last executing test programs: 15.036372462s ago: executing program 1 (id=358): socket$inet6_sctp(0xa, 0x1, 0x84) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x118) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 14.764153082s ago: executing program 3 (id=360): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) mkdir(&(0x7f00000002c0)='./file1/file1\x00', 0x0) 11.725522671s ago: executing program 3 (id=365): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x5) write$cgroup_int(r3, &(0x7f0000000040)=0x7, 0x12) writev(r2, &(0x7f00000002c0)=[{&(0x7f00000004c0)="ca", 0x1}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) lseek(r4, 0x2000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 10.695907142s ago: executing program 4 (id=372): socket$inet6(0xa, 0x3, 0x8000000003c) socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f2034009ac0f0a3e0cc75c03010902"], 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x58, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x6}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) 10.671154488s ago: executing program 1 (id=373): pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x40001043, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2(0x0, 0x80800) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x3516, 0x300, 0x0, 0x0, 0x0) 10.49961214s ago: executing program 3 (id=374): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x5cdb, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080600010800060400020180c2000002e0000002"], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, 0x0, 0xfe33) r5 = syz_usb_connect$cdc_ncm(0x2, 0x6e, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_emit_ethernet(0x1f, 0x0, 0x0) 9.801200074s ago: executing program 0 (id=375): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 9.42878656s ago: executing program 0 (id=376): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000200), 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet6(0xa, 0x3, 0x1) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011003e236bb40f00a57d30000010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x0, 0x3, 0x1000}, @TCA_CODEL_TARGET={0xfffffffffffffff7, 0x1, 0x8001}]}}]}, 0x44}}, 0x40040) 9.389019138s ago: executing program 3 (id=377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x2a) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) link(&(0x7f0000000080)='./file1\x00', &(0x7f0000000240)='./file2/file0\x00') getpid() r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0x1}], 0x1}, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f00000001c0)={&(0x7f00000005c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4082, 0xff2}], 0x1}, 0x0) 9.015237943s ago: executing program 3 (id=378): setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x11d, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') syz_usb_connect(0x0, 0x5f, 0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x8, 0x1, 0x0, 0x6, 0xffffffff, 0x0, "e4ff00", 0x1}) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r2}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={'hmac(sha256-avx2)\x00'}}) 8.064982246s ago: executing program 1 (id=379): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$media(0x0, 0x0, 0x101d01) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES8, @ANYRES16, @ANYRES16=0x0], 0x118) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') lseek(r2, 0x1000000, 0x0) 6.551299356s ago: executing program 4 (id=380): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x9, 0x1002, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup(r1) close_range(r0, 0xffffffffffffffff, 0x0) 6.509288468s ago: executing program 2 (id=381): r0 = syz_open_dev$usbmon(&(0x7f0000000140), 0x5, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={r0, 0x8, 0x3, 0x3}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1, 0xb}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffb}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x4, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x8, 0x8, 0x4, 0x3c5b, 0x1, 0x9, 0x9, 0x1, 0x1f461e2c, 0x22, 0xe661, 0x9, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0x0, 0x0, 0x71, 0xfffffff9, 0x7, 0x3, 0x0, 0xd, 0x8a80000, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x8000006, 0x8, 0x4, 0x1, 0x40], [0x3, 0x10001, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0x28, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x3c, 0x7, 0x8, 0x0, 0xe, 0x4, 0x78, 0xd, 0x0, 0x7, 0x4, 0x8000, 0x409, 0x400, 0x101, 0x0, 0x7, 0xff, 0x20005, 0x8, 0x5f31, 0x1, 0x1000, 0x2, 0x40002, 0xa, 0x4, 0x9, 0xb, 0x800, 0x6, 0x7, 0x8000, 0x1, 0x44, 0xffff, 0xa, 0x80, 0x9, 0x2, 0x9, 0x9, 0x1, 0x2, 0x3, 0x2, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x3, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x8000, 0x9, 0x5, 0x7ff, 0x2, 0x3, 0x4, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x6, 0x80, 0xf, 0x4, 0x4, 0x101000, 0xa2, 0x7, 0x53cf697b, 0x6c50, 0x7, 0xac8, 0xbf, 0x2, 0x200, 0x7ff, 0xfffffff9, 0x1, 0x80001, 0xffff, 0x3, 0x9, 0x1c, 0x120000, 0x4, 0x6, 0xaaed, 0x4, 0x65], [0x5, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x4, 0x2, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0xa620, 0xfffffffd, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xd, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x5, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x2, 0xffffffff, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@updpolicy={0xe0, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x38}, @in=@local, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4004, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1c51}, 0x0, 0x0, 0x2}, [@address_filter={0x28, 0x1a, {@in6=@mcast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xa, 0xc, 0x5}}]}, 0xe0}}, 0x4040000) 6.303161307s ago: executing program 2 (id=382): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x191}, 0x80) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="200025bd7000fedbdf256c00000008000300", @ANYRES32=0x0, @ANYBLOB="a9699b0ecf5b8a"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000340)="2e640fc76e65f30fc73166b9800000c00f326635001000000f3066660fc730baf80c66b837f4a88566efbafc0cec440f20c0663505000000440f22c066660f66cd67360fc72fba420066ed0fc729"}], 0x0, 0x56, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.107558131s ago: executing program 4 (id=383): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 5.222665839s ago: executing program 2 (id=384): socket(0x3, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r2) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000200)="19c9d4342b0c0100000000f9ffff", 0xe}], 0x1}}], 0x1, 0x0) 4.807271233s ago: executing program 2 (id=385): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x36, 0x2, 0x2, "0600836a330000000000000007000200268d09ff076900ff0f0040c39b08fc00", 0x3831354f}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000095}, 0x4009) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.801093635s ago: executing program 3 (id=386): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) 4.41910484s ago: executing program 0 (id=387): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$netlink(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 4.028666373s ago: executing program 1 (id=388): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040015}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.595325588s ago: executing program 0 (id=389): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x1249, &(0x7f00000004c0)={0x0, 0x2170, 0x1, 0x1, 0x1c1}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.59356977s ago: executing program 2 (id=390): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4800003e, r0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) sendfile(r2, r3, 0x0, 0x6) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r4 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xa2) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r4, r5, 0x3, 0x0) 3.593097238s ago: executing program 4 (id=391): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[], 0xfc}}, 0x4040000) r3 = memfd_create(&(0x7f0000000300)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xde', 0x0) write(r3, &(0x7f0000000140)='/', 0x1) sendfile(r3, r3, &(0x7f0000001000), 0xfec) 2.668369477s ago: executing program 2 (id=392): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x3b677000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2.38637876s ago: executing program 1 (id=393): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 1.628817235s ago: executing program 0 (id=394): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) dup(r1) shutdown(r0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x6, 0x200000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x7, 0xfffffffffffffffe, 0x0, 0x2, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0xfffffffffffffffd, 0x800000, 0x0, 0x0, 0x200c3ad, 0x7}, 0x0, 0x0) 1.3749939s ago: executing program 4 (id=395): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000016001d0a"], 0x14}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = dup2(r2, r2) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x7fffffff, 0x200372, 0x8, 0x1a, "40b80000000000000000001c009be600"}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f0000000000)=0x9, 0x4) connect$inet6(r4, &(0x7f0000000380)={0xa, 0xfffe, 0x4, @remote, 0x9}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000800)=0x7, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000140)={0x20}) 391.440609ms ago: executing program 0 (id=396): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000180)={0x20, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYRES8=r0], 0x0, 0x0}) rseq(0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) move_pages(r1, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x4) 206.335709ms ago: executing program 1 (id=397): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xffffffff, 0xa5a020b, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x64, 0x2) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0x3a, 0x23b) 0s ago: executing program 4 (id=398): socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a09058103"], 0x0) close(0x3) syz_open_dev$evdev(&(0x7f0000000080), 0xe, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r3, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r3], 0x40c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.13' (ED25519) to the list of known hosts. [ 81.691129][ T5820] cgroup: Unknown subsys name 'net' [ 81.799233][ T5820] cgroup: Unknown subsys name 'cpuset' [ 81.808189][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.452286][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.868711][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.895795][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.905627][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.914190][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.922680][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.990012][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.005968][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.015600][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.035617][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.045701][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.101748][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.120461][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.136744][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.144574][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.170095][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.186161][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.195361][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.214533][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.222414][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.231259][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.240117][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.253723][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.261508][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.276601][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.286892][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.634681][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 86.855814][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 86.966438][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.973619][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.983182][ T5834] bridge_slave_0: entered allmulticast mode [ 86.991659][ T5834] bridge_slave_0: entered promiscuous mode [ 87.010370][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.017612][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.024857][ T5834] bridge_slave_1: entered allmulticast mode [ 87.032352][ T5834] bridge_slave_1: entered promiscuous mode [ 87.204280][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.214247][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 87.260976][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.391785][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 87.406350][ T5834] team0: Port device team_slave_0 added [ 87.422897][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.430165][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.437900][ T5836] bridge_slave_0: entered allmulticast mode [ 87.445062][ T5836] bridge_slave_0: entered promiscuous mode [ 87.459807][ T5834] team0: Port device team_slave_1 added [ 87.466005][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 87.498181][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.505442][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.512594][ T5836] bridge_slave_1: entered allmulticast mode [ 87.520463][ T5836] bridge_slave_1: entered promiscuous mode [ 87.632101][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.640200][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.647473][ T5847] bridge_slave_0: entered allmulticast mode [ 87.654667][ T5847] bridge_slave_0: entered promiscuous mode [ 87.682665][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.689917][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.716231][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.740236][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.747447][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.754612][ T5847] bridge_slave_1: entered allmulticast mode [ 87.761959][ T5847] bridge_slave_1: entered promiscuous mode [ 87.771985][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.785130][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.814423][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.821464][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.847685][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.945727][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.956299][ T5844] Bluetooth: hci0: command tx timeout [ 87.974444][ T5836] team0: Port device team_slave_0 added [ 88.018239][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.025561][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.032734][ T5846] bridge_slave_0: entered allmulticast mode [ 88.041691][ T5846] bridge_slave_0: entered promiscuous mode [ 88.051998][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.076095][ T5836] team0: Port device team_slave_1 added [ 88.107582][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.114816][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.122225][ T5844] Bluetooth: hci1: command tx timeout [ 88.122811][ T5846] bridge_slave_1: entered allmulticast mode [ 88.135018][ T5846] bridge_slave_1: entered promiscuous mode [ 88.181740][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.189322][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.196751][ T5845] bridge_slave_0: entered allmulticast mode [ 88.204007][ T5845] bridge_slave_0: entered promiscuous mode [ 88.217277][ T5834] hsr_slave_0: entered promiscuous mode [ 88.223852][ T5834] hsr_slave_1: entered promiscuous mode [ 88.271540][ T5847] team0: Port device team_slave_0 added [ 88.275599][ T5844] Bluetooth: hci3: command tx timeout [ 88.282612][ T5847] team0: Port device team_slave_1 added [ 88.288456][ T5841] Bluetooth: hci2: command tx timeout [ 88.303779][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.311090][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.337269][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.351246][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.355795][ T5844] Bluetooth: hci4: command tx timeout [ 88.358354][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.389593][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.400998][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.408501][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.415766][ T5845] bridge_slave_1: entered allmulticast mode [ 88.422961][ T5845] bridge_slave_1: entered promiscuous mode [ 88.439305][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.452398][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.481508][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.488649][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.515094][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.528358][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.535434][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.561538][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.628903][ T5846] team0: Port device team_slave_0 added [ 88.638748][ T5846] team0: Port device team_slave_1 added [ 88.717903][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.730403][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.759895][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.767140][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.793534][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.854238][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.861356][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.887924][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.931307][ T5836] hsr_slave_0: entered promiscuous mode [ 88.938187][ T5836] hsr_slave_1: entered promiscuous mode [ 88.944298][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.952473][ T5836] Cannot create hsr debugfs directory [ 88.993469][ T5847] hsr_slave_0: entered promiscuous mode [ 89.000809][ T5847] hsr_slave_1: entered promiscuous mode [ 89.007436][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.015022][ T5847] Cannot create hsr debugfs directory [ 89.024036][ T5845] team0: Port device team_slave_0 added [ 89.033339][ T5845] team0: Port device team_slave_1 added [ 89.149274][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.156633][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.183618][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.202477][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.209543][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.235528][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.293680][ T5846] hsr_slave_0: entered promiscuous mode [ 89.300547][ T5846] hsr_slave_1: entered promiscuous mode [ 89.306970][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.314541][ T5846] Cannot create hsr debugfs directory [ 89.428285][ T5845] hsr_slave_0: entered promiscuous mode [ 89.436021][ T5845] hsr_slave_1: entered promiscuous mode [ 89.442281][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.452359][ T5845] Cannot create hsr debugfs directory [ 89.745417][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.759183][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.790723][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.825398][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.912090][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.922345][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.934492][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.945092][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.017980][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.035948][ T5844] Bluetooth: hci0: command tx timeout [ 90.050929][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.061856][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.075030][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.197225][ T5844] Bluetooth: hci1: command tx timeout [ 90.218527][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.230224][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.252180][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.261583][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.294593][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.355355][ T5844] Bluetooth: hci3: command tx timeout [ 90.364782][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.365898][ T5844] Bluetooth: hci2: command tx timeout [ 90.382739][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.393339][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.404741][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.422954][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.435613][ T5844] Bluetooth: hci4: command tx timeout [ 90.479895][ T2974] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.487195][ T2974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.498780][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.505986][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.555216][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.641686][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.681773][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.701460][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.712510][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.719685][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.784335][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.791480][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.810027][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.822679][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.850023][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.857309][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.870421][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.877590][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.901928][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.909067][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.927746][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.949394][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.956584][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.028662][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.039042][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.086342][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.093586][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.130406][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.137564][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.191265][ T5834] veth0_vlan: entered promiscuous mode [ 91.230059][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.271772][ T5834] veth1_vlan: entered promiscuous mode [ 91.333039][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.356022][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.414495][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.444049][ T5834] veth0_macvtap: entered promiscuous mode [ 91.465859][ T5846] veth0_vlan: entered promiscuous mode [ 91.487532][ T5834] veth1_macvtap: entered promiscuous mode [ 91.523428][ T5846] veth1_vlan: entered promiscuous mode [ 91.545220][ T5836] veth0_vlan: entered promiscuous mode [ 91.560142][ T5845] veth0_vlan: entered promiscuous mode [ 91.592447][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.614378][ T5845] veth1_vlan: entered promiscuous mode [ 91.624135][ T5847] veth0_vlan: entered promiscuous mode [ 91.644661][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.656539][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.665882][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.674599][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.686220][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.701160][ T5847] veth1_vlan: entered promiscuous mode [ 91.719789][ T5836] veth1_vlan: entered promiscuous mode [ 91.737186][ T5846] veth0_macvtap: entered promiscuous mode [ 91.779067][ T5846] veth1_macvtap: entered promiscuous mode [ 91.810972][ T2150] cfg80211: failed to load regulatory.db [ 91.847353][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.858233][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.870300][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.919239][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.929957][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.941752][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.972788][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.981090][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.992061][ T5845] veth0_macvtap: entered promiscuous mode [ 91.999843][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.008900][ T5846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.018030][ T5846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.028014][ T5846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.046774][ T5836] veth0_macvtap: entered promiscuous mode [ 92.054725][ T5847] veth0_macvtap: entered promiscuous mode [ 92.074732][ T5845] veth1_macvtap: entered promiscuous mode [ 92.099248][ T5847] veth1_macvtap: entered promiscuous mode [ 92.119165][ T5844] Bluetooth: hci0: command tx timeout [ 92.131094][ T5836] veth1_macvtap: entered promiscuous mode [ 92.150168][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.161152][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.173978][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.184772][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.198540][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.223571][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.234487][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.244528][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.255782][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.265750][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.277750][ T5844] Bluetooth: hci1: command tx timeout [ 92.282460][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.294385][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.311339][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.314141][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.331726][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.334774][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.350243][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.361557][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.372969][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.386975][ T5845] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.399171][ T5845] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.407947][ T5845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.416822][ T5845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.437744][ T5841] Bluetooth: hci3: command tx timeout [ 92.441370][ T5844] Bluetooth: hci2: command tx timeout [ 92.448824][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.459908][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.469807][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.480372][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.490492][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.501574][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.513098][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.522333][ T5844] Bluetooth: hci4: command tx timeout [ 92.525060][ T5847] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.536588][ T5847] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.545491][ T5847] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.554196][ T5847] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.567542][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.578174][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.588960][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.600191][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.610125][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.620640][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.630934][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.642680][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.654094][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.698666][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.709510][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.719412][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.729907][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.739821][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.750422][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.760887][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.771464][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.782956][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.825641][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.834521][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.843976][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.853057][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.877501][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.955469][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.963347][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.028082][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.048071][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.092034][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.101566][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.254074][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.309728][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.430281][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.755350][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.892209][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.910789][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.020211][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.033339][ T3516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.055242][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.064088][ T3516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.128336][ T5882] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.213470][ T5844] Bluetooth: hci0: command tx timeout [ 94.346417][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 94.354088][ T5882] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 94.362547][ T5844] Bluetooth: hci1: command tx timeout [ 94.379435][ T5882] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 94.403162][ T5882] usb 3-1: config 179 has no interface number 0 [ 94.457247][ T5882] usb 3-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 94.515522][ T5844] Bluetooth: hci2: command tx timeout [ 94.517838][ T5841] Bluetooth: hci3: command tx timeout [ 94.550328][ T5882] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 94.572406][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.597645][ T5841] Bluetooth: hci4: command tx timeout [ 94.821670][ T30] audit: type=1326 audit(1745609660.480:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5893 comm="syz.2.3" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d8b78e969 code=0x0 [ 94.852080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.905775][ T5882] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.913316][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.922460][ T5908] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.018225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 95.105533][ T5882] usb 5-1: Using ep0 maxpacket: 32 [ 95.114533][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.132266][ T5882] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 95.140846][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.156574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.180812][ T5882] usb 5-1: config 0 has no interface number 0 [ 95.194705][ T5882] usb 5-1: config 0 interface 184 has no altsetting 0 [ 95.206670][ T10] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 95.221975][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.233364][ T5882] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 95.255679][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.280986][ T5882] usb 5-1: Product: syz [ 95.309978][ T10] usb 2-1: config 0 descriptor?? [ 95.321110][ T5882] usb 5-1: Manufacturer: syz [ 95.347988][ T5882] usb 5-1: SerialNumber: syz [ 95.435770][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.445078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.483760][ T5882] usb 5-1: config 0 descriptor?? [ 95.664778][ T5882] smsc75xx v1.0.0 [ 95.670768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.789882][ T10] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 95.828217][ T10] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 95.982573][ T5902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.992149][ T5902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.074676][ T10] cp2112 0003:10C4:EA90.0001: error requesting version [ 96.103069][ T10] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -71 [ 96.185803][ T10] usb 2-1: USB disconnect, device number 2 [ 96.282671][ T5882] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 96.310751][ T5882] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 96.900254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.969486][ T5880] usb 3-1: USB disconnect, device number 2 [ 97.327451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.813519][ T5880] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.016510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.087860][ T5882] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 98.102290][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 98.118166][ T5882] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71 [ 98.136645][ T5882] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 98.148768][ T5880] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 98.157714][ T5880] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 98.167006][ T5882] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 98.176826][ T5880] usb 1-1: config 1 has no interface number 1 [ 98.183558][ T5882] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 98.192711][ T5880] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 98.226537][ T5882] usb 5-1: USB disconnect, device number 2 [ 98.247954][ T5880] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.257691][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.266068][ T5880] usb 1-1: Manufacturer: ೵侻ਙȯﺨ╹沛ꁋ [ 98.565479][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.645535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 98.823993][ T10] usb 3-1: config 0 has no interfaces? [ 98.843948][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 98.861635][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.070996][ T10] usb 3-1: Product: syz [ 99.083579][ T10] usb 3-1: Manufacturer: syz [ 99.103881][ T10] usb 3-1: SerialNumber: syz [ 99.349569][ T10] usb 3-1: config 0 descriptor?? [ 101.808165][ T5880] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 102.003583][ T5880] usb 1-1: USB disconnect, device number 2 [ 102.742286][ T5880] usb 3-1: USB disconnect, device number 3 [ 103.115411][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.409376][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 103.420059][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.604219][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.614576][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.634378][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 103.875207][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.920937][ T10] usb 1-1: config 0 descriptor?? [ 104.305904][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 104.311992][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 104.440366][ T10] usb 1-1: USB disconnect, device number 3 [ 105.094483][ T5995] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.438436][ T5995] Zero length message leads to an empty skb [ 108.619728][ T6035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.39'. [ 108.944777][ T6035] vlan2: entered promiscuous mode [ 108.983271][ T6035] syz_tun: entered promiscuous mode [ 109.116276][ T6043] kvm: vcpu 8: requested lapic timer restore with starting count register 0x390=8 (16 ns) > initial count (10 ns). Using initial count to start timer. [ 109.205435][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 109.234391][ T6043] kvm: apic: phys broadcast and lowest prio [ 109.388236][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.465433][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.514275][ T10] usb 4-1: New USB device found, idVendor=0416, idProduct=c168, bcdDevice= 0.00 [ 109.675563][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.813861][ T10] usb 4-1: config 0 descriptor?? [ 109.913717][ T6061] netlink: 'syz.2.46': attribute type 1 has an invalid length. [ 110.280033][ T10] hid-generic 0003:0416:C168.0002: unknown main item tag 0x0 [ 110.293020][ T10] hid-generic 0003:0416:C168.0002: hidraw0: USB HID v0.00 Device [HID 0416:c168] on usb-dummy_hcd.3-1/input0 [ 110.484550][ T10] usb 4-1: USB disconnect, device number 2 [ 112.545585][ T5882] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 113.328030][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 113.355448][ T5882] usb 1-1: Using ep0 maxpacket: 8 [ 113.363962][ T5882] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 113.387646][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.436024][ T5882] usb 1-1: config 0 descriptor?? [ 113.527678][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 113.541100][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 113.572592][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 113.610532][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 113.631028][ T10] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 113.642791][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.670595][ T10] usb 5-1: Product: syz [ 113.695184][ T10] usb 5-1: Manufacturer: syz [ 113.705504][ T10] usb 5-1: SerialNumber: syz [ 113.729045][ T10] usb 5-1: config 0 descriptor?? [ 113.756437][ T10] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 114.100371][ T6105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.249647][ T6105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.420860][ T10] scsi host1: usb-storage 5-1:0.0 [ 114.847377][ T10] usb 5-1: USB disconnect, device number 3 [ 115.205355][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.395939][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 115.426647][ T24] usb 4-1: config 0 has no interfaces? [ 115.436853][ T24] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 115.488488][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.532881][ T24] usb 4-1: config 0 descriptor?? [ 115.599792][ T6116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.60'. [ 115.608999][ T6116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.60'. [ 115.628286][ T6116] bridge0: entered promiscuous mode [ 115.777492][ T6112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.809283][ T6112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.078549][ T5882] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 116.090672][ T5882] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 116.110060][ T5882] asix 1-1:0.0: probe with driver asix failed with error -71 [ 116.275688][ T5882] usb 1-1: USB disconnect, device number 4 [ 116.410932][ T6110] syz.1.58 (6110) used greatest stack depth: 19848 bytes left [ 116.478862][ T52] usb 4-1: USB disconnect, device number 3 [ 117.311982][ T1146] team0: Port device team_slave_0 removed [ 117.995532][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.174889][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 118.230037][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.336128][ T24] usb 2-1: config 0 descriptor?? [ 118.351918][ T24] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 118.728295][ T52] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 118.966981][ T52] usb 4-1: Using ep0 maxpacket: 8 [ 118.991821][ T52] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 119.005881][ T52] usb 4-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 119.063204][ T52] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 119.125488][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.869112][ T5832] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 120.064533][ T24] gspca_stv06xx: I2C: Read error writing address: -71 [ 120.069311][ T5832] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 120.094233][ T24] usb 2-1: USB disconnect, device number 3 [ 120.122341][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.194784][ T5832] usb 3-1: config 0 descriptor?? [ 120.679683][ T5832] ath6kl: Failed to submit usb control message: -71 [ 120.713948][ T5832] ath6kl: unable to send the bmi data to the device: -71 [ 120.763641][ T5832] ath6kl: Unable to send get target info: -71 [ 120.841399][ T5832] ath6kl: Failed to init ath6kl core: -71 [ 120.893459][ T5832] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 121.063551][ T5832] usb 3-1: USB disconnect, device number 4 [ 121.634105][ T5882] usb 4-1: USB disconnect, device number 4 [ 122.826620][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 123.005368][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 123.045731][ T10] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 123.091117][ T10] usb 5-1: config 0 has no interface number 0 [ 123.171105][ T10] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 123.320552][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.388979][ T10] usb 5-1: Product: syz [ 123.393187][ T10] usb 5-1: Manufacturer: syz [ 123.424619][ T6228] kvm: kvm [6227]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x187) = 0x8000 [ 123.445829][ T10] usb 5-1: SerialNumber: syz [ 123.470928][ T10] usb 5-1: config 0 descriptor?? [ 123.492728][ T10] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 123.679053][ T6232] kvm: pic: single mode not supported [ 123.679205][ T6232] kvm: pic: single mode not supported [ 123.684937][ T6232] kvm: pic: level sensitive irq not supported [ 123.741480][ T6232] kvm: pic: single mode not supported [ 123.748197][ T6232] kvm: pic: level sensitive irq not supported [ 123.801192][ T6232] kvm: pic: single mode not supported [ 123.807416][ T6232] kvm: pic: level sensitive irq not supported [ 123.836468][ T6232] kvm: pic: single mode not supported [ 123.842604][ T6232] kvm: pic: level sensitive irq not supported [ 123.855003][ T6232] kvm: pic: single mode not supported [ 123.860821][ T6236] ipt_REJECT: TCP_RESET invalid for non-tcp [ 123.861244][ T6232] kvm: pic: level sensitive irq not supported [ 123.894650][ T6232] kvm: pic: single mode not supported [ 123.901036][ T6232] kvm: pic: level sensitive irq not supported [ 123.966376][ T6232] kvm: pic: single mode not supported [ 123.972512][ T6232] kvm: pic: level sensitive irq not supported [ 123.999564][ T6232] kvm: pic: single mode not supported [ 124.005950][ T6232] kvm: pic: level sensitive irq not supported [ 124.079879][ T6232] kvm: pic: single mode not supported [ 124.086195][ T6232] kvm: pic: level sensitive irq not supported [ 124.114643][ T6232] kvm: pic: level sensitive irq not supported [ 124.912603][ T6251] netlink: 'syz.2.91': attribute type 29 has an invalid length. [ 124.948176][ T6251] netlink: 'syz.2.91': attribute type 29 has an invalid length. [ 124.959562][ T6251] netlink: 500 bytes leftover after parsing attributes in process `syz.2.91'. [ 124.970507][ T6251] unsupported nla_type 58 [ 124.990339][ T10] gspca_topro: reg_r err -71 [ 125.005729][ T10] gspca_topro: Sensor soi763a [ 125.230978][ T10] usb 5-1: USB disconnect, device number 4 [ 127.793122][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.102'. [ 127.995682][ T6293] ipvlan2: entered promiscuous mode [ 128.034675][ T6293] bridge0: port 3(ipvlan2) entered blocking state [ 128.065676][ T6293] bridge0: port 3(ipvlan2) entered disabled state [ 128.086911][ T6293] ipvlan2: entered allmulticast mode [ 128.102231][ T6293] bridge0: entered allmulticast mode [ 128.138633][ T6293] ipvlan2: left allmulticast mode [ 128.164685][ T6293] bridge0: left allmulticast mode [ 131.576132][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 131.903806][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 131.930614][ T10] usb 2-1: config 0 has no interfaces? [ 132.065816][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 132.074922][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.129959][ T10] usb 2-1: config 0 descriptor?? [ 132.760340][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.773062][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.801673][ T6351] netlink: 'syz.4.120': attribute type 4 has an invalid length. [ 133.855129][ T6351] netlink: 'syz.4.120': attribute type 4 has an invalid length. [ 134.220359][ T5832] usb 2-1: USB disconnect, device number 4 [ 134.905681][ T119] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 135.055611][ T119] usb 5-1: Using ep0 maxpacket: 16 [ 135.084715][ T119] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 135.126895][ T119] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.193314][ T119] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.205902][ T119] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.244348][ T119] usb 5-1: Product: syz [ 135.249069][ T119] usb 5-1: Manufacturer: syz [ 135.253805][ T119] usb 5-1: SerialNumber: syz [ 135.496658][ T119] usb 5-1: 0:2 : does not exist [ 135.541072][ T119] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 135.657940][ T119] usb 5-1: USB disconnect, device number 5 [ 135.724107][ T5916] udevd[5916]: setting owner of /dev/bus/usb/005/005 to uid=0, gid=0 failed: No such file or directory [ 135.907747][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.591993][ T6384] process 'syz.2.131' launched './file0' with NULL argv: empty string added [ 136.675589][ T119] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 136.860356][ T119] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 136.865366][ T6393] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 136.895435][ T119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.932476][ T119] usb 5-1: config 0 descriptor?? [ 136.942450][ T6393] program syz.1.135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.225523][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 137.237868][ T6405] program syz.3.140 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.054628][ T30] audit: type=1804 audit(1745609703.040:3): pid=6408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.139" name="/newroot/28/bus" dev="tmpfs" ino=161 res=1 errno=0 [ 138.210417][ T10] usb 1-1: config 16 interface 0 has no altsetting 0 [ 138.398710][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 138.454995][ T10] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 138.619162][ T10] usb 1-1: Manufacturer: syz [ 139.676868][ T10] video4linux radio48: keene_cmd_main failed (-71) [ 139.685820][ T10] radio-keene 1-1:16.0: V4L2 device registered as radio48 [ 139.710184][ T10] usb 1-1: USB disconnect, device number 5 [ 140.017240][ T119] pegasus 5-1:0.0: setup Pegasus II specific registers [ 140.236070][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 140.373833][ T119] pegasus 5-1:0.0: can't locate MII phy, using default [ 140.436435][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 140.444611][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 140.462564][ T119] pegasus 5-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 91:98:0c:fb:51:a3 [ 140.473617][ T10] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 140.494275][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.504508][ T10] usb 4-1: Product: syz [ 140.504531][ T10] usb 4-1: Manufacturer: syz [ 140.504542][ T10] usb 4-1: SerialNumber: syz [ 140.511417][ T10] usb 4-1: config 0 descriptor?? [ 140.514352][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 140.514388][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 140.518791][ T119] usb 5-1: USB disconnect, device number 6 [ 140.538785][ T10] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 141.097448][ T119] usb 4-1: USB disconnect, device number 5 [ 141.195713][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 141.408050][ T24] usb 1-1: config 0 has no interfaces? [ 141.420317][ T24] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 141.444404][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.476534][ T24] usb 1-1: Product: syz [ 141.495749][ T24] usb 1-1: Manufacturer: syz [ 141.504966][ T24] usb 1-1: SerialNumber: syz [ 141.537322][ T24] usb 1-1: config 0 descriptor?? [ 142.595330][ T119] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 142.847330][ T119] usb 4-1: Using ep0 maxpacket: 16 [ 142.929771][ T119] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 143.148994][ T119] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 143.179282][ T119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.238268][ T119] usb 4-1: Product: syz [ 143.242511][ T119] usb 4-1: Manufacturer: syz [ 143.283142][ T119] usb 4-1: SerialNumber: syz [ 143.358675][ T119] usb 4-1: config 0 descriptor?? [ 143.388374][ T119] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 143.415112][ T119] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 143.466154][ T6468] mmap: syz.2.156 (6468) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 144.252642][ T119] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 144.466115][ T52] usb 1-1: USB disconnect, device number 6 [ 144.709783][ T119] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 144.718941][ T119] em28xx 4-1:0.0: board has no eeprom [ 145.071457][ T6458] em28xx 4-1:0.0: read from i2c device at 0x0 failed with unknown error (status=65) [ 145.368534][ T119] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 145.388150][ T119] em28xx 4-1:0.0: dvb set to bulk mode. [ 145.400322][ T52] em28xx 4-1:0.0: Binding DVB extension [ 145.418706][ T119] usb 4-1: USB disconnect, device number 6 [ 145.440433][ T119] em28xx 4-1:0.0: Disconnecting em28xx [ 145.563831][ T52] em28xx 4-1:0.0: Registering input extension [ 145.570375][ T119] em28xx 4-1:0.0: Closing input extension [ 145.697890][ T119] em28xx 4-1:0.0: Freeing device [ 146.693971][ T30] audit: type=1326 audit(1745609712.350:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.1.165" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f851dd8e969 code=0x0 [ 147.265454][ T119] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 147.447783][ T119] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.484027][ T119] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.515338][ T119] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 147.578966][ T119] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 147.611482][ T119] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.654838][ T119] usb 1-1: config 0 descriptor?? [ 147.845744][ T6523] syzkaller0: entered promiscuous mode [ 147.851311][ T6523] syzkaller0: entered allmulticast mode [ 147.977792][ T5882] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 148.045432][ T5832] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 148.097584][ T119] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 148.163159][ T119] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 148.205373][ T5832] usb 2-1: Using ep0 maxpacket: 32 [ 148.213190][ T5832] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 148.226301][ T5832] usb 2-1: config 0 has no interface number 0 [ 148.234872][ T5832] usb 2-1: config 0 interface 12 has no altsetting 0 [ 148.252559][ T5882] usb 3-1: string descriptor 0 read error: -22 [ 148.263719][ T5882] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 148.274371][ T5832] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 148.292235][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.377181][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.400985][ T5832] usb 2-1: Product: syz [ 148.428672][ T5832] usb 2-1: Manufacturer: syz [ 148.444415][ T5882] usb 3-1: config 0 descriptor?? [ 148.459582][ T5832] usb 2-1: SerialNumber: syz [ 148.467701][ T119] usb 1-1: USB disconnect, device number 7 [ 148.686599][ T5832] usb 2-1: config 0 descriptor?? [ 149.032081][ T6525] netlink: 'syz.2.172': attribute type 4 has an invalid length. [ 149.745403][ T5880] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 149.999528][ T5880] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 150.025664][ T5880] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 150.038641][ T5880] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 150.099299][ T5880] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 150.122594][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.152992][ T6527] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 151.017853][ T5882] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 151.065845][ T5882] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 151.095510][ T5882] dib0700: firmware download failed at 7 with -22 [ 151.173989][ T5882] usb 3-1: USB disconnect, device number 5 [ 151.215867][ T5880] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 151.232462][ T5832] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 151.242258][ T5832] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 151.258793][ T5880] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input7 [ 151.268427][ T5832] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 151.289338][ T5832] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 151.337945][ T5880] usb 1-1: USB disconnect, device number 8 [ 151.343907][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 151.359523][ T5832] usb 2-1: USB disconnect, device number 5 [ 151.677553][ T6546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.179'. [ 151.871351][ T6546] vlan2: entered promiscuous mode [ 151.924562][ T6546] ip6gretap0: entered promiscuous mode [ 153.255328][ T5880] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 153.425580][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 153.441622][ T5880] usb 4-1: unable to get BOS descriptor or descriptor too short [ 153.464108][ T5880] usb 4-1: config 0 has no interfaces? [ 153.602867][ T5880] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.620751][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.646285][ T5880] usb 4-1: Product: syz [ 153.648395][ T6578] loop2: detected capacity change from 0 to 524287999 [ 153.650518][ T5880] usb 4-1: Manufacturer: syz [ 153.650537][ T5880] usb 4-1: SerialNumber: syz [ 153.733522][ T5880] usb 4-1: config 0 descriptor?? [ 154.009955][ T5880] usb 4-1: USB disconnect, device number 7 [ 155.715516][ T5832] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 156.007220][ T5832] usb 5-1: Using ep0 maxpacket: 16 [ 156.053848][ T5832] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 156.231407][ T5832] usb 5-1: config 0 has no interface number 0 [ 156.268618][ T5832] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 156.292632][ T5832] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 156.545083][ T5832] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 156.593127][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.677658][ T5832] usb 5-1: Product: syz [ 156.738204][ T5832] usb 5-1: Manufacturer: syz [ 156.743167][ T5832] usb 5-1: SerialNumber: syz [ 156.757634][ T5832] usb 5-1: config 0 descriptor?? [ 156.763965][ T6595] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 156.772355][ T6595] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 157.103234][ T6595] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 157.132163][ T6595] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 158.205523][ T2150] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 158.370247][ T2150] usb 2-1: Using ep0 maxpacket: 16 [ 158.411321][ T2150] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 158.433041][ T2150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.473097][ T2150] usb 2-1: config 0 descriptor?? [ 158.533054][ T6623] bridge1: entered allmulticast mode [ 158.767683][ T6626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.203'. [ 158.787261][ T6626] vlan2: entered promiscuous mode [ 158.792430][ T6626] ip6gretap0: entered promiscuous mode [ 158.805964][ T5832] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 158.907623][ T2150] isku 0003:1E7D:3264.0004: unknown main item tag 0x0 [ 158.922991][ T2150] isku 0003:1E7D:3264.0004: unknown main item tag 0x0 [ 158.940337][ T2150] isku 0003:1E7D:3264.0004: unknown main item tag 0x0 [ 158.972029][ T2150] isku 0003:1E7D:3264.0004: unknown main item tag 0x0 [ 159.015426][ T2150] isku 0003:1E7D:3264.0004: unknown main item tag 0x0 [ 159.051001][ T2150] isku 0003:1E7D:3264.0004: hidraw0: USB HID v1.80 Device [HID 1e7d:3264] on usb-dummy_hcd.1-1/input0 [ 159.126459][ T6618] netlink: 52 bytes leftover after parsing attributes in process `syz.1.200'. [ 159.224606][ T5880] usb 2-1: USB disconnect, device number 6 [ 159.435357][ T2150] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 159.469045][ T5832] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 159.500039][ T5832] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 159.558384][ T5832] asix 5-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 159.601380][ T5832] asix 5-1:0.251: probe with driver asix failed with error -5 [ 159.613393][ T2150] usb 4-1: Using ep0 maxpacket: 8 [ 159.673992][ T2150] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 159.707137][ T5832] usb 5-1: USB disconnect, device number 7 [ 159.713049][ T2150] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.732272][ T2150] usb 4-1: Product: syz [ 159.740923][ T2150] usb 4-1: Manufacturer: syz [ 159.747637][ T6645] netlink: 'syz.2.210': attribute type 4 has an invalid length. [ 159.770505][ T2150] usb 4-1: SerialNumber: syz [ 159.790025][ T2150] usb 4-1: config 0 descriptor?? [ 160.027269][ T2150] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 160.060098][ T6653] netlink: 'syz.0.213': attribute type 39 has an invalid length. [ 161.213553][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 161.576393][ T2150] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 161.591261][ T2150] usb 4-1: USB disconnect, device number 8 [ 162.754323][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 162.785776][ T24] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 162.962457][ T30] audit: type=1326 audit(1745609728.600:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc0b8e969 code=0x7ffc0000 [ 163.066964][ T30] audit: type=1326 audit(1745609728.600:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc0b8e969 code=0x7ffc0000 [ 163.162658][ T30] audit: type=1326 audit(1745609728.610:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fddc0b8e969 code=0x7ffc0000 [ 163.257816][ T30] audit: type=1326 audit(1745609728.610:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc0b8e969 code=0x7ffc0000 [ 163.282011][ T30] audit: type=1326 audit(1745609728.610:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fddc0b8e969 code=0x7ffc0000 [ 163.311470][ T30] audit: type=1326 audit(1745609728.610:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc0b8e969 code=0x7ffc0000 [ 163.346581][ T30] audit: type=1326 audit(1745609728.620:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fddc0b8e969 code=0x7ffc0000 [ 163.369428][ T2150] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 163.379788][ T30] audit: type=1326 audit(1745609728.620:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc0b8e969 code=0x7ffc0000 [ 163.411605][ T30] audit: type=1326 audit(1745609728.620:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fddc0b8e969 code=0x7ffc0000 [ 163.438170][ T30] audit: type=1326 audit(1745609728.620:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc0b8e969 code=0x7ffc0000 [ 163.547391][ T2150] usb 4-1: config 16 interface 0 has no altsetting 0 [ 163.566772][ T2150] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 163.577691][ T6695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.226'. [ 163.585747][ T5832] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 163.603296][ T2150] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 163.635427][ T2150] usb 4-1: Manufacturer: syz [ 163.765330][ T5832] usb 5-1: Using ep0 maxpacket: 8 [ 163.787271][ T5832] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.805521][ T5832] usb 5-1: config 0 has no interfaces? [ 164.475976][ T2150] (null): keene_cmd_main failed (-110) [ 164.544175][ T5832] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.566154][ T5832] usb 5-1: config 0 has no interfaces? [ 164.576368][ T5832] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.593327][ T2150] video4linux radio48: keene_cmd_main failed (-71) [ 164.603203][ T2150] radio-keene 4-1:16.0: V4L2 device registered as radio48 [ 164.613507][ T2150] usb 4-1: USB disconnect, device number 9 [ 164.744651][ T5832] usb 5-1: config 0 has no interfaces? [ 164.780212][ T5832] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.809076][ T5832] usb 5-1: config 0 has no interfaces? [ 164.926193][ T5832] usb 5-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 164.961419][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.989878][ T5832] usb 5-1: config 0 descriptor?? [ 166.848704][ T5832] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 167.186765][ T5832] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 167.317745][ T5832] usb 1-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 167.379292][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.447889][ T119] usb 5-1: USB disconnect, device number 8 [ 167.637567][ T5832] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 167.912351][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.038934][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.236'. [ 168.130280][ T5832] usb 1-1: USB disconnect, device number 9 [ 168.442889][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.238'. [ 168.499875][ T6747] vlan2: entered promiscuous mode [ 169.051684][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 169.137395][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 169.143152][ T30] audit: type=1326 audit(1745609734.800:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57dfb8e969 code=0x7ffc0000 [ 169.171535][ T30] audit: type=1326 audit(1745609734.800:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57dfb8e969 code=0x7ffc0000 [ 169.196631][ T30] audit: type=1326 audit(1745609734.800:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f57dfb8e969 code=0x7ffc0000 [ 169.221081][ T30] audit: type=1326 audit(1745609734.800:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57dfb8e969 code=0x7ffc0000 [ 169.260556][ T30] audit: type=1326 audit(1745609734.800:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57dfb8e969 code=0x7ffc0000 [ 169.294434][ T30] audit: type=1326 audit(1745609734.800:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57dfb8e969 code=0x7ffc0000 [ 169.322202][ T30] audit: type=1326 audit(1745609734.800:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57dfb8e969 code=0x7ffc0000 [ 169.345159][ T30] audit: type=1326 audit(1745609734.800:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f57dfb8e969 code=0x7ffc0000 [ 169.380440][ T24] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 169.394278][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.414217][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.425591][ T24] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.438795][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 169.445476][ T30] audit: type=1326 audit(1745609734.800:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57dfb8e969 code=0x7ffc0000 [ 169.445527][ T30] audit: type=1326 audit(1745609734.800:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57dfb8e969 code=0x7ffc0000 [ 169.496632][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.522526][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.551986][ T6768] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 169.575350][ T24] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.615913][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 169.627167][ T6771] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 169.634986][ T6771] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 169.644803][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.657475][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.672230][ T24] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.709269][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 169.719962][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.738792][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.751729][ T24] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.767276][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 169.775389][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.786212][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.801511][ T24] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.815963][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 169.823983][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.835068][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.855665][ T24] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.868922][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 169.878190][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.889713][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.899101][ T24] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.913562][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 169.930513][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.947086][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.959110][ T24] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.974085][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 169.988193][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 170.000488][ T24] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 170.033544][ T24] usb 4-1: Product: syz [ 170.045188][ T24] usb 4-1: Manufacturer: syz [ 170.052806][ T24] usb 4-1: SerialNumber: syz [ 170.222581][ T24] usb 4-1: config 0 descriptor?? [ 170.240715][ T24] yurex 4-1:0.0: Could not find endpoints [ 170.611171][ T52] usb 4-1: USB disconnect, device number 10 [ 171.115382][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 171.503050][ T24] usb 2-1: config 0 has no interfaces? [ 171.518062][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 171.529065][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.539708][ T24] usb 2-1: Product: syz [ 171.544176][ T24] usb 2-1: Manufacturer: syz [ 171.552754][ T24] usb 2-1: SerialNumber: syz [ 171.562478][ T24] usb 2-1: config 0 descriptor?? [ 172.845949][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 173.409642][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 173.489387][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 173.534401][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 173.561721][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.730627][ T5832] usb 2-1: USB disconnect, device number 7 [ 173.745569][ T6807] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 173.774543][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 174.083080][ T2150] usb 3-1: USB disconnect, device number 6 [ 175.054094][ T5917] udevd[5917]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.567101][ T6853] ip6erspan0: entered promiscuous mode [ 175.775404][ T52] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 175.866067][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 176.076785][ T52] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 176.087286][ T52] usb 2-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 176.125753][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.295327][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 176.303054][ T24] usb 4-1: config 0 has no interfaces? [ 176.311660][ T24] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 176.321822][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.490032][ T24] usb 4-1: config 0 descriptor?? [ 176.515068][ T52] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 176.896454][ T6856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.914284][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.938081][ T6856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.999902][ T10] usb 4-1: USB disconnect, device number 11 [ 177.092325][ T2150] usb 2-1: USB disconnect, device number 8 [ 178.015489][ T2150] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 178.223503][ T6880] syz.1.275 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 178.801670][ T2150] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 178.812007][ T2150] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 178.834773][ T2150] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 178.874614][ T2150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.652111][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 180.652131][ T30] audit: type=1326 audit(1745609746.310:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f851dd2ab39 code=0x7ffc0000 [ 180.680402][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.731032][ T30] audit: type=1326 audit(1745609746.310:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f851dd2ab39 code=0x7ffc0000 [ 180.800735][ T30] audit: type=1326 audit(1745609746.310:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f851dd2ab39 code=0x7ffc0000 [ 180.826791][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.282'. [ 181.035849][ T52] usb 4-1: USB disconnect, device number 12 [ 181.055387][ T30] audit: type=1326 audit(1745609746.310:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f851dd2ab39 code=0x7ffc0000 [ 181.077402][ C0] vkms_vblank_simulate: vblank timer overrun [ 181.153872][ T30] audit: type=1326 audit(1745609746.310:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f851dd2ab39 code=0x7ffc0000 [ 181.225398][ T6907] trusted_key: syz.2.283 sent an empty control message without MSG_MORE. [ 181.225662][ T30] audit: type=1326 audit(1745609746.310:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f851dd2ab39 code=0x7ffc0000 [ 182.074700][ T30] audit: type=1326 audit(1745609746.310:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f851dd2ab39 code=0x7ffc0000 [ 182.337807][ T30] audit: type=1326 audit(1745609746.310:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f851dd2ab39 code=0x7ffc0000 [ 182.400966][ T30] audit: type=1326 audit(1745609746.310:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f851dd2ab39 code=0x7ffc0000 [ 182.554497][ T30] audit: type=1326 audit(1745609746.310:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f851dd2ab39 code=0x7ffc0000 [ 182.655997][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.199837][ T2150] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 184.415913][ T2150] usb 2-1: unable to get BOS descriptor or descriptor too short [ 184.585000][ T2150] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 184.650023][ T2150] usb 2-1: can't read configurations, error -71 [ 184.839686][ T6970] bridge1: entered allmulticast mode [ 185.151030][ T6975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.292'. [ 185.825504][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 185.865362][ T5891] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 185.876199][ T2150] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 186.065333][ T2150] usb 2-1: device descriptor read/64, error -71 [ 186.091120][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 186.098230][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 186.110581][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 186.132261][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.133936][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 186.155472][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.217919][ T5891] usb 3-1: config 0 has no interfaces? [ 186.248199][ T5891] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 186.265462][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.288425][ T5891] usb 3-1: config 0 descriptor?? [ 186.345414][ T2150] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 186.518579][ T10] usb 5-1: Product: syz [ 186.523484][ T10] usb 5-1: Manufacturer: syz [ 186.528233][ T10] usb 5-1: SerialNumber: syz [ 186.578306][ T10] usb 5-1: config 0 descriptor?? [ 186.591766][ T10] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 186.604175][ T10] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 186.645681][ T2150] usb 2-1: device descriptor read/64, error -71 [ 186.713572][ T6996] syzkaller0: create flow: hash 2349448791 index 1 [ 186.726904][ T2998] syzkaller0: tun_net_xmit 76 [ 186.741816][ T2998] syzkaller0: tun_net_xmit 48 [ 186.747358][ T5880] syzkaller0: tun_net_xmit 76 [ 186.800719][ T2150] usb usb2-port1: attempt power cycle [ 186.873285][ T6997] syzkaller0: delete flow: hash 2349448791 index 1 [ 187.218528][ T10] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 187.247133][ T10] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 187.255584][ T2150] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 187.317645][ T2150] usb 2-1: device descriptor read/8, error -71 [ 187.627191][ T2150] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 187.758508][ T2150] usb 2-1: device descriptor read/8, error -71 [ 187.877589][ T2150] usb usb2-port1: unable to enumerate USB device [ 187.896276][ T10] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 188.533923][ T10] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 188.550571][ T10] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 188.576431][ T10] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 188.583609][ T10] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 188.610997][ T10] usb 5-1: USB disconnect, device number 9 [ 188.655391][ T52] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 188.858147][ T52] usb 2-1: config 0 has no interfaces? [ 188.878895][ T52] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 188.888589][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.896721][ T52] usb 2-1: Product: syz [ 188.901613][ T52] usb 2-1: Manufacturer: syz [ 188.913164][ T52] usb 2-1: SerialNumber: syz [ 188.943108][ T52] usb 2-1: config 0 descriptor?? [ 189.096351][ T5832] usb 3-1: USB disconnect, device number 7 [ 189.200767][ T7003] xt_TCPMSS: Only works on TCP SYN packets [ 190.234217][ T2150] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 190.254014][ T2150] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 191.315549][ T52] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 191.329443][ T7027] netlink: 36 bytes leftover after parsing attributes in process `syz.3.307'. [ 191.340786][ T7027] netlink: 16 bytes leftover after parsing attributes in process `syz.3.307'. [ 191.352113][ T7027] netlink: 36 bytes leftover after parsing attributes in process `syz.3.307'. [ 191.364497][ T7027] netlink: 36 bytes leftover after parsing attributes in process `syz.3.307'. [ 191.487863][ T7029] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 191.505402][ T52] usb 5-1: Using ep0 maxpacket: 8 [ 191.523919][ T52] usb 5-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 191.532868][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 191.541123][ T52] usb 5-1: config 0 has an invalid interface number: 150 but max is 64 [ 191.550461][ T52] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.560984][ T52] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 191.579292][ T52] usb 5-1: config 0 has no interface number 0 [ 191.585798][ T52] usb 5-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.602200][ T52] usb 5-1: config 0 interface 150 has no altsetting 0 [ 191.609531][ T52] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 191.623913][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.647392][ T52] usb 5-1: config 0 descriptor?? [ 191.695489][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 191.702734][ T24] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 191.711554][ T24] usb 1-1: config 0 has no interface number 0 [ 191.718663][ T24] usb 1-1: config 0 interface 12 has no altsetting 0 [ 191.733626][ T24] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 191.734050][ T10] usb 2-1: USB disconnect, device number 15 [ 191.743012][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.743061][ T24] usb 1-1: Product: syz [ 191.743077][ T24] usb 1-1: Manufacturer: syz [ 191.743093][ T24] usb 1-1: SerialNumber: syz [ 191.768031][ T24] usb 1-1: config 0 descriptor?? [ 191.925793][ T52] usb 5-1: USB disconnect, device number 10 [ 192.244204][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.150/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.219360][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.227308][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.600749][ T24] f81534 1-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 194.618908][ T24] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 194.648068][ T24] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 194.787037][ T24] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 194.827535][ T24] usb 1-1: USB disconnect, device number 10 [ 195.245692][ T52] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 195.435398][ T52] usb 5-1: Using ep0 maxpacket: 8 [ 195.553732][ T52] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 195.567195][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.594063][ T52] usb 5-1: config 0 descriptor?? [ 197.938315][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.328'. [ 197.995108][ T7099] vcan0: Master is either lo or non-ether device [ 198.467492][ T52] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 198.479227][ T52] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 198.518243][ T52] asix 5-1:0.0: probe with driver asix failed with error -71 [ 198.553145][ T52] usb 5-1: USB disconnect, device number 11 [ 200.824846][ T7123] kvm: emulating exchange as write [ 202.131036][ T5891] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 202.397857][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.421846][ T5891] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.551271][ T5891] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 202.593748][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 202.722230][ T5891] usb 3-1: Product: syz [ 202.759874][ T7160] kvm: kvm [7157]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x85a [ 202.770013][ T5891] usb 3-1: Manufacturer: syz [ 202.824041][ T5891] usb 3-1: SerialNumber: syz [ 202.873522][ T5891] usb 3-1: config 0 descriptor?? [ 202.901347][ T5891] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 202.954916][ T5891] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 202.995676][ T5891] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 205.606320][ T10] usb 3-1: USB disconnect, device number 8 [ 208.855272][ T30] kauditd_printk_skb: 180 callbacks suppressed [ 208.855293][ T30] audit: type=1326 audit(1745609774.510:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7228 comm="syz.3.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fdcb8e969 code=0x7ffc0000 [ 209.073736][ T30] audit: type=1326 audit(1745609774.510:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7228 comm="syz.3.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fdcb8e969 code=0x7ffc0000 [ 209.149104][ T30] audit: type=1326 audit(1745609774.510:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7228 comm="syz.3.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f2fdcb8e969 code=0x7ffc0000 [ 209.176236][ T30] audit: type=1326 audit(1745609774.510:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7228 comm="syz.3.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fdcb8e969 code=0x7ffc0000 [ 209.201553][ T30] audit: type=1326 audit(1745609774.510:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7228 comm="syz.3.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f2fdcb8e969 code=0x7ffc0000 [ 209.295907][ T30] audit: type=1326 audit(1745609774.510:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7228 comm="syz.3.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fdcb8e969 code=0x7ffc0000 [ 209.370971][ T30] audit: type=1326 audit(1745609774.510:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7228 comm="syz.3.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2fdcb8e969 code=0x7ffc0000 [ 209.456006][ T30] audit: type=1326 audit(1745609774.550:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7228 comm="syz.3.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fdcb8e969 code=0x7ffc0000 [ 209.584217][ T30] audit: type=1326 audit(1745609774.550:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7228 comm="syz.3.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fdcb8e969 code=0x7ffc0000 [ 209.745356][ T5891] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 209.926317][ T5891] usb 1-1: config 0 has no interfaces? [ 209.945738][ T5891] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 209.956163][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.996056][ T5891] usb 1-1: Product: syz [ 210.000740][ T5891] usb 1-1: Manufacturer: syz [ 210.057680][ T5891] usb 1-1: SerialNumber: syz [ 210.104399][ T5891] usb 1-1: config 0 descriptor?? [ 211.639143][ T7240] Bluetooth: hci0: command 0x0406 tx timeout [ 211.646818][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 211.653018][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 211.659767][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 211.666399][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 212.870778][ T7268] @: renamed from vlan0 (while UP) [ 213.072469][ T24] usb 1-1: USB disconnect, device number 11 [ 213.895668][ T2150] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 214.248381][ T2150] usb 3-1: config 0 has no interfaces? [ 214.336057][ T2150] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 214.345303][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 214.362001][ T2150] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.514820][ T2150] usb 3-1: Product: syz [ 214.532573][ T24] usb 5-1: config 0 has no interfaces? [ 214.547704][ T24] usb 5-1: New USB device found, idVendor=ac09, idProduct=0a0f, bcdDevice= c.3e [ 214.562387][ T24] usb 5-1: New USB device strings: Mfr=199, Product=92, SerialNumber=3 [ 214.575259][ T24] usb 5-1: Product: syz [ 214.579486][ T24] usb 5-1: Manufacturer: syz [ 214.594286][ T24] usb 5-1: SerialNumber: syz [ 214.695763][ T2150] usb 3-1: Manufacturer: syz [ 214.726651][ T24] usb 5-1: config 0 descriptor?? [ 214.731328][ T2150] usb 3-1: SerialNumber: syz [ 214.776223][ T2150] usb 3-1: config 0 descriptor?? [ 215.064687][ T7284] netlink: 452 bytes leftover after parsing attributes in process `syz.2.370'. [ 215.445352][ T5880] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 215.884696][ T7306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.376'. [ 217.661878][ T10] usb 5-1: USB disconnect, device number 12 [ 217.735081][ T5891] usb 3-1: USB disconnect, device number 9 [ 218.401314][ T7324] kvm: pic: non byte write [ 218.433822][ T7324] kvm: vcpu 0: requested 16512 ns lapic timer period limited to 200000 ns [ 218.490540][ T7327] kvm: pic: non byte write [ 219.789166][ T5880] usb 1-1: unable to get BOS descriptor or descriptor too short [ 219.966329][ T5880] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 219.973998][ T5880] usb 1-1: can't read configurations, error -71 [ 222.565265][ T5891] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 222.805783][ T5891] usb 2-1: Using ep0 maxpacket: 16 [ 222.852284][ T5891] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 222.897608][ T5891] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.938324][ T5891] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 222.948095][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.990674][ T5891] usb 2-1: Product: syz [ 222.999938][ T5891] usb 2-1: Manufacturer: syz [ 223.017254][ T5891] usb 2-1: SerialNumber: syz [ 223.259354][ T5891] usb 2-1: 0:2 : does not exist [ 223.284808][ T5891] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 223.502748][ T7373] netlink: 'syz.4.395': attribute type 10 has an invalid length. [ 223.523116][ T5891] usb 2-1: USB disconnect, device number 16 [ 223.655905][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.395'. [ 223.864708][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.335342][ T5832] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 224.425404][ T7383] BUG: sleeping function called from invalid context at mm/util.c:743 [ 224.434287][ T7383] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 7383, name: syz.1.397 [ 224.443380][ T7383] preempt_count: 1, expected: 0 [ 224.448439][ T7383] RCU nest depth: 0, expected: 0 [ 224.453409][ T7383] 2 locks held by syz.1.397/7383: [ 224.458521][ T7383] #0: ffff88807c1e4420 (sb_writers#3){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x160 [ 224.468348][ T7383] #1: ffff888148d44348 (&mapping->i_private_lock){+.+.}-{3:3}, at: __buffer_migrate_folio+0x240/0x620 [ 224.479583][ T7383] Preemption disabled at: [ 224.479596][ T7383] [<0000000000000000>] 0x0 [ 224.488733][ T7383] CPU: 0 UID: 0 PID: 7383 Comm: syz.1.397 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 224.488760][ T7383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 224.488773][ T7383] Call Trace: [ 224.488785][ T7383] [ 224.488794][ T7383] dump_stack_lvl+0x189/0x250 [ 224.488832][ T7383] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.488863][ T7383] ? __pfx__printk+0x10/0x10 [ 224.488888][ T7383] ? print_lock_name+0xde/0x100 [ 224.488936][ T7383] __might_resched+0x495/0x610 [ 224.488961][ T7383] ? __pfx___might_resched+0x10/0x10 [ 224.488995][ T7383] ? __lock_acquire+0xaac/0xd20 [ 224.489034][ T7383] folio_mc_copy+0x141/0x1d0 [ 224.489059][ T7383] filemap_migrate_folio+0xba/0x4c0 [ 224.489096][ T7383] __buffer_migrate_folio+0x430/0x620 [ 224.489127][ T7383] ? __pfx_buffer_migrate_folio_norefs+0x10/0x10 [ 224.489156][ T7383] move_to_new_folio+0x2df/0xb10 [ 224.489192][ T7383] ? __pfx_move_to_new_folio+0x10/0x10 [ 224.489222][ T7383] ? prep_compound_page+0x2f6/0x690 [ 224.489254][ T7383] ? compaction_alloc+0x2f97/0x31d0 [ 224.489305][ T7383] ? __cgroup_account_cputime+0xe5/0x120 [ 224.489342][ T7383] ? __pfx___might_resched+0x10/0x10 [ 224.489374][ T7383] ? __pfx_compaction_alloc+0x10/0x10 [ 224.489409][ T7383] migrate_pages_batch+0x1c34/0x2830 [ 224.489453][ T7383] ? __pfx_compaction_free+0x10/0x10 [ 224.489492][ T7383] ? __pfx_migrate_pages_batch+0x10/0x10 [ 224.489523][ T7383] ? __pfx___schedule+0x10/0x10 [ 224.489569][ T7383] migrate_pages+0x1b3b/0x2850 [ 224.489609][ T7383] ? __pfx_compaction_free+0x10/0x10 [ 224.489634][ T7383] ? __pfx_compaction_alloc+0x10/0x10 [ 224.489659][ T7383] ? __pfx___might_resched+0x10/0x10 [ 224.489695][ T7383] ? __pfx_migrate_pages+0x10/0x10 [ 224.489720][ T7383] ? isolate_movable_page+0x2a/0x790 [ 224.489748][ T7383] ? rcu_is_watching+0x15/0xb0 [ 224.489784][ T7383] ? isolate_migratepages_block+0x36bf/0x3d50 [ 224.489843][ T7383] compact_zone+0x2734/0x4be0 [ 224.489879][ T7383] ? __flush_work+0xd2/0xbc0 [ 224.489904][ T7383] ? __flush_work+0xa5b/0xbc0 [ 224.489938][ T7383] ? sysctl_compaction_handler+0xff/0x7b0 [ 224.489980][ T7383] ? __pfx_compact_zone+0x10/0x10 [ 224.490023][ T7383] sysctl_compaction_handler+0x3a4/0x7b0 [ 224.490056][ T7383] ? __pfx_sysctl_compaction_handler+0x10/0x10 [ 224.490113][ T7383] ? rcu_is_watching+0x15/0xb0 [ 224.490159][ T7383] ? proc_sys_call_handler+0x3f2/0x7c0 [ 224.490179][ T7383] ? trace_kmalloc+0x1f/0xd0 [ 224.490202][ T7383] ? __kvmalloc_node_noprof+0x338/0x5e0 [ 224.490229][ T7383] ? proc_sys_call_handler+0x3f2/0x7c0 [ 224.490254][ T7383] proc_sys_call_handler+0x509/0x7c0 [ 224.490281][ T7383] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 224.490306][ T7383] ? __asan_memset+0x22/0x50 [ 224.490332][ T7383] iter_file_splice_write+0x937/0x1000 [ 224.490385][ T7383] ? __pfx_iter_file_splice_write+0x10/0x10 [ 224.490426][ T7383] ? rcu_read_lock_any_held+0xb3/0x120 [ 224.490482][ T7383] ? __pfx_iter_file_splice_write+0x10/0x10 [ 224.490508][ T7383] direct_splice_actor+0xfe/0x160 [ 224.490537][ T7383] splice_direct_to_actor+0x5a5/0xcc0 [ 224.490583][ T7383] ? __pfx_direct_splice_actor+0x10/0x10 [ 224.490608][ T7383] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 224.490634][ T7383] ? __pfx_aa_file_perm+0x10/0x10 [ 224.490664][ T7383] do_splice_direct+0x181/0x270 [ 224.490692][ T7383] ? __pfx_do_splice_direct+0x10/0x10 [ 224.490719][ T7383] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 224.490753][ T7383] ? rw_verify_area+0x258/0x650 [ 224.490780][ T7383] do_sendfile+0x4da/0x7d0 [ 224.490819][ T7383] ? __pfx_do_sendfile+0x10/0x10 [ 224.490862][ T7383] __se_sys_sendfile64+0xd9/0x190 [ 224.490889][ T7383] ? rcu_is_watching+0x15/0xb0 [ 224.490921][ T7383] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 224.490954][ T7383] ? do_syscall_64+0xba/0x210 [ 224.490976][ T7383] do_syscall_64+0xf6/0x210 [ 224.490997][ T7383] ? clear_bhb_loop+0x45/0xa0 [ 224.491021][ T7383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.491039][ T7383] RIP: 0033:0x7f851dd8e969 [ 224.491063][ T7383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.491080][ T7383] RSP: 002b:00007f851ebda038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 224.491100][ T7383] RAX: ffffffffffffffda RBX: 00007f851dfb6160 RCX: 00007f851dd8e969 [ 224.491113][ T7383] RDX: 0000200000002080 RSI: 0000000000000005 RDI: 0000000000000006 [ 224.491124][ T7383] RBP: 00007f851de10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 224.491136][ T7383] R10: 000000000000023b R11: 0000000000000246 R12: 0000000000000000 [ 224.491148][ T7383] R13: 0000000000000000 R14: 00007f851dfb6160 R15: 00007f851e0dfa28 [ 224.491178][ T7383] [ 225.075394][ T5832] usb 1-1: Using ep0 maxpacket: 16 [ 225.094310][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 225.140265][ T5832] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 225.149509][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.157560][ T5832] usb 1-1: Product: syz [ 225.161716][ T5832] usb 1-1: Manufacturer: syz [ 225.166325][ T5832] usb 1-1: SerialNumber: syz [ 225.172950][ T5832] usb 1-1: config 0 descriptor?? [ 225.208836][ T5832] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 225.218413][ T5832] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 225.725512][ T2150] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 225.872150][ T5832] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 225.905577][ T2150] usb 5-1: Using ep0 maxpacket: 16 [ 225.913421][ T2150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.926931][ T2150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.981614][ T2150] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.000753][ T2150] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 226.009967][ T2150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.029882][ T2150] usb 5-1: config 0 descriptor?? [ 226.047662][ T2150] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 226.061670][ T5189] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 226.073516][ T5189] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 226.084408][ T5189] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 226.097275][ T5189] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 226.126008][ T5189] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 226.140307][ T5979] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 226.149760][ T5189] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 226.163233][ T5189] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 226.241934][ T7385] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 226.254990][ T7385] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 226.273306][ T5891] usb 5-1: USB disconnect, device number 13 [ 226.725397][ T5832] em28xx 1-1:0.0: write to i2c device at 0xa0 failed with unknown error (status=1) [ 226.734961][ T5832] em28xx 1-1:0.0: failed to read eeprom (err=-5) [ 226.745127][ T5832] em28xx 1-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 226.958562][ T5832] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 226.970815][ T5832] em28xx 1-1:0.0: dvb set to bulk mode. [ 226.976596][ T2150] em28xx 1-1:0.0: Binding DVB extension [ 226.992512][ T5832] usb 1-1: USB disconnect, device number 14 [ 227.000664][ T5832] em28xx 1-1:0.0: Disconnecting em28xx [ 227.053463][ T2150] em28xx 1-1:0.0: Registering input extension [ 227.061917][ T5832] em28xx 1-1:0.0: Closing input extension [ 227.077653][ T5832] em28xx 1-1:0.0: Freeing device