last executing test programs: 19.993607584s ago: executing program 4 (id=422): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd9, 0x6, @broadcast}, 0x14) 18.765541342s ago: executing program 2 (id=425): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 18.585396486s ago: executing program 4 (id=426): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) syz_usb_connect(0x5, 0xe4, 0x0, 0x0) r6 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) getsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@dev}, &(0x7f00000000c0)=0x14) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0xe64, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x202}, 0x1c) r7 = syz_open_dev$radio(&(0x7f00000005c0), 0x0, 0x2) flock(r7, 0x5) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000380)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @p_u8=&(0x7f0000000080)}}) r8 = gettid() rt_sigqueueinfo(r8, 0x21, &(0x7f00000002c0)) syz_open_procfs(r8, &(0x7f0000000100)='net/anycast6\x00') 15.861879048s ago: executing program 4 (id=432): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x1, 0x180, 0x2000000000000004, 0x10, 0xed, 0x50, 0x7fffffffffffe, 0x2, 0x0, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0xa5, 0xbdb], 0x6000, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 14.723706074s ago: executing program 3 (id=436): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd9, 0x6, @broadcast}, 0x14) 14.108143938s ago: executing program 2 (id=438): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xff}]}, 0x34}}, 0x4000000) 13.225465488s ago: executing program 2 (id=439): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x24044804) syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb01020301090224000100"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) epoll_create1(0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$tun(0xffffffffffffff9c, 0x0, 0x202181, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) 12.969628544s ago: executing program 3 (id=441): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="8400000010000104000000000300000000000000", @ANYRES32=r1, @ANYBLOB="24200400858d0000640012800e00010069703665727370616e000000500002800500160002000000060018000100000014000700fc020000000000000040000000000000040012001400060000001000"/91], 0x84}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 12.629469862s ago: executing program 0 (id=443): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fgetxattr(r0, &(0x7f0000000700)=@known='system.posix_acl_access\x00', 0x0, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x2280) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000100)=""/112) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3b, &(0x7f0000000280)={@local, @multicast, @val={@void, {0x8100, 0x3, 0x0, 0x403}}, {@arp={0x806, @generic={0x320, 0x18, 0x6, 0xe, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, "2d14f7359eeb02c8ae79ec05fad8", @random="52c5b8611245", "353334f558a700"}}}}, 0x0) recvfrom(r1, &(0x7f00000000c0)=""/10, 0xa, 0x10000, 0x0, 0x0) 12.566226313s ago: executing program 3 (id=444): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(0x0, r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t', @ANYRESDEC=r4], 0xc) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1], 0x14) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) 12.28174905s ago: executing program 0 (id=445): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.398508883s ago: executing program 1 (id=446): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="020100070e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000517000000000a0000002efcb098950a0ec00000000000000000000000aa0000000000000000020029"], 0x70}}, 0x0) 9.686594889s ago: executing program 0 (id=447): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpriority(0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter6\x00') read$eventfd(r2, &(0x7f0000000000), 0x8) add_key(&(0x7f00000003c0)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffff000206000000000000", @ANYRES32=0x0, @ANYBLOB="03150000000000002400128009000100626f6e640000"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) close(r3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x600, 0x4) ioctl$TCXONC(r0, 0x540a, 0x0) 8.77203711s ago: executing program 3 (id=448): syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x2000, 0x8000001, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x4a0101, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_clone(0x80005280, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, 0x0, 0x8000) getsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000240), &(0x7f0000000340)=0x4) openat$nullb(0xffffff9c, 0x0, 0x200, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x83f, 0x9, 0xfffffffffffffffd, 0x100000000000a, 0x80000006, 0x400}, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBTYPE(r3, 0x4b48, &(0x7f0000000040)) 7.715439054s ago: executing program 1 (id=449): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000a312e5beefbcdf9800"/28], 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000002c0)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c744240204000000c744240600000000c4c11167600066baf80cb8dc759680ef66bafc0c66b8134266ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x76}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x805, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1, 0x5, 0x0) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000001100)={0x0, @in6={{0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xbd0}}, [0x6, 0x81, 0x9, 0xf82, 0x9d, 0x6, 0xffffffffffffb733, 0x8, 0x5, 0x9, 0x2, 0x2, 0x10001, 0x1, 0x4]}, &(0x7f0000001200)=0x100) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000001240)={r5, 0x8}, &(0x7f0000001280)=0x8) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default qser:syz 00000000000000004093\x00'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000080)="b48fbdeac4c39e5d4708562f752428dc623ffcdf47255191096330823ad848fb2a0d4e0594ca8599d066ef65fac23c91358e957780e81dea1a5e1e6e113026c096b18f9a38e7c94acd", 0x49, 0xfffffffffffffffe) 7.603457866s ago: executing program 2 (id=450): munmap$IORING_OFF_SQES(0x0, 0xc5059c) socket$inet6(0xa, 0x2, 0x8) mmap$IORING_OFF_SQ_RING(0x0, 0x600, 0x1000004, 0x40010, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x3, 0x84) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getpeername(r0, &(0x7f0000000540)=@ieee802154={0x24, @short}, &(0x7f00000005c0)=0x80) read(r0, &(0x7f0000000100)=""/41, 0x29) ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000140)=@assoc_value, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r4 = socket(0x2a, 0x2, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc048aeca, &(0x7f0000000180)={0x2, 0x0, [{0x303, 0x0, 0x96}, {0x2c, 0x0, 0x100000000}]}) r10 = accept4(r5, 0x0, 0x0, 0x0) recvfrom(r10, 0x0, 0x0, 0x1a3, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x400, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 7.517099929s ago: executing program 0 (id=451): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000007540), 0x2, 0x0) read(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="d80000001b000100000000000000000000000000000000000000000000000001fe88000000000000000000000000000100000000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000feff6dc9ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00080008000800010000000c00150000bc3500000000008ee66543a2b0ed54ddf8f2782573e9a44784c31d569957e4edaabbd9bf96d0530c71f413efb7646e65c311ee20f584b2dfd6d5923e60b89536aa1c6b045b8e1ebde2d3b88700"], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40c00, 0x0) signalfd4(r2, &(0x7f00000000c0)={[0x5]}, 0x8, 0x80000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000940)=ANY=[@ANYBLOB="fc000000190001000000000000000000200100000000000000000000000000006401010200000000000000000000000000000005000000030200200000000000", @ANYRES32=0x0, @ANYRESHEX=r2, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff00159775ae000000ffff0300bfffffffffffff7f00000000000001000000000002000000000f0000000a00000000000000000000000000080000000000e9ff0001000003000000004400050000000000000000000000000000000000000004d23c0000000a000000ffcc9c1569e134695f8fd9ffffff00000000000000000000000000000000000308004900"], 0xfc}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 5.840692107s ago: executing program 4 (id=452): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f00000032c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000003300)=ANY=[@ANYRESHEX=r1], 0x2394}, 0x1, 0x0, 0x0, 0x24040000}, 0x40008c0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x1, 0xc, 0x1, &(0x7f0000000040), 0x0, 0x1) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000100), 0x80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRES16=r4, @ANYRES8=r2, @ANYRES64, @ANYRES32=r0, @ANYRESDEC=r2, @ANYRESDEC, @ANYRES8, @ANYRESDEC=r2], 0xec}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) r6 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000040)={0xd0, 0x3, 0xfffffffe}) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r9 = add_key$keyring(&(0x7f0000001600), &(0x7f0000001640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r8, 0x1000000007c) r10 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000080)='*', 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r7, 0x36) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r11, 0xffffffffffffffff, 0x0) 5.70503381s ago: executing program 0 (id=453): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="1cc1110ec1e9abc89b005bec0000", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.685911221s ago: executing program 1 (id=454): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x34, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(r3, &(0x7f0000000380)=[{&(0x7f0000004bc0)=""/68, 0x44}, {&(0x7f0000000300)=""/50, 0x32}], 0x2, 0x8000, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r7, 0x407, 0x0) r8 = syz_open_dev$dri(0x0, 0xc14e, 0x20040) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01864c2, &(0x7f0000000180)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r8, 0xc00864c0, &(0x7f00000001c0)={r9}) vmsplice(r7, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r10, 0x0, 0x4000, 0x4000, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) 5.161873912s ago: executing program 3 (id=455): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000007540), 0x2, 0x0) read(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="d80000001b000100000000000000000000000000000000000000000000000001fe88000000000000000000000000000100000000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000feff6dc9ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00080008000800010000000c00150000bc3500000000008ee66543a2b0ed54ddf8f2782573e9a44784c31d569957e4edaabbd9bf96d0530c71f413efb7646e65c311ee20f584b2dfd6d5923e60b89536aa1c6b045b8e1ebde2d3b88700"], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40c00, 0x0) signalfd4(r2, &(0x7f00000000c0)={[0x5]}, 0x8, 0x80000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000940)=ANY=[@ANYBLOB="fc000000190001000000000000000000200100000000000000000000000000006401010200000000000000000000000000000005000000030200200000000000", @ANYRES32=0x0, @ANYRESHEX=r2, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff00159775ae000000ffff0300bfffffffffffff7f00000000000001000000000002000000000f0000000a00000000000000000000000000080000000000e9ff0001000003000000004400050000000000000000000000000000000000000004d23c0000000a000000ffcc9c1569e134695f8fd9ffffff00000000000000000000000000000000000308004900"], 0xfc}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x200, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 4.533460896s ago: executing program 1 (id=456): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd25, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x1}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x4040054) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000084) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f00000016c0)='./file0\x00', 0x63) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000c40)={0x1, 0x0, [{0x8f}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019300)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x0, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f0000000880)={0x27, 0x0, 0x0, 0x6, 0x0, 0x2, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) sendmmsg(r5, &(0x7f0000003740)=[{{&(0x7f0000000000)=@generic={0xf, "77a7f0b96ce573cec7dec6164fd645ca3fe9ac4eae9b5fab1e1401050102dd36914c54fbb4e8b53384415932a8f5fc2e80729baf8ac2fe77feabd073acc8036cc9e530bc4d45564aabe4843d830fd66c3207b90526ab791bc480f092e6a25157efd1782b582cf4cef7f72cde328938fa32ecabadded54433c6b1f13b4f1e"}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="5c97994dc3ce805c6684b14ea8f86d14f95ba8b301a63e8510c30797c328f9eaffd37967035f262a6e4811e53db9adf911738e689638c19c02d254a549faaaa017f4c55dbc5623ae7d19f870dff3aef84c0e6ca36dc75549f8086ba486b3411647a119305ec6c9bc686afe63be9fa38de2689d19202506104d7b3fd919f0f06b0b", 0x81}], 0x1}}], 0x1, 0x20000800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r6 = getpid() syz_pidfd_open(r6, 0x0) sched_setattr(r6, &(0x7f00000000c0)={0x38, 0x0, 0x40, 0x9, 0x6, 0x2, 0x6d, 0x100000001, 0x23, 0x20000000}, 0x0) 4.109156397s ago: executing program 0 (id=457): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000300)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsetxattr(r1, &(0x7f0000000200)=@known='user.incfs.id\x00', &(0x7f0000000280)='+.%+\x00', 0x5, 0x2) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000240)) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = dup2(r4, r4) prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r5, &(0x7f0000002780)={0x2020}, 0x2020) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000", 0x17}], 0x1}, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000340)='/dev/comedi0\x00', 0x2c83, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) 4.009887259s ago: executing program 4 (id=458): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=0xffffffffffffffff], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t', @ANYRESDEC=r3], 0xc) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1], 0x14) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) 2.873556345s ago: executing program 2 (id=459): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r4 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x5) poll(&(0x7f0000000280)=[{r3, 0x400}, {r3, 0x104}], 0x2, 0xffffffff) wait4(r4, 0x0, 0x8, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x800) 2.846895105s ago: executing program 1 (id=460): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000100)="c1dfb061cdee7a1f3fc8", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012cbd700002000000020020000800610054000000080061"], 0x24}}, 0x4000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100140000307e0000000200000008000300", @ANYRES32=r2], 0x28}, 0x1, 0x700}, 0x0) 2.836281775s ago: executing program 3 (id=461): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpriority(0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter6\x00') read$eventfd(r2, &(0x7f0000000000), 0x8) add_key(&(0x7f00000003c0)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffff000206000000000000", @ANYRES32=0x0, @ANYBLOB="03150000000000002400128009000100626f6e640000"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) close(r3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x600, 0x4) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 2.758146727s ago: executing program 4 (id=462): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 881.1851ms ago: executing program 2 (id=463): openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20c03, 0x0) r0 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB, @ANYRES64=r2]) 0s ago: executing program 1 (id=464): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB], 0x64}}, 0x4000000) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=ANY=[@ANYBLOB="20000000150a0102cf"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "000100", 0x48, 0x2f, 0x1, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, [0x9, 0x9]}, {}, {0x8, 0x88be, 0xfffffff9, {{0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x2, {0xfffcfff8, 0xfffe}}}}}}}}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd706b00dbdf255c00000008000300", @ANYRES32=r6, @ANYBLOB='\b\x00k\x00\n'], 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.92' (ED25519) to the list of known hosts. [ 82.268785][ T4259] cgroup: Unknown subsys name 'net' [ 82.372174][ T4259] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.930704][ T4259] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 85.944276][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.952871][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.962029][ T4289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.971967][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.979737][ T4289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.987639][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.995824][ T4289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.996654][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.007782][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.013711][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.017570][ T4289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.026966][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.035044][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.042856][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.049547][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.055338][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.062795][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.068707][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.074028][ T4289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.084821][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.088702][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.095915][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.102666][ T4289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.115527][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.116496][ T4289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.123341][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.130967][ T4289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.139632][ T4286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.183873][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 86.205657][ T4286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.608065][ T4287] chnl_net:caif_netlink_parms(): no params data found [ 86.701772][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 86.757589][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 86.824641][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.832734][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.841560][ T4287] device bridge_slave_0 entered promiscuous mode [ 86.880318][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.887767][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.896718][ T4287] device bridge_slave_1 entered promiscuous mode [ 86.909227][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 86.978849][ T4287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.997188][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.005236][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.015713][ T4273] device bridge_slave_0 entered promiscuous mode [ 87.023866][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 87.047642][ T4287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.061267][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.068589][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.077150][ T4273] device bridge_slave_1 entered promiscuous mode [ 87.155877][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.163469][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.171472][ T4280] device bridge_slave_0 entered promiscuous mode [ 87.182082][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.200291][ T4287] team0: Port device team_slave_0 added [ 87.214062][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.221216][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.230222][ T4280] device bridge_slave_1 entered promiscuous mode [ 87.239463][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.257800][ T4287] team0: Port device team_slave_1 added [ 87.293723][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.300829][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.313160][ T4271] device bridge_slave_0 entered promiscuous mode [ 87.343565][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.370468][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.377879][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.386520][ T4271] device bridge_slave_1 entered promiscuous mode [ 87.410499][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.423784][ T4273] team0: Port device team_slave_0 added [ 87.430211][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.438062][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.447727][ T4274] device bridge_slave_0 entered promiscuous mode [ 87.468528][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.475825][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.502112][ T4287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.525142][ T4273] team0: Port device team_slave_1 added [ 87.538518][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.546454][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.554977][ T4274] device bridge_slave_1 entered promiscuous mode [ 87.564116][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.585908][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.593210][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.619445][ T4287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.633652][ T4280] team0: Port device team_slave_0 added [ 87.655949][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.680187][ T4280] team0: Port device team_slave_1 added [ 87.767690][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.781973][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.814273][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.832014][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.879386][ T4287] device hsr_slave_0 entered promiscuous mode [ 87.892985][ T4287] device hsr_slave_1 entered promiscuous mode [ 87.901301][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.915341][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.947811][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.961507][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.997396][ T4271] team0: Port device team_slave_0 added [ 88.005465][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.022270][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.072412][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.094203][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.101216][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.162288][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.209205][ T4271] team0: Port device team_slave_1 added [ 88.223033][ T4291] Bluetooth: hci1: command 0x0409 tx timeout [ 88.232612][ T4291] Bluetooth: hci2: command 0x0409 tx timeout [ 88.302372][ T4291] Bluetooth: hci4: command 0x0409 tx timeout [ 88.308713][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 88.315433][ T4291] Bluetooth: hci3: command 0x0409 tx timeout [ 88.336365][ T4274] team0: Port device team_slave_0 added [ 88.349950][ T4273] device hsr_slave_0 entered promiscuous mode [ 88.357385][ T4273] device hsr_slave_1 entered promiscuous mode [ 88.364877][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.373145][ T4273] Cannot create hsr debugfs directory [ 88.404735][ T4280] device hsr_slave_0 entered promiscuous mode [ 88.411760][ T4280] device hsr_slave_1 entered promiscuous mode [ 88.418953][ T4280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.427011][ T4280] Cannot create hsr debugfs directory [ 88.435496][ T4274] team0: Port device team_slave_1 added [ 88.451403][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.459410][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.489250][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.525597][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.532747][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.562330][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.574341][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.581355][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.607540][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.648794][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.656032][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.682284][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.751398][ T4271] device hsr_slave_0 entered promiscuous mode [ 88.758338][ T4271] device hsr_slave_1 entered promiscuous mode [ 88.765508][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.773281][ T4271] Cannot create hsr debugfs directory [ 88.887489][ T4274] device hsr_slave_0 entered promiscuous mode [ 88.894414][ T4274] device hsr_slave_1 entered promiscuous mode [ 88.901402][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.909727][ T4274] Cannot create hsr debugfs directory [ 89.115985][ T4287] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.148686][ T4287] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.177390][ T4287] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.196957][ T4287] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.254780][ T4280] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.288175][ T4280] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.313764][ T4280] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.335109][ T4280] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.365738][ T4273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.380481][ T4273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.390880][ T4273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.405389][ T4273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.494702][ T4287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.539303][ T4271] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.570891][ T4271] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.582869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.595885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.616623][ T4287] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.629511][ T4271] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.651999][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.666093][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.675956][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.683412][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.697978][ T4271] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.718634][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.764929][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.778355][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.790338][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.797656][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.807783][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.827070][ T4274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.845018][ T4274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.871452][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.880248][ T4274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.891797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.904707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.914738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.927478][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.942351][ T4274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.961188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.990500][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.000179][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.010988][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.024916][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.035833][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.044389][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.052994][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.085642][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.105557][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.115354][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.129658][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.138878][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.149708][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.159139][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.168464][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.175853][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.184680][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.193844][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.202562][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.209961][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.225424][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.265362][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.277346][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.286354][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.295583][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.302782][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.310320][ T4289] Bluetooth: hci2: command 0x041b tx timeout [ 90.314036][ T4291] Bluetooth: hci1: command 0x041b tx timeout [ 90.327639][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.338617][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.348056][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.368220][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.377504][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.387111][ T4291] Bluetooth: hci3: command 0x041b tx timeout [ 90.387139][ T4289] Bluetooth: hci0: command 0x041b tx timeout [ 90.393378][ T4291] Bluetooth: hci4: command 0x041b tx timeout [ 90.415793][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.424991][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.437835][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.447086][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.454296][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.463384][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.472751][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.481890][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.533287][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.549478][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.560415][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.574650][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.596566][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.609855][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.621574][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.638333][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.647439][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.663264][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.686990][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.706215][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.718685][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.741081][ T4280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.761144][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.783067][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.799000][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.827435][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.853807][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.863429][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.889778][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.937147][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.964643][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.001112][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.033820][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.050871][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.070061][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.077286][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.113020][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.147327][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.159223][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.166480][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.180895][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.195866][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.223498][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.245414][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.255610][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.262815][ T4327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.271579][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.281587][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.291159][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.298568][ T4327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.314418][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.341629][ T4287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.363812][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.394043][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.401630][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.429367][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.447323][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.483753][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.519508][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.539064][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.604239][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.632694][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.643039][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.663410][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.674581][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.684205][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.695612][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.708179][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.729169][ T4271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.739744][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.764302][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.785445][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.800156][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.814101][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.832909][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.845232][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.857543][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.869191][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.881507][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.953681][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.966110][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.974128][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.985224][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.030073][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.065208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.073643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.110878][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.138298][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.165895][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.193465][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.259533][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.270880][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.300363][ T4273] device veth0_vlan entered promiscuous mode [ 92.313814][ T4280] device veth0_vlan entered promiscuous mode [ 92.326796][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.336152][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.355095][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.373423][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.382450][ T4289] Bluetooth: hci2: command 0x040f tx timeout [ 92.388521][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 92.405080][ T4280] device veth1_vlan entered promiscuous mode [ 92.426366][ T4273] device veth1_vlan entered promiscuous mode [ 92.461218][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.468916][ T4289] Bluetooth: hci4: command 0x040f tx timeout [ 92.468954][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 92.473465][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 92.507233][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.536417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.549873][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.615575][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.628534][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.638180][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.649345][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.678779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.696288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.714332][ T4273] device veth0_macvtap entered promiscuous mode [ 92.735747][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.744917][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.754433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.784965][ T953] cfg80211: failed to load regulatory.db [ 92.804103][ T4280] device veth0_macvtap entered promiscuous mode [ 92.816103][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.841939][ T4287] device veth0_vlan entered promiscuous mode [ 92.855736][ T4273] device veth1_macvtap entered promiscuous mode [ 92.878904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.890236][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.899704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.912059][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.936389][ T4287] device veth1_vlan entered promiscuous mode [ 92.956547][ T4280] device veth1_macvtap entered promiscuous mode [ 92.981671][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.991052][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 93.003739][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.011295][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.029076][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.043874][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.066857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.076642][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.087350][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.095236][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.104228][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.113594][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.126360][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.135945][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.145802][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.155058][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.173810][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.188522][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.199479][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.215353][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.231524][ T4287] device veth0_macvtap entered promiscuous mode [ 93.257959][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.269610][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.283051][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.291835][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.304704][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.315840][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.327503][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.337805][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.348826][ T4287] device veth1_macvtap entered promiscuous mode [ 93.361737][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.371015][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.385887][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.394790][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.407802][ T4280] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.417297][ T4280] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.426745][ T4280] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.436065][ T4280] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.507253][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.527500][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.539734][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.553818][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.564035][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.574872][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.587525][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.611072][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.626631][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.635844][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.645126][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.682930][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.693563][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.711424][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.724471][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.735989][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.772570][ T4274] device veth0_vlan entered promiscuous mode [ 93.788622][ T4287] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.798076][ T4287] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.807058][ T4287] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.817411][ T4287] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.829661][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.843868][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.853831][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.862668][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.871453][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.880567][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.897505][ T4274] device veth1_vlan entered promiscuous mode [ 93.945717][ T4335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.962862][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.971457][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.980264][ T4335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.021525][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.031065][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.043289][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.054733][ T4271] device veth0_vlan entered promiscuous mode [ 94.082144][ T4274] device veth0_macvtap entered promiscuous mode [ 94.099908][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.109951][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.151682][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.168212][ T4271] device veth1_vlan entered promiscuous mode [ 94.204102][ T4274] device veth1_macvtap entered promiscuous mode [ 94.225549][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.235472][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.243579][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.253512][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.282655][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.295684][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 94.304170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.318686][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.327368][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.356964][ T4271] device veth0_macvtap entered promiscuous mode [ 94.393800][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.412539][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.429380][ T4271] device veth1_macvtap entered promiscuous mode [ 94.440307][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.453057][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.463254][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 94.463294][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 94.476674][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.487530][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.497643][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.508679][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.523469][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.543254][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 94.548216][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 94.549353][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 94.582680][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.591129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.622834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.638041][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.656252][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.679699][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.692436][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.708565][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.722233][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.739447][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.750015][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.761308][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.773920][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.800166][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.820873][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.846486][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.888091][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.908230][ T4274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.920440][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.950924][ T4274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.967060][ T4274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.976260][ T4274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.077451][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.088490][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.099920][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.111373][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.152695][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.168269][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.180871][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.196730][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.219107][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.245653][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.389497][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.433566][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.558067][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.689075][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.702413][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.710687][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.721564][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.732240][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.765974][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.807601][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.818596][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.838375][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.851752][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.870328][ T4271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.887711][ T4271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.898668][ T4271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.908316][ T4271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.930473][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.939080][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.954128][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.916610][ T4376] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.924994][ T4376] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.691864][ T4380] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.699337][ T4380] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.875258][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.903247][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.924497][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.950126][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.965060][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.991356][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.027785][ T4386] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8'. [ 98.051576][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.069778][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.086837][ T4388] device syzkaller0 entered promiscuous mode [ 98.109144][ T4335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.110502][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.148886][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.182215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 99.282230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 99.292225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 99.302222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 99.312228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 99.322223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 99.332225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 99.342225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 99.352226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 99.362234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 100.482457][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.613880][ T4417] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.861636][ T4424] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 102.053778][ T4424] device bond1 entered promiscuous mode [ 102.060797][ T4424] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.605756][ T4438] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.613219][ T4438] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.953037][ T4445] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 112.232329][ T4445] usb 1-1: Using ep0 maxpacket: 16 [ 112.261971][ T4445] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.369584][ T4445] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.397827][ T4445] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 112.460386][ T4445] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 112.490044][ T4445] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 112.520483][ T4445] usb 1-1: Manufacturer: syz [ 112.527618][ T22] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.581893][ T4445] usb 1-1: config 0 descriptor?? [ 112.787360][ T4512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.35'. [ 112.852727][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.536391][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.546355][ T22] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 113.555506][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.573998][ T22] usb 4-1: config 0 descriptor?? [ 114.153618][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 114.352395][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 114.400318][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.455355][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.467411][ T27] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 114.477367][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.505078][ T27] usb 2-1: config 0 descriptor?? [ 114.853128][ T4443] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.927291][ T27] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 114.942395][ T27] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 114.962051][ T27] ft260 0003:0403:6030.0002: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 115.048922][ T22] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input5 [ 115.050930][ T4443] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.118227][ T4443] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.128776][ T27] ft260 0003:0403:6030.0002: chip code: 0000 0000 [ 115.165994][ T22] uclogic 0003:256C:006D.0001: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 115.188909][ T4443] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 115.217049][ T4443] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.274166][ T4443] usb 5-1: config 0 descriptor?? [ 115.295629][ T22] usb 4-1: USB disconnect, device number 2 [ 115.336414][ T4323] usb 1-1: USB disconnect, device number 2 [ 115.668237][ T27] ft260 0003:0403:6030.0002: failed to retrieve status: -32 [ 117.010613][ T4443] hid-led: probe of 0003:27B8:01ED.0003 failed with error -32 [ 117.307290][ T4443] usb 5-1: USB disconnect, device number 2 [ 117.529664][ T4442] usb 2-1: USB disconnect, device number 2 [ 118.611131][ T4539] fido_id[4539]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 118.815214][ T4533] fido_id[4533]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 121.381933][ T4568] vxcan0: tx address claim with dest, not broadcast [ 124.496066][ T4317] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 124.692649][ T4317] usb 1-1: Using ep0 maxpacket: 32 [ 125.481918][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.504754][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.514878][ T4317] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 125.541857][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.562042][ T4317] usb 1-1: config 0 descriptor?? [ 125.631250][ T4603] netlink: 20 bytes leftover after parsing attributes in process `syz.4.46'. [ 125.981322][ T4317] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 126.009874][ T4317] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 126.030559][ T4317] ft260 0003:0403:6030.0004: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 126.180173][ T4317] ft260 0003:0403:6030.0004: chip code: 0000 0000 [ 126.413673][ T4442] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 126.582912][ T4317] ft260 0003:0403:6030.0004: failed to retrieve status: -32 [ 128.898121][ T4442] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.999796][ T4442] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.018047][ T4442] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 129.030611][ T4442] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.044504][ T4442] usb 5-1: config 0 descriptor?? [ 129.164949][ T4442] usbhid 5-1:0.0: can't add hid device: -71 [ 129.182371][ T4445] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 129.191477][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 129.283577][ T4442] usbhid: probe of 5-1:0.0 failed with error -71 [ 129.334341][ T4442] usb 5-1: USB disconnect, device number 3 [ 129.344701][ T4639] netlink: 48 bytes leftover after parsing attributes in process `syz.4.59'. [ 130.342745][ T4644] device syzkaller0 entered promiscuous mode [ 130.632652][ T4442] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 130.716933][ T4447] usb 1-1: USB disconnect, device number 3 [ 130.855808][ T4442] usb 5-1: config 0 interface 0 altsetting 95 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 131.081280][ T4442] usb 5-1: config 0 interface 0 altsetting 95 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.331896][ T4645] fido_id[4645]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 131.488595][ T4442] usb 5-1: config 0 interface 0 has no altsetting 0 [ 131.647195][ T4442] usb 5-1: New USB device found, idVendor=1b96, idProduct=0014, bcdDevice= 0.00 [ 131.859549][ T4442] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.030425][ T4442] usb 5-1: config 0 descriptor?? [ 132.085623][ T4639] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 132.764182][ T4652] netlink: 20 bytes leftover after parsing attributes in process `syz.3.64'. [ 132.813680][ T4442] ntrig 0003:1B96:0014.0005: unknown main item tag 0x4 [ 132.828591][ T4442] ntrig 0003:1B96:0014.0005: item fetching failed at offset 7/40 [ 132.906327][ T4442] ntrig 0003:1B96:0014.0005: parse failed [ 132.927860][ T4442] ntrig: probe of 0003:1B96:0014.0005 failed with error -22 [ 133.001121][ T22] usb 5-1: USB disconnect, device number 4 [ 133.156907][ T4676] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20005 [ 133.398070][ T4674] vxcan0: tx address claim with dest, not broadcast [ 135.422574][ T4445] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 137.074624][ T4445] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.160899][ T4445] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.170899][ T4445] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 137.180083][ T4445] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.190309][ T4445] usb 5-1: config 0 descriptor?? [ 137.495805][ T4703] syz.2.62 uses obsolete (PF_INET,SOCK_PACKET) [ 138.297528][ T4445] hid-led: probe of 0003:27B8:01ED.0006 failed with error -32 [ 138.720335][ T4445] usb 5-1: USB disconnect, device number 5 [ 138.824039][ T4717] netlink: 20 bytes leftover after parsing attributes in process `syz.3.77'. [ 138.875691][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.882877][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.218983][ T4717] device bond1 entered promiscuous mode [ 139.228861][ T4717] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.442347][ T22] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 140.701207][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 141.071898][ T22] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.185448][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 141.344775][ T22] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 141.432004][ T22] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.562404][ T4743] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20005 [ 141.606999][ T22] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 141.632526][ T22] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 141.641462][ T22] usb 3-1: Manufacturer: syz [ 141.704306][ T22] usb 3-1: config 0 descriptor?? [ 142.186027][ T4746] vxcan0: tx address claim with dest, not broadcast [ 143.377960][ T4770] device syzkaller0 entered promiscuous mode [ 145.694868][ T4447] usb 3-1: USB disconnect, device number 2 [ 146.147132][ T26] audit: type=1804 audit(1784665446.683:2): pid=4795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.90" name="bus" dev="ramfs" ino=35118 res=1 errno=0 [ 146.777688][ T26] audit: type=1804 audit(1784665446.703:3): pid=4795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.90" name="bus" dev="ramfs" ino=35118 res=1 errno=0 [ 148.652644][ T4814] vxcan0: tx address claim with dest, not broadcast [ 151.802363][ T4447] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 151.929782][ T4843] Cannot find set identified by id 0 to match [ 151.970928][ T4846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.103'. [ 151.988380][ T4846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.103'. [ 152.058870][ T4447] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.074478][ T26] audit: type=1804 audit(1784665452.613:4): pid=4847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.102" name="bus" dev="ramfs" ino=36027 res=1 errno=0 [ 152.094374][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.153722][ T4447] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.458719][ T4447] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 155.570898][ T26] audit: type=1804 audit(1784665452.643:5): pid=4847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.102" name="bus" dev="ramfs" ino=36027 res=1 errno=0 [ 155.889158][ T4447] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.064730][ T4447] usb 2-1: config 0 descriptor?? [ 156.129502][ T4447] usb 2-1: can't set config #0, error -71 [ 156.173593][ T4447] usb 2-1: USB disconnect, device number 3 [ 158.413967][ T4882] vxcan0: tx address claim with dest, not broadcast [ 161.442678][ T4859] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.450279][ T4859] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.149293][ T4910] Zero length message leads to an empty skb [ 162.715518][ T4911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.115'. [ 164.350349][ T4911] netlink: 24 bytes leftover after parsing attributes in process `syz.4.115'. [ 169.383252][ T4949] trusted_key: encrypted_key: master key parameter 'c0‚:ØHû*N”Ê…™ÐfïeúÂ<‘5Ž•w€èê^n0&À–±š8çÉJÍ' is invalid [ 170.010611][ T4950] vxcan0: tx address claim with dest, not broadcast [ 170.192377][ T4955] block device autoloading is deprecated and will be removed. [ 171.033671][ T4961] device xfrm0 entered promiscuous mode [ 171.192423][ T4968] netlink: 48 bytes leftover after parsing attributes in process `syz.4.129'. [ 173.531708][ T4964] comedi comedi1: reset error (fatal) [ 173.790044][ T2169] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 174.013370][ T2169] usb 5-1: config 0 interface 0 altsetting 95 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 174.041302][ T2169] usb 5-1: config 0 interface 0 altsetting 95 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.573560][ T2169] usb 5-1: config 0 interface 0 has no altsetting 0 [ 174.581288][ T2169] usb 5-1: New USB device found, idVendor=1b96, idProduct=0014, bcdDevice= 0.00 [ 174.637947][ T2169] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.862665][ T2169] usb 5-1: config 0 descriptor?? [ 175.077354][ T2169] usb 5-1: can't set config #0, error -71 [ 175.132470][ T2169] usb 5-1: USB disconnect, device number 6 [ 175.964555][ T4994] device syzkaller0 entered promiscuous mode [ 176.522438][ T4445] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 176.712337][ T4445] usb 4-1: Using ep0 maxpacket: 16 [ 176.719474][ T4445] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.779516][ T4445] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 176.852263][ T4445] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 176.861999][ T4445] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 176.923714][ T5006] vxcan0: tx address claim with dest, not broadcast [ 176.972267][ T4445] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.013746][ T4445] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 177.037830][ T5009] netlink: 260 bytes leftover after parsing attributes in process `syz.2.141'. [ 177.048379][ T4445] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 177.058532][ T5009] netlink: 104 bytes leftover after parsing attributes in process `syz.2.141'. [ 177.072504][ T5009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'. [ 177.086108][ T4445] usb 4-1: Manufacturer: syz [ 177.105105][ T4445] usb 4-1: config 0 descriptor?? [ 178.259550][ T5017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.135'. [ 181.757255][ T4445] rc_core: IR keymap rc-hauppauge not found [ 181.758026][ T4322] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 181.771455][ T4445] Registered IR keymap rc-empty [ 181.828780][ T4445] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 181.962415][ T4322] usb 5-1: Using ep0 maxpacket: 8 [ 181.962802][ T4445] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 181.976606][ T4322] usb 5-1: config 0 interface 0 has no altsetting 0 [ 181.984410][ T4322] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 181.993966][ T4322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.061756][ T4322] usb 5-1: config 0 descriptor?? [ 182.167660][ T4445] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 182.394758][ T4445] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 182.492806][ T4445] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 182.552474][ T4445] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 182.582484][ T4445] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 182.642341][ T4445] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 182.682309][ T4445] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 182.701462][ T4322] lg-g15 0003:046D:C225.0007: unknown main item tag 0x1 [ 182.712468][ T4445] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 182.727187][ T4322] lg-g15 0003:046D:C225.0007: unknown main item tag 0x6 [ 182.746854][ T4322] lg-g15 0003:046D:C225.0007: unknown main item tag 0x0 [ 182.762346][ T4445] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 182.773867][ T4322] lg-g15 0003:046D:C225.0007: unknown main item tag 0x0 [ 182.782008][ T5052] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 182.792622][ T4445] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 182.800023][ T4322] lg-g15 0003:046D:C225.0007: unknown main item tag 0x0 [ 182.815098][ T4322] lg-g15 0003:046D:C225.0007: unknown main item tag 0x0 [ 182.832522][ T4445] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 182.833023][ T4322] lg-g15 0003:046D:C225.0007: unknown main item tag 0x0 [ 182.862402][ T4445] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 182.880046][ T4322] lg-g15 0003:046D:C225.0007: unknown main item tag 0x0 [ 182.896661][ T4445] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 182.909541][ T4322] lg-g15 0003:046D:C225.0007: unknown main item tag 0x0 [ 182.922421][ T4445] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 182.933523][ T4322] lg-g15 0003:046D:C225.0007: unknown main item tag 0x0 [ 182.949498][ T4322] lg-g15 0003:046D:C225.0007: unknown main item tag 0x0 [ 182.966941][ T4445] usb 4-1: USB disconnect, device number 3 [ 182.973696][ T4322] lg-g15 0003:046D:C225.0007: unknown main item tag 0x0 [ 182.993603][ T4322] lg-g15 0003:046D:C225.0007: unknown main item tag 0x0 [ 183.000675][ T4322] lg-g15 0003:046D:C225.0007: unknown main item tag 0x0 [ 183.046565][ T4322] lg-g15 0003:046D:C225.0007: unknown main item tag 0x0 [ 183.080256][ T4322] lg-g15 0003:046D:C225.0007: hidraw0: USB HID v0.81 Device [HID 046d:c225] on usb-dummy_hcd.4-1/input0 [ 183.199703][ T4322] usb 5-1: USB disconnect, device number 7 [ 183.448572][ T5057] fido_id[5057]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 185.829257][ T5076] netlink: 24 bytes leftover after parsing attributes in process `syz.4.156'. [ 188.660339][ T4319] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 188.922349][ T4319] usb 4-1: Using ep0 maxpacket: 16 [ 188.929522][ T4319] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.956703][ T4319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.998541][ T4319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 189.048538][ T4319] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 189.130671][ T4319] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.179013][ T4319] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 189.218892][ T4319] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 189.265438][ T4319] usb 4-1: Manufacturer: syz [ 189.283849][ T5099] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 189.303380][ T4319] usb 4-1: config 0 descriptor?? [ 189.692533][ T4445] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 190.645184][ T4445] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.895841][ T4445] usb 1-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 190.905672][ T4445] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.929395][ T4445] usb 1-1: config 0 descriptor?? [ 192.744730][ T5122] device wlan0 entered promiscuous mode [ 192.890944][ T4445] usb 1-1: string descriptor 0 read error: -71 [ 192.917566][ T4445] cypress_m8 1-1:0.0: DeLorme Earthmate USB converter detected [ 193.364507][ T4445] earthmate ttyUSB0: required endpoint is missing [ 193.416582][ T4445] usb 1-1: USB disconnect, device number 4 [ 193.444227][ T4445] cypress_m8 1-1:0.0: device disconnected [ 193.472424][ T4319] rc_core: IR keymap rc-hauppauge not found [ 193.481943][ T4319] Registered IR keymap rc-empty [ 193.497504][ T4319] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 193.542347][ T4319] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 193.603184][ T4319] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 193.681762][ T4319] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 193.760425][ T4319] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 195.313607][ T4319] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 195.362354][ T4319] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 195.422440][ T4319] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 195.462624][ T4319] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 195.544888][ T4319] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 195.592615][ T4319] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 195.632950][ T4319] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 195.662669][ T4319] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 195.692684][ T4319] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 195.733811][ T4319] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 195.733935][ T4319] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 195.752476][ T4319] usb 4-1: USB disconnect, device number 4 [ 196.267883][ T5141] syz.1.171 (5141) used greatest stack depth: 16944 bytes left [ 197.382312][ T4447] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 197.982331][ T4447] usb 1-1: Using ep0 maxpacket: 16 [ 197.989802][ T4447] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.030768][ T4447] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 198.077596][ T4447] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 198.097817][ T4447] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 198.120827][ T4447] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.161756][ T4447] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 198.190097][ T4447] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 198.207564][ T4447] usb 1-1: Manufacturer: syz [ 198.223024][ T4447] usb 1-1: config 0 descriptor?? [ 200.342794][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.349262][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.244840][ T5211] device ip6gre1 entered promiscuous mode [ 202.283405][ T5217] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.386990][ T4317] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.396331][ T4317] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.518862][ T4447] rc_core: IR keymap rc-hauppauge not found [ 202.610673][ T4447] Registered IR keymap rc-empty [ 202.695710][ T4447] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 202.823779][ T4445] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.863180][ T4447] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 202.926046][ T4447] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 202.988024][ T4447] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 203.061957][ T4447] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 203.082516][ T4445] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 203.102288][ T4447] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 203.142432][ T4447] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 203.213317][ T4447] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 203.312348][ T4447] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 203.342552][ T4445] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 203.371687][ T4447] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 203.412539][ T4447] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 203.422055][ T5230] device syzkaller0 entered promiscuous mode [ 203.442542][ T4447] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 203.482413][ T4447] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 203.522576][ T4447] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 203.553873][ T4447] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 203.561990][ T4447] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 203.688860][ T4447] usb 1-1: USB disconnect, device number 5 [ 206.366177][ T4319] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 206.572376][ T4319] usb 4-1: Using ep0 maxpacket: 16 [ 206.580123][ T4319] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.611613][ T4319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 206.626467][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.634218][ T4319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 206.660097][ T4319] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 206.677160][ T4319] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.719653][ T4319] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 206.735092][ T4319] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 206.746118][ T4319] usb 4-1: Manufacturer: syz [ 206.758036][ T4319] usb 4-1: config 0 descriptor?? [ 207.128321][ T4319] rc_core: IR keymap rc-hauppauge not found [ 207.134761][ T4319] Registered IR keymap rc-empty [ 207.139746][ T4319] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 207.191221][ T4319] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 207.235072][ T4319] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 207.257236][ T4319] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 207.296782][ T4319] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 207.336848][ T4319] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 207.375849][ T4319] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 207.412582][ T4319] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 207.446503][ T4319] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 207.485533][ T4319] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 207.525952][ T4319] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 207.570683][ T4319] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 207.617016][ T4319] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 207.656898][ T4319] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 207.699592][ T4319] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 207.709086][ T4319] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 207.759537][ T4443] usb 4-1: USB disconnect, device number 5 [ 208.182427][ T5253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.199'. [ 208.202478][ T5254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.199'. [ 208.484675][ T5263] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 209.653025][ T4443] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 209.872563][ T4443] usb 4-1: Using ep0 maxpacket: 32 [ 209.886119][ T4443] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.961896][ T4443] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 210.012371][ T4443] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 210.058444][ T4443] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.109249][ T4443] usb 4-1: Product: syz [ 210.134647][ T4443] usb 4-1: Manufacturer: syz [ 210.146962][ T4443] usb 4-1: SerialNumber: syz [ 210.193889][ T4443] usb 4-1: config 0 descriptor?? [ 210.549077][ T4362] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 210.650611][ T4443] usb 4-1: USB disconnect, device number 6 [ 212.692260][ T4362] usb 1-1: Using ep0 maxpacket: 32 [ 214.805650][ T5297] tipc: Started in network mode [ 214.811239][ T5297] tipc: Node identity ac14140f, cluster identity 4711 [ 214.826164][ T5297] tipc: New replicast peer: 255.255.255.255 [ 214.839551][ T5297] tipc: Enabled bearer , priority 10 [ 215.022807][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 215.133099][ T4362] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 215.140850][ T4362] usb 1-1: can't read configurations, error -71 [ 215.401412][ T5300] device syzkaller0 entered promiscuous mode [ 215.616266][ T5301] sg_write: data in/out 1349/10 bytes for SCSI command 0x2f-- guessing data in; [ 215.616266][ T5301] program syz.0.213 not setting count and/or reply_len properly [ 217.612505][ T4362] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 217.840803][ T4362] usb 4-1: Using ep0 maxpacket: 16 [ 217.848079][ T4362] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.864174][ T4362] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.875714][ T4362] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 217.931349][ T4362] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 217.983483][ T4362] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.032879][ T4362] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 218.071394][ T4362] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 218.109404][ T4362] usb 4-1: Manufacturer: syz [ 218.137734][ T4362] usb 4-1: config 0 descriptor?? [ 218.612469][ T4362] rc_core: IR keymap rc-hauppauge not found [ 218.620145][ T4362] Registered IR keymap rc-empty [ 218.633585][ T4362] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.663755][ T4362] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.718332][ T4362] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 218.733605][ T4362] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input10 [ 218.749399][ T4362] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.800808][ T4362] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.846816][ T4362] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.892431][ T4362] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.932414][ T4362] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.972340][ T4362] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 219.013435][ T4362] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 219.043511][ T4362] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 219.076773][ T4362] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 219.122375][ T4362] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 219.178813][ T4362] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 219.188220][ T4362] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 219.205506][ T4362] usb 4-1: USB disconnect, device number 7 [ 220.281781][ T4443] tipc: Node number set to 2886997007 [ 220.312629][ T5323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.218'. [ 220.552687][ T5337] netlink: 48 bytes leftover after parsing attributes in process `syz.0.220'. [ 221.732778][ T2169] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 221.817202][ T4464] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 221.940996][ T2169] usb 1-1: config 0 interface 0 altsetting 95 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 221.971120][ T2169] usb 1-1: config 0 interface 0 altsetting 95 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.504486][ T5355] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 223.582227][ T4464] usb 2-1: Using ep0 maxpacket: 32 [ 223.622237][ T2169] usb 1-1: config 0 interface 0 has no altsetting 0 [ 223.629013][ T2169] usb 1-1: New USB device found, idVendor=1b96, idProduct=0014, bcdDevice= 0.00 [ 223.678416][ T4464] usb 2-1: device descriptor read/all, error -71 [ 223.695441][ T2169] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.744662][ T2169] usb 1-1: config 0 descriptor?? [ 223.872818][ T2169] usb 1-1: can't set config #0, error -71 [ 223.937222][ T5362] trusted_key: encrypted_key: master key parameter 'c0‚:ØHû*N”Ê…™ÐfïeúÂ<‘5Ž•w€èê^n0&À–±š8çÉJÍ' is invalid [ 223.950285][ T2169] usb 1-1: USB disconnect, device number 8 [ 228.731235][ T5379] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.738862][ T5379] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.902446][ T4446] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 228.938690][ T5391] device syzkaller0 entered promiscuous mode [ 228.957844][ T5404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.237'. [ 228.976057][ T5407] netlink: 16 bytes leftover after parsing attributes in process `syz.4.237'. [ 229.073876][ T5413] trusted_key: encrypted_key: master key parameter 'c0‚:ØHû*N”Ê…™ÐfïeúÂ<‘5Ž•w€èê^n0&À–±š8çÉJÍ' is invalid [ 229.092069][ T5412] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 229.132274][ T4446] usb 4-1: Using ep0 maxpacket: 32 [ 229.140415][ T4446] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.181577][ T4446] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 229.233710][ T4446] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 229.269647][ T4446] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.293906][ T4446] usb 4-1: Product: syz [ 229.298333][ T4446] usb 4-1: Manufacturer: syz [ 229.311932][ T4446] usb 4-1: SerialNumber: syz [ 229.500734][ T4446] usb 4-1: config 0 descriptor?? [ 231.024313][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 234.273700][ T4464] usb 4-1: USB disconnect, device number 8 [ 238.461466][ T5441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.248'. [ 238.522257][ T5453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 238.549137][ T5456] netlink: 16 bytes leftover after parsing attributes in process `syz.2.252'. [ 242.550238][ T5500] device syzkaller0 entered promiscuous mode [ 242.617849][ T5494] netlink: 'syz.1.261': attribute type 10 has an invalid length. [ 243.270456][ T5494] team0: Port device netdevsim0 added [ 243.432280][ T4442] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 243.778292][ T4442] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 243.804921][ T4442] usb 3-1: config 0 has no interface number 0 [ 243.871028][ T4442] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 243.907174][ T4442] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 243.937138][ T4442] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.961978][ T4442] usb 3-1: Product: syz [ 243.987597][ T4442] usb 3-1: Manufacturer: syz [ 244.009708][ T4442] usb 3-1: SerialNumber: syz [ 244.038954][ T4442] usb 3-1: config 0 descriptor?? [ 244.155129][ T4442] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 244.283365][ T4319] usb 3-1: USB disconnect, device number 3 [ 244.308142][ T4319] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 249.750060][ T5503] netlink: 24 bytes leftover after parsing attributes in process `syz.0.267'. [ 249.777227][ T5510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.268'. [ 249.808289][ T5511] netlink: 16 bytes leftover after parsing attributes in process `syz.3.268'. [ 253.063701][ T5571] netlink: 24 bytes leftover after parsing attributes in process `syz.2.284'. [ 253.242149][ C0] sched: RT throttling activated [ 253.262498][ T4322] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 253.631447][ T4322] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 253.670414][ T4322] usb 2-1: config 0 has no interface number 0 [ 253.692277][ T4322] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 253.816561][ T4322] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 253.891954][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.901414][ T4322] usb 2-1: Product: syz [ 253.919255][ T4322] usb 2-1: Manufacturer: syz [ 253.939638][ T4322] usb 2-1: SerialNumber: syz [ 253.962745][ T4322] usb 2-1: config 0 descriptor?? [ 256.176319][ T4322] usb 2-1: can't set config #0, error -71 [ 256.214775][ T4322] usb 2-1: USB disconnect, device number 6 [ 256.445840][ T5580] netlink: 24 bytes leftover after parsing attributes in process `syz.4.287'. [ 257.077360][ T5592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 257.167830][ T5592] netlink: 16 bytes leftover after parsing attributes in process `syz.1.290'. [ 259.304697][ T5627] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 261.833168][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.839800][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.022446][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 263.345413][ T5647] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 263.385437][ T5647] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 266.452307][ T4443] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 266.652369][ T4443] usb 3-1: Using ep0 maxpacket: 32 [ 266.659487][ T4443] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 266.675368][ T4443] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.704708][ T4443] usb 3-1: config 0 descriptor?? [ 266.947621][ T4443] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 266.967496][ T4443] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 266.977824][ T4443] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 266.985464][ T4443] usb 3-1: media controller created [ 267.767260][ T4443] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.790943][ T4443] az6027: usb out operation failed. (-71) [ 267.798719][ T4443] az6027: usb out operation failed. (-71) [ 267.814072][ T4443] stb0899_attach: Driver disabled by Kconfig [ 267.829073][ T4443] az6027: no front-end attached [ 267.829073][ T4443] [ 267.876598][ T4443] az6027: usb out operation failed. (-71) [ 267.892867][ T4443] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 268.059620][ T4443] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 268.076345][ T4443] dvb-usb: schedule remote query interval to 400 msecs. [ 268.083817][ T4443] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 268.884663][ T4443] usb 3-1: USB disconnect, device number 4 [ 269.550604][ T4443] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 271.322301][ T4443] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 271.543848][ T5740] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 276.367172][ T5762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.335'. [ 276.457202][ T5762] device bond1 entered promiscuous mode [ 276.463399][ T5762] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.054376][ T4443] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 282.874211][ T4443] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 282.985285][ T4443] usb 4-1: config 1 interface 0 has no altsetting 0 [ 283.091080][ T4443] usb 4-1: string descriptor 0 read error: -22 [ 283.189451][ T4443] usb 4-1: New USB device found, idVendor=05ac, idProduct=029a, bcdDevice= 0.40 [ 283.363865][ T4443] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.569977][ T5812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.350'. [ 283.579404][ T5812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.350'. [ 283.588424][ T5812] netlink: 'syz.1.350': attribute type 13 has an invalid length. [ 285.718403][ T4443] usbhid 4-1:1.0: can't add hid device: -71 [ 285.872407][ T4443] usbhid: probe of 4-1:1.0 failed with error -71 [ 285.908566][ T4443] usb 4-1: USB disconnect, device number 9 [ 287.444438][ T5833] netlink: 24 bytes leftover after parsing attributes in process `syz.1.356'. [ 288.323835][ T4443] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 288.512250][ T4443] usb 5-1: Using ep0 maxpacket: 32 [ 288.583762][ T4443] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.632190][ T4443] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 288.668912][ T4443] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 288.701066][ T4443] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.032284][ T4443] usb 5-1: Product: syz [ 289.036538][ T4443] usb 5-1: Manufacturer: syz [ 289.041176][ T4443] usb 5-1: SerialNumber: syz [ 289.100014][ T4443] usb 5-1: config 0 descriptor?? [ 289.382346][ T2169] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 289.604530][ T2169] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 289.617108][ T2169] usb 4-1: config 0 has no interface number 0 [ 289.651723][ T2169] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 289.691949][ T2169] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 289.722520][ T2169] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.744063][ T2169] usb 4-1: Product: syz [ 289.761736][ T2169] usb 4-1: Manufacturer: syz [ 289.769964][ T2169] usb 4-1: SerialNumber: syz [ 289.902506][ T2169] usb 4-1: config 0 descriptor?? [ 290.150399][ T2169] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 290.164287][ T2169] usb 4-1: USB disconnect, device number 10 [ 290.175277][ T2169] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 290.920132][ T2169] usb 5-1: USB disconnect, device number 8 [ 291.029411][ T5867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.366'. [ 291.052278][ T5867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.366'. [ 291.072020][ T5867] netlink: 'syz.4.366': attribute type 13 has an invalid length. [ 291.086697][ T4447] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 291.543778][ T4447] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 291.823585][ T4447] usb 3-1: config 1 interface 0 has no altsetting 0 [ 291.874375][ T4447] usb 3-1: string descriptor 0 read error: -22 [ 292.094806][ T4447] usb 3-1: New USB device found, idVendor=05ac, idProduct=029a, bcdDevice= 0.40 [ 292.211168][ T4447] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.786633][ T5885] netlink: 24 bytes leftover after parsing attributes in process `syz.1.369'. [ 293.260093][ T4447] usbhid 3-1:1.0: can't add hid device: -71 [ 293.421736][ T4447] usbhid: probe of 3-1:1.0 failed with error -71 [ 293.496893][ T4447] usb 3-1: USB disconnect, device number 6 [ 293.816172][ T5896] netlink: 'syz.0.372': attribute type 2 has an invalid length. [ 293.855416][ T5896] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.372'. [ 294.132258][ T4362] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 294.332245][ T4362] usb 2-1: Using ep0 maxpacket: 32 [ 294.340439][ T4362] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.460702][ T4362] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 294.535765][ T4362] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 294.582721][ T4362] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.609804][ T4362] usb 2-1: Product: syz [ 294.625695][ T4362] usb 2-1: Manufacturer: syz [ 294.630389][ T4362] usb 2-1: SerialNumber: syz [ 294.668912][ T4362] usb 2-1: config 0 descriptor?? [ 299.546926][ T4443] usb 2-1: USB disconnect, device number 7 [ 299.651445][ T5924] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 300.270913][ T5931] Cannot find set identified by id 0 to match [ 300.319712][ T26] audit: type=1804 audit(1784665600.853:6): pid=5931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.384" name="bus" dev="ramfs" ino=39390 res=1 errno=0 [ 302.252085][ T26] audit: type=1804 audit(1784665600.883:7): pid=5931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.384" name="bus" dev="ramfs" ino=39390 res=1 errno=0 [ 304.242472][ T4362] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 308.162311][ T4362] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 308.672233][ T4362] usb 5-1: device descriptor read/64, error -71 [ 309.122559][ T4443] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 309.332622][ T4443] usb 4-1: Using ep0 maxpacket: 16 [ 309.426460][ T4443] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.590937][ T4443] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 309.602873][ T4443] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 309.613824][ T4443] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 309.705789][ T4443] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.959365][ T4443] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 310.019896][ T4443] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 310.087706][ T4443] usb 4-1: Manufacturer: syz [ 310.483152][ T4443] usb 4-1: config 0 descriptor?? [ 310.722209][ T4362] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 311.532534][ T4362] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 311.540893][ T4362] usb 5-1: config 0 has no interface number 0 [ 311.753495][ T4362] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 311.777173][ T4362] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 311.786388][ T4362] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.795098][ T4362] usb 5-1: Product: syz [ 311.799333][ T4362] usb 5-1: Manufacturer: syz [ 311.822184][ T4362] usb 5-1: SerialNumber: syz [ 311.983888][ T4447] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 312.553832][ T4362] usb 5-1: config 0 descriptor?? [ 312.622535][ T4443] rc_core: IR keymap rc-hauppauge not found [ 312.628787][ T4443] Registered IR keymap rc-empty [ 312.651936][ T4443] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 312.672222][ T4447] usb 3-1: Using ep0 maxpacket: 32 [ 312.679274][ T4447] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.717067][ T4447] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 312.726766][ T4443] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 312.751240][ T4362] usb 5-1: can't set config #0, error -71 [ 312.766416][ T4362] usb 5-1: USB disconnect, device number 10 [ 312.773239][ T4443] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 312.792420][ T4447] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 312.817190][ T4443] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 312.840708][ T4447] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.866407][ T4447] usb 3-1: Product: syz [ 312.870821][ T4447] usb 3-1: Manufacturer: syz [ 312.882714][ T4447] usb 3-1: SerialNumber: syz [ 312.945189][ T4447] usb 3-1: config 0 descriptor?? [ 312.989006][ T4443] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 313.026638][ T4443] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 313.092309][ T4443] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 313.872347][ T4443] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 313.918416][ T4443] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 314.052692][ T4443] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 314.184575][ T4443] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 314.332720][ T4443] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 314.459634][ T4443] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 314.612753][ T4443] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 314.768621][ T4443] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 314.895104][ T4443] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 315.185458][ T4443] usb 4-1: USB disconnect, device number 12 [ 317.032267][ T4446] usb 3-1: USB disconnect, device number 7 [ 321.712247][ T4362] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 322.711457][ T4362] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 322.730433][ T4362] usb 4-1: config 0 has no interface number 0 [ 322.737104][ T4362] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 322.931248][ T4362] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 322.942508][ T4362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.962207][ T4362] usb 4-1: Product: syz [ 322.966493][ T4362] usb 4-1: Manufacturer: syz [ 322.971142][ T4362] usb 4-1: SerialNumber: syz [ 323.148621][ T4362] usb 4-1: config 0 descriptor?? [ 323.181568][ T4362] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 323.195845][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.202268][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.192301][ T4447] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 324.253231][ T22] usb 4-1: USB disconnect, device number 13 [ 324.271590][ T22] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 325.775420][ T4362] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 325.847807][ T4447] usb 2-1: Using ep0 maxpacket: 32 [ 326.429930][ T4447] usb 2-1: device descriptor read/all, error -71 [ 326.512387][ T4362] usb 3-1: Using ep0 maxpacket: 32 [ 326.520085][ T4362] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 326.569883][ T4362] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.601123][ T4362] usb 3-1: config 0 descriptor?? [ 326.627578][ T4362] gspca_main: sunplus-2.14.0 probing 041e:400b [ 326.704128][ T6112] netlink: 16 bytes leftover after parsing attributes in process `syz.1.429'. [ 327.532636][ T4362] gspca_sunplus: reg_r err -110 [ 327.538055][ T4362] sunplus: probe of 3-1:0.0 failed with error -110 [ 328.302330][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 328.684863][ T4447] usb 3-1: USB disconnect, device number 8 [ 329.847524][ T4362] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 330.003470][ T6157] netlink: 16 bytes leftover after parsing attributes in process `syz.3.441'. [ 330.022328][ T4464] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 330.044360][ T4362] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 330.058334][ T4362] usb 2-1: config 0 has no interface number 0 [ 330.082219][ T4362] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 330.109970][ T4362] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 330.120088][ T4362] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.139713][ T4362] usb 2-1: Product: syz [ 330.149639][ T4362] usb 2-1: Manufacturer: syz [ 330.156405][ T4362] usb 2-1: SerialNumber: syz [ 330.168566][ T4362] usb 2-1: config 0 descriptor?? [ 330.205711][ T4362] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 330.222924][ T4464] usb 3-1: Using ep0 maxpacket: 32 [ 330.270933][ T4464] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.324534][ T4464] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 330.356884][ T4464] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 330.383505][ T4464] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.410872][ T4464] usb 3-1: Product: syz [ 330.431052][ T4464] usb 3-1: Manufacturer: syz [ 330.463828][ T4464] usb 3-1: SerialNumber: syz [ 330.470661][ T4464] usb 3-1: config 0 descriptor?? [ 330.499360][ T4362] usb 2-1: USB disconnect, device number 10 [ 330.513282][ T4362] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 333.873348][ T4317] usb 3-1: USB disconnect, device number 9 [ 336.046449][ T6190] trusted_key: encrypted_key: master key parameter 'c0‚:ØHû*N”Ê…™ÐfïeúÂ<‘5Ž•w€èê^n0&À–±š8çÉJÍ' is invalid [ 340.269490][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.460'. [ 340.402242][ T4317] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 340.971345][ T6249] xt_CT: No such helper "syz0" [ 342.027918][ T6256] netlink: 20 bytes leftover after parsing attributes in process `syz.3.461'. [ 342.052340][ T4317] usb 5-1: Using ep0 maxpacket: 8 [ 342.070903][ T4317] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 342.393026][ T6256] device bond2 entered promiscuous mode [ 342.401602][ T6256] 8021q: adding VLAN 0 to HW filter on device bond2 [ 342.832212][ T4317] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 342.876452][ T4317] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 342.952330][ T4317] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.989305][ T4317] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 343.172318][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.236383][ T6264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.464'. [ 343.248110][ T6264] [ 343.250530][ T6264] ====================================================== [ 343.257591][ T6264] WARNING: possible circular locking dependency detected [ 343.264651][ T6264] syzkaller #0 Not tainted [ 343.269095][ T6264] ------------------------------------------------------ [ 343.276132][ T6264] syz.1.464/6264 is trying to acquire lock: [ 343.282047][ T6264] ffff8880269188b8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_dumpreset_obj+0x6e/0x90 [ 343.292468][ T6264] [ 343.292468][ T6264] but task is already holding lock: [ 343.299851][ T6264] ffff88801e3c5698 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}, at: __netlink_dump_start+0x11e/0x6f0 [ 343.310170][ T6264] [ 343.310170][ T6264] which lock already depends on the new lock. [ 343.310170][ T6264] [ 343.320599][ T6264] [ 343.320599][ T6264] the existing dependency chain (in reverse order) is: [ 343.329661][ T6264] [ 343.329661][ T6264] -> #2 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 343.337985][ T6264] __mutex_lock+0x12d/0xae0 [ 343.343119][ T6264] __netlink_dump_start+0x11e/0x6f0 [ 343.348894][ T6264] ip_set_dump+0x152/0x1e0 [ 343.353894][ T6264] nfnetlink_rcv_msg+0xcab/0x1290 [ 343.359500][ T6264] netlink_rcv_skb+0x1ef/0x440 [ 343.364847][ T6264] nfnetlink_rcv+0x2b0/0x2470 [ 343.370104][ T6264] netlink_unicast+0x7ad/0x920 [ 343.375449][ T6264] netlink_sendmsg+0x8ad/0xbd0 [ 343.380788][ T6264] ____sys_sendmsg+0x5ed/0x9a0 [ 343.386149][ T6264] ___sys_sendmsg+0x2a2/0x360 [ 343.391405][ T6264] __se_sys_sendmsg+0x1c3/0x2b0 [ 343.396818][ T6264] do_syscall_64+0x4c/0xa0 [ 343.401972][ T6264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 343.408431][ T6264] [ 343.408431][ T6264] -> #1 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 343.416294][ T6264] __mutex_lock+0x12d/0xae0 [ 343.421360][ T6264] ip_set_nfnl_get_byindex+0x63/0x230 [ 343.427300][ T6264] set_match_v1_checkentry+0x6d/0x220 [ 343.433238][ T6264] xt_check_match+0x499/0xc50 [ 343.438466][ T6264] __nft_match_init+0x63d/0x860 [ 343.443881][ T6264] nf_tables_newrule+0x170a/0x2810 [ 343.449544][ T6264] nfnetlink_rcv+0x1119/0x2470 [ 343.454859][ T6264] netlink_unicast+0x7ad/0x920 [ 343.460182][ T6264] netlink_sendmsg+0x8ad/0xbd0 [ 343.465506][ T6264] ____sys_sendmsg+0x5ed/0x9a0 [ 343.470834][ T6264] ___sys_sendmsg+0x2a2/0x360 [ 343.476078][ T6264] __se_sys_sendmsg+0x1c3/0x2b0 [ 343.481493][ T6264] do_syscall_64+0x4c/0xa0 [ 343.486470][ T6264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 343.492929][ T6264] [ 343.492929][ T6264] -> #0 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 343.501229][ T6264] __lock_acquire+0x2d18/0x7c40 [ 343.506644][ T6264] lock_acquire+0x1bb/0x4a0 [ 343.511712][ T6264] __mutex_lock+0x12d/0xae0 [ 343.516868][ T6264] nf_tables_dumpreset_obj+0x6e/0x90 [ 343.522746][ T6264] netlink_dump+0x683/0xcd0 [ 343.527808][ T6264] __netlink_dump_start+0x52c/0x6f0 [ 343.533594][ T6264] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 343.539786][ T6264] nf_tables_getobj_reset+0x1cb/0x610 [ 343.545711][ T6264] nfnetlink_rcv_msg+0x898/0x1290 [ 343.551297][ T6264] netlink_rcv_skb+0x1ef/0x440 [ 343.556616][ T6264] nfnetlink_rcv+0x2b0/0x2470 [ 343.561852][ T6264] netlink_unicast+0x7ad/0x920 [ 343.567175][ T6264] netlink_sendmsg+0x8ad/0xbd0 [ 343.572498][ T6264] ____sys_sendmsg+0x5ed/0x9a0 [ 343.577822][ T6264] ___sys_sendmsg+0x2a2/0x360 [ 343.583058][ T6264] __se_sys_sendmsg+0x1c3/0x2b0 [ 343.588477][ T6264] do_syscall_64+0x4c/0xa0 [ 343.593479][ T6264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 343.599968][ T6264] [ 343.599968][ T6264] other info that might help us debug this: [ 343.599968][ T6264] [ 343.610308][ T6264] Chain exists of: [ 343.610308][ T6264] &nft_net->commit_mutex --> nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER [ 343.610308][ T6264] [ 343.624995][ T6264] Possible unsafe locking scenario: [ 343.624995][ T6264] [ 343.632473][ T6264] CPU0 CPU1 [ 343.637861][ T6264] ---- ---- [ 343.643256][ T6264] lock(nlk_cb_mutex-NETFILTER); [ 343.648318][ T6264] lock(nfnl_subsys_ipset); [ 343.655464][ T6264] lock(nlk_cb_mutex-NETFILTER); [ 343.663052][ T6264] lock(&nft_net->commit_mutex); [ 343.668216][ T6264] [ 343.668216][ T6264] *** DEADLOCK *** [ 343.668216][ T6264] [ 343.676392][ T6264] 1 lock held by syz.1.464/6264: [ 343.681391][ T6264] #0: ffff88801e3c5698 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}, at: __netlink_dump_start+0x11e/0x6f0 [ 343.692190][ T6264] [ 343.692190][ T6264] stack backtrace: [ 343.698261][ T6264] CPU: 0 PID: 6264 Comm: syz.1.464 Not tainted syzkaller #0 [ 343.705599][ T6264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 343.715679][ T6264] Call Trace: [ 343.718971][ T6264] [ 343.721913][ T6264] dump_stack_lvl+0x188/0x24e [ 343.726607][ T6264] ? load_image+0x410/0x410 [ 343.731119][ T6264] ? show_regs_print_info+0x12/0x12 [ 343.736335][ T6264] ? print_circular_bug+0x12b/0x1a0 [ 343.741549][ T6264] check_noncircular+0x296/0x330 [ 343.746508][ T6264] ? add_chain_block+0x9b0/0x9b0 [ 343.751483][ T6264] ? lockdep_lock+0xf1/0x1f0 [ 343.756101][ T6264] ? _find_first_zero_bit+0xd2/0x100 [ 343.761402][ T6264] __lock_acquire+0x2d18/0x7c40 [ 343.766276][ T6264] ? mark_lock+0x94/0x320 [ 343.770618][ T6264] ? verify_lock_unused+0x140/0x140 [ 343.775832][ T6264] ? __lock_acquire+0x138a/0x7c40 [ 343.780866][ T6264] ? finish_task_switch+0x262/0x8e0 [ 343.786079][ T6264] ? lockdep_hardirqs_on+0x94/0x140 [ 343.791283][ T6264] ? finish_task_switch+0x262/0x8e0 [ 343.796494][ T6264] lock_acquire+0x1bb/0x4a0 [ 343.801008][ T6264] ? nf_tables_dumpreset_obj+0x6e/0x90 [ 343.806478][ T6264] ? nfnetlink_rcv+0x2b0/0x2470 [ 343.811439][ T6264] ? __might_sleep+0xd0/0xd0 [ 343.816048][ T6264] ? read_lock_is_recursive+0x10/0x10 [ 343.821438][ T6264] ? __sched_text_start+0x8/0x8 [ 343.826326][ T6264] __mutex_lock+0x12d/0xae0 [ 343.830861][ T6264] ? nf_tables_dumpreset_obj+0x6e/0x90 [ 343.836345][ T6264] ? nft_pernet+0x23/0x230 [ 343.840867][ T6264] ? nf_tables_dumpreset_obj+0x6e/0x90 [ 343.846360][ T6264] ? __lock_acquire+0x7c40/0x7c40 [ 343.851400][ T6264] ? mutex_lock_nested+0x10/0x10 [ 343.856377][ T6264] ? nft_pernet+0x23/0x230 [ 343.860811][ T6264] ? nft_pernet+0x23/0x230 [ 343.865246][ T6264] nf_tables_dumpreset_obj+0x6e/0x90 [ 343.870548][ T6264] netlink_dump+0x683/0xcd0 [ 343.875071][ T6264] ? netlink_lookup+0x200/0x200 [ 343.879939][ T6264] ? nf_tables_dumpreset_obj_start+0x110/0x170 [ 343.886123][ T6264] __netlink_dump_start+0x52c/0x6f0 [ 343.891338][ T6264] ? nft_netlink_dump_start_rcu+0xbb/0x1a0 [ 343.897155][ T6264] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 343.902803][ T6264] nf_tables_getobj_reset+0x1cb/0x610 [ 343.908189][ T6264] ? nf_tables_delobj+0xfc0/0xfc0 [ 343.913309][ T6264] ? nf_tables_getobj_single+0x600/0x600 [ 343.918954][ T6264] ? nf_tables_dumpreset_obj_start+0x170/0x170 [ 343.925122][ T6264] ? nf_tables_dump_obj+0xd00/0xd00 [ 343.930337][ T6264] ? nf_tables_delobj+0xfc0/0xfc0 [ 343.935369][ T6264] nfnetlink_rcv_msg+0x898/0x1290 [ 343.940403][ T6264] ? nfnetlink_rcv_msg+0x224/0x1290 [ 343.945626][ T6264] ? nfnetlink_unbind+0x160/0x160 [ 343.950654][ T6264] ? __schedule+0x1087/0x4030 [ 343.955369][ T6264] ? lock_chain_count+0x20/0x20 [ 343.960265][ T6264] ? preempt_schedule_irq+0xe6/0x160 [ 343.965587][ T6264] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 343.971620][ T6264] netlink_rcv_skb+0x1ef/0x440 [ 343.976400][ T6264] ? nfnetlink_unbind+0x160/0x160 [ 343.981459][ T6264] ? netlink_ack+0x1160/0x1160 [ 343.986251][ T6264] ? nfnetlink_rcv+0x2a1/0x2470 [ 343.991135][ T6264] ? nfnetlink_unbind+0x160/0x160 [ 343.996174][ T6264] nfnetlink_rcv+0x2b0/0x2470 [ 344.001005][ T6264] ? lock_chain_count+0x20/0x20 [ 344.005886][ T6264] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 344.011807][ T6264] ? lockdep_hardirqs_on+0x94/0x140 [ 344.017012][ T6264] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 344.022918][ T6264] ? __dev_queue_xmit+0x1d84/0x3810 [ 344.028124][ T6264] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 344.033679][ T6264] ? rcu_preempt_deferred_qs_irqrestore+0x827/0xbd0 [ 344.040282][ T6264] ? rcu_read_unlock_special+0x510/0x510 [ 344.045926][ T6264] ? memcpy+0x3c/0x60 [ 344.049913][ T6264] ? lockdep_hardirqs_off+0x70/0x100 [ 344.055210][ T6264] ? netlink_deliver_tap+0x2e/0x1b0 [ 344.060420][ T6264] ? __netlink_deliver_tap+0x7a9/0x7e0 [ 344.065894][ T6264] ? __lock_acquire+0x7c40/0x7c40 [ 344.070932][ T6264] ? __rcu_read_unlock+0x78/0xd0 [ 344.075874][ T6264] ? netlink_deliver_tap+0x2e/0x1b0 [ 344.081087][ T6264] netlink_unicast+0x7ad/0x920 [ 344.085873][ T6264] netlink_sendmsg+0x8ad/0xbd0 [ 344.090649][ T6264] ? netlink_getsockopt+0x550/0x550 [ 344.096063][ T6264] ? apparmor_socket_sendmsg+0x16c/0x330 [ 344.101794][ T6264] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 344.107101][ T6264] ? security_socket_sendmsg+0x7c/0xa0 [ 344.112602][ T6264] ? netlink_getsockopt+0x550/0x550 [ 344.117831][ T6264] ____sys_sendmsg+0x5ed/0x9a0 [ 344.122643][ T6264] ? __import_iovec+0x18d/0x510 [ 344.127513][ T6264] ? __sys_sendmsg_sock+0x30/0x30 [ 344.132557][ T6264] ? __import_iovec+0x306/0x510 [ 344.137425][ T6264] ? import_iovec+0x6f/0xa0 [ 344.142044][ T6264] ___sys_sendmsg+0x2a2/0x360 [ 344.146774][ T6264] ? __sys_sendmsg+0x2a0/0x2a0 [ 344.151563][ T6264] ? __sched_text_start+0x8/0x8 [ 344.156455][ T6264] __se_sys_sendmsg+0x1c3/0x2b0 [ 344.161322][ T6264] ? __x64_sys_sendmsg+0x80/0x80 [ 344.166280][ T6264] ? lockdep_hardirqs_on+0x94/0x140 [ 344.171499][ T6264] do_syscall_64+0x4c/0xa0 [ 344.175934][ T6264] ? clear_bhb_loop+0x60/0xb0 [ 344.180624][ T6264] ? clear_bhb_loop+0x60/0xb0 [ 344.185315][ T6264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.191227][ T6264] RIP: 0033:0x7fa1f8b9de99 [ 344.195654][ T6264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.215280][ T6264] RSP: 002b:00007fa1f6dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.223741][ T6264] RAX: ffffffffffffffda RBX: 00007fa1f8e26180 RCX: 00007fa1f8b9de99 [ 344.231825][ T6264] RDX: 0000000024040808 RSI: 0000200000000180 RDI: 0000000000000006 [ 344.239816][ T6264] RBP: 00007fa1f8c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 344.247804][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.255791][ T6264] R13: 00007fa1f8e26218 R14: 00007fa1f8e26180 R15: 00007ffe07a4e198 [ 344.263798][ T6264] [ 344.313969][ T4317] usb 5-1: can't set config #16, error -71 [ 344.339471][ T4317] usb 5-1: USB disconnect, device number 11 [ 344.562303][ T4447] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 344.752191][ T4447] usb 3-1: Using ep0 maxpacket: 16 [ 344.759510][ T4447] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.792188][ T4447] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 344.829030][ T4447] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 344.861933][ T4447] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 344.895187][ T4447] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 344.937341][ T4447] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 344.946856][ T4447] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 344.958395][ T4447] usb 3-1: Manufacturer: syz [ 344.980891][ T4447] usb 3-1: config 0 descriptor?? [ 345.027782][ T4447] usb 3-1: can't set config #0, error -71 [ 345.045244][ T4447] usb 3-1: USB disconnect, device number 10