last executing test programs: 10.696244116s ago: executing program 4 (id=375): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00", @ANYRES16=r0, @ANYBLOB="05"], 0x1c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x40000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a090914"], 0x44}, 0x1, 0x1000000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) 10.630098972s ago: executing program 4 (id=376): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000070000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701000003ffffffb702000008000000b70300000e0000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001010000850000002d00000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.508648972s ago: executing program 4 (id=378): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x9) 8.524026464s ago: executing program 3 (id=401): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x21, @dev={0xac, 0x14, 0x14, 0xff}}, {0x2, 0x0, @local}, {0x2, 0x4e20, @broadcast}, 0x19b, 0x0, 0x0, 0x0, 0xfffd}) r3 = socket(0xa, 0x5, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0xb, 0x2, 0x5, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_address={0x3, 0x17, 0x3c9a5253c36338db, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}]}, 0x28}}, 0x20008004) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000300), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r1, {0xfff2, 0x5}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) 8.265813085s ago: executing program 3 (id=406): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e03"], 0x0) 7.996472117s ago: executing program 0 (id=411): add_key$fscrypt_v1(0x0, &(0x7f0000000000)={'fscrypt:', @desc1}, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0xb0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000dc0)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df22f77303c6895a8a9e41b12b97510f561bc2e4ee706a19e02f", 0x82}], 0x1}}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.902447784s ago: executing program 0 (id=412): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r0, @ANYBLOB="05"], 0x1c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x40000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a090914"], 0x44}, 0x1, 0x1000000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) 7.850683129s ago: executing program 0 (id=413): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000070000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701000003ffffffb702000008000000b70300000e0000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001010000850000002d00000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.764678056s ago: executing program 0 (id=414): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 6.753392038s ago: executing program 2 (id=418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.672406295s ago: executing program 3 (id=421): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) 6.510390408s ago: executing program 2 (id=423): add_key$fscrypt_v1(0x0, &(0x7f0000000000)={'fscrypt:', @desc1}, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0xb0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000dc0)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df22f77303c6895a8a9e41b12b97510f561bc2e4ee706a19e02f", 0x82}], 0x1}}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.436645684s ago: executing program 3 (id=424): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r0, @ANYBLOB="05"], 0x1c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x40000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a090914"], 0x44}, 0x1, 0x1000000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) 6.412149336s ago: executing program 3 (id=426): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r2, 0x7}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x80000001, 0x0, 0x40001000000ffc, 0x49}, 0x0, &(0x7f0000000240)={0x3ff, 0x7, 0x97f, 0x9, 0x2000000, 0xf, 0x80000006, 0x10000000004}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.24822728s ago: executing program 2 (id=429): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x21, @dev={0xac, 0x14, 0x14, 0xff}}, {0x2, 0x0, @local}, {0x2, 0x4e20, @broadcast}, 0x19b, 0x0, 0x0, 0x0, 0xfffd}) r4 = socket(0xa, 0x5, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0xb, 0x2, 0x5, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_address={0x3, 0x17, 0x3c9a5253c36338db, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}]}, 0x28}}, 0x20008004) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000300), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r1, {0xfff2, 0x5}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) 5.477346013s ago: executing program 3 (id=430): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 5.476090273s ago: executing program 2 (id=431): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) msgget$private(0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000200)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe299917", "9e8ecc7bb5352776725f1047711330ff2bb17b5508000000000000009bc400", '\\]?\x00'}, 0x38) close_range(r0, 0xffffffffffffffff, 0x0) 4.576655617s ago: executing program 2 (id=435): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) userfaultfd(0x1) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) 4.344325346s ago: executing program 0 (id=436): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 4.28977718s ago: executing program 0 (id=437): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="05"], 0x1c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000005c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x40000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a090914"], 0x44}, 0x1, 0x1000000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) 3.044527802s ago: executing program 2 (id=448): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 1.783710965s ago: executing program 1 (id=455): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xfea}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0x10000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f0000000500)=""/88, &(0x7f0000000480)=""/49}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x7e, &(0x7f0000000080)=""/126}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1.686068253s ago: executing program 1 (id=456): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x21, @dev={0xac, 0x14, 0x14, 0xff}}, {0x2, 0x0, @local}, {0x2, 0x4e20, @broadcast}, 0x19b, 0x0, 0x0, 0x0, 0xfffd}) r3 = socket(0xa, 0x5, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0xb, 0x2, 0x5, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_address={0x3, 0x17, 0x3c9a5253c36338db, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}]}, 0x28}}, 0x20008004) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000300), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x5}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) 1.599838399s ago: executing program 1 (id=457): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r7, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 1.458129721s ago: executing program 1 (id=458): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5b000009000000032800"/20], 0x14}}, 0x40) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f00000004c0)}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x1) unshare(0x62040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 956.719172ms ago: executing program 1 (id=459): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c", 0x7}], 0x1}, 0xff00) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0702230c"], 0xa) 860.7123ms ago: executing program 1 (id=460): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 327.310773ms ago: executing program 4 (id=461): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000400)={0x0, 0x7cc3, [{0x3, 0x0, 0x9}, {0xfffffff9, 0x0, 0x1ff}, {0x3, 0x0, 0x6}, {0x7, 0x0, 0x7}, {0x9, 0x0, 0x7}, {0xb, 0x0, 0x5}, {0x2, 0x0, 0x7ff}, {0x7, 0x0, 0x3fd}, {0x6, 0x0, 0x2}, {0x8001, 0x0, 0x7fff}, {0x7, 0x0, 0x9}, {0x9, 0x0, 0x7fff}, {0x81, 0x0, 0x1}, {0xc, 0x0, 0xaa4}, {0x200, 0x0, 0x16f2}, {0x80000001, 0x0, 0xff}]}) 172.076486ms ago: executing program 4 (id=462): add_key$fscrypt_v1(0x0, &(0x7f0000000000)={'fscrypt:', @desc1}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, 0x0, 0x101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="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", 0x2b1}, {0x0}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x4044040) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0xb0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x9}, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 0s ago: executing program 4 (id=463): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = syz_open_dev$vim2m(0x0, 0x81, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x2, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000005c0)={'pcl812\x00', [0x2f00, 0x1000, 0x3, 0x2, 0x0, 0x1, 0x2, 0x9, 0xffe, 0x1, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x8006, 0xffffffa7, 0x10001, 0x832, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x2, 0x1, 0x80, 0x3, 0x3, 0x7, 0x70f]}) syz_emit_vhci(0x0, 0x9) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 39.046548][ T3854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.056236][ T3854] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.90' (ED25519) to the list of known hosts. syzkaller login: [ 57.693372][ T4172] cgroup: Unknown subsys name 'net' [ 57.838880][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.315344][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.296733][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 61.430940][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 61.483782][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.490923][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.499840][ T4191] device bridge_slave_0 entered promiscuous mode [ 61.514512][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 61.532995][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.540106][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.549036][ T4191] device bridge_slave_1 entered promiscuous mode [ 61.590918][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 61.600606][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 61.623611][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.638465][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.668248][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.675610][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.684193][ T4184] device bridge_slave_0 entered promiscuous mode [ 61.720976][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.728436][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.736539][ T4184] device bridge_slave_1 entered promiscuous mode [ 61.778116][ T4191] team0: Port device team_slave_0 added [ 61.806973][ T4191] team0: Port device team_slave_1 added [ 61.824898][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.831976][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.840493][ T4194] device bridge_slave_0 entered promiscuous mode [ 61.853342][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.878176][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.885388][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.893816][ T4194] device bridge_slave_1 entered promiscuous mode [ 61.909774][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.919636][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.926648][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.952680][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.002002][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.009132][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.035410][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.046626][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.057522][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.065570][ T4196] device bridge_slave_0 entered promiscuous mode [ 62.081259][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.088390][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.097456][ T4183] device bridge_slave_0 entered promiscuous mode [ 62.107654][ T4184] team0: Port device team_slave_0 added [ 62.118879][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.126073][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.134171][ T4196] device bridge_slave_1 entered promiscuous mode [ 62.142976][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.152162][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.159448][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.167793][ T4183] device bridge_slave_1 entered promiscuous mode [ 62.185086][ T4184] team0: Port device team_slave_1 added [ 62.200015][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.256467][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.283644][ T4191] device hsr_slave_0 entered promiscuous mode [ 62.290622][ T4191] device hsr_slave_1 entered promiscuous mode [ 62.299382][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.316755][ T4194] team0: Port device team_slave_0 added [ 62.324317][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.333882][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.340879][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.367365][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.379535][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.386740][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.412766][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.431534][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.441846][ T4194] team0: Port device team_slave_1 added [ 62.509051][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.516407][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.542888][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.555303][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.562277][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.588509][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.609868][ T4183] team0: Port device team_slave_0 added [ 62.618374][ T4196] team0: Port device team_slave_0 added [ 62.640949][ T4183] team0: Port device team_slave_1 added [ 62.657052][ T4196] team0: Port device team_slave_1 added [ 62.700119][ T4184] device hsr_slave_0 entered promiscuous mode [ 62.706876][ T4184] device hsr_slave_1 entered promiscuous mode [ 62.714221][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.722041][ T4184] Cannot create hsr debugfs directory [ 62.738215][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.746116][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.772185][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.805892][ T4194] device hsr_slave_0 entered promiscuous mode [ 62.813493][ T4194] device hsr_slave_1 entered promiscuous mode [ 62.820082][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.827683][ T4194] Cannot create hsr debugfs directory [ 62.833863][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.840845][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.867115][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.879069][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.886341][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.912846][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.928272][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.935499][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.961486][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.044038][ T4183] device hsr_slave_0 entered promiscuous mode [ 63.050768][ T4183] device hsr_slave_1 entered promiscuous mode [ 63.057826][ T4185] Bluetooth: hci4: command 0x0409 tx timeout [ 63.062940][ T1107] Bluetooth: hci2: command 0x0409 tx timeout [ 63.064830][ T4185] Bluetooth: hci1: command 0x0409 tx timeout [ 63.069968][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 63.077092][ T4185] Bluetooth: hci0: command 0x0409 tx timeout [ 63.088560][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.096216][ T4183] Cannot create hsr debugfs directory [ 63.171569][ T4196] device hsr_slave_0 entered promiscuous mode [ 63.178593][ T4196] device hsr_slave_1 entered promiscuous mode [ 63.185814][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.193537][ T4196] Cannot create hsr debugfs directory [ 63.391901][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.404908][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.419298][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.429280][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.478581][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.491211][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.506604][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.516327][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.559416][ T4194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.574268][ T4194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.602907][ T4194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.612198][ T4194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.637100][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.667068][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.676396][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.704473][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.736196][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.766077][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.779153][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.826477][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.881751][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.891002][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.900593][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.915522][ T1273] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.922839][ T1273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.931649][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.941116][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.949727][ T1273] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.956898][ T1273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.965467][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.974858][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.983965][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.997685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.007383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.017965][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.030226][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.041406][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.058322][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.067546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.077165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.086787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.100280][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.108382][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.121040][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.144686][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.152524][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.161599][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.176162][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.191080][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.211370][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.225766][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.235590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.244506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.254131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.261780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.270472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.279491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.288395][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.295667][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.303814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.313210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.321628][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.328730][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.339274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.364273][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.374469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.386223][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.393341][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.401378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.410389][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.419823][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.426945][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.434869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.444074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.483737][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.494609][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.504903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.513895][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.523929][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.536854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.549956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.559043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.571127][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.591949][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.605625][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.617118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.625527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.635794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.646510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.654873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.668457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.681689][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.691403][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.699971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.708904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.723524][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.749331][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.760640][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.780717][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.791234][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.803731][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.816263][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.825567][ T1273] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.832730][ T1273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.841652][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.850267][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.858916][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.867560][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.876042][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.884451][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.898209][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.906907][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.916335][ T1273] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.923448][ T1273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.944728][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.992164][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.011788][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.035114][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.063926][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.075594][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.085994][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.102736][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.118504][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.127123][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.132877][ T4254] Bluetooth: hci0: command 0x041b tx timeout [ 65.135982][ T4240] Bluetooth: hci3: command 0x041b tx timeout [ 65.141071][ T4254] Bluetooth: hci1: command 0x041b tx timeout [ 65.149298][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.186571][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.197175][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.198517][ T4254] Bluetooth: hci2: command 0x041b tx timeout [ 65.206460][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.221207][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.229471][ T4254] Bluetooth: hci4: command 0x041b tx timeout [ 65.241043][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.256411][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.268136][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.276658][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.284559][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.292999][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.300449][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.308436][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.317238][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.326118][ T4191] device veth0_vlan entered promiscuous mode [ 65.340150][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.357987][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.366383][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.376468][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.385006][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.398258][ T4191] device veth1_vlan entered promiscuous mode [ 65.418527][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.455415][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.466234][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.474908][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.484039][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.493787][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.502735][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.511184][ T3070] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.518320][ T3070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.526239][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.539759][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.548623][ T3070] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.555742][ T3070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.590793][ T4191] device veth0_macvtap entered promiscuous mode [ 65.601311][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.610609][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.627296][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.641532][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.656100][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.665497][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.674805][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.687548][ T4194] device veth0_vlan entered promiscuous mode [ 65.710229][ T4194] device veth1_vlan entered promiscuous mode [ 65.718327][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.728838][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.736981][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.746471][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.755341][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.765129][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.773788][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.781243][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.792398][ T4191] device veth1_macvtap entered promiscuous mode [ 65.815672][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.826788][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.849448][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.859216][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.868748][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.878322][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.888877][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.910200][ T4194] device veth0_macvtap entered promiscuous mode [ 65.939624][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.949925][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.959757][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.968624][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.977304][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.991685][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.002271][ T4194] device veth1_macvtap entered promiscuous mode [ 66.016230][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.029531][ T4183] device veth0_vlan entered promiscuous mode [ 66.039785][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.049350][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.059779][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.069146][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.077882][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.087338][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.097383][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.108591][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.133111][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.145851][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.158123][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.171008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.180103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.189364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.198678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.210799][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.220470][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.229595][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.238986][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.264359][ T4183] device veth1_vlan entered promiscuous mode [ 66.290460][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.301701][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.318891][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.343068][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.357127][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.368312][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.389538][ T4194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.399745][ T4194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.411118][ T4194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.421406][ T4194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.471547][ T4183] device veth0_macvtap entered promiscuous mode [ 66.505213][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.516168][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.525494][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.536816][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.546238][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.555288][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.569080][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.586122][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.597728][ T4183] device veth1_macvtap entered promiscuous mode [ 66.633140][ T4184] device veth0_vlan entered promiscuous mode [ 66.640160][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.649466][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.658255][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.673523][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.681027][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.702883][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.726173][ T4184] device veth1_vlan entered promiscuous mode [ 66.746968][ T3070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.766227][ T3070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.775157][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.789683][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.801065][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.811792][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.824541][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.854319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.862989][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.871565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.880500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.890010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.899575][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.908389][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.927499][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.938556][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.950506][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.961265][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.973613][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.989101][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.998237][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.007440][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.016376][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.029177][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.038207][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.048248][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.057395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.066934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.081742][ T4196] device veth0_vlan entered promiscuous mode [ 67.090693][ T4184] device veth0_macvtap entered promiscuous mode [ 67.119031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.127501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.137380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.146126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.154265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.168886][ T4184] device veth1_macvtap entered promiscuous mode [ 67.181165][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.192826][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.202697][ T4196] device veth1_vlan entered promiscuous mode [ 67.214530][ T4240] Bluetooth: hci1: command 0x040f tx timeout [ 67.220674][ T4240] Bluetooth: hci3: command 0x040f tx timeout [ 67.227743][ T4240] Bluetooth: hci0: command 0x040f tx timeout [ 67.241652][ T1273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.245953][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.260507][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.265833][ T1273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.271428][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.297844][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.298826][ T4240] Bluetooth: hci4: command 0x040f tx timeout [ 67.307872][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.307890][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.309592][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.321173][ T4240] Bluetooth: hci2: command 0x040f tx timeout [ 67.334014][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.358711][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.368743][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.379366][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.390989][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.401789][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.413762][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.421173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.429553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.438023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.446114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.455667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.464665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.474027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.483192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.492082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.536091][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.547120][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.556268][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.566092][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.588957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.631106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.660528][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.669886][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.675395][ T4196] device veth0_macvtap entered promiscuous mode [ 67.693277][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.711061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.757705][ T4196] device veth1_macvtap entered promiscuous mode [ 67.788154][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.823529][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.870567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.883727][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.938353][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.951901][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.966099][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.976303][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.987416][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.997393][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.008522][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.021102][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.046324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.057253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.089211][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.089616][ T1273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.113686][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.114906][ T1273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.140105][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.150379][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.168981][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.180168][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.190919][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.201046][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.211778][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.224574][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.235322][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.243967][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.253347][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.269733][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.279044][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.289577][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.301009][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.312704][ T4287] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.327104][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.336796][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.358306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.372865][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 68.446581][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.465466][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.490381][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.498390][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.522155][ T3070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.531915][ T3070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.543772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.594863][ T4287] usb 3-1: Using ep0 maxpacket: 32 [ 68.681295][ T4305] sctp: [Deprecated]: syz.3.4 (pid 4305) Use of int in max_burst socket option deprecated. [ 68.681295][ T4305] Use struct sctp_assoc_value instead [ 68.708450][ T4308] kernel read not supported for file /file1 (pid: 4308 comm: syz.4.7) [ 68.714173][ T4305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 68.734995][ T26] audit: type=1800 audit(1754712549.484:2): pid=4308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7" name="file1" dev="mqueue" ino=31694 res=0 errno=0 [ 68.763014][ T21] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 68.775455][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.783931][ T4287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.795177][ T21] usb 1-1: Product: syz [ 68.799420][ T21] usb 1-1: Manufacturer: syz [ 68.804519][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 68.809803][ T4287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.819840][ T21] usb 1-1: SerialNumber: syz [ 68.827290][ T4287] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 68.839153][ T21] usb 1-1: config 0 descriptor?? [ 68.846111][ T4287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.870473][ T4287] usb 3-1: config 0 descriptor?? [ 68.913966][ T4287] hub 3-1:0.0: USB hub found [ 69.113435][ T21] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 69.121990][ T23] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 69.136685][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.145176][ T4287] hub 3-1:0.0: 1 port detected [ 69.150559][ T23] usb 2-1: Product: syz [ 69.158509][ T23] usb 2-1: Manufacturer: syz [ 69.164502][ T23] usb 2-1: SerialNumber: syz [ 69.172157][ T23] usb 2-1: config 0 descriptor?? [ 69.294161][ T4240] Bluetooth: hci0: command 0x0419 tx timeout [ 69.302739][ T4240] Bluetooth: hci3: command 0x0419 tx timeout [ 69.309321][ T4240] Bluetooth: hci1: command 0x0419 tx timeout [ 69.373790][ T4240] Bluetooth: hci2: command 0x0419 tx timeout [ 69.381219][ T4240] Bluetooth: hci4: command 0x0419 tx timeout [ 69.452954][ T23] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 69.692836][ T4323] netlink: 92 bytes leftover after parsing attributes in process `syz.3.10'. [ 69.748179][ T4325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.802541][ T4226] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.822536][ T4254] hub 3-1:0.0: activate --> -90 [ 70.032633][ T4254] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 70.043317][ T4226] usb 5-1: Using ep0 maxpacket: 32 [ 70.075980][ T1107] usb 3-1: USB disconnect, device number 2 [ 70.102942][ T4299] usb 3-1: Failed to suspend device, error -71 [ 70.183008][ T4226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.194275][ T4226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34047, setting to 1024 [ 70.205913][ T4226] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 70.215226][ T4226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.241099][ T4226] usb 5-1: config 0 descriptor?? [ 70.276301][ T4321] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 70.317738][ T4226] hub 5-1:0.0: USB hub found [ 70.522515][ T4226] hub 5-1:0.0: 1 port detected [ 70.590521][ T4331] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.622671][ T4254] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.678025][ T21] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 70.709240][ T21] usb 1-1: USB disconnect, device number 2 [ 70.904051][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 71.042859][ T4254] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.059894][ T4254] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.070881][ T4254] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 71.087151][ T4254] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.122206][ T4254] usb 4-1: config 0 descriptor?? [ 71.297044][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.304496][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.482528][ T23] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 71.492929][ T23] usb 2-1: USB disconnect, device number 2 [ 71.615261][ T1107] usb 5-1: USB disconnect, device number 2 [ 71.622531][ T4299] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 71.633484][ T4254] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 71.647961][ T4254] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 71.846105][ T4254] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x4D [ 72.413128][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 72.488126][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020e24c00: rx timeout, send abort [ 72.498392][ T4254] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71 [ 72.515681][ T4254] usb 4-1: USB disconnect, device number 2 [ 72.595721][ T4344] fido_id[4344]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 72.782543][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.793675][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.803494][ T23] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 72.813101][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.831225][ T23] usb 5-1: config 0 descriptor?? [ 72.973232][ T1107] Bluetooth: hci5: command 0x1003 tx timeout [ 72.980087][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 72.997191][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020e24c00: abort rx timeout. Force session deactivation [ 73.156471][ T4348] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 73.214449][ T4348] device veth0_vlan left promiscuous mode [ 73.227233][ T4348] device veth0_vlan entered promiscuous mode [ 73.233688][ T23] usbhid 5-1:0.0: can't add hid device: -71 [ 73.241579][ T4350] sctp: [Deprecated]: syz.3.20 (pid 4350) Use of int in max_burst socket option deprecated. [ 73.241579][ T4350] Use struct sctp_assoc_value instead [ 73.257372][ T23] usbhid: probe of 5-1:0.0 failed with error -71 [ 73.270425][ T4348] team0: Device veth0_vlan failed to register rx_handler [ 73.277919][ T23] usb 5-1: USB disconnect, device number 3 [ 73.321812][ T4350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20'. [ 73.396238][ T4348] syz.0.19 (4348) used greatest stack depth: 18912 bytes left [ 73.415867][ T4355] netlink: 92 bytes leftover after parsing attributes in process `syz.0.22'. [ 73.700099][ T4365] kernel read not supported for file /file1 (pid: 4365 comm: syz.3.25) [ 73.720794][ T26] audit: type=1800 audit(1754712554.464:3): pid=4365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.25" name="file1" dev="mqueue" ino=33046 res=0 errno=0 [ 74.053452][ T4233] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 74.312408][ T4240] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 74.322676][ T4233] usb 5-1: Using ep0 maxpacket: 8 [ 74.335843][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 74.577861][ T4240] usb 2-1: Using ep0 maxpacket: 8 [ 74.652638][ T4233] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 74.674092][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.682134][ T4233] usb 5-1: Product: syz [ 74.702581][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.713166][ T4233] usb 5-1: Manufacturer: syz [ 74.716962][ T4380] syz.3.30 uses obsolete (PF_INET,SOCK_PACKET) [ 74.722857][ T4233] usb 5-1: SerialNumber: syz [ 74.724161][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.746148][ T4380] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 74.746854][ T4233] usb 5-1: config 0 descriptor?? [ 74.848507][ T23] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 74.861960][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 74.876640][ T23] usb 1-1: SerialNumber: syz [ 74.922676][ T4240] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 74.931768][ T4240] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.948361][ T4240] usb 2-1: Product: syz [ 74.952750][ T4240] usb 2-1: Manufacturer: syz [ 74.958193][ T4240] usb 2-1: SerialNumber: syz [ 74.976916][ T4240] usb 2-1: config 0 descriptor?? [ 75.024735][ T4233] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 75.062562][ T4261] Bluetooth: hci5: command 0x1001 tx timeout [ 75.069367][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 75.197555][ T23] usb 1-1: 0:2 : does not exist [ 75.229406][ T23] usb 1-1: USB disconnect, device number 3 [ 75.250213][ T4240] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 75.456171][ T4313] udevd[4313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.802547][ T4240] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 76.815599][ T4240] usb 2-1: USB disconnect, device number 3 [ 76.996150][ T4233] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 77.005678][ T4233] usb 5-1: USB disconnect, device number 4 [ 77.132567][ T4240] Bluetooth: hci5: command 0x1009 tx timeout [ 77.332732][ T4391] sctp: [Deprecated]: syz.3.32 (pid 4391) Use of int in max_burst socket option deprecated. [ 77.332732][ T4391] Use struct sctp_assoc_value instead [ 77.370567][ T4386] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 77.431344][ T4392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32'. [ 77.449731][ T4394] netlink: 'syz.4.33': attribute type 10 has an invalid length. [ 77.528250][ T4394] device veth0_vlan left promiscuous mode [ 77.570178][ T4394] device veth0_vlan entered promiscuous mode [ 77.579773][ T4394] team0: Device veth0_vlan failed to register rx_handler [ 77.592436][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 77.642160][ T4396] netlink: 92 bytes leftover after parsing attributes in process `syz.3.34'. [ 77.941597][ T4409] kernel read not supported for file /file1 (pid: 4409 comm: syz.4.40) [ 77.957884][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.962540][ T26] audit: type=1800 audit(1754712558.704:4): pid=4409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.40" name="file1" dev="mqueue" ino=31694 res=0 errno=0 [ 77.970725][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.004628][ T23] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 78.017801][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.035992][ T23] usb 2-1: config 0 descriptor?? [ 78.316070][ T4422] sctp: [Deprecated]: syz.3.47 (pid 4422) Use of int in max_burst socket option deprecated. [ 78.316070][ T4422] Use struct sctp_assoc_value instead [ 78.331858][ T4422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.47'. [ 78.383033][ T4426] netlink: 92 bytes leftover after parsing attributes in process `syz.3.48'. [ 78.459207][ T4430] Zero length message leads to an empty skb [ 78.480642][ T4430] netlink: 'syz.3.50': attribute type 10 has an invalid length. [ 78.504530][ T23] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 78.512592][ T4254] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 78.521691][ T23] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 78.543337][ T4430] device veth0_vlan left promiscuous mode [ 78.553984][ T4430] device veth0_vlan entered promiscuous mode [ 78.566235][ T4430] team0: Device veth0_vlan failed to register rx_handler [ 78.712555][ T23] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x4D [ 78.752449][ T4254] usb 1-1: Using ep0 maxpacket: 8 [ 78.948398][ T4439] netlink: 'syz.3.53': attribute type 10 has an invalid length. [ 78.981270][ T4439] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 79.037912][ T4254] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 79.059479][ T4254] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.085418][ T4254] usb 1-1: Product: syz [ 79.089673][ T4254] usb 1-1: Manufacturer: syz [ 79.122424][ T4254] usb 1-1: SerialNumber: syz [ 79.134890][ T4254] usb 1-1: config 0 descriptor?? [ 79.377894][ T23] cp2112 0003:10C4:EA90.0002: error reading lock byte: -71 [ 79.422631][ T4254] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 79.431299][ T23] usb 2-1: USB disconnect, device number 4 [ 79.565236][ T4454] fido_id[4454]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 79.601905][ T4457] sctp: [Deprecated]: syz.4.59 (pid 4457) Use of int in max_burst socket option deprecated. [ 79.601905][ T4457] Use struct sctp_assoc_value instead [ 79.628425][ T4457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.59'. [ 79.762398][ T4298] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 79.909653][ T4459] netlink: 92 bytes leftover after parsing attributes in process `syz.4.60'. [ 80.035722][ T4465] kernel read not supported for file /file1 (pid: 4465 comm: syz.1.63) [ 80.045018][ T26] audit: type=1800 audit(1754712560.794:5): pid=4465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.63" name="file1" dev="mqueue" ino=34188 res=0 errno=0 [ 80.083685][ T4464] netlink: 'syz.4.62': attribute type 10 has an invalid length. [ 80.104257][ T4464] device veth0_vlan left promiscuous mode [ 80.110863][ T4464] device veth0_vlan entered promiscuous mode [ 80.124168][ T4464] team0: Device veth0_vlan failed to register rx_handler [ 80.142690][ T4298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.154944][ T4298] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c1e, bcdDevice= 0.00 [ 80.164640][ T4298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.175769][ T4298] usb 4-1: config 0 descriptor?? [ 80.659879][ T4298] hid-generic 0003:1B1C:1C1E.0003: hidraw0: USB HID v0.00 Device [HID 1b1c:1c1e] on usb-dummy_hcd.3-1/input0 [ 80.858824][ T4298] usb 4-1: USB disconnect, device number 3 [ 81.007967][ T4482] netlink: 'syz.1.69': attribute type 10 has an invalid length. [ 81.020265][ T4482] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 81.143433][ T4489] sctp: [Deprecated]: syz.4.71 (pid 4489) Use of int in max_burst socket option deprecated. [ 81.143433][ T4489] Use struct sctp_assoc_value instead [ 81.166962][ T4486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.71'. [ 81.235784][ T4493] netlink: 92 bytes leftover after parsing attributes in process `syz.4.73'. [ 81.360666][ T4497] netlink: 'syz.4.75': attribute type 10 has an invalid length. [ 81.372471][ T4254] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 81.391022][ T4497] device veth0_vlan left promiscuous mode [ 81.399315][ T4254] usb 1-1: USB disconnect, device number 4 [ 81.408035][ T4497] device veth0_vlan entered promiscuous mode [ 81.439535][ T4497] team0: Device veth0_vlan failed to register rx_handler [ 81.698993][ T4506] kernel read not supported for file /file1 (pid: 4506 comm: syz.2.79) [ 81.739244][ T26] audit: type=1800 audit(1754712562.484:6): pid=4506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.79" name="file1" dev="mqueue" ino=34452 res=0 errno=0 [ 82.270694][ T4520] netlink: 'syz.1.83': attribute type 10 has an invalid length. [ 82.490106][ T4522] sctp: [Deprecated]: syz.0.84 (pid 4522) Use of int in max_burst socket option deprecated. [ 82.490106][ T4522] Use struct sctp_assoc_value instead [ 82.509679][ T4524] netlink: 92 bytes leftover after parsing attributes in process `syz.3.85'. [ 82.591552][ T4525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.84'. [ 83.207664][ T1107] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 83.223835][ T4546] netlink: 'syz.3.89': attribute type 10 has an invalid length. [ 83.241455][ T4546] device veth0_vlan left promiscuous mode [ 83.255860][ T4546] device veth0_vlan entered promiscuous mode [ 83.296903][ T4546] team0: Device veth0_vlan failed to register rx_handler [ 83.497907][ T1107] usb 2-1: Using ep0 maxpacket: 8 [ 83.543816][ T4561] netlink: 'syz.3.98': attribute type 10 has an invalid length. [ 83.772938][ T4240] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 83.812647][ T1107] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 83.826238][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.843315][ T1107] usb 2-1: Product: syz [ 83.852056][ T1107] usb 2-1: Manufacturer: syz [ 83.867966][ T1107] usb 2-1: SerialNumber: syz [ 83.887278][ T1107] usb 2-1: config 0 descriptor?? [ 83.928332][ T4564] netlink: 92 bytes leftover after parsing attributes in process `syz.3.100'. [ 84.054468][ T4240] usb 1-1: Using ep0 maxpacket: 8 [ 84.180076][ T1107] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 84.407671][ T4240] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 84.433910][ T4240] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.457304][ T4240] usb 1-1: Product: syz [ 84.461520][ T4240] usb 1-1: Manufacturer: syz [ 84.467261][ T4240] usb 1-1: SerialNumber: syz [ 84.467465][ T4582] netlink: 'syz.4.109': attribute type 10 has an invalid length. [ 84.481735][ T4240] usb 1-1: config 0 descriptor?? [ 84.489412][ T4582] device veth0_vlan left promiscuous mode [ 84.497040][ T4582] device veth0_vlan entered promiscuous mode [ 84.504781][ T4582] team0: Device veth0_vlan failed to register rx_handler [ 84.650382][ T4590] sctp: [Deprecated]: syz.4.110 (pid 4590) Use of int in max_burst socket option deprecated. [ 84.650382][ T4590] Use struct sctp_assoc_value instead [ 84.679220][ T4589] netlink: 'syz.3.111': attribute type 10 has an invalid length. [ 84.689255][ T4586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.110'. [ 84.742555][ T4240] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 84.884456][ T4596] netlink: 92 bytes leftover after parsing attributes in process `syz.3.113'. [ 85.120408][ T4603] kernel read not supported for file /file1 (pid: 4603 comm: syz.3.116) [ 85.129590][ T26] audit: type=1800 audit(1754712565.884:7): pid=4603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.116" name="file1" dev="mqueue" ino=33046 res=0 errno=0 [ 85.701738][ T4617] netlink: 'syz.4.121': attribute type 10 has an invalid length. [ 85.710267][ T4617] device veth0_vlan left promiscuous mode [ 85.717236][ T4617] device veth0_vlan entered promiscuous mode [ 85.726792][ T4617] team0: Device veth0_vlan failed to register rx_handler [ 85.945254][ T4624] sctp: [Deprecated]: syz.4.123 (pid 4624) Use of int in max_burst socket option deprecated. [ 85.945254][ T4624] Use struct sctp_assoc_value instead [ 85.982021][ T4621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.123'. [ 86.050404][ T4626] netlink: 'syz.3.124': attribute type 10 has an invalid length. [ 86.073224][ T4628] netlink: 92 bytes leftover after parsing attributes in process `syz.4.125'. [ 86.210080][ T1107] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 86.221246][ T1107] usb 2-1: USB disconnect, device number 5 [ 86.354212][ T4634] device syzkaller1 entered promiscuous mode [ 86.655421][ T1110] cfg80211: failed to load regulatory.db [ 86.702762][ T4240] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 86.727042][ T4240] usb 1-1: USB disconnect, device number 5 [ 87.049391][ T4648] netlink: 'syz.1.133': attribute type 10 has an invalid length. [ 87.064393][ T4652] kernel read not supported for file /file1 (pid: 4652 comm: syz.2.135) [ 87.106355][ T4650] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 87.117642][ T26] audit: type=1800 audit(1754712567.874:8): pid=4652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.135" name="file1" dev="mqueue" ino=34452 res=0 errno=0 [ 87.159735][ T4650] pit: kvm: requested 92190 ns i8254 timer period limited to 200000 ns [ 87.164548][ T4648] device veth0_vlan left promiscuous mode [ 87.179507][ T4650] pit: kvm: requested 96381 ns i8254 timer period limited to 200000 ns [ 87.193132][ T4650] pit: kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 87.212264][ T4650] pit: kvm: requested 97219 ns i8254 timer period limited to 200000 ns [ 87.218151][ T4648] device veth0_vlan entered promiscuous mode [ 87.242918][ T4650] pit: kvm: requested 88000 ns i8254 timer period limited to 200000 ns [ 87.261974][ T4648] team0: Device veth0_vlan failed to register rx_handler [ 87.270228][ T4650] pit: kvm: requested 91352 ns i8254 timer period limited to 200000 ns [ 87.308576][ T4661] sctp: [Deprecated]: syz.0.136 (pid 4661) Use of int in max_burst socket option deprecated. [ 87.308576][ T4661] Use struct sctp_assoc_value instead [ 87.314795][ T4650] pit: kvm: requested 84647 ns i8254 timer period limited to 200000 ns [ 87.381403][ T4650] pit: kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 87.396611][ T4650] pit: kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 87.420520][ T4663] netlink: 92 bytes leftover after parsing attributes in process `syz.3.137'. [ 87.439200][ T4664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 87.745390][ T4669] netlink: 'syz.0.139': attribute type 10 has an invalid length. [ 87.771195][ T4669] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 88.012552][ T13] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 88.020209][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 88.292806][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 88.297996][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 88.303308][ T4233] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 88.322520][ T4226] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 88.437315][ T7] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 88.446241][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.456965][ T7] usb 2-1: config 0 has no interface number 0 [ 88.602622][ T13] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 88.614095][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.627053][ T13] usb 4-1: Product: syz [ 88.631302][ T13] usb 4-1: Manufacturer: syz [ 88.638080][ T13] usb 4-1: SerialNumber: syz [ 88.653026][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 88.669685][ T13] usb 4-1: config 0 descriptor?? [ 88.679619][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.682599][ T4226] usb 3-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config [ 88.691973][ T7] usb 2-1: Product: syz [ 88.703638][ T4226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 88.705178][ T7] usb 2-1: Manufacturer: syz [ 88.722984][ T4233] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 88.727052][ T4226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 88.738026][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.756853][ T7] usb 2-1: SerialNumber: syz [ 88.760876][ T4226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 88.774042][ T4226] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.774955][ T7] usb 2-1: config 0 descriptor?? [ 88.787538][ T4226] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 88.801917][ T4226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.809945][ T4233] usb 5-1: config 0 descriptor?? [ 88.834620][ T4226] usb 3-1: config 0 descriptor?? [ 88.844291][ T4233] cp210x 5-1:0.0: cp210x converter detected [ 88.853822][ T7] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 88.860215][ T7] usb 2-1: No valid video chain found. [ 88.957911][ T13] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 88.982393][ T4226] rc_core: IR keymap rc-hauppauge not found [ 88.988368][ T4226] Registered IR keymap rc-empty [ 89.023459][ T4226] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 89.059436][ T7] usb 2-1: USB disconnect, device number 6 [ 89.082630][ T4226] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 89.114229][ T4226] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 89.143248][ T4226] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 89.202491][ T4226] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 89.252437][ T4226] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 89.297937][ T4233] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 89.302441][ T4226] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 89.372426][ T4226] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 89.432905][ T4226] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 89.469264][ T4696] netlink: 92 bytes leftover after parsing attributes in process `syz.0.149'. [ 89.482711][ T4226] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 89.532462][ T4226] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 89.589366][ T4226] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 89.597419][ T4233] usb 5-1: cp210x converter now attached to ttyUSB0 [ 89.617506][ T4701] sctp: [Deprecated]: syz.0.150 (pid 4701) Use of int in max_burst socket option deprecated. [ 89.617506][ T4701] Use struct sctp_assoc_value instead [ 89.662468][ T4226] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 89.687383][ T4704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.150'. [ 89.722476][ T4226] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 89.754768][ T4226] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 89.770725][ T4226] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 89.791468][ T1107] usb 5-1: USB disconnect, device number 5 [ 89.809003][ T4226] usb 3-1: USB disconnect, device number 3 [ 89.836426][ T1107] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 89.855809][ T4706] netlink: 'syz.1.152': attribute type 10 has an invalid length. [ 89.900252][ T1107] cp210x 5-1:0.0: device disconnected [ 89.902967][ T4706] device veth0_vlan left promiscuous mode [ 89.942185][ T4706] device veth0_vlan entered promiscuous mode [ 89.949949][ T4710] kernel read not supported for file /file1 (pid: 4710 comm: syz.0.154) [ 89.969356][ T26] audit: type=1800 audit(1754712570.714:9): pid=4710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.154" name="file1" dev="mqueue" ino=35632 res=0 errno=0 [ 90.010761][ T4706] team0: Device veth0_vlan failed to register rx_handler [ 90.241224][ T4716] netlink: 'syz.1.156': attribute type 10 has an invalid length. [ 90.720218][ T4728] netlink: 56 bytes leftover after parsing attributes in process `syz.2.161'. [ 90.882509][ T1107] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 90.902705][ T13] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 90.917778][ T13] usb 4-1: USB disconnect, device number 4 [ 90.943547][ T4735] sctp: [Deprecated]: syz.2.164 (pid 4735) Use of int in max_burst socket option deprecated. [ 90.943547][ T4735] Use struct sctp_assoc_value instead [ 90.960946][ T4735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'. [ 91.102533][ T4298] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 91.272874][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.284649][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.319517][ T1107] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.332796][ T1107] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.342199][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.362564][ T4298] usb 1-1: Using ep0 maxpacket: 16 [ 91.379662][ T1107] usb 2-1: config 0 descriptor?? [ 91.396990][ T4741] netlink: 'syz.3.167': attribute type 10 has an invalid length. [ 91.405651][ T4741] device veth0_vlan left promiscuous mode [ 91.411965][ T4741] device veth0_vlan entered promiscuous mode [ 91.419489][ T4741] team0: Device veth0_vlan failed to register rx_handler [ 91.484073][ T4298] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.495486][ T4298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 91.509187][ T4298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 91.519452][ T4298] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 91.529232][ T4298] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.612462][ T4185] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 91.622632][ T4298] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 91.631715][ T4298] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 91.664803][ T4298] usb 1-1: Manufacturer: syz [ 91.674055][ T4746] netlink: 'syz.3.169': attribute type 10 has an invalid length. [ 91.677143][ T4298] usb 1-1: config 0 descriptor?? [ 91.864615][ T1107] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.872164][ T1107] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.879940][ T1107] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.888537][ T1107] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.908125][ T1107] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.928680][ T1107] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.942204][ T1107] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.950144][ T1107] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.957836][ T1107] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.966423][ T1107] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.974167][ T1107] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.976946][ T4185] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 91.981892][ T1107] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 91.997579][ T4185] usb 5-1: config 0 has no interface number 0 [ 91.998717][ T1107] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 92.011728][ T1107] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 92.032034][ T1107] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 92.042818][ T1107] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 92.102923][ T1107] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 92.106178][ T4298] rc_core: IR keymap rc-hauppauge not found [ 92.131674][ T4298] Registered IR keymap rc-empty [ 92.146199][ T1107] usb 2-1: USB disconnect, device number 7 [ 92.160505][ T4298] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 92.172619][ T4185] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 92.190674][ T4185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.210263][ T4185] usb 5-1: Product: syz [ 92.219478][ T4185] usb 5-1: Manufacturer: syz [ 92.232561][ T4298] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 92.240002][ T4185] usb 5-1: SerialNumber: syz [ 92.247898][ T4185] usb 5-1: config 0 descriptor?? [ 92.268613][ T4757] fido_id[4757]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 92.273284][ T4298] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 92.301518][ T4298] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 92.320605][ T4298] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 92.352533][ T4298] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 92.392560][ T4298] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 92.422467][ T4298] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 92.452518][ T4298] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 92.482654][ T4298] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 92.491424][ T4763] netlink: 56 bytes leftover after parsing attributes in process `syz.2.174'. [ 92.512491][ T4298] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 92.552526][ T4298] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 92.582621][ T4298] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 92.612601][ T4298] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 92.643650][ T4298] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 92.679301][ T4298] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 92.764820][ T4773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'. [ 93.118900][ T4778] netlink: 'syz.3.179': attribute type 10 has an invalid length. [ 93.140085][ T4778] device veth0_vlan left promiscuous mode [ 93.161102][ T4778] device veth0_vlan entered promiscuous mode [ 93.180585][ T4778] team0: Device veth0_vlan failed to register rx_handler [ 93.192827][ T4298] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 93.413908][ T4185] usb 5-1: non-Atmel transceiver xxxx77e1 [ 93.419839][ T4185] usb 5-1: Firmware version (0.0) predates our first public release. [ 93.445673][ T4298] usb 3-1: Using ep0 maxpacket: 8 [ 93.456390][ T4185] usb 5-1: Please update to version 0.2 or newer [ 93.524494][ T4786] tmpfs: Unknown parameter 'usrquota' [ 93.539172][ T4785] netlink: 'syz.3.181': attribute type 10 has an invalid length. [ 93.625888][ T4185] usb 5-1: atusb_probe: initialization failed, error = -19 [ 93.650583][ T4185] usb 5-1: USB disconnect, device number 6 [ 93.722663][ T4298] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 93.736230][ T4298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.753607][ T4298] usb 3-1: Product: syz [ 93.762596][ T4298] usb 3-1: Manufacturer: syz [ 93.772098][ T4298] usb 3-1: SerialNumber: syz [ 93.780088][ T4298] usb 3-1: config 0 descriptor?? [ 93.831063][ T1110] usb 1-1: USB disconnect, device number 6 [ 93.903621][ T4796] netlink: 56 bytes leftover after parsing attributes in process `syz.3.186'. [ 94.043518][ T4298] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 94.060599][ T4226] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 94.173039][ T4805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.189'. [ 94.269031][ T4810] netlink: 'syz.0.191': attribute type 10 has an invalid length. [ 94.278355][ T4810] device veth0_vlan left promiscuous mode [ 94.285049][ T4810] device veth0_vlan entered promiscuous mode [ 94.294285][ T4810] team0: Device veth0_vlan failed to register rx_handler [ 94.322545][ T13] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 94.422592][ T4226] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 94.434102][ T4226] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.447810][ T4226] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.457494][ T4226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.468437][ T4226] usb 2-1: config 0 descriptor?? [ 94.494148][ T4792] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 94.517766][ T4226] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 94.562417][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 94.696942][ T13] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 94.708691][ T13] usb 4-1: config 0 has no interface number 0 [ 94.722417][ T13] usb 4-1: config 0 interface 184 has no altsetting 0 [ 94.902855][ T13] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 94.917633][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.930390][ T13] usb 4-1: Product: syz [ 94.938524][ T13] usb 4-1: Manufacturer: syz [ 94.951786][ T13] usb 4-1: SerialNumber: syz [ 94.965627][ T13] usb 4-1: config 0 descriptor?? [ 95.009805][ T4823] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 95.033935][ T13] smsc75xx v1.0.0 [ 95.188030][ T4826] netlink: 'syz.4.197': attribute type 10 has an invalid length. [ 95.235192][ T4826] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 95.257638][ T4830] netlink: 56 bytes leftover after parsing attributes in process `syz.0.199'. [ 95.545408][ T4840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.202'. [ 95.679471][ T4843] netlink: 'syz.4.203': attribute type 10 has an invalid length. [ 95.697053][ T4843] device veth0_vlan left promiscuous mode [ 95.704849][ T4843] device veth0_vlan entered promiscuous mode [ 95.712998][ T4843] team0: Device veth0_vlan failed to register rx_handler [ 95.982408][ T1107] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 96.032536][ T4298] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 96.047762][ T4298] usb 3-1: USB disconnect, device number 4 [ 96.129659][ T13] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 96.271946][ T1107] usb 1-1: Using ep0 maxpacket: 32 [ 96.332705][ T13] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 96.348976][ T13] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 96.359626][ T13] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 96.370720][ T13] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 96.382424][ T13] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 96.416331][ T13] usb 4-1: USB disconnect, device number 5 [ 96.602694][ T1107] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 96.625017][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.643883][ T1107] usb 1-1: Product: syz [ 96.648188][ T1107] usb 1-1: Manufacturer: syz [ 96.653499][ T1107] usb 1-1: SerialNumber: syz [ 96.670105][ T1107] usb 1-1: config 0 descriptor?? [ 96.714559][ T1107] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 96.804782][ T7] usb 2-1: USB disconnect, device number 8 [ 96.871142][ T4865] netlink: 56 bytes leftover after parsing attributes in process `syz.1.211'. [ 97.014863][ T4869] netlink: 'syz.1.213': attribute type 10 has an invalid length. [ 97.101151][ T4876] sctp: [Deprecated]: syz.3.215 (pid 4876) Use of int in max_burst socket option deprecated. [ 97.101151][ T4876] Use struct sctp_assoc_value instead [ 97.131893][ T4876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'. [ 97.260616][ T4878] netlink: 'syz.2.216': attribute type 10 has an invalid length. [ 97.375175][ T4878] device veth0_vlan left promiscuous mode [ 97.430020][ T4878] device veth0_vlan entered promiscuous mode [ 97.472249][ T4878] team0: Device veth0_vlan failed to register rx_handler [ 97.629132][ T13] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 97.744677][ T4891] create_pit_timer: 59 callbacks suppressed [ 97.744693][ T4891] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 97.773310][ T4891] pit: kvm: requested 92190 ns i8254 timer period limited to 200000 ns [ 97.791918][ T4891] pit: kvm: requested 96381 ns i8254 timer period limited to 200000 ns [ 97.810911][ T4891] pit: kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 97.852921][ T4891] pit: kvm: requested 97219 ns i8254 timer period limited to 200000 ns [ 97.872342][ T4891] pit: kvm: requested 88000 ns i8254 timer period limited to 200000 ns [ 97.891218][ T4891] pit: kvm: requested 91352 ns i8254 timer period limited to 200000 ns [ 97.899898][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 97.916184][ T4891] pit: kvm: requested 84647 ns i8254 timer period limited to 200000 ns [ 97.946600][ T4891] pit: kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 97.992655][ T4891] pit: kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 98.087715][ T4899] netlink: 56 bytes leftover after parsing attributes in process `syz.4.224'. [ 98.209137][ T13] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 98.223097][ T1107] gspca_stk1135: reg_w 0xf err -71 [ 98.230649][ T1107] gspca_stk1135: serial bus timeout: status=0x00 [ 98.240991][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.255390][ T1107] gspca_stk1135: Sensor write failed [ 98.267613][ T1107] gspca_stk1135: serial bus timeout: status=0x00 [ 98.275282][ T13] usb 2-1: Product: syz [ 98.285397][ T13] usb 2-1: Manufacturer: syz [ 98.300993][ T1107] gspca_stk1135: Sensor write failed [ 98.310070][ T13] usb 2-1: SerialNumber: syz [ 98.316047][ T1107] gspca_stk1135: serial bus timeout: status=0x00 [ 98.338456][ T13] usb 2-1: config 0 descriptor?? [ 98.345652][ T1107] gspca_stk1135: Sensor read failed [ 98.373991][ T1107] gspca_stk1135: serial bus timeout: status=0x00 [ 98.381050][ T1107] gspca_stk1135: Sensor read failed [ 98.391414][ T1107] gspca_stk1135: Detected sensor type unknown (0x0) [ 98.398864][ T1107] gspca_stk1135: serial bus timeout: status=0x00 [ 98.411810][ T1107] gspca_stk1135: Sensor read failed [ 98.418830][ T1107] gspca_stk1135: serial bus timeout: status=0x00 [ 98.425791][ T1107] gspca_stk1135: Sensor read failed [ 98.431318][ T1107] gspca_stk1135: serial bus timeout: status=0x00 [ 98.438261][ T1107] gspca_stk1135: Sensor write failed [ 98.444212][ T1107] gspca_stk1135: serial bus timeout: status=0x00 [ 98.450799][ T1107] gspca_stk1135: Sensor write failed [ 98.456803][ T1107] stk1135: probe of 1-1:0.0 failed with error -71 [ 98.479094][ T1107] usb 1-1: USB disconnect, device number 7 [ 98.485924][ T4908] netlink: 'syz.4.228': attribute type 10 has an invalid length. [ 98.625884][ T13] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 98.873406][ T4916] netlink: 'syz.2.231': attribute type 10 has an invalid length. [ 98.881400][ T4916] device veth0_vlan left promiscuous mode [ 98.894476][ T4916] device veth0_vlan entered promiscuous mode [ 98.918376][ T4916] team0: Device veth0_vlan failed to register rx_handler [ 99.201379][ T4932] netlink: 84 bytes leftover after parsing attributes in process `syz.3.237'. [ 99.262476][ T1110] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 99.513564][ T1110] usb 1-1: Using ep0 maxpacket: 16 [ 99.525897][ T4943] netlink: 'syz.4.243': attribute type 10 has an invalid length. [ 99.652642][ T1110] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 99.672428][ T1110] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.722454][ T1110] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.902752][ T1110] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.922413][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.947824][ T1110] usb 1-1: Product: syz [ 99.962331][ T1110] usb 1-1: Manufacturer: syz [ 99.977243][ T1110] usb 1-1: SerialNumber: syz [ 100.192494][ T1107] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 100.252618][ T4261] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 100.472728][ T1110] usb 1-1: 0:2 : does not exist [ 100.622857][ T13] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 100.634276][ T13] usb 2-1: USB disconnect, device number 9 [ 100.642564][ T1107] usb 3-1: unable to get BOS descriptor or descriptor too short [ 100.662682][ T4261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.674353][ T4261] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 100.684281][ T4261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.694719][ T4261] usb 4-1: config 0 descriptor?? [ 100.733100][ T1107] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 100.746724][ T1107] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 100.755875][ T1107] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 100.952807][ T1107] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.962837][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.971463][ T1107] usb 3-1: Product: syz [ 100.977396][ T1107] usb 3-1: Manufacturer: syz [ 100.988583][ T1107] usb 3-1: SerialNumber: syz [ 101.095479][ T4960] netlink: 'syz.4.249': attribute type 10 has an invalid length. [ 101.120872][ T4960] device veth0_vlan left promiscuous mode [ 101.127853][ T4960] device veth0_vlan entered promiscuous mode [ 101.136062][ T4960] team0: Device veth0_vlan failed to register rx_handler [ 101.163898][ T13] usb 1-1: USB disconnect, device number 8 [ 101.184355][ T4261] hid_mf 0003:0079:1846.0005: unknown main item tag 0x0 [ 101.205855][ T4261] hid_mf 0003:0079:1846.0005: unknown main item tag 0x0 [ 101.218993][ T4261] hid_mf 0003:0079:1846.0005: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.3-1/input0 [ 101.231260][ T4261] hid_mf 0003:0079:1846.0005: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 101.288503][ T4953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 101.387538][ T4185] usb 4-1: USB disconnect, device number 6 [ 101.426328][ T4963] fido_id[4963]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 101.462932][ T1107] usb 3-1: 0:2 : does not exist [ 101.506707][ T1107] usb 3-1: USB disconnect, device number 5 [ 101.559744][ T4970] kernel read not supported for file /file1 (pid: 4970 comm: syz.1.253) [ 101.580541][ T26] audit: type=1800 audit(1754712582.324:10): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.253" name="file1" dev="mqueue" ino=34188 res=0 errno=0 [ 101.783583][ T4313] udevd[4313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.029797][ T4984] netlink: 'syz.0.257': attribute type 10 has an invalid length. [ 102.583583][ T5001] netlink: 'syz.0.264': attribute type 10 has an invalid length. [ 102.623286][ T5001] device veth0_vlan left promiscuous mode [ 102.634837][ T5001] device veth0_vlan entered promiscuous mode [ 102.665003][ T5001] team0: Device veth0_vlan failed to register rx_handler [ 102.993384][ T5022] tipc: Started in network mode [ 103.015820][ T5022] tipc: Node identity 6e00beca576e, cluster identity 4711 [ 103.030566][ T5022] tipc: Enabled bearer , priority 0 [ 103.071897][ T5022] device syzkaller0 entered promiscuous mode [ 103.113877][ T13] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 103.113983][ T5020] tipc: Resetting bearer [ 103.201266][ T5020] tipc: Disabling bearer [ 103.362486][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 103.465135][ T5031] netlink: 'syz.0.275': attribute type 10 has an invalid length. [ 103.502763][ T13] usb 2-1: config 0 interface 0 has no altsetting 0 [ 103.643994][ T5036] create_pit_timer: 128 callbacks suppressed [ 103.644010][ T5036] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 103.674008][ T13] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 103.712389][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.729497][ T13] usb 2-1: Product: syz [ 103.735829][ T13] usb 2-1: Manufacturer: syz [ 103.741411][ T13] usb 2-1: SerialNumber: syz [ 103.763313][ T13] usb 2-1: config 0 descriptor?? [ 104.069347][ T5056] program syz.2.284 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.136770][ T5062] netlink: 'syz.0.283': attribute type 10 has an invalid length. [ 104.149898][ T5062] device veth0_vlan left promiscuous mode [ 104.157226][ T5062] device veth0_vlan entered promiscuous mode [ 104.164999][ T5062] team0: Device veth0_vlan failed to register rx_handler [ 104.455670][ T5072] netlink: 'syz.3.291': attribute type 10 has an invalid length. [ 104.618760][ T5074] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 104.647755][ T5074] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 104.830615][ T5095] netlink: 'syz.3.299': attribute type 10 has an invalid length. [ 104.852100][ T5095] device veth0_vlan left promiscuous mode [ 104.874523][ T5095] device veth0_vlan entered promiscuous mode [ 104.886417][ T5095] team0: Device veth0_vlan failed to register rx_handler [ 104.981574][ T5099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.300'. [ 105.106137][ T5106] netlink: 92 bytes leftover after parsing attributes in process `syz.4.304'. [ 105.117257][ T4185] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 105.214644][ T5110] sctp: [Deprecated]: syz.4.305 (pid 5110) Use of int in max_burst socket option deprecated. [ 105.214644][ T5110] Use struct sctp_assoc_value instead [ 105.230874][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.305'. [ 105.372474][ T4185] usb 3-1: Using ep0 maxpacket: 32 [ 105.492509][ T4185] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 105.501120][ T4185] usb 3-1: config 0 has no interface number 0 [ 105.511754][ T4185] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.526847][ T4185] usb 3-1: config 0 interface 85 has no altsetting 0 [ 105.602451][ T4261] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 105.692779][ T4185] usb 3-1: New USB device found, idVendor=05ac, idProduct=021b, bcdDevice=f0.72 [ 105.702022][ T4185] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.710168][ T4185] usb 3-1: Product: syz [ 105.714527][ T4185] usb 3-1: Manufacturer: syz [ 105.719145][ T4185] usb 3-1: SerialNumber: syz [ 105.725932][ T4185] usb 3-1: config 0 descriptor?? [ 105.847044][ T1110] usb 2-1: USB disconnect, device number 10 [ 105.882456][ T4261] usb 5-1: Using ep0 maxpacket: 8 [ 106.120068][ T5131] netlink: 'syz.0.313': attribute type 10 has an invalid length. [ 106.129146][ T5131] device veth0_vlan left promiscuous mode [ 106.139867][ T5131] device veth0_vlan entered promiscuous mode [ 106.148159][ T5131] team0: Device veth0_vlan failed to register rx_handler [ 106.212777][ T4261] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 106.231210][ T4261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.240284][ T4261] usb 5-1: Product: syz [ 106.244996][ T4261] usb 5-1: Manufacturer: syz [ 106.249885][ T4261] usb 5-1: SerialNumber: syz [ 106.278774][ T4261] usb 5-1: config 0 descriptor?? [ 106.282460][ T1110] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 106.359169][ T5138] kernel read not supported for file /file1 (pid: 5138 comm: syz.0.316) [ 106.368191][ T26] audit: type=1800 audit(1754712587.124:11): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.316" name="file1" dev="mqueue" ino=35632 res=0 errno=0 [ 106.542663][ T4185] appletouch 3-1:0.85: Geyser mode initialized. [ 106.542714][ T4261] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 106.555783][ T4185] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input7 [ 106.644907][ T1110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.658926][ T5146] sctp: [Deprecated]: syz.3.317 (pid 5146) Use of int in max_burst socket option deprecated. [ 106.658926][ T5146] Use struct sctp_assoc_value instead [ 106.672199][ T1110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.692384][ C0] appletouch 3-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 106.695271][ T1110] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 106.717442][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.741642][ T1110] usb 2-1: config 0 descriptor?? [ 106.747758][ T5143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.317'. [ 106.894055][ T4185] usb 3-1: USB disconnect, device number 6 [ 106.912576][ T4185] appletouch 3-1:0.85: input: appletouch disconnected [ 107.072568][ T13] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 107.235756][ T1110] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 107.254540][ T1110] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 107.268901][ T1110] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 107.314786][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 107.448939][ T5152] netlink: 112 bytes leftover after parsing attributes in process `syz.2.320'. [ 107.458487][ T1110] hid-led: probe of 0003:0FC5:B080.0006 failed with error -71 [ 107.462815][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.471710][ T1110] usb 2-1: USB disconnect, device number 11 [ 107.539541][ T5152] syz.2.320 (5152) used greatest stack depth: 16768 bytes left [ 107.552568][ T4298] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 107.672739][ T13] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 107.686416][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.699897][ T13] usb 4-1: Product: syz [ 107.708126][ T13] usb 4-1: Manufacturer: syz [ 107.715389][ T13] usb 4-1: SerialNumber: syz [ 107.729917][ T13] usb 4-1: config 0 descriptor?? [ 107.809900][ T13] peak_usb 4-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 107.817874][ T13] peak_usb 4-1:0.0: unable to read PCAN-USB serial number (err -22) [ 107.884200][ T13] peak_usb: probe of 4-1:0.0 failed with error -22 [ 107.922510][ T4298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.940018][ T4298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.951144][ T4298] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 107.986671][ T4298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.001663][ T13] usb 4-1: USB disconnect, device number 7 [ 108.009289][ T4298] usb 1-1: config 0 descriptor?? [ 108.505036][ T4298] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0 [ 108.513227][ T4298] hid-steam 0003:28DE:1142.0007: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 108.522543][ T4261] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 108.528384][ T4298] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0 [ 108.546144][ T4261] usb 5-1: USB disconnect, device number 7 [ 108.567665][ T4298] hid-steam 0003:28DE:1142.0008: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 108.652565][ T4298] hid-steam 0003:28DE:1142.0007: Steam wireless receiver connected [ 108.661076][ T4298] hid-steam 0003:28DE:1142.0007: No HID_FEATURE_REPORT submitted - nothing to read [ 108.708780][ T13] usb 1-1: USB disconnect, device number 9 [ 108.735591][ T13] hid-steam 0003:28DE:1142.0007: Steam wireless receiver disconnected [ 108.751327][ T5164] fido_id[5164]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 109.252581][ T1110] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 109.371363][ T5190] sctp: [Deprecated]: syz.2.333 (pid 5190) Use of int in max_burst socket option deprecated. [ 109.371363][ T5190] Use struct sctp_assoc_value instead [ 109.420450][ T5185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.333'. [ 109.552520][ T13] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 109.641457][ T5197] netlink: 'syz.2.338': attribute type 10 has an invalid length. [ 109.653713][ T5197] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 109.692550][ T1110] usb 4-1: config 1 interface 0 has no altsetting 0 [ 109.853502][ T1110] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 109.871453][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.880346][ T1110] usb 4-1: Product: syz [ 109.882398][ T4261] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 109.894779][ T1110] usb 4-1: Manufacturer: syz [ 109.899416][ T1110] usb 4-1: SerialNumber: syz [ 109.942606][ T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.954368][ T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.062543][ T13] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 110.071663][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 110.079807][ T13] usb 5-1: SerialNumber: syz [ 110.163317][ T4261] usb 1-1: Using ep0 maxpacket: 8 [ 110.376009][ T13] usb 5-1: 0:2 : does not exist [ 110.388451][ T1110] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 110.393097][ T13] usb 5-1: USB disconnect, device number 8 [ 110.492788][ T4261] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 110.501892][ T4261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.510586][ T4261] usb 1-1: Product: syz [ 110.515114][ T4261] usb 1-1: Manufacturer: syz [ 110.519713][ T4261] usb 1-1: SerialNumber: syz [ 110.526570][ T4261] usb 1-1: config 0 descriptor?? [ 110.663988][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.732531][ T4298] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 110.792511][ T4261] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 110.880557][ T1107] usb 4-1: USB disconnect, device number 8 [ 110.899649][ T1107] usblp0: removed [ 111.002721][ T4298] usb 3-1: Using ep0 maxpacket: 8 [ 111.037817][ T5217] device syzkaller1 entered promiscuous mode [ 111.132562][ T7] Bluetooth: hci5: command 0x1003 tx timeout [ 111.138753][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 111.152799][ T4298] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.162795][ T4298] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.173528][ T4298] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.183887][ T4298] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.197334][ T4298] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 111.207458][ T4298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.305278][ T5224] netlink: 'syz.4.347': attribute type 10 has an invalid length. [ 111.313435][ T5224] device veth0_vlan left promiscuous mode [ 111.316060][ T1107] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 111.321708][ T5224] device veth0_vlan entered promiscuous mode [ 111.335847][ T5224] team0: Device veth0_vlan failed to register rx_handler [ 111.407594][ T5226] netlink: 'syz.4.348': attribute type 2 has an invalid length. [ 111.453815][ T5228] netlink: 60 bytes leftover after parsing attributes in process `syz.4.349'. [ 111.463020][ T5228] netlink: 60 bytes leftover after parsing attributes in process `syz.4.349'. [ 111.473944][ T5228] netlink: 60 bytes leftover after parsing attributes in process `syz.4.349'. [ 111.482782][ T4298] usb 3-1: GET_CAPABILITIES returned 0 [ 111.488568][ T5228] netlink: 60 bytes leftover after parsing attributes in process `syz.4.349'. [ 111.488656][ T4298] usbtmc 3-1:16.0: can't read capabilities [ 111.692465][ T1107] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.709786][ T1110] usb 3-1: USB disconnect, device number 7 [ 111.712610][ T1107] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 111.726868][ T1107] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 111.912682][ T1107] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 111.922038][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 111.931237][ T1107] usb 4-1: Product: syz [ 111.936363][ T1107] usb 4-1: Manufacturer: syz [ 111.940996][ T1107] usb 4-1: SerialNumber: syz [ 111.947948][ T1107] usb 4-1: config 0 descriptor?? [ 111.994876][ T1107] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 112.002582][ T1107] radio-si470x: probe of 4-1:0.0 failed with error -5 [ 112.009642][ T1107] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 112.192423][ T4299] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 112.442877][ T4299] usb 5-1: Using ep0 maxpacket: 8 [ 112.572873][ T4299] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.583663][ T4299] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.594582][ T4299] usb 5-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 112.605596][ T4299] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.619850][ T4299] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.629407][ T4299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.683430][ T4299] usbtmc 5-1:16.0: bulk endpoints not found [ 112.832497][ T4261] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 112.852585][ T4261] usb 1-1: USB disconnect, device number 10 [ 113.212518][ T4261] Bluetooth: hci5: command 0x1001 tx timeout [ 113.218648][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 113.328745][ T4261] usb 4-1: USB disconnect, device number 9 [ 113.569919][ T5261] sctp: [Deprecated]: syz.2.359 (pid 5261) Use of int in max_burst socket option deprecated. [ 113.569919][ T5261] Use struct sctp_assoc_value instead [ 113.630468][ T5264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.359'. [ 113.800354][ T5268] netlink: 84 bytes leftover after parsing attributes in process `syz.2.362'. [ 113.802386][ T4261] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 114.172656][ T4261] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 114.186533][ T4261] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 114.197422][ T4261] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.362637][ T4261] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 114.371759][ T4261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.384106][ T13] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 114.391973][ T4261] usb 4-1: Product: syz [ 114.397947][ T4261] usb 4-1: Manufacturer: syz [ 114.405144][ T4261] usb 4-1: SerialNumber: syz [ 114.411392][ T4261] usb 4-1: config 0 descriptor?? [ 114.432851][ T5255] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 114.452410][ T4299] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 114.632358][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 114.670907][ T4261] usb 4-1: USB disconnect, device number 10 [ 114.692403][ T4299] usb 3-1: Using ep0 maxpacket: 8 [ 114.762578][ T13] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 114.772769][ T13] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 114.782938][ T13] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 114.793263][ T13] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.806930][ T13] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 114.816722][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.982672][ T4299] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 114.992006][ T4299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.998810][ T4261] usb 5-1: USB disconnect, device number 9 [ 115.013974][ T4299] usb 3-1: Product: syz [ 115.020159][ T4299] usb 3-1: Manufacturer: syz [ 115.028562][ T4299] usb 3-1: SerialNumber: syz [ 115.039723][ T4299] usb 3-1: config 0 descriptor?? [ 115.108200][ T13] usb 1-1: GET_CAPABILITIES returned 0 [ 115.114104][ T13] usbtmc 1-1:16.0: can't read capabilities [ 115.292452][ T4261] Bluetooth: hci5: command 0x1009 tx timeout [ 115.302584][ T4299] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 115.326425][ T4298] usb 1-1: USB disconnect, device number 11 [ 115.353490][ T5299] sctp: [Deprecated]: syz.3.373 (pid 5299) Use of int in max_burst socket option deprecated. [ 115.353490][ T5299] Use struct sctp_assoc_value instead [ 115.391320][ T5299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.373'. [ 115.425894][ T5302] netlink: 84 bytes leftover after parsing attributes in process `syz.4.375'. [ 115.597938][ T154] Bluetooth: hci6: Frame reassembly failed (-84) [ 116.132501][ T4185] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 116.363690][ T5329] kvm: pic: non byte read [ 116.369544][ T5329] kvm: pic: single mode not supported [ 116.370356][ T5329] kvm: pic: level sensitive irq not supported [ 116.376705][ T5329] kvm: pic: level sensitive irq not supported [ 116.383085][ T5329] kvm: pic: single mode not supported [ 116.389199][ T5329] kvm: pic: level sensitive irq not supported [ 116.395262][ T5329] kvm: pic: single mode not supported [ 116.401640][ T5329] kvm: pic: level sensitive irq not supported [ 116.407524][ T5329] kvm: pic: level sensitive irq not supported [ 116.414495][ T5329] kvm: pic: single mode not supported [ 116.420574][ T5329] kvm: pic: level sensitive irq not supported [ 116.426384][ T5329] kvm: pic: level sensitive irq not supported [ 116.433445][ T5329] kvm: pic: single mode not supported [ 116.439741][ T5329] kvm: pic: single mode not supported [ 116.445418][ T5329] kvm: pic: single mode not supported [ 116.450814][ T5329] kvm: pic: level sensitive irq not supported [ 116.456710][ T5329] kvm: pic: single mode not supported [ 116.462936][ T5329] kvm: pic: level sensitive irq not supported [ 116.468548][ T5329] kvm: pic: single mode not supported [ 116.474761][ T5329] kvm: pic: level sensitive irq not supported [ 116.480689][ T5329] kvm: pic: single mode not supported [ 116.512469][ T4185] usb 4-1: config 0 has no interfaces? [ 116.549550][ T5332] netlink: 84 bytes leftover after parsing attributes in process `syz.0.387'. [ 116.602511][ T4185] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.611719][ T4185] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 116.620737][ T4185] usb 4-1: SerialNumber: syz [ 116.639478][ T4185] usb 4-1: config 0 descriptor?? [ 116.702010][ T5336] sctp: [Deprecated]: syz.0.389 (pid 5336) Use of int in max_burst socket option deprecated. [ 116.702010][ T5336] Use struct sctp_assoc_value instead [ 116.718127][ T5336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.389'. [ 116.886840][ T4185] usb 4-1: USB disconnect, device number 11 [ 117.232862][ T4299] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 117.257322][ T4299] usb 3-1: USB disconnect, device number 8 [ 117.541529][ T5364] netlink: 92 bytes leftover after parsing attributes in process `syz.3.399'. [ 117.612422][ T4299] Bluetooth: hci6: command 0x1003 tx timeout [ 117.618820][ T4200] Bluetooth: hci6: sending frame failed (-49) [ 117.637490][ T5369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.402'. [ 117.664026][ T5372] sctp: [Deprecated]: syz.3.401 (pid 5372) Use of int in max_burst socket option deprecated. [ 117.664026][ T5372] Use struct sctp_assoc_value instead [ 117.724478][ T5370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.401'. [ 118.062608][ T5390] sd 0:0:1:0: PR command failed: 2 [ 118.067880][ T5390] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 118.076316][ T5390] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 118.146950][ T4298] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 118.220549][ T5399] netlink: 92 bytes leftover after parsing attributes in process `syz.0.412'. [ 118.412852][ T4298] usb 4-1: Using ep0 maxpacket: 8 [ 118.532444][ T4298] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 118.540749][ T4298] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.551059][ T4298] usb 4-1: config 0 has no interface number 0 [ 118.557224][ T4298] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 118.568161][ T4299] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 118.575878][ T4298] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 118.587053][ T4298] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 118.597017][ T4298] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 118.606363][ T4298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.617410][ T4298] usb 4-1: config 0 descriptor?? [ 118.665469][ T4298] ldusb 4-1:0.55: Interrupt in endpoint not found [ 118.767815][ T5405] kvm [5404]: vcpu0, guest rIP: 0x97 disabled perfctr wrmsr: 0xc1 data 0x60000000000 [ 118.778218][ T5405] kvm [5404]: vcpu0, guest rIP: 0x97 disabled perfctr wrmsr: 0xc2 data 0x60000000000 [ 118.790910][ T5405] kvm [5404]: vcpu0, guest rIP: 0x97 ignored wrmsr: 0x11e data 0x60000000000 [ 118.804053][ T5405] kvm [5404]: vcpu0, guest rIP: 0x97 disabled perfctr wrmsr: 0x186 data 0x60000000000 [ 118.814097][ T5405] kvm [5404]: vcpu0, guest rIP: 0x97 disabled perfctr wrmsr: 0x187 data 0x60000000000 [ 118.822531][ T4299] usb 1-1: Using ep0 maxpacket: 8 [ 118.866989][ T4261] usb 4-1: USB disconnect, device number 12 [ 119.102641][ T4299] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 119.111937][ T4299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.120394][ T4299] usb 1-1: Product: syz [ 119.125024][ T4299] usb 1-1: Manufacturer: syz [ 119.129644][ T4299] usb 1-1: SerialNumber: syz [ 119.143917][ T4299] usb 1-1: config 0 descriptor?? [ 119.188075][ T5408] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 119.289931][ T5412] sctp: [Deprecated]: syz.2.417 (pid 5412) Use of int in max_burst socket option deprecated. [ 119.289931][ T5412] Use struct sctp_assoc_value instead [ 119.306398][ T5412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.417'. [ 119.402826][ T4299] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 119.473995][ T5423] tipc: Started in network mode [ 119.479323][ T5423] tipc: Node identity 529d0d177d45, cluster identity 4711 [ 119.488418][ T5423] tipc: Enabled bearer , priority 0 [ 119.500310][ T5423] tipc: Resetting bearer [ 119.508505][ T5421] tipc: Disabling bearer [ 119.531597][ T5422] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3722864146 (3722864146 ns) > initial count (3359027483 ns). Using initial count to start timer. [ 119.652566][ T5430] netlink: 92 bytes leftover after parsing attributes in process `syz.3.424'. [ 119.692506][ T4298] Bluetooth: hci6: command 0x1001 tx timeout [ 119.698674][ T4197] Bluetooth: hci6: sending frame failed (-49) [ 119.773625][ T5435] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 119.780496][ T5435] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 119.828862][ T5435] vhci_hcd vhci_hcd.0: Device attached [ 119.931779][ T5451] sctp: [Deprecated]: syz.2.429 (pid 5451) Use of int in max_burst socket option deprecated. [ 119.931779][ T5451] Use struct sctp_assoc_value instead [ 119.953276][ T5446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'. [ 120.092634][ T4298] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 120.101704][ T5436] vhci_hcd: connection reset by peer [ 120.109122][ T4547] vhci_hcd: stop threads [ 120.114066][ T4547] vhci_hcd: release socket [ 120.119180][ T4547] vhci_hcd: disconnect device [ 120.635935][ T26] audit: type=1326 audit(1754712601.384:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.2.431" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e64347be9 code=0x0 [ 120.659023][ T5456] sctp: [Deprecated]: syz.1.440 (pid 5456) Use of int in max_burst socket option deprecated. [ 120.659023][ T5456] Use struct sctp_assoc_value instead [ 120.675721][ T5456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 121.342455][ T4299] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 121.352821][ T4299] usb 1-1: USB disconnect, device number 12 [ 121.762951][ T4185] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 121.774754][ T13] Bluetooth: hci6: command 0x1009 tx timeout [ 122.152672][ T4185] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.163019][ T4185] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.242639][ T4185] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 122.257957][ T4185] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 122.270224][ T4185] usb 3-1: SerialNumber: syz [ 122.342925][ T5489] device syzkaller1 entered promiscuous mode [ 122.497225][ T5491] sctp: [Deprecated]: syz.1.444 (pid 5491) Use of int in max_burst socket option deprecated. [ 122.497225][ T5491] Use struct sctp_assoc_value instead [ 122.514208][ T5491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.444'. [ 122.555289][ T4185] usb 3-1: 0:2 : does not exist [ 122.560249][ T4185] usb 3-1: unit 5: unexpected type 0x0a [ 122.609518][ T4185] usb 3-1: USB disconnect, device number 9 [ 122.738751][ T4299] Bluetooth: hci5: command 0x1003 tx timeout [ 122.752589][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 122.864537][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.382615][ T13] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 123.642379][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 123.695754][ T5503] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 123.932586][ T13] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 123.941842][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.952259][ T13] usb 3-1: Product: syz [ 123.956708][ T13] usb 3-1: Manufacturer: syz [ 123.961327][ T13] usb 3-1: SerialNumber: syz [ 123.976178][ T13] usb 3-1: config 0 descriptor?? [ 124.140281][ T5512] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 124.148441][ T5512] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 124.232890][ T13] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 124.454470][ T5521] sctp: [Deprecated]: syz.1.456 (pid 5521) Use of int in max_burst socket option deprecated. [ 124.454470][ T5521] Use struct sctp_assoc_value instead [ 124.471513][ T5521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'. [ 124.527317][ T5523] netlink: 'syz.1.457': attribute type 10 has an invalid length. [ 124.812484][ T4185] Bluetooth: hci5: command 0x1001 tx timeout [ 124.818605][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 125.214031][ T4298] vhci_hcd: vhci_device speed not set [ 125.482580][ T4261] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 125.752402][ T4261] usb 2-1: Using ep0 maxpacket: 32 [ 126.065954][ T4261] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 126.086932][ T4261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.112743][ T4261] usb 2-1: Product: syz [ 126.116963][ T4261] usb 2-1: Manufacturer: syz [ 126.140555][ T4261] usb 2-1: SerialNumber: syz [ 126.153547][ T5537] ================================================================================ [ 126.169125][ T5537] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl812.c:1154:10 [ 126.178447][ T5537] shift exponent 4096 is too large for 32-bit type 'int' [ 126.185798][ T4261] usb 2-1: config 0 descriptor?? [ 126.194356][ T5537] CPU: 1 PID: 5537 Comm: syz.4.463 Not tainted 5.15.189-syzkaller #0 [ 126.202444][ T5537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.212843][ T5537] Call Trace: [ 126.216150][ T5537] [ 126.219084][ T5537] dump_stack_lvl+0x168/0x230 [ 126.223787][ T5537] ? show_regs_print_info+0x20/0x20 [ 126.229035][ T5537] ? load_image+0x3b0/0x3b0 [ 126.233581][ T5537] ubsan_epilogue+0xa/0x30 [ 126.238053][ T5537] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 126.244528][ T5537] pcl812_attach+0x1bc5/0x2330 [ 126.249343][ T5537] comedi_device_attach+0x515/0x650 [ 126.252891][ T13] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 126.254579][ T5537] comedi_unlocked_ioctl+0x5ec/0xe90 [ 126.267084][ T5537] ? comedi_poll+0x8b0/0x8b0 [ 126.271783][ T5537] ? bpf_lsm_file_ioctl+0x5/0x10 [ 126.276757][ T5537] ? security_file_ioctl+0x7c/0xa0 [ 126.281908][ T5537] ? comedi_poll+0x8b0/0x8b0 [ 126.286548][ T5537] __se_sys_ioctl+0xfa/0x170 [ 126.287519][ T13] usb 3-1: USB disconnect, device number 10 [ 126.291170][ T5537] do_syscall_64+0x4c/0xa0 [ 126.301489][ T5537] ? clear_bhb_loop+0x30/0x80 [ 126.306195][ T5537] ? clear_bhb_loop+0x30/0x80 [ 126.311101][ T5537] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.317060][ T5537] RIP: 0033:0x7f99a770ebe9 [ 126.321622][ T5537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.341270][ T5537] RSP: 002b:00007f99a5976038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.349730][ T5537] RAX: ffffffffffffffda RBX: 00007f99a7935fa0 RCX: 00007f99a770ebe9 [ 126.357740][ T5537] RDX: 00002000000005c0 RSI: 0000000040946400 RDI: 0000000000000007 [ 126.365875][ T5537] RBP: 00007f99a7791e19 R08: 0000000000000000 R09: 0000000000000000 [ 126.373882][ T5537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.381890][ T5537] R13: 00007f99a7936038 R14: 00007f99a7935fa0 R15: 00007ffd90d65c28 [ 126.389910][ T5537] [ 126.405497][ T4261] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 126.552358][ T5537] ================================================================================ [ 126.570869][ T5537] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 126.578137][ T5537] CPU: 1 PID: 5537 Comm: syz.4.463 Not tainted 5.15.189-syzkaller #0 [ 126.586254][ T5537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.596341][ T5537] Call Trace: [ 126.599647][ T5537] [ 126.602605][ T5537] dump_stack_lvl+0x168/0x230 [ 126.607318][ T5537] ? show_regs_print_info+0x20/0x20 [ 126.612728][ T5537] ? load_image+0x3b0/0x3b0 [ 126.617282][ T5537] panic+0x2c9/0x7f0 [ 126.621300][ T5537] ? bpf_jit_dump+0xd0/0xd0 [ 126.625842][ T5537] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 126.631694][ T5537] ? check_panic_on_warn+0x6c/0xa0 [ 126.636847][ T5537] check_panic_on_warn+0x80/0xa0 [ 126.641907][ T5537] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 126.648380][ T5537] pcl812_attach+0x1bc5/0x2330 [ 126.653211][ T5537] comedi_device_attach+0x515/0x650 [ 126.658451][ T5537] comedi_unlocked_ioctl+0x5ec/0xe90 [ 126.663869][ T5537] ? comedi_poll+0x8b0/0x8b0 [ 126.668520][ T5537] ? bpf_lsm_file_ioctl+0x5/0x10 [ 126.673458][ T5537] ? security_file_ioctl+0x7c/0xa0 [ 126.678572][ T5537] ? comedi_poll+0x8b0/0x8b0 [ 126.683167][ T5537] __se_sys_ioctl+0xfa/0x170 [ 126.687788][ T5537] do_syscall_64+0x4c/0xa0 [ 126.692227][ T5537] ? clear_bhb_loop+0x30/0x80 [ 126.696901][ T5537] ? clear_bhb_loop+0x30/0x80 [ 126.701582][ T5537] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.707481][ T5537] RIP: 0033:0x7f99a770ebe9 [ 126.711986][ T5537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.731589][ T5537] RSP: 002b:00007f99a5976038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.740118][ T5537] RAX: ffffffffffffffda RBX: 00007f99a7935fa0 RCX: 00007f99a770ebe9 [ 126.748089][ T5537] RDX: 00002000000005c0 RSI: 0000000040946400 RDI: 0000000000000007 [ 126.756065][ T5537] RBP: 00007f99a7791e19 R08: 0000000000000000 R09: 0000000000000000 [ 126.764072][ T5537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.772250][ T5537] R13: 00007f99a7936038 R14: 00007f99a7935fa0 R15: 00007ffd90d65c28 [ 126.780421][ T5537] [ 126.783776][ T5537] Kernel Offset: disabled [ 126.788315][ T5537] Rebooting in 86400 seconds..