last executing test programs: 8.525493443s ago: executing program 2 (id=443): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0900000004f29eab369600000100000000000000c416164e5f8b292f3789db5bcda7faf2622fcf639fde4db13a1b3bd383a5a66ff9724c84c587ab8ab6e0bc5fa0ff96d3d798aee168cdf2c267552bae8e5f3d3c8d34c9b8df2b82e28914beab5cd2840286a5d30053176009763805ddd2edfd73b99d923b016d6c98b10896f2e484a43b700785bc0bb39f27e928f7e26c26bed3fa1a70ebf9b30ff4a88e2274c298071815047885d29de2f9c345b5281eeba45b939248a6491a1f465fb7b08b0aa8acd2e5f006823db93592355fea6a8b8667f2d0cbdb321b298a24e1a9465dd24d43988e7384504fa57934fd7e72ac47fe7994181e961a065a2b7ddabd81499dbe8887fa33ddcf97d112b56d67084929044971f64852d5c389e6cd6af55050d9660bc20f1151c438f17d92aed970398f691954a93bf937dea5715bb793f4941c8cc37d217d3a1a93edf59c4664c1b82d6483", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x3}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x8, 0x1) fcntl$setpipe(r2, 0x407, 0x80000001) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='gid', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) 7.528848943s ago: executing program 2 (id=446): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000c40)={0x34, &(0x7f0000000a00)={0x60, 0xf}, 0x0, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000b80)={0xc0, 0xa1, 0x4, 0x2}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 6.448762684s ago: executing program 4 (id=456): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000206051395a7c58f0de3c21bddaf557d04d4000000000000000814000780"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f"], 0x30}], 0x1, 0x0, 0x0, 0x20004801}, 0x1) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.062566472s ago: executing program 4 (id=460): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', r1, 0x8, 0x7c7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x20, 0x14, 0x67, 0x0, 0x86, 0x4, 0x0, @empty, @remote}}}}) 5.900762285s ago: executing program 4 (id=462): r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003020000082505a1a440000102030109023b"], &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 4.932763233s ago: executing program 3 (id=472): creat(0x0, 0x6a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) connect$unix(r1, 0x0, 0x0) 4.542737841s ago: executing program 1 (id=475): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x8000000000, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x2}, 0x0, 0x0) 4.030310661s ago: executing program 2 (id=476): socket$netlink(0x10, 0x3, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) 3.953648363s ago: executing program 2 (id=477): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbc0, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x4461, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x8, 0x4007f, 0xffffffff, 0x6, 0x6], [0x10000, 0x3, 0x2, 0x400, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x100, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xffff7ffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x5, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x35db, 0x1cb, 0x101, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0x6, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x253b, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x7d, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x103, 0x80000001, 0x7777, 0xfff, 0x2, 0xff, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0x0, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x3, 0x7f, 0xf, 0xda, 0x2, 0x801, 0x2, 0x1, 0x8000, 0x182, 0x837, 0x100000000, 0x8, 0x9, 0x268c, 0x1], 0xd000, 0x80}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000001140)={0x0, 0x0, @pic={0x5, 0xc0, 0xb, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7c}}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x814, &(0x7f0000000180)={0xa, 0x4e21, 0x1, @mcast1, 0x9}, 0x1c) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.902768344s ago: executing program 3 (id=478): syz_usb_connect(0x0, 0x5a, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xff89}, @hci_rp_read_voice_setting={{0x4}, {0x64, 0x8}}}}, 0x7) 3.849682095s ago: executing program 0 (id=479): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup(0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300002a00028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x8000) 3.740711917s ago: executing program 2 (id=480): openat(0xffffffffffffff9c, 0x0, 0x441, 0x104) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000004c0)='.', 0x1}], 0x1}}], 0x1, 0x40) 3.437850133s ago: executing program 1 (id=481): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x70bd26, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_IE={0x4}]}, 0x30}}, 0x0) 2.836978875s ago: executing program 4 (id=482): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 2.720777967s ago: executing program 3 (id=483): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) socket$nl_route(0x10, 0x3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 2.214036957s ago: executing program 0 (id=484): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x31}}}) 1.854369884s ago: executing program 1 (id=485): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f0000000580)='}\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00b\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\xd7{\x01vR\x01\x80\x00\x00\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\x00\x00\x00\x00\x10\xfaK\x1f\x96l\v\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13t\xafNx\xc0$\x85\x9f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x94vz\xe1\x84\x99%\xa8\xbc\x18\xb2\xcd\"\x10\xd6\x84\xd0\xf1\x1bWE\x9e\x1d\xaf\v\x95\x80\x86\xaa\x82\x12}\xa1H\xd4e\x9et\'\\\xfa\x81J3N\xaa\xb0]\xb2\xb1\xd3\x14\x82\x875\xd0\xa9\x03\xc8\xb1\xf6\x1d\xf4\x8b\xbd\xbd-\xf9R4\xc4\xc5\x89(\x97\xd8\xd3\xb8-&p\xca\xc6\t\x8f=h\xe2\xdf\x9d\xf5\xb4(\x87\xf2\xa5X\x9f\x92\x06o\x10/\x0f~\xa9Q\xd9\xfd\xcaw\x17db\xfcD\xa0D\x85\x9d!\"/;\x13\xf3\x19\x9d\xe2\x9b\x9b4\xb4jt\xb7\x00'/618, 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x0, 0x8000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x2, 0xf, 0x5, 0xfb, 0x9, 0x0, 0xb, 0x0, 0x1, 0x3, 0x6}, {0x4, 0xdddd0000, 0xe, 0x14, 0x1, 0x9, 0x2f, 0xe, 0x40, 0x10, 0x6}, {0x3000, 0x5000, 0x4, 0xd, 0x5, 0x3, 0xc3, 0x16, 0x3, 0x8, 0x5, 0x3}, {0xdddd1000, 0x6000, 0x9, 0xf1, 0x7f, 0x3, 0x8, 0x7f, 0x9, 0x2, 0x3, 0xf}, {0xd000, 0xdddd1000, 0x0, 0xd, 0x3, 0x2d, 0x6, 0xc, 0xfc, 0x0, 0xff, 0xe5}, {0x2, 0x10000, 0x8, 0x5, 0x6, 0x28, 0x3, 0x1, 0xbf, 0x98, 0x2, 0x4}, {0x5000, 0x8000000, 0x3, 0x9, 0xf6, 0xb, 0xb, 0x3, 0x4, 0x0, 0x4, 0x9}, {0xdddd0000, 0x1, 0xf, 0x4, 0x3, 0xff, 0x0, 0xf9, 0xa1, 0x8, 0x0, 0xfe}, {0xffff1000, 0xcb}, {0xffff1000, 0x17}, 0x0, 0x0, 0xdddd0000, 0x0, 0x7, 0x1000, 0xdddd1000, [0x2, 0x7, 0x9, 0x7]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0xc, 0x6, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x8, 0x40, 0x1, 0x5}}) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.760701416s ago: executing program 3 (id=486): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@remote, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0x3, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0xa, 0x4, 0x18}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000800000008000000060000"], 0x50) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.709364477s ago: executing program 4 (id=487): socket$netlink(0x10, 0x3, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) 1.630779558s ago: executing program 0 (id=488): creat(0x0, 0x6a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) connect$unix(r1, 0x0, 0x0) 1.433340342s ago: executing program 4 (id=489): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x17, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) 1.360863933s ago: executing program 1 (id=490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000004"], 0xfdef) 1.183095497s ago: executing program 3 (id=491): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4002000}, 0x80) 1.107091788s ago: executing program 1 (id=492): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) 1.02872903s ago: executing program 3 (id=493): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 854.897293ms ago: executing program 1 (id=494): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 353.077063ms ago: executing program 0 (id=495): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 188.802196ms ago: executing program 0 (id=496): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) socket$nl_route(0x10, 0x3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 27.680529ms ago: executing program 0 (id=497): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = gettid() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r1, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) shmget$private(0x0, 0x3000, 0x8, &(0x7f0000003000/0x3000)=nil) write$rfkill(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000b00), 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x9, 0x6576, 0x9}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), 0x0, 0x0) 0s ago: executing program 2 (id=498): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000004c0)='./file0\x00') lstat(&(0x7f0000002a00)='./bus\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.109' (ED25519) to the list of known hosts. syzkaller login: [ 64.446049][ T4171] cgroup: Unknown subsys name 'net' [ 64.583162][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.100160][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.582156][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 67.675791][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 67.732488][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 67.784588][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 67.839708][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.847319][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.855620][ T4183] device bridge_slave_0 entered promiscuous mode [ 67.885775][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.893176][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.901398][ T4193] device bridge_slave_0 entered promiscuous mode [ 67.909898][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.917197][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.925083][ T4183] device bridge_slave_1 entered promiscuous mode [ 67.944689][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 67.966249][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.973622][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.982004][ T4193] device bridge_slave_1 entered promiscuous mode [ 68.014704][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.039585][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.051029][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.085616][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.139531][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.146996][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.155036][ T4182] device bridge_slave_0 entered promiscuous mode [ 68.163356][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.170700][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.179149][ T4194] device bridge_slave_0 entered promiscuous mode [ 68.201928][ T4183] team0: Port device team_slave_0 added [ 68.208669][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.215865][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.224572][ T4182] device bridge_slave_1 entered promiscuous mode [ 68.232022][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.239516][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.247856][ T4194] device bridge_slave_1 entered promiscuous mode [ 68.262294][ T4193] team0: Port device team_slave_0 added [ 68.269700][ T4183] team0: Port device team_slave_1 added [ 68.277457][ T4193] team0: Port device team_slave_1 added [ 68.363613][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.371146][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.397633][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.412402][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.424419][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.434034][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.441246][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.449528][ T4184] device bridge_slave_0 entered promiscuous mode [ 68.458486][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.465578][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.492743][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.504863][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.512257][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.538854][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.556918][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.568039][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.577520][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.584588][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.593356][ T4184] device bridge_slave_1 entered promiscuous mode [ 68.613408][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.620631][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.648096][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.692410][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.721955][ T4194] team0: Port device team_slave_0 added [ 68.748354][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.761854][ T4193] device hsr_slave_0 entered promiscuous mode [ 68.768961][ T4193] device hsr_slave_1 entered promiscuous mode [ 68.786728][ T4182] team0: Port device team_slave_0 added [ 68.794733][ T4194] team0: Port device team_slave_1 added [ 68.816792][ T4182] team0: Port device team_slave_1 added [ 68.840281][ T4183] device hsr_slave_0 entered promiscuous mode [ 68.848351][ T4183] device hsr_slave_1 entered promiscuous mode [ 68.855799][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.863855][ T4183] Cannot create hsr debugfs directory [ 68.900233][ T4184] team0: Port device team_slave_0 added [ 68.923170][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.931035][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.957151][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.981514][ T4184] team0: Port device team_slave_1 added [ 68.991054][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.998707][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.025914][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.038083][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.045478][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.072309][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.109440][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.116887][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.143774][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.198214][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.205389][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.232034][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.247201][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.254334][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.280655][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.287425][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 69.291959][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 69.305027][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 69.311693][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 69.318429][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 69.346265][ T4194] device hsr_slave_0 entered promiscuous mode [ 69.353617][ T4194] device hsr_slave_1 entered promiscuous mode [ 69.360657][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.368490][ T4194] Cannot create hsr debugfs directory [ 69.381926][ T4182] device hsr_slave_0 entered promiscuous mode [ 69.389193][ T4182] device hsr_slave_1 entered promiscuous mode [ 69.395888][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.404110][ T4182] Cannot create hsr debugfs directory [ 69.513853][ T4184] device hsr_slave_0 entered promiscuous mode [ 69.521076][ T4184] device hsr_slave_1 entered promiscuous mode [ 69.528428][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.536005][ T4184] Cannot create hsr debugfs directory [ 69.763673][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.775205][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.790372][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.799278][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.811656][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.838294][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.849570][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.869893][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.918578][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.927990][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.943521][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.953519][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.024784][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.053519][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.067476][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.102168][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.138214][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.212167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.224104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.242412][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.252389][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.262902][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.272946][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.291482][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.301435][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.312358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.321132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.330655][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.350085][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.357758][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.368589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.377967][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.385172][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.395571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.436183][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.444617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.458663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.469012][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.479125][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.486404][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.494395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.503918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.513555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.523745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.532958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.544867][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.573942][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.583369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.592246][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.599412][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.610803][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.620341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.628953][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.636195][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.644308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.653719][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.662466][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.669809][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.677981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.687579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.695951][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.720300][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.748415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.759797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.769713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.778794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.788342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.798874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.808249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.817586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.826668][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.833789][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.844692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.865962][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.891475][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.903002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.913278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.923042][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.932332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.941304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.949740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.960056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.969282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.979327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.989292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.998365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.008914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.017869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.026215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.048304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.057981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.067212][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.076052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.087242][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.094366][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.102612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.111493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.122603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.144606][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.155394][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.165597][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.176538][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.185832][ T1236] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.193122][ T1236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.204348][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.228567][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.249132][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.261240][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.271938][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.280970][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.318882][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.329866][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.344092][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.354745][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.364805][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.375790][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.377424][ T4246] Bluetooth: hci2: command 0x041b tx timeout [ 71.396612][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.401880][ T4246] Bluetooth: hci3: command 0x041b tx timeout [ 71.418432][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.432154][ T4246] Bluetooth: hci1: command 0x041b tx timeout [ 71.453613][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.456623][ T4246] Bluetooth: hci4: command 0x041b tx timeout [ 71.477220][ T4246] Bluetooth: hci0: command 0x041b tx timeout [ 71.488942][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.507311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.517815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.535019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.542958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.581183][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.635327][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.690360][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.708038][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.732923][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.761526][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.772512][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.789198][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.804143][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.813489][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.824937][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.833215][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.857520][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.898124][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.908358][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.918129][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.925358][ T4264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.932469][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.934282][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.939369][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.958213][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.965899][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.994219][ T4183] device veth0_vlan entered promiscuous mode [ 72.004720][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.017995][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.033704][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.043509][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.050927][ T4264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.069323][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.078219][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.087758][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.096009][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.124671][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.140934][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.152769][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.168407][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.202397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.212769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.222108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.231700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.241604][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.257005][ T4183] device veth1_vlan entered promiscuous mode [ 72.271983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.281410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.290513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.303709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.312599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.322602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.331997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.348802][ T4194] device veth0_vlan entered promiscuous mode [ 72.378500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.388651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.400048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.409581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.418435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.427617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.450868][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.474137][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.482969][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.492974][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.503419][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.513439][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.523597][ T4193] device veth0_vlan entered promiscuous mode [ 72.544574][ T4194] device veth1_vlan entered promiscuous mode [ 72.563656][ T4183] device veth0_macvtap entered promiscuous mode [ 72.573664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.588477][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.602687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.614177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.629680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.652115][ T4183] device veth1_macvtap entered promiscuous mode [ 72.660784][ T4182] device veth0_vlan entered promiscuous mode [ 72.670871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.680028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.694153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.703375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.718663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.737946][ T4193] device veth1_vlan entered promiscuous mode [ 72.769494][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.801322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.810762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.822285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.830387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.838329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.847225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.860069][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.869548][ T4194] device veth0_macvtap entered promiscuous mode [ 72.882275][ T4182] device veth1_vlan entered promiscuous mode [ 72.893522][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.901159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.912016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.922792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.935845][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.945004][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.954182][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.963139][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.978238][ T4194] device veth1_macvtap entered promiscuous mode [ 72.998484][ T4193] device veth0_macvtap entered promiscuous mode [ 73.010587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.021969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.033350][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.042450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.065027][ T4193] device veth1_macvtap entered promiscuous mode [ 73.091444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.100748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.109955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.145241][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.159056][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.171270][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.186027][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.198559][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.209816][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.220489][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.233032][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.247124][ T4182] device veth0_macvtap entered promiscuous mode [ 73.269831][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.282299][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.293836][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.304272][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.314921][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.324133][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.335860][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.347728][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.359572][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.369650][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.381218][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.391762][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.402804][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.414548][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.435415][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.455103][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.464511][ T4225] Bluetooth: hci3: command 0x040f tx timeout [ 73.466808][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.476790][ T4225] Bluetooth: hci2: command 0x040f tx timeout [ 73.484635][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.494606][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.505100][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.513758][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.522837][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.530359][ T4225] Bluetooth: hci0: command 0x040f tx timeout [ 73.536740][ T4225] Bluetooth: hci4: command 0x040f tx timeout [ 73.538304][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.542866][ T4225] Bluetooth: hci1: command 0x040f tx timeout [ 73.561048][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.571298][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.581219][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.590596][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.602652][ T4184] device veth0_vlan entered promiscuous mode [ 73.616863][ T4184] device veth1_vlan entered promiscuous mode [ 73.625248][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.634644][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.643654][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.653445][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.683421][ T4182] device veth1_macvtap entered promiscuous mode [ 73.749408][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.759009][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.770477][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.800072][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.815554][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.828286][ T452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.830605][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.846257][ T452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.858853][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.869146][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.880011][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.889963][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.900641][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.912666][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.930541][ T4184] device veth0_macvtap entered promiscuous mode [ 73.939045][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.950788][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.961509][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.970717][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.988161][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.999221][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.013056][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.024254][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.034828][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.045461][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.057637][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.070580][ T4184] device veth1_macvtap entered promiscuous mode [ 74.083522][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.092686][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.102793][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.126731][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.137273][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.147156][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.156270][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.205836][ T4264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.225655][ T4264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.230501][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.251732][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.262028][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.273246][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.283782][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.294740][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.305437][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.316741][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.329943][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.347894][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.359288][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.369210][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.391289][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.402694][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.410131][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.412058][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.424658][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.443154][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.454355][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.467724][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.479754][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.491364][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.503391][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.531117][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.539495][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.549344][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.561581][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.573514][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.583420][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.593864][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.625266][ T1236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.648867][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.675498][ T1236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.684135][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.704300][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.715632][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.788537][ T452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.805536][ T452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.870728][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.930095][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.954915][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.973958][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.992701][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.000645][ T452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.032692][ T452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.062587][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.071700][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.081419][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.114993][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.130273][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.145779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.346116][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 75.355349][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 75.364579][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 75.376211][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 75.385583][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 75.394616][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 75.404498][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 75.413701][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 75.423198][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 75.432251][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 75.648586][ T4225] Bluetooth: hci2: command 0x0419 tx timeout [ 76.350289][ T4225] Bluetooth: hci3: command 0x0419 tx timeout [ 76.362532][ T4225] Bluetooth: hci1: command 0x0419 tx timeout [ 76.368766][ T4225] Bluetooth: hci4: command 0x0419 tx timeout [ 76.376987][ T4225] Bluetooth: hci0: command 0x0419 tx timeout [ 78.275841][ T4315] sched: RT throttling activated [ 80.176282][ T4333] nfs4: Unknown parameter 'smackfsroot' [ 81.857388][ T4344] process 'syz.2.13' launched './file0' with NULL argv: empty string added [ 82.471866][ T4353] Mount JFS Failure: -22 [ 82.476471][ T4353] jfs_mount failed w/return code = -22 [ 82.559823][ T4356] bridge0: port 3(syz_tun) entered blocking state [ 82.592567][ T4356] bridge0: port 3(syz_tun) entered disabled state [ 82.632576][ T4356] device syz_tun entered promiscuous mode [ 82.842611][ T4356] bridge0: port 3(syz_tun) entered blocking state [ 82.849385][ T4356] bridge0: port 3(syz_tun) entered forwarding state [ 84.974469][ T4380] binder: 4373:4380 unknown command 1074553619 [ 84.980735][ T4380] binder: 4373:4380 ioctl c0306201 200000000540 returned -22 [ 85.144397][ T4381] binder: 4373:4381 unknown command 1074291477 [ 85.150858][ T4381] binder: 4373:4381 ioctl c0306201 200000000640 returned -22 [ 86.016906][ T4388] nfs4: Unknown parameter 'smackfsroot' [ 86.766227][ T4189] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.634176][ T1111] cfg80211: failed to load regulatory.db [ 88.207199][ T4408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29'. [ 88.416224][ T4238] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 88.574849][ T4412] bridge0: port 3(syz_tun) entered blocking state [ 88.587253][ T4412] bridge0: port 3(syz_tun) entered disabled state [ 88.595260][ T4412] device syz_tun entered promiscuous mode [ 88.602902][ T4412] bridge0: port 3(syz_tun) entered blocking state [ 88.609481][ T4412] bridge0: port 3(syz_tun) entered forwarding state [ 88.622036][ T4238] usb 4-1: device descriptor read/64, error -71 [ 89.613028][ T26] audit: type=1326 audit(1759044052.155:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4422 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93445d9ec9 code=0x7ffc0000 [ 89.644555][ T26] audit: type=1326 audit(1759044052.185:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4422 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f93445d9ec9 code=0x7ffc0000 [ 89.756312][ T4238] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 90.306332][ T26] audit: type=1326 audit(1759044052.185:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4422 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93445d9ec9 code=0x7ffc0000 [ 90.522269][ T26] audit: type=1326 audit(1759044052.185:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4422 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93445d9ec9 code=0x7ffc0000 [ 90.926374][ T26] audit: type=1326 audit(1759044052.185:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4422 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f93445d9ec9 code=0x7ffc0000 [ 91.086163][ T26] audit: type=1326 audit(1759044052.185:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4422 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93445d9ec9 code=0x7ffc0000 [ 91.235710][ T26] audit: type=1326 audit(1759044052.185:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4422 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93445d9ec9 code=0x7ffc0000 [ 91.516897][ T4453] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.700053][ T4173] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.813035][ T4459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'. [ 91.918070][ T4459] device gretap0 entered promiscuous mode [ 91.943726][ T4459] device macsec1 entered promiscuous mode [ 91.956384][ T4173] usb 3-1: Using ep0 maxpacket: 8 [ 92.884981][ T4173] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 93.173253][ T4173] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 93.243624][ T4472] kernel profiling enabled (shift: 7) [ 94.823546][ T4459] device gretap0 left promiscuous mode [ 95.325055][ T4173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.333195][ T4173] usb 3-1: Product: syz [ 95.337596][ T4173] usb 3-1: Manufacturer: syz [ 95.342242][ T4173] usb 3-1: SerialNumber: syz [ 95.367819][ T4173] usb 3-1: config 0 descriptor?? [ 95.396376][ T4173] usb 3-1: can't set config #0, error -71 [ 95.418141][ T4173] usb 3-1: USB disconnect, device number 2 [ 95.570827][ T4483] Zero length message leads to an empty skb [ 102.065304][ T4524] sctp: failed to load transform for md5: -2 [ 104.845073][ T4567] netlink: 32 bytes leftover after parsing attributes in process `syz.0.74'. [ 105.316349][ T4238] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 105.872398][ T4588] netlink: 104 bytes leftover after parsing attributes in process `syz.3.82'. [ 106.036466][ T4238] usb 3-1: device descriptor read/64, error -71 [ 106.088626][ T4589] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 106.088787][ T4589] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 106.090473][ T4594] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 106.090487][ T4594] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 106.316310][ T4238] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 107.321977][ T4238] usb 3-1: device descriptor read/64, error -71 [ 108.195833][ T4238] usb usb3-port1: attempt power cycle [ 108.264231][ T4615] netlink: 20 bytes leftover after parsing attributes in process `syz.4.88'. [ 108.626351][ T4173] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 108.736258][ T4260] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.800549][ T4634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.95'. [ 108.986180][ T4260] usb 2-1: Using ep0 maxpacket: 16 [ 108.986472][ T4173] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 109.010518][ T4173] usb 1-1: config 0 has no interface number 0 [ 109.023126][ T4173] usb 1-1: config 0 interface 41 has no altsetting 0 [ 109.136507][ T4260] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.156694][ T4260] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.196362][ T4173] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 109.209593][ T4173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.235303][ T4173] usb 1-1: Product: syz [ 109.242687][ T4173] usb 1-1: Manufacturer: syz [ 109.252275][ T4173] usb 1-1: SerialNumber: syz [ 109.298670][ T4173] usb 1-1: config 0 descriptor?? [ 109.356349][ T4260] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 109.371223][ T4260] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.391564][ T4260] usb 2-1: Product: syz [ 109.399276][ T4260] usb 2-1: Manufacturer: syz [ 109.408560][ T4260] usb 2-1: SerialNumber: syz [ 109.746620][ T4260] usb 2-1: 0:2 : does not exist [ 109.829892][ T4653] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 109.839001][ T4260] usb 2-1: USB disconnect, device number 2 [ 110.216389][ T4173] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 110.340858][ T4627] udevd[4627]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.599271][ T4667] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 111.184381][ T4173] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 111.195179][ T4173] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 111.207266][ T4173] CoreChips: probe of 1-1:0.41 failed with error -71 [ 111.217530][ T4173] usb 1-1: USB disconnect, device number 3 [ 111.652149][ T4260] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.946140][ T4260] usb 2-1: Using ep0 maxpacket: 32 [ 112.071713][ T4260] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.076418][ T4239] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 112.091041][ T4260] usb 2-1: config 0 has no interfaces? [ 112.286355][ T4260] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 112.301460][ T4260] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.311886][ T4260] usb 2-1: Product: syz [ 112.320338][ T4260] usb 2-1: Manufacturer: syz [ 112.325164][ T4260] usb 2-1: SerialNumber: syz [ 112.336149][ T4239] usb 4-1: Using ep0 maxpacket: 32 [ 112.342198][ T4260] usb 2-1: config 0 descriptor?? [ 112.496308][ T4239] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 112.503939][ T4239] usb 4-1: can't read configurations, error -61 [ 112.600801][ T1108] usb 2-1: USB disconnect, device number 3 [ 112.676153][ T4239] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 112.916690][ T4239] usb 4-1: Using ep0 maxpacket: 32 [ 113.916356][ T4239] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 113.924249][ T4239] usb 4-1: can't read configurations, error -61 [ 113.930825][ T4239] usb usb4-port1: attempt power cycle [ 114.096230][ T4173] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.366223][ T4239] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 114.456337][ T4239] usb 4-1: Using ep0 maxpacket: 32 [ 114.466413][ T4173] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 114.477599][ T4173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.488622][ T4173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.498950][ T4173] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 114.586344][ T4173] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 114.604026][ T4173] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 114.616389][ T4239] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 114.626497][ T4239] usb 4-1: can't read configurations, error -61 [ 114.639578][ T4173] usb 2-1: Manufacturer: syz [ 114.672501][ T4173] usb 2-1: config 0 descriptor?? [ 114.786232][ T4239] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 114.856236][ T4239] usb 4-1: device descriptor read/8, error -71 [ 114.926212][ T4246] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.977226][ T4239] usb usb4-port1: unable to enumerate USB device [ 115.855300][ T4173] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 116.234990][ T4173] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 116.254005][ T4173] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 116.278713][ T4173] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 116.287540][ T4173] Bluetooth: hci2: Injecting HCI hardware error event [ 116.295943][ T4195] Bluetooth: hci2: hardware error 0x00 [ 116.546353][ T4246] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.557606][ T4246] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 116.567201][ T4246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.578104][ T4246] usb 5-1: config 0 descriptor?? [ 116.618901][ T4246] pwc: Askey VC010 type 2 USB webcam detected. [ 116.676281][ T4239] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 116.775461][ T4744] syz.0.133 uses obsolete (PF_INET,SOCK_PACKET) [ 116.858202][ T1108] usb 2-1: USB disconnect, device number 4 [ 116.919962][ T4239] usb 4-1: Using ep0 maxpacket: 16 [ 117.041113][ T4239] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 117.055039][ T4239] usb 4-1: config 0 has no interface number 0 [ 117.062533][ T4246] pwc: recv_control_msg error -32 req 02 val 2b00 [ 117.099184][ T4239] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 117.131604][ T4246] pwc: recv_control_msg error -32 req 02 val 2700 [ 117.986355][ T4246] pwc: recv_control_msg error -32 req 02 val 2c00 [ 118.026494][ T4246] pwc: recv_control_msg error -32 req 04 val 1000 [ 118.071967][ T4246] pwc: recv_control_msg error -32 req 04 val 1300 [ 118.078726][ T4239] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 118.095685][ T4239] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 118.114762][ T4239] usb 4-1: Product: syz [ 118.124881][ T4239] usb 4-1: SerialNumber: syz [ 118.130155][ T4246] pwc: recv_control_msg error -32 req 04 val 1400 [ 118.219461][ T4773] input: syz0 as /devices/virtual/input/input5 [ 118.327588][ T4239] usb 4-1: config 0 descriptor?? [ 118.356309][ T4246] pwc: recv_control_msg error -32 req 02 val 2000 [ 118.378496][ T4239] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 118.426355][ T4246] pwc: recv_control_msg error -32 req 02 val 2100 [ 118.466348][ T4246] pwc: recv_control_msg error -32 req 04 val 1500 [ 118.613045][ T1108] usb 4-1: USB disconnect, device number 8 [ 118.638228][ T4246] pwc: recv_control_msg error -32 req 02 val 2500 [ 119.020859][ T4246] pwc: recv_control_msg error -71 req 02 val 2600 [ 119.540625][ T4246] pwc: recv_control_msg error -71 req 02 val 2900 [ 119.656402][ T4246] pwc: recv_control_msg error -71 req 02 val 2800 [ 119.776733][ T4246] pwc: recv_control_msg error -71 req 04 val 1100 [ 119.878071][ T4246] pwc: recv_control_msg error -71 req 04 val 1200 [ 120.102797][ T4246] pwc: Registered as video103. [ 120.248866][ T4246] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 120.339799][ T4246] usb 5-1: USB disconnect, device number 2 [ 121.301684][ T4823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.148'. [ 121.314374][ T4823] device gretap0 entered promiscuous mode [ 121.320344][ T4823] device macsec1 entered promiscuous mode [ 121.351444][ T4823] device gretap0 left promiscuous mode [ 122.920434][ T4238] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 124.656201][ T4238] usb 1-1: Using ep0 maxpacket: 16 [ 124.811347][ T4238] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.936007][ T4238] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.986293][ T4238] usb 1-1: string descriptor 0 read error: -71 [ 125.025516][ T4187] block nbd1: Receive control failed (result -32) [ 125.034318][ T4238] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.075918][ T4238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.192446][ T4855] block nbd1: shutting down sockets [ 125.203419][ T4238] usb 1-1: can't set config #1, error -71 [ 125.288310][ T4238] usb 1-1: USB disconnect, device number 4 [ 126.707420][ T4352] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 127.366199][ T4352] usb 2-1: Using ep0 maxpacket: 16 [ 128.116365][ T4246] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 128.146307][ T4352] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 128.167571][ T4352] usb 2-1: config 0 has no interface number 0 [ 128.186348][ T4352] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.198269][ T4352] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.208643][ T4352] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 128.220379][ T4352] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.232326][ T4352] usb 2-1: config 0 descriptor?? [ 128.271045][ T4909] block nbd4: shutting down sockets [ 128.326275][ T4260] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 128.396275][ T4246] usb 1-1: Using ep0 maxpacket: 32 [ 128.516415][ T4246] usb 1-1: config 0 has an invalid interface number: 209 but max is 0 [ 128.529104][ T4246] usb 1-1: config 0 has no interface number 0 [ 128.551359][ T4246] usb 1-1: config 0 interface 209 has no altsetting 0 [ 128.576194][ T4260] usb 4-1: Using ep0 maxpacket: 8 [ 128.746353][ T4246] usb 1-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 128.755618][ T4246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.763878][ T4246] usb 1-1: Product: syz [ 128.768258][ T4246] usb 1-1: Manufacturer: syz [ 128.772924][ T4246] usb 1-1: SerialNumber: syz [ 128.797106][ T4246] usb 1-1: config 0 descriptor?? [ 128.856359][ T4260] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 128.877472][ T4260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.895869][ T4260] usb 4-1: Product: syz [ 128.905432][ T4260] usb 4-1: Manufacturer: syz [ 128.913799][ T4260] usb 4-1: SerialNumber: syz [ 128.920901][ T4352] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0002/input/input7 [ 128.963705][ T4260] usb 4-1: config 0 descriptor?? [ 129.020204][ T4352] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0002/input/input8 [ 129.035768][ T4352] uclogic 0003:28BD:0071.0002: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1 [ 129.158886][ T7] usb 2-1: USB disconnect, device number 5 [ 129.207990][ T4246] usb 1-1: USB disconnect, device number 5 [ 129.236429][ T4260] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 131.194645][ T4950] block nbd1: shutting down sockets [ 131.526317][ T4260] usb write operation failed. (-71) [ 131.563111][ T4260] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 131.651804][ T4260] dvbdev: DVB: registering new adapter (Terratec H7) [ 131.676826][ T4260] usb 4-1: media controller created [ 131.706228][ T4260] usb read operation failed. (-71) [ 131.746247][ T4260] usb write operation failed. (-71) [ 131.803912][ T4260] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 131.915866][ T4260] usb 4-1: USB disconnect, device number 9 [ 132.879847][ T4260] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 132.956239][ T4352] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 133.226296][ T4352] usb 3-1: Using ep0 maxpacket: 16 [ 133.356430][ T4352] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.370282][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.370488][ T4352] usb 3-1: config 0 has no interface number 0 [ 133.406422][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.451343][ T4352] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.476229][ T4260] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 133.506532][ T4352] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.553950][ T4352] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 133.591204][ T4352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.643585][ T4352] usb 3-1: config 0 descriptor?? [ 134.377798][ T4352] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.0003/input/input9 [ 134.455759][ T4352] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.0003/input/input10 [ 134.479870][ T4352] uclogic 0003:28BD:0071.0003: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.2-1/input1 [ 134.517749][ T4260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.526808][ T4260] usb 4-1: Product: syz [ 134.531103][ T4260] usb 4-1: Manufacturer: syz [ 134.535812][ T4260] usb 4-1: SerialNumber: syz [ 134.553573][ T4260] usb 4-1: config 0 descriptor?? [ 134.580318][ T4352] usb 3-1: USB disconnect, device number 6 [ 134.764490][ T4992] device syzkaller1 entered promiscuous mode [ 134.816334][ T4260] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 134.844219][ T4987] fido_id[4987]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 134.869072][ T4993] block nbd0: shutting down sockets [ 136.486206][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 136.666222][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 136.701499][ T5026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.215'. [ 136.726514][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 136.846328][ T23] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 136.856020][ T23] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.869084][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 136.881787][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 136.892386][ T23] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.906272][ T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 136.915371][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.926744][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 137.076397][ T7] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 137.084860][ T7] usb 2-1: config 0 has no interface number 0 [ 137.091662][ T7] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 137.104935][ T7] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 137.117049][ T7] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 137.130625][ T7] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 137.140768][ T4260] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 137.151004][ T4260] usb 4-1: USB disconnect, device number 10 [ 137.157350][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.180230][ T7] usb 2-1: config 0 descriptor?? [ 137.186397][ T23] usb 5-1: GET_CAPABILITIES returned 0 [ 137.191950][ T23] usbtmc 5-1:16.0: can't read capabilities [ 137.228111][ T7] ldusb 2-1:0.55: Interrupt in endpoint not found [ 137.270066][ T4246] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 137.409828][ T23] usb 5-1: USB disconnect, device number 3 [ 137.458234][ T4260] usb 2-1: USB disconnect, device number 6 [ 137.516252][ T4246] usb 1-1: Using ep0 maxpacket: 32 [ 137.636242][ T4246] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 137.653831][ T4246] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 137.675381][ T4246] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 137.865726][ T4246] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 137.878319][ T4246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.896189][ T4246] usb 1-1: Product: syz [ 137.910725][ T4246] usb 1-1: Manufacturer: syz [ 137.915391][ T4246] usb 1-1: SerialNumber: syz [ 137.927593][ T4246] usb 1-1: config 0 descriptor?? [ 139.060741][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 139.326283][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 139.403029][ T1111] usb 1-1: USB disconnect, device number 6 [ 139.446425][ T7] usb 2-1: config 10 has an invalid interface number: 107 but max is 0 [ 139.457854][ T7] usb 2-1: config 10 has no interface number 0 [ 139.464089][ T7] usb 2-1: config 10 interface 107 has no altsetting 0 [ 139.566214][ T1108] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 139.656381][ T7] usb 2-1: New USB device found, idVendor=0742, idProduct=200a, bcdDevice=8b.7d [ 139.678494][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.706151][ T4260] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 139.714825][ T7] usb 2-1: Product: syz [ 139.726785][ T7] usb 2-1: Manufacturer: syz [ 139.731515][ T7] usb 2-1: SerialNumber: syz [ 139.936258][ T1108] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.947492][ T4260] usb 4-1: Using ep0 maxpacket: 8 [ 140.066916][ T4260] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 141.513768][ T7] HFC-S_USB: probe of 2-1:10.107 failed with error -5 [ 141.531230][ T1108] usb 3-1: config 0 has no interfaces? [ 141.563201][ T4260] usb 4-1: config 0 has no interface number 0 [ 142.014106][ T1108] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 142.111980][ T4260] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 142.138768][ T7] usb 2-1: USB disconnect, device number 7 [ 142.234792][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.362166][ T4260] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 142.490947][ T1108] usb 3-1: config 0 descriptor?? [ 142.563012][ T4260] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 142.583899][ T1108] usb 3-1: can't set config #0, error -71 [ 142.641945][ T1108] usb 3-1: USB disconnect, device number 7 [ 142.847883][ T4260] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 142.862244][ T4260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.884317][ T4260] usb 4-1: config 0 descriptor?? [ 142.906727][ T4260] usb 4-1: can't set config #0, error -71 [ 142.927278][ T4260] usb 4-1: USB disconnect, device number 11 [ 142.966797][ T150] block nbd4: Attempted send on invalid socket [ 142.975864][ T150] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.000938][ T1092] block nbd4: Attempted send on invalid socket [ 143.007453][ T1092] blk_update_request: I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.020436][ T5122] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 143.055915][ T5125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.241'. [ 143.069118][ T1092] block nbd4: Attempted send on invalid socket [ 143.076197][ T1092] blk_update_request: I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.095926][ T5122] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 143.110790][ T1092] block nbd4: Attempted send on invalid socket [ 143.117192][ T1092] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.129861][ T1092] block nbd4: Attempted send on invalid socket [ 143.136148][ T1092] blk_update_request: I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.155872][ T5122] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 143.159968][ T5125] device gretap0 entered promiscuous mode [ 143.172244][ T5125] device macsec1 entered promiscuous mode [ 143.185044][ T1092] block nbd4: Attempted send on invalid socket [ 143.191713][ T1092] blk_update_request: I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.206567][ T5125] device gretap0 left promiscuous mode [ 143.230252][ T5122] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 143.306866][ T1092] block nbd4: Attempted send on invalid socket [ 143.313092][ T1092] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.326850][ T1092] block nbd4: Attempted send on invalid socket [ 143.333089][ T1092] blk_update_request: I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.344526][ T5122] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 143.355732][ T1092] block nbd4: Attempted send on invalid socket [ 143.362008][ T1092] blk_update_request: I/O error, dev nbd4, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.373554][ T5122] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 143.388818][ T5122] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 144.210541][ T5156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.252'. [ 144.766207][ T4352] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 145.177907][ T4352] usb 1-1: config 0 interface 0 altsetting 186 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 145.217090][ T4352] usb 1-1: config 0 interface 0 has no altsetting 0 [ 145.262791][ T4352] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 145.275081][ T4352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.298996][ T4352] usb 1-1: config 0 descriptor?? [ 145.476161][ T4189] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 145.736270][ T4189] usb 4-1: Using ep0 maxpacket: 8 [ 145.776306][ T23] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 145.787498][ T4352] lenovo 0003:17EF:6062.0004: ignoring exceeding usage max [ 145.798192][ T4352] lenovo 0003:17EF:6062.0004: hidraw0: USB HID v8.00 Device [HID 17ef:6062] on usb-dummy_hcd.0-1/input0 [ 145.856322][ T4189] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 145.864738][ T4189] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.879021][ T4246] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 145.881115][ T4189] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.900931][ T4189] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.910980][ T4189] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.924242][ T4189] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.933611][ T4189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.980701][ T4260] usb 1-1: USB disconnect, device number 7 [ 146.206341][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 146.256318][ T23] usb 2-1: not running at top speed; connect to a high speed hub [ 146.276271][ T4246] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 146.292841][ T4246] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 146.297410][ T4189] usb 4-1: GET_CAPABILITIES returned 0 [ 146.309738][ T4189] usbtmc 4-1:16.0: can't read capabilities [ 146.336437][ T23] usb 2-1: config 9 has an invalid interface number: 87 but max is 0 [ 146.351714][ T23] usb 2-1: config 9 has no interface number 0 [ 146.359959][ T23] usb 2-1: config 9 interface 87 altsetting 7 endpoint 0x1 has invalid maxpacket 65469, setting to 64 [ 146.400354][ T23] usb 2-1: config 9 interface 87 has no altsetting 0 [ 146.466808][ T4246] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 146.480297][ T4246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.492530][ T4246] usb 5-1: Product: syz [ 146.508482][ T4246] usb 5-1: Manufacturer: syz [ 146.525853][ T4246] usb 5-1: SerialNumber: syz [ 146.562051][ T4246] usb 5-1: config 0 descriptor?? [ 146.606685][ T5187] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 146.629335][ T5187] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 146.673802][ T4189] usb 4-1: USB disconnect, device number 12 [ 146.687354][ T4246] usb 5-1: ucan: probing device on interface #0 [ 146.695464][ T4246] usb 5-1: ucan: invalid EP count (1) [ 146.716421][ T23] usb 2-1: string descriptor 0 read error: -22 [ 146.723019][ T23] usb 2-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=45.a9 [ 146.743863][ T4246] usb 5-1: ucan: probe failed; try to update the device firmware [ 146.799192][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.893004][ T23] snd-usb-audio: probe of 2-1:9.87 failed with error -2 [ 146.952533][ T4627] udevd[4627]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:9.87/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.085965][ T4189] usb 2-1: USB disconnect, device number 8 [ 147.102139][ T4246] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 147.527882][ T4352] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 147.546399][ T4352] Bluetooth: hci0: Injecting HCI hardware error event [ 147.554733][ T4195] Bluetooth: hci0: hardware error 0x00 [ 147.630957][ T4246] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 147.656267][ T4246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.664615][ T4246] usb 3-1: Product: syz [ 147.678923][ T4246] usb 3-1: Manufacturer: syz [ 147.685075][ T4246] usb 3-1: SerialNumber: syz [ 147.700288][ T4246] usb 3-1: config 0 descriptor?? [ 147.781504][ T5210] netlink: 5 bytes leftover after parsing attributes in process `syz.0.271'. [ 147.926396][ T1108] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 147.974349][ T4246] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 147.993230][ T5212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.272'. [ 148.005831][ T5212] device gretap0 entered promiscuous mode [ 148.011730][ T5212] device macsec1 entered promiscuous mode [ 148.020611][ T5212] device gretap0 left promiscuous mode [ 148.232081][ T5215] netlink: 'syz.0.273': attribute type 10 has an invalid length. [ 148.283187][ T5215] bridge0: port 3(syz_tun) entered disabled state [ 148.318954][ T5215] device syz_tun left promiscuous mode [ 148.334994][ T5215] bridge0: port 3(syz_tun) entered disabled state [ 148.381196][ T5215] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 148.399763][ T5220] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 148.406604][ T5220] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 148.418749][ T5220] vhci_hcd vhci_hcd.0: Device attached [ 148.431447][ T5221] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 148.458039][ T144] vhci_hcd: stop threads [ 148.462924][ T144] vhci_hcd: release socket [ 148.473282][ T144] vhci_hcd: disconnect device [ 148.486008][ T5224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.276'. [ 148.566639][ T1108] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 148.575994][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.584555][ T1108] usb 2-1: Product: syz [ 148.589107][ T1108] usb 2-1: Manufacturer: syz [ 148.593867][ T1108] usb 2-1: SerialNumber: syz [ 148.610233][ T4352] usb 5-1: USB disconnect, device number 4 [ 149.296332][ T1108] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 149.308177][ T1108] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 149.322307][ T1108] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 149.332375][ T1108] lan78xx: probe of 2-1:1.0 failed with error -32 [ 149.804974][ T5245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.284'. [ 149.817733][ T5245] device gretap0 entered promiscuous mode [ 149.823771][ T5245] device macsec1 entered promiscuous mode [ 149.832445][ T5245] device gretap0 left promiscuous mode [ 149.866241][ T4189] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 149.877033][ T4246] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 149.887175][ T4246] usb 3-1: USB disconnect, device number 8 [ 150.046250][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 150.356486][ T4173] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 150.386340][ T4189] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 150.409797][ T4189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.439693][ T4189] usb 4-1: Product: syz [ 150.453849][ T4189] usb 4-1: Manufacturer: syz [ 150.465120][ T4189] usb 4-1: SerialNumber: syz [ 150.476529][ T23] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 150.538702][ T23] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 150.579887][ T23] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 150.606517][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.637554][ T4246] usb 2-1: USB disconnect, device number 9 [ 150.646800][ T5248] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 150.723269][ T5278] netlink: 'syz.2.292': attribute type 10 has an invalid length. [ 150.776383][ T4173] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.813710][ T4173] usb 5-1: config 0 has no interfaces? [ 150.829727][ T4173] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 150.842225][ T4173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.854587][ T4173] usb 5-1: config 0 descriptor?? [ 150.914355][ T5278] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 150.952379][ T1236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.962031][ T1236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.077653][ T23] usb 1-1: USB disconnect, device number 8 [ 151.129646][ T5289] fuse: root generation should be zero [ 151.199643][ T4189] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 151.217485][ T4189] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 151.247301][ T1108] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 151.256917][ T4189] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 151.274376][ T4189] lan78xx: probe of 4-1:1.0 failed with error -32 [ 151.303161][ T7] usb 5-1: USB disconnect, device number 5 [ 151.522274][ T1108] usb 2-1: Using ep0 maxpacket: 32 [ 151.647086][ T1108] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 151.665222][ T1108] usb 2-1: config 0 has no interface number 0 [ 151.680618][ T1108] usb 2-1: config 0 interface 184 has no altsetting 0 [ 151.873316][ T5312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.298'. [ 151.888158][ T5312] device gretap0 entered promiscuous mode [ 151.894029][ T5312] device macsec1 entered promiscuous mode [ 151.903290][ T5312] device gretap0 left promiscuous mode [ 151.955726][ T5321] tmpfs: Unknown parameter 'usrquota' [ 152.116422][ T1108] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 152.136730][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.144923][ T1108] usb 2-1: Product: syz [ 152.155661][ T1108] usb 2-1: Manufacturer: syz [ 152.160617][ T1108] usb 2-1: SerialNumber: syz [ 152.188223][ T1108] usb 2-1: config 0 descriptor?? [ 152.306918][ T1108] smsc75xx v1.0.0 [ 152.396434][ T4260] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 152.646324][ T4189] Bluetooth: hci1: command 0x0406 tx timeout [ 152.776765][ T4260] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 153.008540][ T1108] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 153.254075][ T4260] usb 5-1: config 1 has no interface number 0 [ 153.268520][ T1108] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 153.325763][ T4260] usb 5-1: config 1 interface 105 has no altsetting 0 [ 153.355808][ T4246] usb 4-1: USB disconnect, device number 13 [ 153.566460][ T4260] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 153.586396][ T4260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.606447][ T4260] usb 5-1: Product: syz [ 153.618854][ T4260] usb 5-1: Manufacturer: syz [ 153.618912][ T5350] binder: BINDER_SET_CONTEXT_MGR already set [ 153.631813][ T4260] usb 5-1: SerialNumber: syz [ 153.646380][ T5350] binder: 5344:5350 ioctl 4018620d 2000000002c0 returned -16 [ 154.029914][ T5358] Set syz1 is full, maxelem 6117 reached [ 154.496904][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 154.504509][ T4352] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 154.576372][ T4260] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 154.626280][ T4260] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 154.685715][ T4260] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a0:b4:1c:e0:4e:4f [ 154.756284][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 154.796250][ T1108] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71 [ 154.808028][ T1108] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71 [ 154.818582][ T1108] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 154.828684][ T1108] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 154.838965][ T1108] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 154.858300][ T1108] usb 2-1: USB disconnect, device number 10 [ 154.887644][ T4260] usb 5-1: USB disconnect, device number 6 [ 154.894716][ T4260] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 154.911810][ T23] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 154.921703][ T23] usb 3-1: config 0 has no interface number 0 [ 154.930650][ T4352] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 154.943663][ T4352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.957249][ T4352] usb 1-1: config 0 descriptor?? [ 154.968394][ T4260] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 154.985173][ T4260] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 154.995805][ T4260] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 155.216711][ T23] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 155.227440][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.235590][ T23] usb 3-1: Product: syz [ 155.240749][ T23] usb 3-1: Manufacturer: syz [ 155.245413][ T23] usb 3-1: SerialNumber: syz [ 155.266321][ T4352] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 155.278959][ T23] usb 3-1: config 0 descriptor?? [ 155.284191][ T4352] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 155.327059][ T23] smsc95xx v2.0.0 [ 155.396433][ T4173] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 155.476887][ T4352] [drm:udl_init] *ERROR* Selecting channel failed [ 155.696368][ T4173] usb 4-1: Using ep0 maxpacket: 16 [ 155.810765][ T4352] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 155.847494][ T4173] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 155.857301][ T23] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 155.906341][ T4173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.938464][ T23] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 155.951039][ T4352] [drm] Initialized udl on minor 2 [ 156.231747][ T4173] usb 4-1: config 0 descriptor?? [ 156.275285][ T4352] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 156.388739][ T4173] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 156.431929][ T4352] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 156.544840][ T4352] usb 1-1: USB disconnect, device number 9 [ 156.607565][ T4246] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 156.669263][ T4246] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 156.730994][ T4246] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 156.756348][ T23] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -32 [ 156.790933][ T23] smsc95xx: probe of 3-1:0.67 failed with error -32 [ 156.976360][ T4260] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 157.166248][ T1108] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 157.286386][ T4352] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 157.336365][ T4260] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 157.347284][ T4260] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 157.357087][ T4260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.367801][ T4260] usb 2-1: config 0 descriptor?? [ 157.406295][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 157.414530][ T4260] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 157.586236][ T1108] usb 5-1: unable to get BOS descriptor or descriptor too short [ 157.662883][ T4260] usb 2-1: USB disconnect, device number 11 [ 157.781086][ T4246] usb 3-1: USB disconnect, device number 9 [ 157.785102][ T5418] ======================================================= [ 157.785102][ T5418] WARNING: The mand mount option has been deprecated and [ 157.785102][ T5418] and is ignored by this kernel. Remove the mand [ 157.785102][ T5418] option from the mount to silence this warning. [ 157.785102][ T5418] ======================================================= [ 157.816476][ T4352] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 157.839182][ T4352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.853256][ T4352] usb 1-1: Product: syz [ 157.861123][ T4352] usb 1-1: Manufacturer: syz [ 157.865768][ T4352] usb 1-1: SerialNumber: syz [ 157.877045][ T1108] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=4a.05 [ 157.887480][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.895722][ T1108] usb 5-1: Product: syz [ 157.901957][ T1108] usb 5-1: Manufacturer: syz [ 157.907383][ T1108] usb 5-1: SerialNumber: syz [ 158.178773][ T1108] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 158.204615][ T1108] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 158.219670][ T1108] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 158.230000][ T1108] usb 5-1: media controller created [ 158.244808][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.310194][ T1108] zl10353_read_register: readreg error (reg=127, ret==0) [ 158.362614][ T1108] usb 5-1: USB disconnect, device number 7 [ 158.596276][ T4352] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 158.609503][ T4352] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 158.624342][ T4352] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 158.634054][ T4352] lan78xx: probe of 1-1:1.0 failed with error -32 [ 159.176286][ T4173] gspca_sonixj: reg_w1 err -71 [ 159.181376][ T4173] sonixj: probe of 4-1:0.0 failed with error -71 [ 159.211154][ T4173] usb 4-1: USB disconnect, device number 14 [ 159.624887][ T4173] usb 1-1: USB disconnect, device number 10 [ 160.035210][ T5448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.328'. [ 160.048000][ T5448] device gretap0 entered promiscuous mode [ 160.053895][ T5448] device macsec1 entered promiscuous mode [ 160.061767][ T4173] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 160.249216][ T5447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.329'. [ 160.259841][ T5448] device gretap0 left promiscuous mode [ 160.450594][ T5454] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 160.500437][ T4173] usb 1-1: Using ep0 maxpacket: 32 [ 160.594871][ T5459] netlink: 'syz.2.335': attribute type 11 has an invalid length. [ 160.609962][ T5459] netlink: 36 bytes leftover after parsing attributes in process `syz.2.335'. [ 160.670147][ T4173] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 160.687874][ T4173] usb 1-1: config 0 has no interface number 0 [ 160.695802][ T4189] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 160.912738][ T5473] tipc: Started in network mode [ 160.919788][ T5473] tipc: Node identity , cluster identity 4711 [ 160.925894][ T5473] tipc: Failed to set node id, please configure manually [ 160.933715][ T4173] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 160.936201][ T4189] usb 5-1: Using ep0 maxpacket: 8 [ 160.949933][ T4173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.961853][ T4173] usb 1-1: Product: syz [ 160.970836][ T5473] tipc: Enabling of bearer rejected, failed to enable media [ 160.982876][ T4173] usb 1-1: Manufacturer: syz [ 160.990455][ T4173] usb 1-1: SerialNumber: syz [ 161.013506][ T4173] usb 1-1: config 0 descriptor?? [ 161.029893][ T5477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'. [ 161.071863][ T4173] smsc95xx v2.0.0 [ 161.076432][ T4189] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.100994][ T4189] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 161.118485][ T4189] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 161.130373][ T4189] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 161.142539][ T4189] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 161.151997][ T4189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.166654][ T5479] devpts: called with bogus options [ 161.220789][ T4189] hub 5-1:1.0: bad descriptor, ignoring hub [ 161.228098][ T4189] hub: probe of 5-1:1.0 failed with error -5 [ 161.234759][ T4189] cdc_wdm 5-1:1.0: skipping garbage [ 161.244365][ T4189] cdc_wdm 5-1:1.0: skipping garbage [ 161.255450][ T4189] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 161.265646][ T4189] cdc_wdm 5-1:1.0: Unknown control protocol [ 162.209067][ T1108] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 162.468571][ T4189] usb 5-1: USB disconnect, device number 8 [ 162.576817][ T1108] usb 4-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 162.601022][ T1108] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 162.738790][ T4173] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 162.776270][ T1108] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 162.785701][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.801052][ T1108] usb 4-1: Product: syz [ 162.806730][ T1108] usb 4-1: Manufacturer: syz [ 162.811482][ T1108] usb 4-1: SerialNumber: syz [ 162.824961][ T1108] usb 4-1: config 0 descriptor?? [ 162.867299][ T1108] usb-storage 4-1:0.0: USB Mass Storage device detected [ 162.897102][ T1108] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 162.956353][ T4173] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 162.989420][ T4173] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 163.022848][ T4173] usb 1-1: USB disconnect, device number 11 [ 163.331927][ T5505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.349'. [ 163.344562][ T5505] device gretap0 entered promiscuous mode [ 163.351252][ T5505] device macsec1 entered promiscuous mode [ 163.359396][ T5505] device gretap0 left promiscuous mode [ 163.461108][ T5507] netlink: 'syz.2.350': attribute type 10 has an invalid length. [ 163.478052][ T5507] netlink: 2 bytes leftover after parsing attributes in process `syz.2.350'. [ 163.487676][ T5507] device bond0 entered promiscuous mode [ 163.493265][ T5507] device bond_slave_0 entered promiscuous mode [ 163.500254][ T5507] device bond_slave_1 entered promiscuous mode [ 163.507622][ T5507] device wlan1 entered promiscuous mode [ 163.515568][ T5507] bridge0: port 4(bond0) entered blocking state [ 163.522822][ T5507] bridge0: port 4(bond0) entered disabled state [ 163.551995][ T5507] bridge0: port 4(bond0) entered blocking state [ 163.558467][ T5507] bridge0: port 4(bond0) entered forwarding state [ 163.607131][ T1108] usb 4-1: USB disconnect, device number 15 [ 163.742669][ T5519] tipc: Started in network mode [ 163.747719][ T5519] tipc: Node identity f696f35b5d0c, cluster identity 4711 [ 163.755449][ T5519] tipc: Enabled bearer , priority 0 [ 163.783533][ T5516] tipc: Resetting bearer [ 163.833437][ T5516] tipc: Disabling bearer [ 164.106325][ T4173] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 164.126434][ T4260] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 165.456434][ T4173] usb 2-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 165.490932][ T4173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.525444][ T4173] usb 2-1: Product: syz [ 165.541004][ T4173] usb 2-1: Manufacturer: syz [ 165.545733][ T4173] usb 2-1: SerialNumber: syz [ 165.575382][ T4173] usb 2-1: config 0 descriptor?? [ 165.686587][ T4238] Bluetooth: hci1: command 0x0409 tx timeout [ 165.870796][ T5553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.367'. [ 165.886450][ T4173] int51x1: probe of 2-1:0.0 failed with error -71 [ 165.890498][ T4260] usb 3-1: config index 0 descriptor too short (expected 8475, got 27) [ 165.907882][ T5554] block nbd0: shutting down sockets [ 165.916200][ T4246] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 165.922794][ T4260] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 165.946660][ T4260] usb 3-1: config 0 has no interface number 0 [ 165.966629][ T4173] usb 2-1: USB disconnect, device number 12 [ 165.971052][ T4260] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 166.004248][ T4260] usb 3-1: config 0 interface 200 has no altsetting 0 [ 166.286421][ T4260] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.1a [ 166.295807][ T4260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.306549][ T5557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'. [ 166.308810][ T4260] usb 3-1: Product: syz [ 166.320839][ T5557] device gretap0 entered promiscuous mode [ 166.321133][ T4260] usb 3-1: Manufacturer: syz [ 166.327440][ T5557] device macsec1 entered promiscuous mode [ 166.331807][ T4260] usb 3-1: SerialNumber: syz [ 166.347223][ T5557] device gretap0 left promiscuous mode [ 166.368444][ T4260] usb 3-1: config 0 descriptor?? [ 166.416877][ T4246] usb 5-1: config 0 has no interfaces? [ 166.503026][ T4246] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 166.527886][ T4246] usb 5-1: New USB device strings: Mfr=0, Product=28, SerialNumber=0 [ 166.546244][ T4246] usb 5-1: Product: syz [ 166.553787][ T4246] usb 5-1: config 0 descriptor?? [ 167.837572][ T4260] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input11 [ 167.859723][ T4246] usb 5-1: USB disconnect, device number 9 [ 167.923787][ T5576] loop3: detected capacity change from 0 to 7 [ 167.941882][ T4260] usb 3-1: USB disconnect, device number 10 [ 167.973725][ T4627] Dev loop3: unable to read RDB block 7 [ 167.983118][ T4627] loop3: unable to read partition table [ 167.999054][ T4627] loop3: partition table beyond EOD, truncated [ 168.012884][ T5576] Dev loop3: unable to read RDB block 7 [ 168.022126][ T5576] loop3: unable to read partition table [ 168.040323][ T5576] loop3: partition table beyond EOD, truncated [ 168.057087][ T5576] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 168.376274][ T4189] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 168.406493][ T4260] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 168.745476][ T5590] overlayfs: failed to verify upper (83/file1, ino=460, err=-116) [ 168.768849][ T5590] overlayfs: failed to verify index dir 'upper' xattr [ 168.777719][ T5590] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 168.836484][ T4189] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 168.862047][ T4189] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 168.886622][ T4260] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 168.912993][ T4260] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 168.957548][ T4189] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 168.989353][ T4260] usb 3-1: config 150 has no interface number 0 [ 169.030924][ T4189] usb 4-1: config 1 has no interface number 0 [ 169.048099][ T4260] usb 3-1: config 150 interface 204 has no altsetting 0 [ 169.091298][ T4189] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 169.228988][ T4189] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 169.306708][ T4260] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 169.369199][ T4260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.434253][ T4189] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 169.477864][ T4260] usb 3-1: Product: syz [ 169.545899][ T4260] usb 3-1: Manufacturer: syz [ 169.573655][ T4189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.618772][ T4260] usb 3-1: SerialNumber: syz [ 169.958253][ T4189] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 170.306707][ T4260] usb 3-1: can't set config #150, error -71 [ 170.356199][ T1108] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 170.394504][ T4260] usb 3-1: USB disconnect, device number 11 [ 170.607218][ T4189] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 170.629989][ T13] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 170.796459][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.817338][ T1108] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 170.827774][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.839033][ T1108] usb 5-1: config 0 descriptor?? [ 170.869924][ T5609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'. [ 170.882461][ T5609] device gretap0 entered promiscuous mode [ 170.888491][ T5609] device macsec1 entered promiscuous mode [ 170.896237][ T5609] device gretap0 left promiscuous mode [ 170.906295][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 171.056364][ T13] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 171.065720][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.075065][ T4260] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 171.086412][ T13] usb 2-1: config 0 descriptor?? [ 171.129776][ T13] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 171.307794][ T1108] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 171.316550][ T4260] usb 3-1: Using ep0 maxpacket: 16 [ 171.324183][ T1108] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0005/input/input12 [ 171.432262][ T1108] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 171.445054][ T4260] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.456878][ T4260] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.472190][ T4260] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 171.489883][ T4260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.521396][ T4260] usb 3-1: config 0 descriptor?? [ 171.572555][ T5598] udc-core: couldn't find an available UDC or it's busy [ 171.604147][ T5598] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 171.688840][ T4189] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 171.872667][ T4189] usb 4-1: USB disconnect, device number 16 [ 171.901178][ T4189] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 172.061923][ T4260] hid-picolcd 0003:04D8:F002.0006: item fetching failed at offset 10/11 [ 172.078822][ T4260] hid-picolcd 0003:04D8:F002.0006: device report parse failed [ 172.094925][ T4260] hid-picolcd: probe of 0003:04D8:F002.0006 failed with error -22 [ 172.291929][ T4260] usb 3-1: USB disconnect, device number 12 [ 172.380968][ T4189] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 172.626146][ T4189] usb 4-1: Using ep0 maxpacket: 32 [ 172.673016][ T4246] usb 5-1: USB disconnect, device number 10 [ 172.708549][ T5630] input: syz0 as /devices/virtual/input/input13 [ 172.753291][ T4189] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 172.783533][ T4189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.814514][ T4189] usb 4-1: config 0 descriptor?? [ 172.860086][ T4189] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 173.558814][ T5644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.397'. [ 173.573118][ T5644] device gretap0 entered promiscuous mode [ 173.579115][ T5644] device macsec1 entered promiscuous mode [ 173.588018][ T5644] device gretap0 left promiscuous mode [ 173.836166][ T1108] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 173.946357][ T13] gspca_sonixj: reg_w1 err -71 [ 173.951411][ T13] sonixj: probe of 2-1:0.0 failed with error -71 [ 173.960750][ T13] usb 2-1: USB disconnect, device number 13 [ 173.986262][ T4189] gspca_vc032x: reg_w err -71 [ 173.991767][ T4189] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.002468][ T4189] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.008862][ T4189] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.014408][ T4189] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.024178][ T4189] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.030007][ T4189] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.035415][ T4189] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.045376][ T4189] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.051010][ T4189] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.062046][ T4189] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.067700][ T4189] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.073245][ T4189] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.083034][ T4189] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.088741][ T4189] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.095553][ T4189] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.102139][ T4189] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.107969][ T4189] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.113740][ T4189] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.120242][ T4189] gspca_vc032x: Unknown sensor... [ 174.126000][ T4189] vc032x: probe of 4-1:0.0 failed with error -22 [ 174.136950][ T4189] usb 4-1: USB disconnect, device number 17 [ 174.289486][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.303269][ T1108] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 174.318173][ T1108] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 174.328329][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.339821][ T1108] usb 5-1: config 0 descriptor?? [ 174.751381][ T5664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.403'. [ 174.897700][ T1108] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 174.921694][ T1108] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 174.945982][ T1108] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 174.954893][ T1108] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 174.980043][ T1108] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 175.009003][ T1108] kovaplus 0003:1E7D:2D50.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 175.376243][ T4189] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 175.426628][ T4260] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 175.636277][ T4189] usb 4-1: Using ep0 maxpacket: 16 [ 175.676504][ T4260] usb 2-1: Using ep0 maxpacket: 32 [ 175.756382][ T4189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.774754][ T4189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.795201][ T4189] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 175.812217][ T4260] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.824802][ T4189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.842050][ T4260] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.864767][ T4189] usb 4-1: config 0 descriptor?? [ 175.871650][ T4260] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 175.882288][ T4260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.901715][ T4260] usb 2-1: config 0 descriptor?? [ 175.947851][ T4260] hub 2-1:0.0: USB hub found [ 176.026979][ T1108] kovaplus 0003:1E7D:2D50.0007: couldn't init struct kovaplus_device [ 176.047040][ T1108] kovaplus 0003:1E7D:2D50.0007: couldn't install mouse [ 176.066488][ T1108] kovaplus: probe of 0003:1E7D:2D50.0007 failed with error -71 [ 176.088248][ T1108] usb 5-1: USB disconnect, device number 11 [ 176.166308][ T4260] hub 2-1:0.0: 1 port detected [ 176.216767][ T5682] fido_id[5682]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 176.327960][ T1108] Bluetooth: hci4: command 0x2016 tx timeout [ 176.348322][ T4189] hid-picolcd 0003:04D8:F002.0008: item fetching failed at offset 10/11 [ 176.362620][ T4189] hid-picolcd 0003:04D8:F002.0008: device report parse failed [ 176.371134][ T4189] hid-picolcd: probe of 0003:04D8:F002.0008 failed with error -22 [ 176.579118][ T1111] usb 4-1: USB disconnect, device number 18 [ 176.816394][ T4260] hub 2-1:0.0: activate --> -90 [ 177.072731][ T4246] usb 2-1: USB disconnect, device number 14 [ 177.113043][ T4260] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 177.266300][ T4189] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 177.356093][ T5701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.416'. [ 177.538344][ T4189] usb 5-1: Using ep0 maxpacket: 16 [ 177.656536][ T4189] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 177.686314][ T4189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.725144][ T4189] usb 5-1: config 0 descriptor?? [ 178.406292][ T1108] Bluetooth: hci4: command 0x0406 tx timeout [ 178.820239][ T4189] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 178.933256][ T5716] input: syz0 as /devices/virtual/input/input14 [ 180.534545][ T5754] netlink: 104 bytes leftover after parsing attributes in process `syz.1.436'. [ 181.076280][ T4189] gspca_sonixj: reg_w1 err -71 [ 181.165713][ T4189] sonixj: probe of 5-1:0.0 failed with error -71 [ 181.189630][ T4189] usb 5-1: USB disconnect, device number 12 [ 181.539831][ T7] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 181.693454][ T5774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.444'. [ 181.796198][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 181.916289][ T7] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 181.942001][ T7] usb 2-1: config 0 has no interface number 0 [ 182.146604][ T7] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 182.171766][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.193955][ T7] usb 2-1: Product: syz [ 182.204636][ T7] usb 2-1: Manufacturer: syz [ 182.212587][ T7] usb 2-1: SerialNumber: syz [ 182.230756][ T7] usb 2-1: config 0 descriptor?? [ 182.277735][ T7] smsc95xx v2.0.0 [ 182.347893][ T5779] block nbd4: shutting down sockets [ 182.506261][ T4189] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 183.046287][ T4189] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 183.076217][ T4189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.084510][ T4189] usb 3-1: Product: syz [ 183.089595][ T4189] usb 3-1: Manufacturer: syz [ 183.094316][ T4189] usb 3-1: SerialNumber: syz [ 183.133300][ T4189] usb 3-1: config 0 descriptor?? [ 183.426659][ T4189] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 183.586279][ T7] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 183.606121][ T7] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 183.656508][ T7] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 183.680076][ T7] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 183.706708][ T7] usb 2-1: USB disconnect, device number 15 [ 183.861228][ T5816] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 183.861248][ T5816] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 184.089452][ T1111] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 184.650617][ T5843] netlink: 24 bytes leftover after parsing attributes in process `syz.0.471'. [ 184.669712][ T5844] block nbd3: shutting down sockets [ 184.842767][ T1111] usb 5-1: unable to get BOS descriptor or descriptor too short [ 184.926485][ T1111] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.943727][ T1111] usb 5-1: config 0 has no interfaces? [ 184.986549][ T4189] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 185.002372][ T4189] usb 3-1: USB disconnect, device number 13 [ 185.186344][ T1111] usb 5-1: string descriptor 0 read error: -22 [ 185.192844][ T1111] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.212691][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.236683][ T1111] usb 5-1: config 0 descriptor?? [ 185.650630][ T7] usb 5-1: USB disconnect, device number 13 [ 186.189339][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.479'. [ 186.221631][ T5879] device gretap0 entered promiscuous mode [ 186.227786][ T5879] device macsec1 entered promiscuous mode [ 186.309060][ T5879] device gretap0 left promiscuous mode [ 188.076672][ T5897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.486'. [ 188.095321][ T5893] kvm: pic: level sensitive irq not supported [ 188.095846][ T5893] kvm: pic: single mode not supported [ 188.102571][ T5893] kvm: pic: level sensitive irq not supported [ 188.646491][ T1108] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 189.690072][ T146] ------------[ cut here ]------------ [ 189.701039][ T146] WARNING: CPU: 0 PID: 146 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x24f/0x450 [ 189.711061][ T146] Modules linked in: [ 189.715006][ T146] CPU: 0 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 189.723597][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 189.734204][ T146] Workqueue: hci1 hci_conn_timeout [ 189.739914][ T146] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 189.746005][ T146] Code: 69 8d e8 64 ac f0 f8 48 8b 35 45 0b 9e 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e6 7f 81 f8 e8 31 44 ac f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 189.767004][ T146] RSP: 0018:ffffc900011ffc08 EFLAGS: 00010293 [ 189.773625][ T146] RAX: ffffffff88cb86ef RBX: ffff88807adc0138 RCX: ffff88801a99bb80 [ 189.781854][ T146] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 189.790066][ T146] RBP: 00000000ffffffff R08: dffffc0000000000 R09: ffffed100f5b8003 [ 189.798278][ T146] R10: ffffed100f5b8003 R11: 1ffff1100f5b8002 R12: dffffc0000000000 [ 189.806511][ T1108] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 189.815795][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.824770][ T146] R13: dffffc0000000000 R14: ffff88807adc0000 R15: ffff88807adc0010 [ 189.832897][ T146] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 189.843011][ T146] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.849725][ T146] CR2: ffffffffbfd3d7aa CR3: 000000002af61000 CR4: 00000000003526f0 [ 189.857946][ T146] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.866121][ T146] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.874852][ T146] Call Trace: [ 189.878339][ T146] [ 189.881322][ T146] process_one_work+0x863/0x1000 [ 189.886543][ T146] ? worker_detach_from_pool+0x240/0x240 [ 189.892215][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 189.897644][ T146] ? _raw_spin_lock_irq+0xab/0xe0 [ 189.902911][ T146] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 189.908403][ T146] ? wq_worker_running+0x97/0x170 [ 189.913633][ T146] worker_thread+0xaa8/0x12a0 [ 189.918476][ T146] kthread+0x436/0x520 [ 189.922583][ T146] ? rcu_lock_release+0x20/0x20 [ 189.927680][ T146] ? kthread_blkcg+0xd0/0xd0 [ 189.932310][ T146] ret_from_fork+0x1f/0x30 [ 189.936961][ T146] [ 189.940064][ T146] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 189.947447][ T146] CPU: 0 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 189.954937][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 189.965030][ T146] Workqueue: hci1 hci_conn_timeout [ 189.970188][ T146] Call Trace: [ 189.973525][ T146] [ 189.976478][ T146] dump_stack_lvl+0x168/0x230 [ 189.981197][ T146] ? show_regs_print_info+0x20/0x20 [ 189.986438][ T146] ? load_image+0x3b0/0x3b0 [ 189.991370][ T146] panic+0x2c9/0x7f0 [ 189.995406][ T146] ? bpf_jit_dump+0xd0/0xd0 [ 189.999959][ T146] ? ret_from_fork+0x1f/0x30 [ 190.004694][ T146] ? hci_conn_timeout+0x24f/0x450 [ 190.009764][ T146] __warn+0x248/0x2b0 [ 190.013902][ T146] ? hci_conn_timeout+0x24f/0x450 [ 190.018974][ T146] report_bug+0x1b7/0x2e0 [ 190.023502][ T146] handle_bug+0x3a/0x70 [ 190.027734][ T146] exc_invalid_op+0x16/0x40 [ 190.032301][ T146] asm_exc_invalid_op+0x16/0x20 [ 190.037183][ T146] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 190.042884][ T146] Code: 69 8d e8 64 ac f0 f8 48 8b 35 45 0b 9e 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e6 7f 81 f8 e8 31 44 ac f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 190.062789][ T146] RSP: 0018:ffffc900011ffc08 EFLAGS: 00010293 [ 190.068945][ T146] RAX: ffffffff88cb86ef RBX: ffff88807adc0138 RCX: ffff88801a99bb80 [ 190.076960][ T146] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 190.085251][ T146] RBP: 00000000ffffffff R08: dffffc0000000000 R09: ffffed100f5b8003 [ 190.093499][ T146] R10: ffffed100f5b8003 R11: 1ffff1100f5b8002 R12: dffffc0000000000 [ 190.101508][ T146] R13: dffffc0000000000 R14: ffff88807adc0000 R15: ffff88807adc0010 [ 190.109718][ T146] ? hci_conn_timeout+0x24f/0x450 [ 190.114967][ T146] ? hci_conn_timeout+0x24f/0x450 [ 190.120040][ T146] process_one_work+0x863/0x1000 [ 190.125029][ T146] ? worker_detach_from_pool+0x240/0x240 [ 190.130704][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 190.136047][ T146] ? _raw_spin_lock_irq+0xab/0xe0 [ 190.141120][ T146] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 190.146709][ T146] ? wq_worker_running+0x97/0x170 [ 190.151954][ T146] worker_thread+0xaa8/0x12a0 [ 190.156743][ T146] kthread+0x436/0x520 [ 190.160846][ T146] ? rcu_lock_release+0x20/0x20 [ 190.165739][ T146] ? kthread_blkcg+0xd0/0xd0 [ 190.170364][ T146] ret_from_fork+0x1f/0x30 [ 190.174946][ T146] [ 190.178394][ T146] Kernel Offset: disabled [ 190.183063][ T146] Rebooting in 86400 seconds..