1145.941679][ T2174] usb 2-1: Manufacturer: syz [ 1145.958923][ T2174] usb 2-1: SerialNumber: syz [ 1145.988134][ T2174] usb 2-1: config 0 descriptor?? [ 1146.029065][ T30] audit: type=1326 audit(1780113268.278:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24004 comm="syz.0.5789" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af01c code=0x7ffc0000 [ 1146.035500][ T2174] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1146.214966][T24033] vhci_hcd vhci_hcd.0: port 0 already used [ 1146.232040][ T30] audit: type=1326 audit(1780113268.438:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24004 comm="syz.0.5789" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af01c code=0x7ffc0000 [ 1146.498411][T24033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1146.680724][T24033] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.735871][T24033] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.538023][T24048] binder: 24047:24048 ioctl 4018620d 0 returned -22 [ 1148.080704][ T2174] gspca_stk1135: reg_w 0x203 err -71 [ 1148.087692][ T2174] gspca_stk1135: serial bus timeout: status=0x00 [ 1148.095089][ T2174] gspca_stk1135: Sensor write failed [ 1148.110072][ T2174] gspca_stk1135: serial bus timeout: status=0x00 [ 1148.118579][ T2174] gspca_stk1135: Sensor write failed [ 1148.126023][ T2174] gspca_stk1135: serial bus timeout: status=0x00 [ 1148.175397][ T2174] gspca_stk1135: Sensor read failed [ 1148.181795][ T2174] gspca_stk1135: serial bus timeout: status=0x00 [ 1148.199522][ T2174] gspca_stk1135: Sensor read failed [ 1148.223083][ T2174] gspca_stk1135: Detected sensor type unknown (0x0) [ 1148.249760][ T2174] gspca_stk1135: serial bus timeout: status=0x00 [ 1148.264576][ T2174] gspca_stk1135: Sensor read failed [ 1148.274409][ T2174] gspca_stk1135: serial bus timeout: status=0x00 [ 1148.307455][ T2174] gspca_stk1135: Sensor read failed [ 1148.322178][ T2174] gspca_stk1135: serial bus timeout: status=0x00 [ 1148.340052][ T2174] gspca_stk1135: Sensor write failed [ 1148.360196][ T2174] gspca_stk1135: serial bus timeout: status=0x00 [ 1148.386519][ T2174] gspca_stk1135: Sensor write failed [ 1148.398761][ T2174] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 1148.452035][ T2174] usb 2-1: USB disconnect, device number 69 [ 1148.509782][ T30] audit: type=1326 audit(1780113271.028:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24071 comm="syz.5.5813" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f01c code=0x7ffc0000 [ 1148.846141][T24085] syzkaller0: entered promiscuous mode [ 1148.851740][T24085] syzkaller0: entered allmulticast mode [ 1149.253406][ T2174] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1149.415496][ T2174] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1149.424766][ T2174] usb 3-1: config 0 has no interface number 0 [ 1149.431458][ T2174] usb 3-1: too many endpoints for config 0 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 1149.446559][ T2174] usb 3-1: config 0 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1149.453670][T16145] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1149.460352][ T2174] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1149.476245][ T2174] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1149.489746][ T2174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.501130][ T2174] usb 3-1: config 0 descriptor?? [ 1149.633364][T16145] usb 1-1: Using ep0 maxpacket: 8 [ 1149.640132][T16145] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1149.652181][T16145] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1149.663268][T16145] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.675677][T16145] usb 1-1: config 0 descriptor?? [ 1149.723614][ T2174] usb 3-1: string descriptor 0 read error: -71 [ 1149.759554][ T2174] usb 3-1: selecting invalid altsetting 1 [ 1149.794754][ T2174] dvb_ttusb_budget: ttusb_init_controller: error [ 1149.814763][ T2174] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1149.898954][T16145] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1149.937897][ T2174] DVB: Unable to find symbol cx22700_attach() [ 1150.033362][ T2174] DVB: Unable to find symbol tda10046_attach() [ 1150.052158][ T2174] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1150.083916][ T2174] usb 3-1: USB disconnect, device number 27 [ 1150.129197][T16145] usb 1-1: USB disconnect, device number 64 [ 1150.314918][T24126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5835'. [ 1150.429137][T24130] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5837'. [ 1150.473304][ T5743] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1150.635020][ T5743] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1150.645109][ T5743] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1150.657075][ T5743] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1150.674879][ T5743] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1150.693367][ T5743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.714050][ T5743] usb 2-1: Product: syz [ 1150.726569][ T5743] usb 2-1: Manufacturer: syz [ 1150.740312][ T5743] usb 2-1: SerialNumber: syz [ 1150.765674][ T5743] usb 2-1: config 0 descriptor?? [ 1150.782809][T24123] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1150.799423][T24123] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1150.820973][ T5743] usb 2-1: ucan: probing device on interface #0 [ 1150.985260][T24141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5841'. [ 1151.021108][T24141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5841'. [ 1151.095083][T24123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1151.144617][T24123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1151.182593][T24123] bridge0: port 3(netdevsim0) entered blocking state [ 1151.222890][T24123] bridge0: port 3(netdevsim0) entered disabled state [ 1151.259699][T24149] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5845'. [ 1151.265099][T24123] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1151.287757][T24123] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1151.357787][ T5743] usb 2-1: ucan: could not read protocol version, ret=-71 [ 1151.380477][ T5743] usb 2-1: ucan: probe failed; try to update the device firmware [ 1151.442721][ T5743] usb 2-1: USB disconnect, device number 70 [ 1152.762726][T24184] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5856'. [ 1152.964597][T24191] IPv6: NLM_F_CREATE should be specified when creating new route [ 1152.987931][T24191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5859'. [ 1153.014432][T24191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5859'. [ 1153.026856][T24191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5859'. [ 1153.283265][ T5743] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1153.444241][ T5743] usb 4-1: Using ep0 maxpacket: 16 [ 1153.477293][ T5743] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 1153.494520][ T5743] usb 4-1: config 0 has no interface number 0 [ 1153.510527][ T5743] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 1153.548074][ T5743] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 1153.562513][ T5743] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1153.571954][ T5743] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1153.580476][ T5743] usb 4-1: Product: syz [ 1153.585183][ T5743] usb 4-1: Manufacturer: syz [ 1153.589889][ T5743] usb 4-1: SerialNumber: syz [ 1153.604903][ T5743] usb 4-1: config 0 descriptor?? [ 1153.626573][ T5743] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 1153.639828][ T5743] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 1153.651292][ T5743] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 1153.685956][ T5743] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1153.711036][ T5743] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 1153.736316][ T5743] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1153.752944][ T5743] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 1153.791679][ T5743] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1153.860959][ T5743] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 1153.902413][ T5743] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1153.952469][ T5743] usb 4-1: USB disconnect, device number 59 [ 1154.121209][ T5743] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1154.140165][T24209] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1154.202626][ T5743] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1154.268241][ T5743] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1154.328788][ T5743] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1154.345104][ T5743] keyspan 4-1:0.107: device disconnected [ 1154.483295][T19884] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1154.683290][T19884] usb 3-1: Using ep0 maxpacket: 8 [ 1154.718943][T19884] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1154.741428][T19884] usb 3-1: config 7 has an invalid interface number: 70 but max is 0 [ 1154.810814][T19884] usb 3-1: config 7 has an invalid descriptor of length 212, skipping remainder of the config [ 1154.859610][T24221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5867'. [ 1154.888391][T19884] usb 3-1: config 7 has no interface number 0 [ 1154.906448][T24222] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1154.912954][T24222] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1154.929394][T19884] usb 3-1: too many endpoints for config 7 interface 70 altsetting 9: 145, using maximum allowed: 30 [ 1154.981390][T24219] team_slave_0 (unregistering): left promiscuous mode [ 1155.001528][T24222] vhci_hcd vhci_hcd.0: Device attached [ 1155.018450][T19884] usb 3-1: config 7 interface 70 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 145 [ 1155.041982][T24219] team_slave_0 (unregistering): left allmulticast mode [ 1155.083446][T24219] team0: Port device team_slave_0 removed [ 1155.099924][T19884] usb 3-1: config 7 interface 70 has no altsetting 0 [ 1155.132575][T19884] usb 3-1: New USB device found, idVendor=0af0, idProduct=d157, bcdDevice=fe.05 [ 1155.168125][T24225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.186206][T19884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.220428][T19884] usb 3-1: Product: syz [ 1155.235915][T24225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.264345][T19884] usb 3-1: Manufacturer: syz [ 1155.283327][ T5366] usb 44-1: SetAddress Request (2) to port 0 [ 1155.317471][T19884] usb 3-1: SerialNumber: syz [ 1155.326361][T24225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.334181][ T5366] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1155.824628][T24223] vhci_hcd: connection reset by peer [ 1155.864752][T13203] vhci_hcd vhci_hcd.5: stop threads [ 1155.903482][T13203] vhci_hcd vhci_hcd.5: release socket [ 1155.938631][T13203] vhci_hcd vhci_hcd.5: disconnect device [ 1157.203760][T19884] hso 3-1:7.70: Not our interface [ 1157.249412][T19884] usb 3-1: USB disconnect, device number 28 [ 1157.312818][T24249] netlink: 'syz.1.5876': attribute type 1 has an invalid length. [ 1157.431055][T24249] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1158.488421][T24283] netlink: 'syz.2.5890': attribute type 1 has an invalid length. [ 1158.630646][T24283] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1160.102719][T24307] netlink: 'syz.1.5898': attribute type 10 has an invalid length. [ 1160.118387][ T5743] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1160.124755][T24307] team0: Device vxcan0 is of different type [ 1160.303249][ T5743] usb 3-1: Using ep0 maxpacket: 8 [ 1160.323626][ T5743] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1160.343118][ T5743] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1160.368211][ T5743] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1160.387789][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.396087][ T5743] usb 3-1: Product: syz [ 1160.400326][ T5743] usb 3-1: Manufacturer: syz [ 1160.405226][ T5743] usb 3-1: SerialNumber: syz [ 1160.421032][ T5743] usb 3-1: config 0 descriptor?? [ 1160.442497][ T5366] usb 44-1: device descriptor read/8, error -110 [ 1160.452742][ T5743] powermate 3-1:0.0: probe with driver powermate failed with error -22 [ 1160.471591][T24316] netlink: 'syz.3.5902': attribute type 1 has an invalid length. [ 1160.493384][T19883] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1160.535679][T24316] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1160.665719][T19883] usb 1-1: Using ep0 maxpacket: 32 [ 1160.691279][T19883] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 1160.712108][T19883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.741121][T19883] usb 1-1: Product: syz [ 1160.754581][T19883] usb 1-1: Manufacturer: syz [ 1160.759229][T19883] usb 1-1: SerialNumber: syz [ 1160.767371][T19883] usb 1-1: config 0 descriptor?? [ 1160.844580][ T5366] usb usb44-port1: attempt power cycle [ 1160.893304][ T5743] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1160.973272][T16145] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1160.989475][T24309] blktrace: Concurrent blktraces are not allowed on sg0 [ 1161.033749][ T2174] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1161.048980][T19883] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 1161.060886][ T5743] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.074516][ T5743] usb 6-1: config 0 has no interfaces? [ 1161.086494][ T5743] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1161.097455][ T5743] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1161.107162][ T5743] usb 6-1: Product: syz [ 1161.111627][ T5743] usb 6-1: Manufacturer: syz [ 1161.116576][ T5743] usb 6-1: SerialNumber: syz [ 1161.123587][T16145] usb 4-1: Using ep0 maxpacket: 32 [ 1161.133153][T19883] usb 1-1: USB disconnect, device number 65 [ 1161.139947][T16145] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1161.157354][T16145] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.178444][ T5743] usb 6-1: config 0 descriptor?? [ 1161.210319][T16145] usb 4-1: Product: syz [ 1161.222475][T16145] usb 4-1: Manufacturer: syz [ 1161.240553][T16145] usb 4-1: SerialNumber: syz [ 1161.265738][T16145] usb 4-1: config 0 descriptor?? [ 1161.279352][T16145] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1161.408863][ T5743] usb 6-1: USB disconnect, device number 4 [ 1161.424763][ T5366] usb usb44-port1: unable to enumerate USB device [ 1162.717645][T16145] gspca_topro: reg_r err -71 [ 1162.739725][T16145] gspca_topro: Sensor soi763a [ 1162.834425][T16145] usb 4-1: USB disconnect, device number 60 [ 1162.934512][ T5743] usb 3-1: USB disconnect, device number 29 [ 1163.670266][T24356] netlink: 'syz.2.5915': attribute type 1 has an invalid length. [ 1163.787527][T24356] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1164.935328][ T2174] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1165.128429][ T2174] usb 2-1: Using ep0 maxpacket: 8 [ 1165.153320][ T2174] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1165.174347][ T2174] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1165.200539][ T2174] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1165.225412][ T2174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.242650][ T2174] usb 2-1: Product: syz [ 1165.253504][ T2174] usb 2-1: Manufacturer: syz [ 1165.263721][ T2174] usb 2-1: SerialNumber: syz [ 1165.287991][ T2174] usb 2-1: config 0 descriptor?? [ 1165.306094][T24392] netlink: 'syz.0.5929': attribute type 1 has an invalid length. [ 1165.319042][ T2174] powermate 2-1:0.0: probe with driver powermate failed with error -22 [ 1165.408281][T24392] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1166.461443][T24423] netlink: 'syz.2.5941': attribute type 1 has an invalid length. [ 1166.556580][T24423] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1166.571235][T24429] binder: BINDER_SET_CONTEXT_MGR already set [ 1166.578962][T24429] binder: 24427:24429 ioctl 4018620d 80000040 returned -16 [ 1166.807509][ T5743] ------------[ cut here ]------------ [ 1166.814332][ T5743] mptcp_pm_is_kernel(msk) [ 1166.814385][ T5743] WARNING: net/mptcp/pm.c:446 at mptcp_pm_alloc_anno_list+0x8bc/0x980, CPU#0: kworker/0:6/5743 [ 1166.829216][ T5743] Modules linked in: [ 1166.834848][ T5743] CPU: 0 UID: 0 PID: 5743 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1166.845867][ T5743] Tainted: [L]=SOFTLOCKUP [ 1166.850214][ T5743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1166.860316][ T5743] Workqueue: events mptcp_worker [ 1166.865461][ T5743] RIP: 0010:mptcp_pm_alloc_anno_list+0x8bc/0x980 [ 1166.871828][ T5743] Code: 40 31 f6 e9 bf fd ff ff e8 e1 40 31 f6 90 0f 0b 90 e9 de f7 ff ff e8 d3 40 31 f6 90 0f 0b 90 e9 34 f8 ff ff e8 c5 40 31 f6 90 <0f> 0b 90 31 c0 e9 76 ff ff ff 48 c7 c1 e0 54 30 90 80 e1 07 80 c1 [ 1166.891501][ T5743] RSP: 0000:ffffc900050ff360 EFLAGS: 00010293 [ 1166.897655][ T5743] RAX: ffffffff8b94770b RBX: 0000000000000000 RCX: ffff88801ff78000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1166.905688][ T5743] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1166.913723][ T5743] RBP: ffff88804c983b50 R08: 0000000000020003 R09: 00000000aa1414ac [ 1166.921711][ T5743] R10: 00000000aa1414ac R11: 0000000000000000 R12: ffff88804c983100 [ 1166.929720][ T5743] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888020388b00 [ 1166.937726][ T5743] FS: 0000000000000000(0000) GS:ffff88812529e000(0000) knlGS:0000000000000000 [ 1166.946682][ T5743] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1166.953301][ T5743] CR2: 00000000f7f155b8 CR3: 000000007cc0a000 CR4: 00000000003526f0 [ 1166.961314][ T5743] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1166.969359][ T5743] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1166.977374][ T5743] Call Trace: [ 1166.980659][ T5743] [ 1166.983638][ T5743] mptcp_pm_create_subflow_or_signal_addr+0x1363/0x1860 [ 1166.990667][ T5743] ? mptcp_pm_create_subflow_or_signal_addr+0x313/0x1860 [ 1166.997735][ T5743] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1167.003660][ T5743] ? lockdep_hardirqs_on+0x7a/0x110 [ 1167.008877][ T5743] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1167.014744][ T5743] ? debug_object_assert_init+0x1dc/0x3b0 [ 1167.020611][ T5743] ? __pfx_mptcp_pm_create_subflow_or_signal_addr+0x10/0x10 [ 1167.027948][ T5743] ? __mod_timer+0xd0/0xf30 [ 1167.032489][ T5743] ? sk_reset_timer+0x37/0xc0 [ 1167.037305][ T5743] ? tcp_schedule_loss_probe+0x5e1/0x830 [ 1167.043032][ T5743] ? __lock_acquire+0x6b5/0x2cf0 [ 1167.048013][ T5743] ? __lock_acquire+0x6b5/0x2cf0 [ 1167.052975][ T5743] __mptcp_pm_kernel_worker+0x19ee/0x2100 [ 1167.058754][ T5743] ? __lock_acquire+0x6b5/0x2cf0 [ 1167.063752][ T5743] ? sk_stream_write_space+0x187/0x520 [ 1167.069305][ T5743] ? __pfx___mptcp_pm_kernel_worker+0x10/0x10 [ 1167.075433][ T5743] ? do_raw_spin_lock+0x12b/0x2f0 [ 1167.080477][ T5743] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1167.085903][ T5743] ? __mptcp_close_ssk+0xc0f/0x1180 [ 1167.091123][ T5743] ? mptcp_pm_nl_rm_addr+0xfe/0x190 [ 1167.096368][ T5743] ? mptcp_pm_rm_addr_or_subflow+0x870/0x9d0 [ 1167.102379][ T5743] mptcp_pm_worker+0x1bb/0x300 [ 1167.107186][ T5743] mptcp_worker+0xd3/0x1420 [ 1167.111708][ T5743] ? process_scheduled_works+0xa70/0x1860 [ 1167.117591][ T5743] ? process_scheduled_works+0xa70/0x1860 [ 1167.123357][ T5743] process_scheduled_works+0xb5d/0x1860 [ 1167.128948][ T5743] ? __pfx_process_scheduled_works+0x10/0x10 [ 1167.134971][ T5743] ? assign_work+0x3d5/0x5e0 [ 1167.139577][ T5743] worker_thread+0xa53/0xfc0 [ 1167.144233][ T5743] kthread+0x389/0x470 [ 1167.148321][ T5743] ? __pfx_worker_thread+0x10/0x10 [ 1167.153464][ T5743] ? __pfx_kthread+0x10/0x10 [ 1167.158071][ T5743] ret_from_fork+0x514/0xb70 [ 1167.162706][ T5743] ? __pfx_ret_from_fork+0x10/0x10 [ 1167.167858][ T5743] ? __switch_to+0xc79/0x1410 [ 1167.172555][ T5743] ? __pfx_kthread+0x10/0x10 [ 1167.177186][ T5743] ret_from_fork_asm+0x1a/0x30 [ 1167.181973][ T5743] [ 1167.185037][ T5743] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1167.192322][ T5743] CPU: 0 UID: 0 PID: 5743 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1167.203264][ T5743] Tainted: [L]=SOFTLOCKUP [ 1167.207588][ T5743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1167.217646][ T5743] Workqueue: events mptcp_worker [ 1167.222610][ T5743] Call Trace: [ 1167.225883][ T5743] [ 1167.228802][ T5743] vpanic+0x56c/0xa60 [ 1167.232808][ T5743] ? __pfx__printk+0x10/0x10 [ 1167.237388][ T5743] ? __pfx_vpanic+0x10/0x10 [ 1167.241878][ T5743] ? is_bpf_text_address+0x292/0x2b0 [ 1167.247166][ T5743] ? is_bpf_text_address+0x26/0x2b0 [ 1167.252361][ T5743] panic+0xc5/0xd0 [ 1167.256071][ T5743] ? __pfx_panic+0x10/0x10 [ 1167.260483][ T5743] ? ret_from_fork_asm+0x1a/0x30 [ 1167.265412][ T5743] __warn+0x315/0x4c0 [ 1167.269380][ T5743] ? mptcp_pm_alloc_anno_list+0x8bc/0x980 [ 1167.275090][ T5743] ? mptcp_pm_alloc_anno_list+0x8bc/0x980 [ 1167.280800][ T5743] __report_bug+0x29a/0x540 [ 1167.285368][ T5743] ? nf_hook+0xa1/0x3a0 [ 1167.289548][ T5743] ? iptable_mangle_hook+0x189/0x4c0 [ 1167.294869][ T5743] ? mptcp_pm_alloc_anno_list+0x8bc/0x980 [ 1167.300574][ T5743] ? __pfx___report_bug+0x10/0x10 [ 1167.305589][ T5743] ? ip_output+0x29f/0x450 [ 1167.310049][ T5743] ? mptcp_pm_alloc_anno_list+0x8bc/0x980 [ 1167.315757][ T5743] report_bug+0x16a/0x220 [ 1167.320075][ T5743] ? mptcp_pm_alloc_anno_list+0x8bc/0x980 [ 1167.325778][ T5743] ? mptcp_pm_alloc_anno_list+0x8be/0x980 [ 1167.331481][ T5743] handle_bug+0x9c/0x200 [ 1167.335716][ T5743] exc_invalid_op+0x1a/0x50 [ 1167.340206][ T5743] asm_exc_invalid_op+0x1a/0x20 [ 1167.345045][ T5743] RIP: 0010:mptcp_pm_alloc_anno_list+0x8bc/0x980 [ 1167.351358][ T5743] Code: 40 31 f6 e9 bf fd ff ff e8 e1 40 31 f6 90 0f 0b 90 e9 de f7 ff ff e8 d3 40 31 f6 90 0f 0b 90 e9 34 f8 ff ff e8 c5 40 31 f6 90 <0f> 0b 90 31 c0 e9 76 ff ff ff 48 c7 c1 e0 54 30 90 80 e1 07 80 c1 [ 1167.370952][ T5743] RSP: 0000:ffffc900050ff360 EFLAGS: 00010293 [ 1167.377008][ T5743] RAX: ffffffff8b94770b RBX: 0000000000000000 RCX: ffff88801ff78000 [ 1167.384968][ T5743] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1167.392923][ T5743] RBP: ffff88804c983b50 R08: 0000000000020003 R09: 00000000aa1414ac [ 1167.400879][ T5743] R10: 00000000aa1414ac R11: 0000000000000000 R12: ffff88804c983100 [ 1167.408836][ T5743] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888020388b00 [ 1167.416808][ T5743] ? mptcp_pm_alloc_anno_list+0x8bb/0x980 [ 1167.422536][ T5743] mptcp_pm_create_subflow_or_signal_addr+0x1363/0x1860 [ 1167.429470][ T5743] ? mptcp_pm_create_subflow_or_signal_addr+0x313/0x1860 [ 1167.436492][ T5743] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1167.442293][ T5743] ? lockdep_hardirqs_on+0x7a/0x110 [ 1167.447476][ T5743] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1167.453275][ T5743] ? debug_object_assert_init+0x1dc/0x3b0 [ 1167.458981][ T5743] ? __pfx_mptcp_pm_create_subflow_or_signal_addr+0x10/0x10 [ 1167.466254][ T5743] ? __mod_timer+0xd0/0xf30 [ 1167.470763][ T5743] ? sk_reset_timer+0x37/0xc0 [ 1167.475428][ T5743] ? tcp_schedule_loss_probe+0x5e1/0x830 [ 1167.481055][ T5743] ? __lock_acquire+0x6b5/0x2cf0 [ 1167.485983][ T5743] ? __lock_acquire+0x6b5/0x2cf0 [ 1167.490909][ T5743] __mptcp_pm_kernel_worker+0x19ee/0x2100 [ 1167.496621][ T5743] ? __lock_acquire+0x6b5/0x2cf0 [ 1167.501553][ T5743] ? sk_stream_write_space+0x187/0x520 [ 1167.506999][ T5743] ? __pfx___mptcp_pm_kernel_worker+0x10/0x10 [ 1167.513065][ T5743] ? do_raw_spin_lock+0x12b/0x2f0 [ 1167.518081][ T5743] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1167.523445][ T5743] ? __mptcp_close_ssk+0xc0f/0x1180 [ 1167.528638][ T5743] ? mptcp_pm_nl_rm_addr+0xfe/0x190 [ 1167.533830][ T5743] ? mptcp_pm_rm_addr_or_subflow+0x870/0x9d0 [ 1167.539810][ T5743] mptcp_pm_worker+0x1bb/0x300 [ 1167.544565][ T5743] mptcp_worker+0xd3/0x1420 [ 1167.549061][ T5743] ? process_scheduled_works+0xa70/0x1860 [ 1167.554766][ T5743] ? process_scheduled_works+0xa70/0x1860 [ 1167.560472][ T5743] process_scheduled_works+0xb5d/0x1860 [ 1167.566030][ T5743] ? __pfx_process_scheduled_works+0x10/0x10 [ 1167.572001][ T5743] ? assign_work+0x3d5/0x5e0 [ 1167.576583][ T5743] worker_thread+0xa53/0xfc0 [ 1167.581184][ T5743] kthread+0x389/0x470 [ 1167.585241][ T5743] ? __pfx_worker_thread+0x10/0x10 [ 1167.590336][ T5743] ? __pfx_kthread+0x10/0x10 [ 1167.594916][ T5743] ret_from_fork+0x514/0xb70 [ 1167.599500][ T5743] ? __pfx_ret_from_fork+0x10/0x10 [ 1167.604601][ T5743] ? __switch_to+0xc79/0x1410 [ 1167.609272][ T5743] ? __pfx_kthread+0x10/0x10 [ 1167.613853][ T5743] ret_from_fork_asm+0x1a/0x30 [ 1167.618618][ T5743] [ 1167.622205][ T5743] Kernel Offset: disabled [ 1167.626513][ T5743] Rebooting in 86400 seconds..