last executing test programs: 3.76621415s ago: executing program 2 (id=725): set_mempolicy(0x1, 0x0, 0x2) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) socket(0x400000000010, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) 3.704752722s ago: executing program 2 (id=726): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1", 0xba}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b52", 0x70}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.889535674s ago: executing program 1 (id=730): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = dup(r2) landlock_restrict_self(0xffffffffffffffff, 0xb) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa0380, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b0, 0x98, 0x98, 0x98, 0x98, 0x98, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x2, 0x71}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x11, 0x3}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000000)=@arm64={0x10, 0x5, 0x0, '\x00', 0xc}) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$UHID_INPUT(r3, &(0x7f0000001180)={0x8, {"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", 0x1000}}, 0x1006) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000054) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x800, 0x456080) 2.725285148s ago: executing program 2 (id=732): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) 2.65555873s ago: executing program 1 (id=733): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x30, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x4}]}, 0x30}}, 0x0) readv(r0, &(0x7f0000000200), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="60000000020601010000000000000000ac461fed05000400000000000900020073797a3000000000050001000700"], 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) socket$nl_route(0x10, 0x3, 0x0) recvmsg(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 2.610283771s ago: executing program 2 (id=734): set_mempolicy(0x1, 0x0, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) socket(0x400000000010, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) 2.352086387s ago: executing program 2 (id=735): syz_usb_connect$midi(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201f7020000004035120182400001020301090246"], 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) 2.172563583s ago: executing program 1 (id=738): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x11000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x176b90bd46832ffe}, {0xfff3, 0xe}, {0xd, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x40c, 0x11) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100034b7ec740"], 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYRES8=r2], 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xa1300) 2.119107314s ago: executing program 0 (id=739): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000240)='D', 0x1, 0x2004c015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 2.059217125s ago: executing program 0 (id=740): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) epoll_create1(0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 2.018635996s ago: executing program 0 (id=741): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1", 0xba}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b52", 0x70}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.265640356s ago: executing program 3 (id=742): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = dup(r2) landlock_restrict_self(0xffffffffffffffff, 0xb) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa0380, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b0, 0x98, 0x98, 0x98, 0x98, 0x98, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x2, 0x71}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x11, 0x3}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000000)=@arm64={0x10, 0x5, 0x0, '\x00', 0xc}) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$UHID_INPUT(r3, &(0x7f0000001180)={0x8, {"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", 0x1000}}, 0x1006) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000054) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x800, 0x456080) 1.055036072s ago: executing program 3 (id=743): set_mempolicy(0x1, 0x0, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) socket(0x400000000010, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) 950.000045ms ago: executing program 3 (id=744): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) sync() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)={0x2c, r2, 0x301, 0x70bd29, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) 949.406925ms ago: executing program 0 (id=745): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0x0, 0x8}, {0xc, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 613.542704ms ago: executing program 0 (id=746): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x30, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x4}]}, 0x30}}, 0x0) readv(r0, &(0x7f0000000200), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="60000000020601010000000000000000ac461fed05000400000000000900020073797a3000000000050001000700"], 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) socket$nl_route(0x10, 0x3, 0x0) recvmsg(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 591.026604ms ago: executing program 2 (id=747): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000500)=""/68, 0x0, 0x60000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 589.697474ms ago: executing program 3 (id=748): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000240)='D', 0x1, 0x2004c015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 420.066559ms ago: executing program 3 (id=749): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0x7, 0x0, 0x0}) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r3, 0xc0046d00, &(0x7f0000000140)=0x7) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f00000000c0)) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8005d}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2b00, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a80)={@fallback, 0xffffffffffffffff, 0x11, 0x2038}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x18, r1, 0x0, 0x0, 0x0}) 365.71698ms ago: executing program 1 (id=750): r0 = syz_open_dev$loop(&(0x7f0000000440), 0xf, 0x183043) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x1d, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09d0200fb0a010000000000f5ffff0200", "2809e8dbe10859892d0000b420a9c81f40f05f819e0117020000f20020000000e903001000", "90be8b1c5512406c7f00", [0x4, 0x5]}}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001280)={r0, 0x9, {0x2a12, 0x80010000, 0x0, 0x3, 0x20000000000003, 0x0, 0x0, 0x20, 0x18, "fee8a2ab78fc179fd1f8a0e91ddaaca7ca64c6a4b4e00d9683dda1af1ea80000000000000000000000deff1200100000000000000000000000000800", "2809a9000000038948224ad54afac11d875375bdb2420000b420a1a93c7540f4767f9e01177d3dd40600000061ac000000800800", "90be8b1c55f964000000000000000000000100", [0x8, 0x4]}}) 250.783233ms ago: executing program 0 (id=751): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = dup(r2) landlock_restrict_self(0xffffffffffffffff, 0xb) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa0380, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b0, 0x98, 0x98, 0x98, 0x98, 0x98, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x2, 0x71}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x11, 0x3}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000000)=@arm64={0x10, 0x5, 0x0, '\x00', 0xc}) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$UHID_INPUT(r3, &(0x7f0000001180)={0x8, {"f2c11c88004fabb27f225fa25305a9ce1ff89fc55f8e8cdfe7f57ed2a6f01d22c88083e48a888efc50eb87a7c132df7b51219b6281c1e8b33ad42cbcc483e2767834948feb3ebd737c9827009287879363204dfc1b9cad585df1f30481ee198a4858580f5abaaf8699eac5e99eb0a34f4c6b68102b04d47069ab1d031e05d4ccbab700507f47918d83d4cc129da60d0463be38243d9e0b6bf53fa0e6e59d22e43ee0961c846d1a4c7d9243bd14491c27b887bd3f42bc15bd075ba422c564c6f5e27e94bc13677ca5ff4544768ef015801243a0b7da2e055788c179b032f9d818e48c926a0e49ed3923d99539362d54ad7d46317cadaf09a2e2fce49b2eee1ad02e1967b80d832ec5518c122ee4d8a3450d8adfc5875790198612c65295cdb79d9b2ab039a0e0c672438c29f0900aeb94998e35c4901834d31e0cbd6375f0465419c9920442c53215979bb7ec22b51169780262e83a8091cb403d1a4f3597ae722696db6d03c17fce6596fbe6d895281ced7b315400666c52fbd96e615e68290ff0454c8e51dd44a291f9fc08d17a202ffa31d2573b072665fad21fe2aad66c77a17121fb10877e1d51ae6ec83f347b74e61b22987d5a5d207930eb4344d029258b444bd6f8f72d4300bf54974467affd0d585bfc317b90065206f0a062226d4a481a6d6a016668b8d4a42157d0e388e05810b394b609aac124b33032247a2b2c66409a6cddf4ecdb76292aa3b4057ac4c77f94fb87dbbd680a470cfd9d152fa780ea1a5ea413f97a7a132f0e7800113a28dc429907a49dc048f037db1b10c9689d2b6c209872001cbdb4b411bd6bc86abc05f8c116729dbde10c6ae4bbe055032a948b6337e53211eea0e06d54df66cd6bc55c3bfc90a067c4e369a2d7f6b7f09d7160bcdc8e63bc3e82812f943de37a318ca7ce503a917e76bdb5c08bb4f098648ec1be96f87aa3fe21d3b2693169d097ee6d3c98bddfdb0f44b3f0b658bfc3cd3e2b7d532ce0f60a3e1989f4e81f7690f35577dacd6896ee1ec3729d18346ab50ea9db44c30814da1f188e477026d008803fab090dd15df7748b06f5f3c8c7c1ef2d3801d05527536871447b41a2e3b3237fdc29f3b1f4371a4cf0087afb5c425b3ba8630380bdae4fbd9beeb39541eb21a2f58da96a813cf3c361085119f6c7bb4650e3f5ddc09add2a6e0970bd47aecea719cfa214e318a14fe2ffd73bf78323be05444537ee4af43a4fbc5e26628d095913bac8feb923b4f2753b0b7c01f81cfffc1cc202e4f4edd4f9adc38a517fd235f0d4106181c9fbe6f720da92fd44c390e993835028192eaad7769c1d689bc777fb3e27c4bae11870094a18a49067735c71fd188b45720a2b8c86de75ad3ffe922be4bf7fdbcf789f78f21df710bbdd82a6541f6ffa90ea2795edbd482e9b8866e4e26b2902e6fa01c264b4e7c8422a7c4f32872b220c663ccb3b7067aee2e388aa925ef0cf583facb514a5662d28fffa78d45637b2b48bb19057b87809b59e586d23f409d3c39fef20be5cfddd5c588ba35bf5623f265d4b9445903172067a50fc598db60274ca0f4fe9359c2387493b850dbc7e8b0d434504e8799b0376181f45e102ad423656f1d864ec06a74da868fd26b44379cd53c36b764c45a5dd3bb506a0b9834bd42bc9f009762b287debf3ce63d52d1e367d0ca362e8454f033c84a75b30413235841265b8cba047fd272aafe17139b25bc186c5e8b1e50f55c4ae58019e7f5029dbad02823ecf131e9fbb6fb9477bbd5e51a833b6d698299c62abd2e1e59ee6b745abb249de56acbd5c46fcdd5d0e2824baad6bf4ce847fb7b066140c12623a66bf57f324fa3335ed0d61dbd77255fb0d72c9a09d341bf7217d76d4453ded25d178fe4fa98b222e175f799c312c08e4f2db2d3690e52c065e9b0494b02c535ab4b26440870d57f36134b251cdafb50a6be50e8b908b18504707256578bfb1b5a559334e7ee3d6de5eb2c0834962bf5b91f3f2e08cfa2ef1c8ef9df5a791367f6c90b5cbbc8f420c60248b98fb7e7a1d29fe99d261c7bedaf72404c27178b845c0855f0b7b9edfc972c142c9ec931f8b2670d4cfc4df2e2e51563ae577e02a5c674d37c1d065b2de2c54c0ca1b0483733dfed55ac50d904ee5548f8f801bc945b84448c80e49d4dcec2c4c3f55310eb814621d224f6747f17335588524a218f04095c3f783985eecf21322642c9858d545914bddd299a772338039459a564e2474adebbbbd9544d6d5a424caf4b4377d10f80deb0cf1babeb67e445c075a2eefdff49e91ea78ad6f31daea361cdb4f60c1f17d9fb0efbc3ad7e9df45b0bd7e0d4a179b2231f7b9414f417ffabcaf72664056ea8b06f7ec8c7db71fe477533583fa8114b13c8ad88a4a5493f9ea0ad05cddb725fa5bee014987b020e526b281efe8394e8207fdeb452332a9127fef03c5890589478517a155e1920723cb9ad555e2184939bccb867bd7b9546099ba59f8b02ab9ad0d160b9019e25b61849e50579e07eedfd1f0350d3ad923f264ad39ffc2c5e8abb05498d71870d3a76f9764433d27c8d6edf0af44189de43af65d5473b1c75aaca869a8b3b0a06c2303ace881b0f294ce1ba2acc611eff0f38d1614ac761ce1a19256bee039817605b0929aefc3bbab57c9629e771afd7a21b9168253a98c5f935f6ff7651f97eff7497f16b61f19e4a29ae424a94838c5b6b805b88c8014b738574ceedbbec616c537aad543de3ea59317292504ebf65350107f37285f27b8a496699136264ee944253e65840f41f8ac08b3e2627d3a02ee94dbbdecd5f6c4de0e204e324d499821d131a4a81ebd53082a5cf50007a21651858bf66749d4f9d533eabd4e6a74affcf1cf3ac68865f5763c50236bb4a57b56e0ffbc795638d94fa68fca2c313f9b946a1df3f98422d164498f1d0b995b3ac03b8e228ab311f78db61b1f009b53835c1b21babbc0e9882b115b47d508716b8728861f2680864c59dbabf0921ba17e700e565bcdf1bee4efea6632ab0d85c0cc37bf4baf52e1defbbe105411ac73839ec3d106c3e86c83e22cbd5ce97841fc1c90a2545b486bf6b63b4156582a817e5f0d062a2c396bd075ce9c23c47fe3900b796f27e53ceb2ab285d1e7dc822f535aab3f6e161cfeb9a31d44d8c2111085051f759e27758ce1a89bc4edb94c5d7fb3ab13e908047019f5d6c7629d74cd4354d14397e5fe08485aff17e872b726878da4bb0ff0e85d8635600b7507a3fe6e9a06c22c177eae6051653d9aab1cd58aa10961efa4b2a4bbe14d92d4ee5fdb511b836de27cff0e6a577bebe4ff9da07e055a10e404a3fc4ab3593c97f6baefb31c1774196ae67a9696421ceb61b763d3f02578debe2d6f651d4a10b92b6b3e94e31e48561d92da699544823d4b1ce12d2f649b0288d61ab7cbeb6d556caf91ae79fc1844b88a43192c4cd4710c8ae46500c87923044ddc391258e80868471a750b7521b3a0491a0c62cb8d7c5c45f5e9419e145eeba1e743f414234902dafc510c712d9218a37c91181214a9f85a0108cf84362bbe405a2f7b8cc06e36f1111338b8649f691cbba97042c5a220638a927bfea6877524a49c5f83251bd4690b77970ddce46e18a0021c9ef1429b568c4293d86c463b59765a680447a017e51ec31f7dc64ec49a7683c9029bc52237f7fd224c2815003a531695b371ebeca2b3f1049150782dd99cd27e9e168b026b6aeba5ec513ba2d0dbf0d2e76588a00632bab3efe2f235f607be0cac153dea6a07d3fe001242da40643eb324628dd7a656a268be8626b699cda86de70b6ef0bf32eec99bb6d405a1136f2a8794a9797ef56c8e87e79fa48a9a3615be497b230ac68b8361d1eea45f2e0af7c8fe388ae105c22000e9c4b0cc7fe301046935f6765d9b15dd77f17b85265fbdd56ffd2239571d9971d891742a36106abce31898b76f71213ee391d8d5ec31770c65892104f4960cea268cc3614e5721316b029d04bc6622d67cf3006cd1431f6077b353acdb9262097793bcc83a1ff62df200ed7465d26f3267cf5234b46c5991643939ef7a4cce66e40e140882ad16ac9ce3a313294196c0a041608b5fd1328a131e2e00d904f2671969b950302c55108110a47691d3c315de86a4dab2e90c9e81039dc6bb23576ce28f41e9aabbb99e09612b77255bfc79a28bc9b3e48101aa7f0129df734f053eb421ba7f37a9b14773f561dd51e6910765a5cd13f0b781257775e7629ea9a9cbb7ef817ec9c34e7a064a546c0f3426bc03719acb844bcf6e5ad6e58724d7972d222f7bbf9e53ab92477b88079f57e51295ddde5064496953c54c5fb32c7be742f184daf3e24efc0489c2ce17ed36342148112eaba4426c457a6ddd9a56c9d7506994967dfdea56330a6f0d55b5ab16983535d316f7b5abb69c28f2fe889d8bd4d2d0eb0ede25af1f33859dc482f54a75ed5932b9a5e2313cc7714dae8ac04e72a40e5a018d7c7023ccaf74bb426ddc5eae55c230ab99319db198f6c33ab0518a64a3211b5d7beba864a43b94c3de6f7f81e3c995ff3f6f2a8af604df6929ec4df1d0646685621f1835816d93cb183c567957f296700a9017d014fc939705d674f99b9cd5d2fc64966362dfee359caabc0d922fe6bd7ce8b008ddf0aa0e78f3ade2ba0b6873f233dadd4a961776ed734e0228d18f2ec9db3f3bc0fa7d732edfcdb2396878877907b3cfe856253eb0dcb83196e308fdd917fb3c14a3d3da0d361de5f9deae8ea647d57a71e33b366ba74e41e419bcdcbabfc5312ca964724e1cef29a95f0a2762718ecf35e06170a9dc6e65aba6d73f553214a85589925a8ee07001b1bb8110c6139c3f65760a14ad97ca65a57b2c45addce7d7205c504da47653f26a1dfc4fa1c7249d9e0d5c95a9e3b859b6d8d688b70c50e29d93b5e09144548d96ec4b4316eb0b0e2d092d2000ea8d8f525bc437b8ed333664814697be8055c033a722c2c61b1227758b8e675a1bb5fa9e754ebfde9be69a00289b128d088d4b4f7cd9a1761bf212335516060af19638ac6df0e9749cb2dc062909677b2b276fbca80938df114f359d9d4c6405354473804c5830089f7f28b64bf4cfe87b94a7b315accc4c531d459180b30800c9398f80c463fa5d15a1ab5ff90813ce99c97ebda4b710874c0741b93448bc5860b1cc08f9c35390b637da2fe80ddc57eccef2409e88263c5abcd6766c76c88fb02982305c60c47c0c8e0a1c00ccd3ebfd005efb2278169ce1e756e57511fb633cab89c68115b1fa58634d8f9d96fa207eb68944c5b6fb37d640d5806215ab2b0632adc04f912e7452b37d5bdb93ee6e728e9be954e940a8dcb9e2aa1fc3b4741d2eaa826352bcf463ccaa1e38c53eb8e57f581cb9d2caab87ff8ad595eb79820c8a7014e47b1810a0a5e81613bf40f358e3669d12f353088dd2334999f522a3d2a57f61521813c9f6e163313034513a792fe00f551e55959f02e107a580917aa48927d799d229b4fc5bfa363b8e2bfbaeacf39ae837552d38f2ec41776ff5861c9bf14f4cd281ebc788c73c37a7779b2512eb3580803c5b448520315527bdb9101e65d6499c613d3796d07a4a4684feac952261deeb060c5186ffed5736387a3a3fe578b8fe33d6611314004ae85f18536655e8d0a877238928992df10d3fd78fe3612f1c050b2d4c7f955e12bda48b9c08e36941605841119119f365f0418639d833161599961d90b3da3efb6c682ac80f98c87eb3f48318006ab87bce6f22713e3630f2418ad7fb699d1e8b", 0x1000}}, 0x1006) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000054) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x800, 0x456080) 205.184334ms ago: executing program 1 (id=752): set_mempolicy(0x1, 0x0, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) socket(0x400000000010, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) 114.454267ms ago: executing program 3 (id=753): r0 = socket(0x10, 0x803, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) accept4(r0, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x28, 0x0, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x810) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 1 (id=754): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0x0, 0x8}, {0xc, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) kernel console output (not intermixed with test programs): batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.573692][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.598728][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.634815][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.709919][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.729435][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.751391][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.763065][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.802429][ T4311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.819406][ T4311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.835758][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.859986][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.868740][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.889412][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.062699][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.106548][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.188512][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.196904][ T5083] Bluetooth: hci3: command tx timeout [ 85.216732][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.224998][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.237752][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.350272][ T5083] Bluetooth: hci1: command tx timeout [ 85.355727][ T5083] Bluetooth: hci0: command tx timeout [ 85.361875][ T5776] Bluetooth: hci2: command tx timeout [ 85.407992][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.424751][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.581017][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.620603][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.858666][ T5859] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.920520][ T5857] syz_tun: entered allmulticast mode [ 86.016258][ T5855] syz_tun: left allmulticast mode [ 86.350722][ T5847] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.390058][ T5876] bond1: Unable to set down delay as MII monitoring is disabled [ 86.402600][ T5876] bond1 (unregistering): Released all slaves [ 86.515461][ T5880] syzkaller0: entered promiscuous mode [ 86.521204][ T5880] syzkaller0: entered allmulticast mode [ 86.544690][ T5847] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.556139][ T5847] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.568261][ T5844] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.599390][ T5847] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 86.608489][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.619176][ T5847] usb 1-1: Product: syz [ 86.624489][ T5847] usb 1-1: Manufacturer: syz [ 86.646368][ T5847] usb 1-1: SerialNumber: syz [ 86.725118][ T5882] program syz.3.16 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.736643][ T5882] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 87.270150][ T5083] Bluetooth: hci3: command tx timeout [ 87.429960][ T5083] Bluetooth: hci0: command tx timeout [ 87.430906][ T5787] Bluetooth: hci2: command tx timeout [ 87.438070][ T5083] Bluetooth: hci1: command tx timeout [ 87.494558][ T23] usb 1-1: USB disconnect, device number 2 [ 87.644465][ T5895] raw_sendmsg: syz.2.19 forgot to set AF_INET. Fix it! [ 88.281766][ T5844] usb 2-1: unable to get BOS descriptor or descriptor too short [ 88.302365][ T5844] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 88.330630][ T5844] usb 2-1: can't read configurations, error -71 [ 89.766543][ T5913] netlink: 32 bytes leftover after parsing attributes in process `syz.0.26'. [ 89.885103][ T5916] input: syz1 as /devices/virtual/input/input5 [ 89.915669][ T5917] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.925612][ T5917] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.934639][ T5917] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.943434][ T5917] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.011038][ T5917] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 90.606820][ T5933] netlink: 60 bytes leftover after parsing attributes in process `syz.0.26'. [ 91.798301][ T27] audit: type=1326 audit(1785991829.633:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5944 comm="syz.2.35" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187879e0d9 code=0x7ffc0000 [ 91.930803][ T790] cfg80211: failed to load regulatory.db [ 91.967052][ T27] audit: type=1326 audit(1785991829.663:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5944 comm="syz.2.35" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187879e0d9 code=0x7ffc0000 [ 92.076587][ T27] audit: type=1326 audit(1785991829.663:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5944 comm="syz.2.35" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187879e0d9 code=0x7ffc0000 [ 92.136566][ T27] audit: type=1326 audit(1785991829.663:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5944 comm="syz.2.35" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f187879e0d9 code=0x7ffc0000 [ 92.189383][ T27] audit: type=1326 audit(1785991829.793:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5944 comm="syz.2.35" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187879e0d9 code=0x7ffc0000 [ 92.286669][ T27] audit: type=1326 audit(1785991829.793:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5944 comm="syz.2.35" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f187879e0d9 code=0x7ffc0000 [ 92.355708][ T27] audit: type=1326 audit(1785991829.803:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5944 comm="syz.2.35" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187879e0d9 code=0x7ffc0000 [ 92.427698][ T27] audit: type=1326 audit(1785991829.863:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5944 comm="syz.2.35" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f187875e90e code=0x7ffc0000 [ 92.492245][ T27] audit: type=1326 audit(1785991829.863:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5944 comm="syz.2.35" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f187875e90e code=0x7ffc0000 [ 92.519637][ T5844] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 92.597951][ T27] audit: type=1326 audit(1785991829.873:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5944 comm="syz.2.35" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f187875e90e code=0x7ffc0000 [ 92.742268][ T5844] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 92.757205][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.784134][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.834402][ T5844] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 92.883944][ T5844] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 92.897091][ T5844] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 92.912753][ T5844] usb 2-1: Manufacturer: syz [ 92.940338][ T5844] usb 2-1: config 0 descriptor?? [ 93.433022][ T5844] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 93.449548][ T5762] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.458246][ T5844] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 93.516440][ T5844] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 93.700177][ T5762] usb 4-1: Using ep0 maxpacket: 16 [ 93.746569][ T5762] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.781885][ T5762] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 93.823893][ T5762] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 93.873154][ T5844] usb 2-1: USB disconnect, device number 4 [ 93.879811][ T5762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.924564][ T5762] usb 4-1: config 0 descriptor?? [ 93.969625][ T5762] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 94.347724][ T5955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.368794][ T5970] cgroup: fork rejected by pids controller in /syz0 [ 94.529180][ T5955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.226491][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.386717][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.519565][ T5762] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 95.662086][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.854236][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.219398][ T5762] usb 2-1: unable to get BOS descriptor or descriptor too short [ 97.244199][ T5762] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 97.270376][ T5762] usb 2-1: can't read configurations, error -71 [ 97.394669][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.409676][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.417400][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.440618][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.448811][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 97.459356][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.639116][ T790] usb 4-1: USB disconnect, device number 2 [ 97.971017][ T6009] cgroup: fork rejected by pids controller in /syz1 [ 99.265846][ T5994] chnl_net:caif_netlink_parms(): no params data found [ 99.349155][ T12] hsr_slave_0: left promiscuous mode [ 99.374335][ T12] hsr_slave_1: left promiscuous mode [ 99.398985][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.416616][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.434817][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.469482][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.500141][ T12] bridge_slave_1: left allmulticast mode [ 99.509415][ T5776] Bluetooth: hci2: command tx timeout [ 99.554103][ T12] bridge_slave_1: left promiscuous mode [ 99.596603][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.641263][ T12] bridge_slave_0: left allmulticast mode [ 99.659780][ T12] bridge_slave_0: left promiscuous mode [ 99.665889][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.816627][ T12] veth1_macvtap: left promiscuous mode [ 99.830624][ T12] veth0_macvtap: left promiscuous mode [ 99.842858][ T12] veth1_vlan: left promiscuous mode [ 99.854076][ T12] veth0_vlan: left promiscuous mode [ 100.199780][ T5083] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.210820][ T5083] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.219233][ T5083] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.230817][ T5083] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.241506][ T5083] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 100.248851][ T5083] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.453792][ T790] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.730749][ T12] team0 (unregistering): Port device team_slave_1 removed [ 100.781442][ T12] team0 (unregistering): Port device team_slave_0 removed [ 100.834522][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.875403][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.889606][ T790] usb 3-1: unable to get BOS descriptor or descriptor too short [ 100.908514][ T790] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 100.919855][ T790] usb 3-1: can't read configurations, error -71 [ 101.137547][ T12] bond0 (unregistering): Released all slaves [ 101.378898][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.400503][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.422264][ T5994] bridge_slave_0: entered allmulticast mode [ 101.439854][ T5994] bridge_slave_0: entered promiscuous mode [ 101.471529][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.478696][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.500488][ T6077] vivid-000: disconnect [ 101.511564][ T6076] vivid-000: reconnect [ 101.515520][ T5994] bridge_slave_1: entered allmulticast mode [ 101.537237][ T5994] bridge_slave_1: entered promiscuous mode [ 101.589513][ T5776] Bluetooth: hci2: command tx timeout [ 101.665326][ T5994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.720788][ T5994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.851447][ T5994] team0: Port device team_slave_0 added [ 101.861016][ T5994] team0: Port device team_slave_1 added [ 102.072285][ T5994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.095803][ T5994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.131918][ T5994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.160261][ T6065] chnl_net:caif_netlink_parms(): no params data found [ 102.203326][ T5994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.225671][ T5994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.288224][ T5994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.310081][ T5776] Bluetooth: hci3: command tx timeout [ 102.459430][ T56] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.490189][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.546368][ T5994] hsr_slave_0: entered promiscuous mode [ 102.580324][ T5994] hsr_slave_1: entered promiscuous mode [ 102.586765][ T5994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.599426][ T5994] Cannot create hsr debugfs directory [ 102.659373][ T56] usb 3-1: Using ep0 maxpacket: 16 [ 102.679836][ T56] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.690133][ T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.702192][ T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 102.720190][ T56] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 102.730449][ T56] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.744885][ T56] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 102.762042][ T56] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 102.781712][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.796414][ T56] usb 3-1: Manufacturer: syz [ 102.830657][ T56] usb 3-1: config 0 descriptor?? [ 102.908471][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.952620][ T6065] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.967464][ T6065] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.985223][ T6065] bridge_slave_0: entered allmulticast mode [ 102.993186][ T6065] bridge_slave_0: entered promiscuous mode [ 103.008642][ T6065] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.015988][ T6065] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.026193][ T6065] bridge_slave_1: entered allmulticast mode [ 103.041912][ T6065] bridge_slave_1: entered promiscuous mode [ 103.101215][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.181823][ T6065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.225467][ T6065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.314145][ T6065] team0: Port device team_slave_0 added [ 103.323365][ T6065] team0: Port device team_slave_1 added [ 103.380126][ T56] rc_core: IR keymap rc-hauppauge not found [ 103.386156][ T56] Registered IR keymap rc-empty [ 103.410454][ T56] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 103.465140][ T56] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 103.506897][ T56] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 103.538485][ T6065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.549555][ T6065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.577676][ T56] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 103.619559][ T56] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 103.629504][ T6065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.649710][ T56] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 103.659433][ T6065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.666539][ T6065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.669837][ T5776] Bluetooth: hci2: command tx timeout [ 103.706487][ T6065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.706753][ T56] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 103.759628][ T56] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 103.794781][ T56] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 103.840150][ T56] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 103.879594][ T56] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 103.920272][ T56] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 103.965751][ T56] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 104.019493][ T56] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 104.068571][ T56] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 104.090757][ T56] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 104.158183][ T6065] hsr_slave_0: entered promiscuous mode [ 104.190360][ T6065] hsr_slave_1: entered promiscuous mode [ 104.200313][ T790] usb 3-1: USB disconnect, device number 4 [ 104.209742][ T6065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.236582][ T6065] Cannot create hsr debugfs directory [ 104.391082][ T5776] Bluetooth: hci3: command tx timeout [ 104.654896][ T5994] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.666574][ T5994] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.709397][ T5994] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.739126][ T5994] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.283009][ T6136] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 105.750122][ T5776] Bluetooth: hci2: command tx timeout [ 105.928158][ T6136] process 'syz.2.71' launched './file0' with NULL argv: empty string added [ 106.248739][ T6065] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.266431][ T6065] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.303628][ T6065] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.355378][ T12] hsr_slave_0: left promiscuous mode [ 106.381951][ T12] hsr_slave_1: left promiscuous mode [ 106.397481][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.406011][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.414597][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.422910][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.431111][ T12] bridge_slave_1: left allmulticast mode [ 106.436854][ T12] bridge_slave_1: left promiscuous mode [ 106.443003][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.450510][ T6161] vivid-000: disconnect [ 106.456983][ T6160] vivid-000: reconnect [ 106.465959][ T12] bridge_slave_0: left allmulticast mode [ 106.471872][ T5776] Bluetooth: hci3: command tx timeout [ 106.477439][ T12] bridge_slave_0: left promiscuous mode [ 106.483762][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.525620][ T12] veth1_macvtap: left promiscuous mode [ 106.539454][ T12] veth0_macvtap: left promiscuous mode [ 106.545591][ T12] veth1_vlan: left promiscuous mode [ 106.551917][ T12] veth0_vlan: left promiscuous mode [ 106.639640][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 107.251207][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 107.265233][ T23] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 107.282763][ T23] usb 3-1: can't read configurations, error -71 [ 107.392356][ T12] team0 (unregistering): Port device team_slave_1 removed [ 107.438808][ T12] team0 (unregistering): Port device team_slave_0 removed [ 107.476061][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.525149][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.936537][ T12] bond0 (unregistering): Released all slaves [ 108.055385][ T6065] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.174131][ T5994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.279109][ T5994] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.343735][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.350937][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.402280][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.409918][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.550022][ T5776] Bluetooth: hci3: command tx timeout [ 109.159164][ T6065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.264895][ T6065] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.327512][ T3427] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.334723][ T3427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.353250][ T3427] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.360468][ T3427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.642771][ T6195] vivid-000: disconnect [ 109.664412][ T6194] vivid-000: reconnect [ 109.729289][ T5994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.885787][ T5994] veth0_vlan: entered promiscuous mode [ 109.922981][ T5994] veth1_vlan: entered promiscuous mode [ 110.001981][ T5994] veth0_macvtap: entered promiscuous mode [ 110.027993][ T5994] veth1_macvtap: entered promiscuous mode [ 110.056207][ T6065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.071834][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.088655][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.099101][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.115403][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.127371][ T5994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.195362][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.207522][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.224747][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.235794][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.246520][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.258186][ T5994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.276024][ T5994] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.295417][ T5994] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.310392][ T5994] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.329505][ T5994] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.423839][ T6065] veth0_vlan: entered promiscuous mode [ 110.493193][ T6065] veth1_vlan: entered promiscuous mode [ 110.595338][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.638866][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.683738][ T6065] veth0_macvtap: entered promiscuous mode [ 110.714193][ T6065] veth1_macvtap: entered promiscuous mode [ 110.778027][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.810508][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.815008][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.837324][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.858186][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.878985][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.889255][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.909336][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.932862][ T6065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.971524][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.985915][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.022869][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.059362][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.069236][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.084635][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.098362][ T6065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.108168][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 111.149891][ T8] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 111.157509][ T8] usb 4-1: can't read configurations, error -71 [ 111.174068][ T6065] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.184624][ T6065] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.194676][ T6065] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.222321][ T6065] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.387151][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.406973][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.485796][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.507531][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.785175][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 112.897410][ T6251] netlink: 'syz.3.96': attribute type 13 has an invalid length. [ 113.040716][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 113.271464][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 114.896245][ T6299] netlink: 'syz.3.105': attribute type 13 has an invalid length. [ 114.927077][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'. [ 115.069053][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'. [ 115.192940][ T3427] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.342191][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'. [ 116.921588][ T3427] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.964314][ T6353] netlink: 'syz.2.119': attribute type 13 has an invalid length. [ 116.978484][ T5083] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 116.990422][ T5083] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 117.002544][ T5083] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 117.022064][ T5083] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 117.040362][ T5083] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 117.050958][ T5083] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 117.112465][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'. [ 117.240385][ T3427] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.384717][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'. [ 117.526283][ T3427] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.643865][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'. [ 118.835833][ T6356] chnl_net:caif_netlink_parms(): no params data found [ 118.937060][ T6403] netlink: 'syz.3.129': attribute type 13 has an invalid length. [ 119.109449][ T5776] Bluetooth: hci3: command tx timeout [ 119.485013][ T6356] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.500190][ T6430] binder: BINDER_SET_CONTEXT_MGR already set [ 119.517378][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.529469][ T6430] binder: 6429:6430 ioctl 4018620d 200000004a80 returned -16 [ 119.552462][ T6356] bridge_slave_0: entered allmulticast mode [ 119.580940][ T6356] bridge_slave_0: entered promiscuous mode [ 119.602413][ T6356] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.636634][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.660401][ T6356] bridge_slave_1: entered allmulticast mode [ 119.679400][ T6356] bridge_slave_1: entered promiscuous mode [ 119.848439][ T6356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.868165][ T6356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.419215][ T6356] team0: Port device team_slave_0 added [ 120.619165][ T6356] team0: Port device team_slave_1 added [ 120.895710][ T6356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.915404][ T6356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.969927][ T6356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.001436][ T6356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.008425][ T6356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.034343][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.087275][ T6356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.139364][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 121.194033][ T5776] Bluetooth: hci3: command tx timeout [ 121.454957][ T6356] hsr_slave_0: entered promiscuous mode [ 121.464151][ T6356] hsr_slave_1: entered promiscuous mode [ 121.498507][ T3427] hsr_slave_0: left promiscuous mode [ 121.551030][ T3427] hsr_slave_1: left promiscuous mode [ 121.593351][ T3427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.624458][ T3427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.662087][ T3427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.731418][ T3427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.804587][ T3427] bridge_slave_1: left allmulticast mode [ 121.851864][ T3427] bridge_slave_1: left promiscuous mode [ 121.886734][ T3427] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.939456][ T790] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 121.978253][ T3427] bridge_slave_0: left allmulticast mode [ 122.054155][ T3427] bridge_slave_0: left promiscuous mode [ 122.073799][ T3427] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.159475][ T790] usb 4-1: Using ep0 maxpacket: 16 [ 122.206471][ T790] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.258111][ T790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 122.294071][ T790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 122.336700][ T790] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 122.376100][ T790] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.404175][ T3427] veth1_macvtap: left promiscuous mode [ 122.428174][ T790] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 122.448511][ T790] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 122.471916][ T3427] veth0_macvtap: left promiscuous mode [ 122.479451][ T790] usb 4-1: Manufacturer: syz [ 122.542927][ T790] usb 4-1: config 0 descriptor?? [ 122.599601][ T3427] veth1_vlan: left promiscuous mode [ 122.605112][ T3427] veth0_vlan: left promiscuous mode [ 122.715613][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 122.736202][ T23] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 122.748515][ T6478] binder: BINDER_SET_CONTEXT_MGR already set [ 122.756870][ T6478] binder: 6477:6478 ioctl 4018620d 200000004a80 returned -16 [ 122.766546][ T23] usb 3-1: can't read configurations, error -71 [ 122.979685][ T790] rc_core: IR keymap rc-hauppauge not found [ 123.005237][ T790] Registered IR keymap rc-empty [ 123.022812][ T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 123.070594][ T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 123.127643][ T790] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 123.217587][ T790] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 123.268038][ T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 123.278800][ T5776] Bluetooth: hci3: command tx timeout [ 123.710269][ T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 123.992830][ T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 124.039751][ T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 124.079510][ T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 124.138346][ T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 124.187045][ T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 124.259543][ T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 124.309478][ T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 124.353192][ T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 124.396177][ T6496] Zero length message leads to an empty skb [ 124.410933][ T790] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 124.447993][ T790] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 124.500946][ T790] usb 4-1: USB disconnect, device number 5 [ 124.714013][ T5813] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 124.765702][ T3427] team0 (unregistering): Port device team_slave_1 removed [ 124.803654][ T3427] team0 (unregistering): Port device team_slave_0 removed [ 124.841494][ T3427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.876042][ T3427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.922378][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.936267][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.948062][ T5813] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.961379][ T5813] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.970841][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.987116][ T5813] usb 3-1: config 0 descriptor?? [ 125.294320][ T3427] bond0 (unregistering): Released all slaves [ 125.356903][ T5776] Bluetooth: hci3: command tx timeout [ 125.408579][ T5813] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 125.439261][ T5813] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 125.481466][ T5813] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 125.524129][ T6500] syz_tun: entered allmulticast mode [ 125.536239][ T6500] syz_tun: left allmulticast mode [ 125.735679][ T6508] binder: BINDER_SET_CONTEXT_MGR already set [ 125.758170][ T6508] binder: 6507:6508 ioctl 4018620d 200000004a80 returned -16 [ 126.328863][ T5847] usb 3-1: USB disconnect, device number 9 [ 127.252156][ T6356] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 127.291744][ T6356] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 127.311123][ T6356] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 127.332082][ T6356] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 127.439457][ T5847] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 127.509926][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 127.535741][ T6356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.575865][ T6356] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.603962][ T4311] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.611145][ T4311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.683716][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.690915][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.749458][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 127.783726][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.842133][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.888975][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 127.941137][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 128.013341][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.160665][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 128.234079][ T6356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.262371][ T8] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 128.298997][ T8] usb 4-1: Manufacturer: syz [ 128.341661][ T8] usb 4-1: config 0 descriptor?? [ 128.362639][ T6356] veth0_vlan: entered promiscuous mode [ 128.407216][ T6356] veth1_vlan: entered promiscuous mode [ 128.513483][ T6356] veth0_macvtap: entered promiscuous mode [ 128.572997][ T6356] veth1_macvtap: entered promiscuous mode [ 128.841294][ T6554] syz_tun: entered allmulticast mode [ 128.857371][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.888466][ T5847] usb 3-1: unable to get BOS descriptor or descriptor too short [ 128.903357][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.915906][ T5847] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 128.929983][ T5847] usb 3-1: can't read configurations, error -71 [ 128.939377][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.959663][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.989536][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.009361][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.031210][ T6356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.072498][ T6550] syz_tun: left allmulticast mode [ 129.088629][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.117108][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.137235][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.158137][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.169736][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.189429][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.243444][ T6356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.294044][ T6356] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.319374][ T6356] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.338410][ T6356] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.368625][ T6356] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.620039][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.627940][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.739090][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.779598][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.175278][ T6578] syzkaller0: entered promiscuous mode [ 130.187124][ T6578] syzkaller0: entered allmulticast mode [ 130.219546][ T5813] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 130.436422][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.527578][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.670046][ T5813] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.916500][ T5813] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.981897][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.050551][ T5813] usb 1-1: config 0 descriptor?? [ 131.110637][ T8] rc_core: IR keymap rc-hauppauge not found [ 131.116616][ T8] Registered IR keymap rc-empty [ 131.134600][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.170866][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.213745][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 131.235790][ T6587] syz_tun: entered allmulticast mode [ 131.248050][ T6586] syz_tun: left allmulticast mode [ 131.253629][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 131.299056][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.339587][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.384521][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.429486][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.469707][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.509532][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.522589][ T5813] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 131.547726][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.554611][ T5813] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 131.568226][ T6598] cgroup: fork rejected by pids controller in /syz2 [ 131.578639][ T5813] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 131.607800][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.651225][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.689476][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.740152][ T8] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 131.748819][ T8] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 131.781056][ T8] usb 4-1: USB disconnect, device number 6 [ 132.534075][ T4311] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.841049][ T790] usb 1-1: USB disconnect, device number 3 [ 132.880059][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.889417][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.985196][ T4311] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.095271][ T4311] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.239138][ T4311] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.773949][ T5083] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 133.786756][ T5083] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 133.796198][ T5083] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 133.813426][ T5083] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 133.828500][ T5083] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 133.844423][ T5083] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 134.479431][ T5813] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 134.516611][ T6656] syzkaller0: entered promiscuous mode [ 134.523838][ T6656] syzkaller0: entered allmulticast mode [ 134.709751][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.747912][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.783052][ T5813] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 134.819133][ T5813] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.867095][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.901353][ T5813] usb 1-1: config 0 descriptor?? [ 134.918332][ T6626] chnl_net:caif_netlink_parms(): no params data found [ 135.138961][ T6671] cgroup: fork rejected by pids controller in /syz3 [ 135.318938][ T5813] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 135.338692][ T5813] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 135.360897][ T5813] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 135.373755][ T5083] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 135.391806][ T5083] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 135.409522][ T5083] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 135.431489][ T5083] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 135.445168][ T5083] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 135.452694][ T5083] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 135.565289][ T4311] hsr_slave_0: left promiscuous mode [ 135.589250][ T4311] hsr_slave_1: left promiscuous mode [ 135.620765][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.639773][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.660283][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.667719][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.684207][ T4311] bridge_slave_1: left allmulticast mode [ 135.691751][ T4311] bridge_slave_1: left promiscuous mode [ 135.697518][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.709033][ T4311] bridge_slave_0: left allmulticast mode [ 135.720578][ T4311] bridge_slave_0: left promiscuous mode [ 135.726369][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.763950][ T4311] veth1_macvtap: left promiscuous mode [ 135.774593][ T4311] veth0_macvtap: left promiscuous mode [ 135.781648][ T4311] veth1_vlan: left promiscuous mode [ 135.787022][ T4311] veth0_vlan: left promiscuous mode [ 135.913608][ T5083] Bluetooth: hci0: command tx timeout [ 136.130130][ T5812] usb 1-1: USB disconnect, device number 4 [ 136.317430][ T4311] team0 (unregistering): Port device team_slave_1 removed [ 136.352623][ T4311] team0 (unregistering): Port device team_slave_0 removed [ 136.385798][ T4311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.426137][ T4311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.658827][ T4311] bond0 (unregistering): Released all slaves [ 136.751282][ T6626] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.758529][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.765809][ T6626] bridge_slave_0: entered allmulticast mode [ 136.773280][ T6626] bridge_slave_0: entered promiscuous mode [ 136.785725][ T6626] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.792973][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.800293][ T6626] bridge_slave_1: entered allmulticast mode [ 136.807484][ T6626] bridge_slave_1: entered promiscuous mode [ 136.903112][ T6626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.947987][ T6626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.015041][ T6626] team0: Port device team_slave_0 added [ 137.034231][ T6626] team0: Port device team_slave_1 added [ 137.184443][ T6626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.215613][ T6626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.249548][ T6626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.283757][ T6626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.305470][ T6626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.419352][ T6626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.509796][ T5083] Bluetooth: hci3: command tx timeout [ 137.620030][ T6626] hsr_slave_0: entered promiscuous mode [ 137.638109][ T6626] hsr_slave_1: entered promiscuous mode [ 137.656443][ T6626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.679431][ T6626] Cannot create hsr debugfs directory [ 137.916572][ T6707] chnl_net:caif_netlink_parms(): no params data found [ 138.008451][ T5083] Bluetooth: hci0: command tx timeout [ 138.098821][ T4311] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.140703][ T4311] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.196103][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.204629][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.213815][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.223537][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.249648][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 138.265309][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.297204][ T6822] binder: BINDER_SET_CONTEXT_MGR already set [ 138.306665][ T6822] binder: 6821:6822 ioctl 4018620d 200000004a80 returned -16 [ 138.317677][ T4311] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.328887][ T4311] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.419883][ T4311] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.434839][ T4311] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.522416][ T4311] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.549350][ T4311] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.640085][ T6707] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.647353][ T6707] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.661035][ T6707] bridge_slave_0: entered allmulticast mode [ 138.667928][ T6707] bridge_slave_0: entered promiscuous mode [ 138.677899][ T6707] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.685212][ T6707] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.694682][ T6707] bridge_slave_1: entered allmulticast mode [ 138.702443][ T6707] bridge_slave_1: entered promiscuous mode [ 138.880893][ T6707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.975982][ T6707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.055521][ T6707] team0: Port device team_slave_0 added [ 139.118259][ T6707] team0: Port device team_slave_1 added [ 139.244183][ T4311] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.364341][ T6707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.374012][ T6707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.401229][ T6707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.414577][ T6707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.422041][ T6707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.454128][ T6707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.494596][ T4311] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.574571][ T4311] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.595095][ T5083] Bluetooth: hci3: command tx timeout [ 139.727409][ T4311] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.753322][ T6626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 139.796396][ T6707] hsr_slave_0: entered promiscuous mode [ 139.810356][ T6707] hsr_slave_1: entered promiscuous mode [ 139.830156][ T6707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.837880][ T6707] Cannot create hsr debugfs directory [ 139.870590][ T6626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 139.945255][ T6626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 140.010369][ T6626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 140.079734][ T5083] Bluetooth: hci0: command tx timeout [ 140.106980][ T6817] chnl_net:caif_netlink_parms(): no params data found [ 140.321346][ T5083] Bluetooth: hci1: command tx timeout [ 140.589763][ T6864] loop2: detected capacity change from 0 to 7 [ 140.626773][ T6864] Dev loop2: unable to read RDB block 7 [ 140.638469][ T6864] loop2: AHDI p1 p2 p3 [ 140.646518][ T6864] loop2: partition table partially beyond EOD, truncated [ 140.665725][ T6864] loop2: p3 start 335544320 is beyond EOD, truncated [ 140.919178][ T6817] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.932190][ T6817] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.943242][ T6817] bridge_slave_0: entered allmulticast mode [ 140.954284][ T6817] bridge_slave_0: entered promiscuous mode [ 140.964834][ T6817] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.972627][ T6817] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.979937][ T6817] bridge_slave_1: entered allmulticast mode [ 140.986889][ T6817] bridge_slave_1: entered promiscuous mode [ 141.052753][ T6817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.069076][ T6626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.121102][ T6817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.185458][ T6626] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.241946][ T6817] team0: Port device team_slave_0 added [ 141.355788][ T6817] team0: Port device team_slave_1 added [ 141.369842][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.376992][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.394065][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.401249][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.558899][ T6817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.568206][ T6817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.595129][ T6817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.679521][ T5083] Bluetooth: hci3: command tx timeout [ 141.705509][ T6817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.729747][ T6817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.769658][ T6817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.888014][ T6707] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 141.898197][ T6707] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 141.938339][ T6817] hsr_slave_0: entered promiscuous mode [ 141.957590][ T6817] hsr_slave_1: entered promiscuous mode [ 141.972205][ T6817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.980091][ T6817] Cannot create hsr debugfs directory [ 142.028919][ T6707] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 142.054577][ T6707] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 142.149747][ T5083] Bluetooth: hci0: command tx timeout [ 142.389503][ T5083] Bluetooth: hci1: command tx timeout [ 142.690662][ T6894] syz.0.210[6894]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 142.838317][ T4311] hsr_slave_0: left promiscuous mode [ 142.856447][ T4311] hsr_slave_1: left promiscuous mode [ 142.863656][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.874699][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.882850][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.894253][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.903695][ T4311] bridge_slave_1: left allmulticast mode [ 142.915460][ T4311] bridge_slave_1: left promiscuous mode [ 142.921412][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.938925][ T4311] bridge_slave_0: left allmulticast mode [ 142.944817][ T4311] bridge_slave_0: left promiscuous mode [ 142.957651][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.976208][ T6897] binder: BINDER_SET_CONTEXT_MGR already set [ 142.983769][ T4311] hsr_slave_0: left promiscuous mode [ 142.984645][ T6897] binder: 6896:6897 ioctl 4018620d 200000000040 returned -16 [ 143.002902][ T4311] hsr_slave_1: left promiscuous mode [ 143.011786][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.019381][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.027316][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.035214][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.044200][ T4311] bridge_slave_1: left allmulticast mode [ 143.052589][ T4311] bridge_slave_1: left promiscuous mode [ 143.058274][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.072125][ T4311] bridge_slave_0: left allmulticast mode [ 143.077814][ T4311] bridge_slave_0: left promiscuous mode [ 143.086117][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.130113][ T4311] veth1_macvtap: left promiscuous mode [ 143.135692][ T4311] veth0_macvtap: left promiscuous mode [ 143.141914][ T4311] veth1_vlan: left promiscuous mode [ 143.147245][ T4311] veth0_vlan: left promiscuous mode [ 143.163283][ T4311] veth1_macvtap: left promiscuous mode [ 143.170109][ T4311] veth0_macvtap: left promiscuous mode [ 143.175814][ T4311] veth1_vlan: left promiscuous mode [ 143.189490][ T4311] veth0_vlan: left promiscuous mode [ 143.573277][ T4311] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 143.759591][ T5083] Bluetooth: hci3: command tx timeout [ 143.980511][ T4311] team0 (unregistering): Port device team_slave_1 removed [ 144.013997][ T4311] team0 (unregistering): Port device team_slave_0 removed [ 144.049471][ T4311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.084247][ T4311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.342748][ T4311] bond0 (unregistering): Released all slaves [ 144.479438][ T5083] Bluetooth: hci1: command tx timeout [ 144.754111][ T4311] team0 (unregistering): Port device team_slave_1 removed [ 144.792583][ T4311] team0 (unregistering): Port device team_slave_0 removed [ 144.827608][ T4311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.861961][ T4311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.106482][ T4311] bond0 (unregistering): Released all slaves [ 145.311906][ T6626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.432571][ T6707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.506210][ T6707] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.566943][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.574128][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.601252][ T6626] veth0_vlan: entered promiscuous mode [ 145.625204][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.632435][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.709225][ T6626] veth1_vlan: entered promiscuous mode [ 145.751416][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 145.855890][ T6817] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 145.884890][ T6817] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 145.906864][ T6817] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 145.930548][ T6817] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 145.959236][ T6626] veth0_macvtap: entered promiscuous mode [ 146.041957][ T6626] veth1_macvtap: entered promiscuous mode [ 146.138171][ T6626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.155373][ T6626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.168204][ T6626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.195451][ T6626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.214366][ T6626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.245105][ T6626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.305438][ T6626] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.332436][ T6626] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.346439][ T6626] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.355595][ T6626] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.466290][ T6817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.551624][ T5083] Bluetooth: hci1: command tx timeout [ 146.604065][ T6817] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.670019][ T3427] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.677243][ T3427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.726317][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.774967][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.891422][ T3427] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.898575][ T3427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.986034][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 146.993956][ T6707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.007408][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.026514][ T6817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 147.038273][ T6817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.049455][ T23] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 147.057239][ T23] usb 1-1: can't read configurations, error -71 [ 147.077640][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.199335][ T6707] veth0_vlan: entered promiscuous mode [ 147.236814][ T6707] veth1_vlan: entered promiscuous mode [ 147.325772][ T6707] veth0_macvtap: entered promiscuous mode [ 147.355518][ T6707] veth1_macvtap: entered promiscuous mode [ 147.413403][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.437147][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.466131][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.477619][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.489232][ T6707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.520214][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.540997][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.565459][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.593929][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.606160][ T6707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.665506][ T6707] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.691398][ T6707] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.712865][ T6707] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.729959][ T6707] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.783248][ T6817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.005304][ T6817] veth0_vlan: entered promiscuous mode [ 148.026472][ T3427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.070808][ T3427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.125467][ T6817] veth1_vlan: entered promiscuous mode [ 148.167976][ T3427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.181472][ T3427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.225580][ T6817] veth0_macvtap: entered promiscuous mode [ 148.255499][ T6817] veth1_macvtap: entered promiscuous mode [ 148.323394][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.359311][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.412359][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.440141][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.452120][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.465747][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.480856][ T6817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.524899][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.550402][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.584952][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.612802][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.649934][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.663744][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.675563][ T6817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.723215][ T6817] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.732882][ T6817] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.747052][ T6817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.759155][ T6817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.082129][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.119597][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.246137][ T6988] loop2: detected capacity change from 0 to 7 [ 149.269571][ T6988] Dev loop2: unable to read RDB block 7 [ 149.275901][ T6988] loop2: unable to read partition table [ 149.303423][ T6988] loop2: partition table beyond EOD, truncated [ 149.325470][ T6988] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 149.410932][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.444350][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.379131][ T7057] vivid-000: disconnect [ 152.094867][ T7053] vivid-000: reconnect [ 152.199422][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 152.395580][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.415130][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.479337][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.513690][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.541826][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.565648][ T8] usb 2-1: config 0 descriptor?? [ 153.010303][ T8] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 153.029239][ T8] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 153.055225][ T8] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 153.316054][ T790] usb 2-1: USB disconnect, device number 7 [ 153.548901][ T7104] binder: 7103:7104 ioctl 4018620d 0 returned -22 [ 154.059397][ T5812] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 154.259513][ T5812] usb 4-1: Using ep0 maxpacket: 16 [ 154.271781][ T5812] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.286481][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.309888][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 154.337885][ T5812] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 154.359080][ T5812] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.387447][ T5812] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 154.403273][ T5812] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 154.420963][ T5812] usb 4-1: Manufacturer: syz [ 154.437394][ T5812] usb 4-1: config 0 descriptor?? [ 154.849442][ T5812] rc_core: IR keymap rc-hauppauge not found [ 154.855410][ T5812] Registered IR keymap rc-empty [ 154.896008][ T5812] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 154.939595][ T5812] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 154.939841][ T7134] binder: 7132:7134 ioctl 4018620d 0 returned -22 [ 154.999337][ T5812] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 155.042251][ T5812] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 155.128600][ T5812] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 155.191345][ T5812] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 155.242499][ T5812] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 155.289760][ T5812] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 155.338619][ T5812] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 155.399538][ T5812] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 155.449535][ T5812] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 155.458558][ T7150] vivid-000: disconnect [ 155.463308][ T7149] vivid-000: reconnect [ 155.479535][ T5812] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 155.509560][ T5812] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 155.549586][ T5812] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 155.579578][ T56] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 155.601618][ T5812] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 155.610926][ T5812] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 155.626848][ T5812] usb 4-1: USB disconnect, device number 7 [ 155.781341][ T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.792462][ T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.802543][ T56] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 155.815493][ T56] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.824591][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.836012][ T56] usb 3-1: config 0 descriptor?? [ 156.270492][ T56] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 156.284451][ T56] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 156.302057][ T56] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 156.429092][ T7164] binder: BINDER_SET_CONTEXT_MGR already set [ 156.447373][ T7164] binder: 7163:7164 ioctl 4018620d 200000004a80 returned -16 [ 156.560880][ T5777] usb 3-1: USB disconnect, device number 12 [ 156.705990][ T7170] syz_tun: entered allmulticast mode [ 156.720233][ T7169] syz_tun: left allmulticast mode [ 157.239474][ T5847] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 157.271192][ T7189] binder: BINDER_SET_CONTEXT_MGR already set [ 157.277549][ T7189] binder: 7188:7189 ioctl 4018620d 200000004a80 returned -16 [ 157.459529][ T5847] usb 2-1: Using ep0 maxpacket: 16 [ 157.472797][ T5847] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.487442][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.499377][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 157.511501][ T5847] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 157.533795][ T5847] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.554612][ T5847] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 157.564759][ T5847] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 157.585532][ T5847] usb 2-1: Manufacturer: syz [ 157.607858][ T5847] usb 2-1: config 0 descriptor?? [ 157.655807][ T7195] syz_tun: entered allmulticast mode [ 157.666243][ T7194] syz_tun: left allmulticast mode [ 158.009617][ T5847] rc_core: IR keymap rc-hauppauge not found [ 158.026031][ T5847] Registered IR keymap rc-empty [ 158.037470][ T5847] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 158.079605][ T5847] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 158.121208][ T5847] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 158.167938][ T5847] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15 [ 158.193667][ T5847] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 158.229951][ T5847] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 158.260578][ T7209] binder: BINDER_SET_CONTEXT_MGR already set [ 158.266600][ T7209] binder: 7208:7209 ioctl 4018620d 200000004a80 returned -16 [ 158.280499][ T5847] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 158.322784][ T5847] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 158.363393][ T7211] syzkaller0: entered promiscuous mode [ 158.368980][ T7211] syzkaller0: entered allmulticast mode [ 158.379495][ T5847] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 158.409597][ T5847] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 158.443026][ T5812] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 158.453207][ T5847] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 158.499672][ T5847] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 158.560298][ T5847] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 158.588862][ T7215] syz_tun: entered allmulticast mode [ 158.601943][ T7214] syz_tun: left allmulticast mode [ 158.604746][ T5847] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 158.641793][ T5847] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 158.650986][ T5847] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 158.665961][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.681279][ T5847] usb 2-1: USB disconnect, device number 8 [ 158.687285][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.701098][ T5812] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 158.755450][ T5812] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 158.767843][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.778837][ T5812] usb 3-1: config 0 descriptor?? [ 159.160563][ T7232] vivid-000: disconnect [ 159.165207][ T7231] vivid-000: reconnect [ 159.200091][ T5812] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 159.238090][ T5812] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 159.258942][ T5812] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 159.363495][ T7239] netlink: 'syz.1.311': attribute type 13 has an invalid length. [ 159.471556][ T790] usb 3-1: USB disconnect, device number 13 [ 159.578362][ T7244] syz_tun: entered allmulticast mode [ 159.587511][ T7243] syz_tun: left allmulticast mode [ 159.961408][ T7259] vivid-000: disconnect [ 159.965990][ T7258] vivid-000: reconnect [ 160.259424][ T790] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 160.304577][ T7271] netlink: 'syz.3.323': attribute type 13 has an invalid length. [ 160.469444][ T790] usb 1-1: Using ep0 maxpacket: 16 [ 160.479570][ T790] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.499605][ T790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 160.527787][ T790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 160.547749][ T790] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 160.567574][ T790] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.596923][ T790] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 160.633826][ T790] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 160.662342][ T790] usb 1-1: Manufacturer: syz [ 160.687518][ T790] usb 1-1: config 0 descriptor?? [ 161.089448][ T790] rc_core: IR keymap rc-hauppauge not found [ 161.095424][ T790] Registered IR keymap rc-empty [ 161.125535][ T790] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.138106][ T7289] vivid-000: disconnect [ 161.149882][ T7288] vivid-000: reconnect [ 161.169451][ T790] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.205105][ T790] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 161.241234][ T790] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input17 [ 161.286722][ T790] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.362171][ T790] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.411227][ T790] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.453619][ T790] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.499460][ T790] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.562799][ T790] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.609464][ T790] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.657328][ T790] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.689618][ T5777] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 161.701740][ T790] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.741247][ T790] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.777461][ T790] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 161.797017][ T790] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 161.836990][ T790] usb 1-1: USB disconnect, device number 7 [ 161.891297][ T5777] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.909210][ T7300] netlink: 'syz.1.334': attribute type 13 has an invalid length. [ 161.930117][ T5777] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.951497][ T5777] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.976853][ T5777] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.986540][ T5777] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.010702][ T5777] usb 4-1: config 0 descriptor?? [ 162.246025][ T7309] loop2: detected capacity change from 0 to 7 [ 162.265872][ T7309] Dev loop2: unable to read RDB block 7 [ 162.272098][ T7309] loop2: AHDI p1 p2 p3 [ 162.276380][ T7309] loop2: partition table partially beyond EOD, truncated [ 162.284611][ T7309] loop2: p3 start 335544320 is beyond EOD, truncated [ 162.333949][ T7311] vivid-000: disconnect [ 162.338643][ T7310] vivid-000: reconnect [ 162.422118][ T5777] usbhid 4-1:0.0: can't add hid device: -71 [ 162.428220][ T5777] usbhid: probe of 4-1:0.0 failed with error -71 [ 162.448167][ T5777] usb 4-1: USB disconnect, device number 8 [ 162.470185][ T7313] syzkaller0: entered promiscuous mode [ 162.475677][ T7313] syzkaller0: entered allmulticast mode [ 162.719378][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 162.877930][ T7328] netlink: 'syz.0.345': attribute type 13 has an invalid length. [ 163.139661][ T5777] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 163.202787][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 163.220826][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 163.231392][ T9] usb 2-1: can't read configurations, error -71 [ 163.274817][ T7336] vivid-000: disconnect [ 163.279631][ T7335] vivid-000: reconnect [ 163.327919][ T7338] syzkaller0: entered promiscuous mode [ 163.333490][ T7338] syzkaller0: entered allmulticast mode [ 163.339906][ T5777] usb 3-1: Using ep0 maxpacket: 16 [ 163.357905][ T5777] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.369582][ T5777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 163.382917][ T5777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 163.403148][ T5777] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 163.429995][ T5777] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.460019][ T5777] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 163.469092][ T5777] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 163.500216][ T5777] usb 3-1: Manufacturer: syz [ 163.525530][ T5777] usb 3-1: config 0 descriptor?? [ 163.879441][ T5777] rc_core: IR keymap rc-hauppauge not found [ 163.896699][ T5777] Registered IR keymap rc-empty [ 163.911671][ T5777] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 163.960069][ T5777] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 164.003904][ T5777] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 164.049512][ T5777] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input18 [ 164.106028][ T5777] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 164.149491][ T5777] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 164.164024][ T7352] binder: BINDER_SET_CONTEXT_MGR already set [ 164.181680][ T7352] binder: 7351:7352 ioctl 4018620d 200000004a80 returned -16 [ 164.189418][ T5777] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 164.229888][ T5777] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 164.270075][ T5777] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 164.309610][ T5777] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 164.359544][ T5777] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 164.411246][ T5777] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 164.439510][ T5777] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 164.479482][ T5777] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 164.511039][ T5777] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 164.530629][ T5777] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 164.553604][ T5777] usb 3-1: USB disconnect, device number 14 [ 164.639629][ T5847] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 164.735048][ T7365] vivid-000: disconnect [ 164.744787][ T7364] vivid-000: reconnect [ 164.798232][ T7367] syzkaller0: entered promiscuous mode [ 164.804451][ T7367] syzkaller0: entered allmulticast mode [ 164.864109][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.876419][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.904433][ T5847] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 164.923747][ T5847] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.933489][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.954326][ T5847] usb 2-1: config 0 descriptor?? [ 165.040382][ T7373] binder: BINDER_SET_CONTEXT_MGR already set [ 165.047137][ T7373] binder: 7372:7373 ioctl 4018620d 200000004a80 returned -16 [ 165.209465][ T28] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 165.388446][ T5847] usbhid 2-1:0.0: can't add hid device: -71 [ 165.409547][ T5847] usbhid: probe of 2-1:0.0 failed with error -71 [ 165.446057][ T5847] usb 2-1: USB disconnect, device number 11 [ 165.810324][ T28] usb 4-1: unable to get BOS descriptor or descriptor too short [ 165.826453][ T28] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 165.840655][ T28] usb 4-1: can't read configurations, error -71 [ 166.189940][ T7386] vivid-000: disconnect [ 166.199799][ T7385] vivid-000: reconnect [ 166.523315][ T7399] syzkaller0: entered promiscuous mode [ 166.529000][ T7399] syzkaller0: entered allmulticast mode [ 166.580016][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 166.789794][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 166.797598][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.819462][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.832128][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 166.843745][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 166.853533][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.880886][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 166.895183][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 166.907377][ T9] usb 3-1: Manufacturer: syz [ 166.924517][ T9] usb 3-1: config 0 descriptor?? [ 167.089731][ T28] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 167.259412][ T9] rc_core: IR keymap rc-hauppauge not found [ 167.265460][ T9] Registered IR keymap rc-empty [ 167.275703][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 167.311249][ T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.319613][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 167.343262][ T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.356263][ T28] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.370259][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 167.377825][ T28] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.397518][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.409599][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input19 [ 167.418058][ T28] usb 4-1: config 0 descriptor?? [ 167.469552][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 167.499549][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 167.551738][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 167.595126][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 167.640799][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 167.670913][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 167.714295][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 167.769409][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 167.810005][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 167.839425][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 167.853063][ T28] usbhid 4-1:0.0: can't add hid device: -71 [ 167.869450][ T28] usbhid: probe of 4-1:0.0 failed with error -71 [ 167.881757][ T28] usb 4-1: USB disconnect, device number 11 [ 167.891127][ T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 167.932302][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 167.976086][ T9] usb 3-1: USB disconnect, device number 15 [ 168.410849][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 168.428243][ T7429] syzkaller0: entered promiscuous mode [ 168.447918][ T7429] syzkaller0: entered allmulticast mode [ 170.149413][ T5777] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 170.270994][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 170.289671][ T8] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 170.305660][ T8] usb 1-1: can't read configurations, error -71 [ 170.389429][ T5777] usb 3-1: Using ep0 maxpacket: 16 [ 170.401143][ T5777] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.419380][ T5777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 170.439327][ T5777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 170.457210][ T5777] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 170.473749][ T5777] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.488928][ T5777] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 170.498236][ T5777] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 170.522282][ T5777] usb 3-1: Manufacturer: syz [ 170.538730][ T5777] usb 3-1: config 0 descriptor?? [ 170.879389][ T5777] rc_core: IR keymap rc-hauppauge not found [ 170.885353][ T5777] Registered IR keymap rc-empty [ 170.924574][ T5777] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 170.969379][ T5777] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 171.010300][ T5777] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 171.049608][ T5777] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input20 [ 171.306459][ T5777] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 172.004698][ T7479] syz_tun: entered allmulticast mode [ 172.024654][ T7479] syz_tun: left allmulticast mode [ 172.084088][ T5777] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 172.119403][ T5777] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 172.155649][ T5777] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 172.209518][ T5777] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 172.248751][ T5777] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 172.257156][ T7484] syzkaller0: entered promiscuous mode [ 172.266797][ T7484] syzkaller0: entered allmulticast mode [ 172.289563][ T5777] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 172.341045][ T5777] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 172.389527][ T5777] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 172.435479][ T5777] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 172.491013][ T5777] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 172.507954][ T5777] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 172.536220][ T5777] usb 3-1: USB disconnect, device number 16 [ 173.768851][ T5884] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 174.169427][ T28] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 174.393700][ T28] usb 4-1: Using ep0 maxpacket: 16 [ 174.410559][ T28] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.420859][ T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.432073][ T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 174.442135][ T28] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 174.455408][ T28] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.473560][ T28] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 174.506187][ T5884] usb 1-1: unable to get BOS descriptor or descriptor too short [ 174.514357][ T28] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 174.533790][ T5884] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 174.543337][ T28] usb 4-1: Manufacturer: syz [ 174.564093][ T28] usb 4-1: config 0 descriptor?? [ 174.574307][ T5884] usb 1-1: can't read configurations, error -71 [ 174.788054][ T7528] syz_tun: entered allmulticast mode [ 174.801031][ T7528] syz_tun: left allmulticast mode [ 174.962038][ T28] rc_core: IR keymap rc-hauppauge not found [ 174.974887][ T28] Registered IR keymap rc-empty [ 174.981319][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 175.032558][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 175.080349][ T28] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 175.237486][ T28] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input21 [ 175.267273][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 176.057635][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 176.099432][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 176.116125][ T7544] syzkaller0: entered promiscuous mode [ 176.135941][ T7544] syzkaller0: entered allmulticast mode [ 176.149881][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 176.189413][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 176.228302][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 176.261626][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 176.309716][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 176.344850][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 176.393116][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 176.460982][ T28] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 176.482254][ T28] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 176.520446][ T28] usb 4-1: USB disconnect, device number 12 [ 176.909343][ T5847] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 177.761155][ T5847] usb 2-1: unable to get BOS descriptor or descriptor too short [ 177.776534][ T5847] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 177.786683][ T5847] usb 2-1: can't read configurations, error -71 [ 177.958006][ T7580] syzkaller0: entered promiscuous mode [ 177.973156][ T7580] syzkaller0: entered allmulticast mode [ 179.605749][ T7614] syzkaller0: entered promiscuous mode [ 179.619546][ T7614] syzkaller0: entered allmulticast mode [ 179.724154][ T7618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.451'. [ 179.930730][ T7631] syzkaller0: entered promiscuous mode [ 179.949361][ T7631] syzkaller0: entered allmulticast mode [ 181.223216][ T7649] binder: 7648:7649 ioctl 4018620d 0 returned -22 [ 181.495303][ T7660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.467'. [ 182.726014][ T7681] binder: 7680:7681 ioctl 4018620d 0 returned -22 [ 183.220557][ T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 183.326647][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.480'. [ 183.431685][ T8] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 183.457075][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.488912][ T8] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 183.507227][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.526486][ T8] usb 2-1: Product: syz [ 183.534325][ T8] usb 2-1: Manufacturer: syz [ 183.543581][ T8] usb 2-1: SerialNumber: syz [ 183.566951][ T8] usb 2-1: config 0 descriptor?? [ 183.591129][ T8] ims_pcu 2-1:0.0: Missing CDC union descriptor [ 183.614372][ T8] ims_pcu: probe of 2-1:0.0 failed with error -22 [ 184.286727][ T7689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.320077][ T7689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.482850][ T790] usb 2-1: USB disconnect, device number 14 [ 184.492433][ T7713] binder: 7712:7713 ioctl 4018620d 0 returned -22 [ 184.912530][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.491'. [ 185.560275][ T790] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 185.848758][ T7744] binder: BINDER_SET_CONTEXT_MGR already set [ 185.966610][ T7744] binder: 7742:7744 ioctl 4018620d 200000000040 returned -16 [ 186.202897][ T790] usb 1-1: unable to get BOS descriptor or descriptor too short [ 186.218071][ T790] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 186.241040][ T790] usb 1-1: can't read configurations, error -71 [ 186.797401][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'. [ 187.185813][ T7780] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.509'. [ 187.489519][ T28] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 187.679366][ T28] usb 2-1: Using ep0 maxpacket: 16 [ 187.686760][ T28] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.712273][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 187.719698][ T5777] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 187.733951][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 187.745890][ T28] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 187.768219][ T28] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.797668][ T28] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 187.811248][ T28] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 187.825105][ T28] usb 2-1: Manufacturer: syz [ 187.833404][ T28] usb 2-1: config 0 descriptor?? [ 187.994180][ T5777] usb 3-1: unable to get BOS descriptor or descriptor too short [ 188.018145][ T5777] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 188.032392][ T5777] usb 3-1: can't read configurations, error -71 [ 188.045230][ T7800] fuse: Unknown parameter 'f^3æeM' [ 188.154440][ T28] rc_core: IR keymap rc-hauppauge not found [ 188.165364][ T28] Registered IR keymap rc-empty [ 188.172100][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 188.209478][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 188.242283][ T28] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 188.268195][ T28] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input22 [ 188.292072][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 188.329630][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 188.373572][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 188.422063][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 188.469562][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 188.500179][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 188.560337][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 188.607542][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 188.644104][ T7808] netlink: 'syz.3.518': attribute type 13 has an invalid length. [ 188.652089][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 188.689463][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 188.717176][ T7811] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.520'. [ 188.736633][ T28] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 188.759337][ T28] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 188.793107][ T28] usb 2-1: USB disconnect, device number 15 [ 188.861021][ T7814] input: syz1 as /devices/virtual/input/input23 [ 189.095305][ T7821] binder: 7820:7821 ioctl c0306201 0 returned -14 [ 189.252573][ T7826] syz.3.526 uses obsolete (PF_INET,SOCK_PACKET) [ 189.270885][ T7826] netlink: 'syz.3.526': attribute type 2 has an invalid length. [ 189.441068][ T7834] binder: BINDER_SET_CONTEXT_MGR already set [ 189.454288][ T7834] binder: 7829:7834 ioctl 4018620d 200000000040 returned -16 [ 189.629542][ T28] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 189.856561][ T28] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.947927][ T28] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 190.084578][ T28] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.111719][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 190.132143][ T28] usb 1-1: SerialNumber: syz [ 190.245190][ T28] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 190.432347][ T7841] syzkaller0: entered promiscuous mode [ 190.459403][ T7841] syzkaller0: entered allmulticast mode [ 190.748998][ T7845] netlink: 'syz.3.532': attribute type 13 has an invalid length. [ 190.905104][ T9] usb 1-1: USB disconnect, device number 14 [ 191.083970][ T7854] binder: 7853:7854 ioctl c0306201 0 returned -14 [ 191.290054][ T28] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 191.321755][ T7863] binder: 7861:7863 ioctl c0306201 0 returned -14 [ 191.489382][ T28] usb 3-1: Using ep0 maxpacket: 16 [ 191.509338][ T28] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.549455][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 191.569444][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 191.589455][ T28] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 191.610301][ T28] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.631024][ T28] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 191.644582][ T28] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 191.662381][ T28] usb 3-1: Manufacturer: syz [ 191.685111][ T28] usb 3-1: config 0 descriptor?? [ 191.858985][ T7875] syzkaller0: entered promiscuous mode [ 191.875357][ T7875] syzkaller0: entered allmulticast mode [ 192.012300][ T7878] netlink: 'syz.1.543': attribute type 13 has an invalid length. [ 192.070010][ T28] rc_core: IR keymap rc-hauppauge not found [ 192.079491][ T28] Registered IR keymap rc-empty [ 192.084607][ T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 192.120043][ T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 192.160356][ T28] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 192.207161][ T28] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input24 [ 192.246866][ T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 192.290698][ T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 192.359475][ T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 192.389433][ T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 192.459503][ T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 192.529440][ T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 192.569511][ T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 192.610073][ T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 192.642352][ T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 192.689989][ T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 192.713298][ T7890] binder: 7889:7890 ioctl c0306201 0 returned -14 [ 192.753719][ T28] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 192.764688][ T28] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 192.781694][ T28] usb 3-1: USB disconnect, device number 19 [ 192.973388][ T7900] syzkaller0: entered promiscuous mode [ 192.979129][ T7900] syzkaller0: entered allmulticast mode [ 193.050141][ T7903] netlink: 'syz.3.553': attribute type 13 has an invalid length. [ 193.494389][ T7921] binder: 7920:7921 ioctl c0306201 0 returned -14 [ 193.681585][ T5812] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 193.720801][ T7926] syz_tun: entered allmulticast mode [ 193.738910][ T7925] syz_tun: left allmulticast mode [ 193.879333][ T5812] usb 3-1: Using ep0 maxpacket: 8 [ 193.894857][ T5812] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 193.911598][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.929240][ T5812] usb 3-1: Product: syz [ 193.942429][ T5812] usb 3-1: Manufacturer: syz [ 193.947153][ T5812] usb 3-1: SerialNumber: syz [ 193.974522][ T5812] usb 3-1: config 0 descriptor?? [ 193.992890][ T5812] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 194.001497][ T7932] syzkaller0: entered promiscuous mode [ 194.006996][ T7932] syzkaller0: entered allmulticast mode [ 194.016713][ T5812] pctv452e: pctv452e_power_ctrl: 1 [ 194.016713][ T5812] [ 194.025581][ T5812] usb 3-1: selecting invalid altsetting 3 [ 194.037471][ T5812] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 194.037471][ T5812] [ 194.059835][ T5812] dvb-usb: bulk message failed: -22 (5/0) [ 194.091030][ T5812] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 194.119811][ T5812] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 194.130184][ T5812] usb 3-1: media controller created [ 194.136032][ T5812] dvb-usb: bulk message failed: -22 (8/0) [ 194.159752][ T5812] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 194.179717][ T5812] dvb-usb: MAC address reading failed. [ 194.232570][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.314124][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.329223][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.419133][ T7940] netlink: 'syz.3.568': attribute type 13 has an invalid length. [ 194.461986][ T5812] DVB: Unable to find symbol stb0899_attach() [ 194.498823][ T5812] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 194.659502][ T5812] rc_core: IR keymap rc-tt-1500 not found [ 194.665282][ T5812] Registered IR keymap rc-empty [ 194.690450][ T5812] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 194.711706][ T5812] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input25 [ 194.728119][ T5812] dvb-usb: schedule remote query interval to 100 msecs. [ 194.735209][ T5812] pctv452e: pctv452e_power_ctrl: 0 [ 194.735209][ T5812] [ 194.759385][ T5812] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 194.797469][ T5812] usb 3-1: USB disconnect, device number 20 [ 194.978148][ T5812] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 195.041642][ T7960] netlink: 40 bytes leftover after parsing attributes in process `syz.1.574'. [ 195.141847][ T7966] syzkaller0: entered promiscuous mode [ 195.147351][ T7966] syzkaller0: entered allmulticast mode [ 196.251199][ T7971] ptrace attach of ""[7974] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7971] [ 196.301964][ T7978] netlink: 'syz.2.581': attribute type 13 has an invalid length. [ 196.345648][ T27] kauditd_printk_skb: 67 callbacks suppressed [ 196.345660][ T27] audit: type=1800 audit(1785991934.183:79): pid=7975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.579" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 197.359142][ T8007] netlink: 'syz.2.592': attribute type 13 has an invalid length. [ 197.802077][ T8012] netlink: 14 bytes leftover after parsing attributes in process `syz.0.594'. [ 197.809564][ T5777] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 198.027020][ T5777] usb 4-1: unable to get BOS descriptor or descriptor too short [ 198.046166][ T5777] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 198.069925][ T5777] usb 4-1: can't read configurations, error -71 [ 198.383674][ T8034] netlink: 'syz.2.604': attribute type 13 has an invalid length. [ 199.259948][ T8065] netlink: 'syz.3.616': attribute type 13 has an invalid length. [ 199.440175][ T5777] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 199.690017][ T5777] usb 1-1: unable to get BOS descriptor or descriptor too short [ 199.715674][ T5777] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 199.734439][ T5777] usb 1-1: can't read configurations, error -71 [ 201.329727][ T5884] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 201.548309][ T5884] usb 1-1: unable to get BOS descriptor or descriptor too short [ 201.575436][ T5884] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 201.603125][ T5884] usb 1-1: can't read configurations, error -71 [ 201.977583][ T8130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.644'. [ 202.458986][ T8150] IPv6: sit1: Disabled Multicast RS [ 202.467244][ T8150] sit1: entered allmulticast mode [ 202.513628][ T8152] netlink: 'syz.0.654': attribute type 13 has an invalid length. [ 202.749379][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 202.944702][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.659'. [ 202.970332][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 202.995311][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 203.021762][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.659'. [ 203.029781][ T9] usb 2-1: can't read configurations, error -71 [ 203.072850][ T8169] warning: `syz.0.660' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 203.238462][ T8173] tipc: Started in network mode [ 203.257559][ T8173] tipc: Node identity 1, cluster identity 4711 [ 203.266302][ T8173] tipc: Node number set to 1 [ 203.276264][ T8173] tipc: New replicast peer: 127.0.0.2 [ 203.287842][ T8173] tipc: Enabled bearer , priority 10 [ 203.306322][ T8173] tipc: Disabling bearer [ 203.424827][ T8174] ipt_REJECT: ECHOREPLY no longer supported. [ 203.516381][ T8175] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 204.096970][ T8194] xt_hashlimit: size too large, truncated to 1048576 [ 205.029588][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 205.229483][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 205.236720][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 205.256171][ T9] usb 4-1: config 0 has no interface number 0 [ 205.283793][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 205.303821][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.336572][ T9] usb 4-1: Product: syz [ 205.355998][ T9] usb 4-1: Manufacturer: syz [ 205.373756][ T9] usb 4-1: SerialNumber: syz [ 205.407508][ T9] usb 4-1: config 0 descriptor?? [ 205.446021][ T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 205.658688][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 205.706158][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 206.069053][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 206.073612][ T5884] usb 4-1: USB disconnect, device number 15 [ 206.105100][ T5884] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 206.153950][ T5884] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 206.191413][ T5884] quatech2 4-1:0.51: device disconnected [ 207.313693][ T5812] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 207.511062][ T5812] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 207.545214][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.567664][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.582589][ T5812] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 207.598470][ T5812] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 207.612470][ T5812] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 207.620744][ T5812] usb 3-1: Manufacturer: syz [ 207.636051][ T5812] usb 3-1: config 0 descriptor?? [ 207.931850][ T8285] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.695'. [ 208.065566][ T5812] usbhid 3-1:0.0: can't add hid device: -71 [ 208.076544][ T5812] usbhid: probe of 3-1:0.0 failed with error -71 [ 208.086637][ T5812] usb 3-1: USB disconnect, device number 21 [ 208.289608][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 208.309461][ T790] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 208.469402][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 208.478043][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 208.487407][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.495618][ T9] usb 4-1: Product: syz [ 208.501625][ T9] usb 4-1: Manufacturer: syz [ 208.506312][ T9] usb 4-1: SerialNumber: syz [ 208.527486][ T9] usb 4-1: config 0 descriptor?? [ 208.539410][ T790] usb 1-1: unable to get BOS descriptor or descriptor too short [ 208.550730][ T9] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 208.565765][ T790] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 208.583325][ T790] usb 1-1: can't read configurations, error -71 [ 208.880771][ T8307] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.705'. [ 209.070166][ T8] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 209.269444][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 209.285379][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 209.296494][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 209.307908][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 209.320490][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 209.331181][ T8] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 209.340446][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.348555][ T8] usb 2-1: Product: syz [ 209.357957][ T8] usb 2-1: Manufacturer: syz [ 209.364359][ T8] usb 2-1: SerialNumber: syz [ 209.375250][ T8] usb 2-1: config 0 descriptor?? [ 209.385800][ T8305] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 209.400302][ T8] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 209.628126][ T9] ssu100: probe of 4-1:0.0 failed with error -71 [ 209.645326][ T9] usb 4-1: USB disconnect, device number 16 [ 209.656497][ T8318] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 209.675276][ T8] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 209.711884][ T8] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 209.725372][ T8] snd_usb_toneport: probe of 2-1:0.0 failed with error -22 [ 210.238191][ T8329] tipc: Started in network mode [ 210.243652][ T8329] tipc: Node identity 1, cluster identity 4711 [ 210.252609][ T8329] tipc: Node number set to 1 [ 210.259239][ T8329] tipc: New replicast peer: 127.0.0.2 [ 210.266912][ T8329] tipc: Enabled bearer , priority 10 [ 210.278649][ T8329] tipc: Disabling bearer [ 210.418831][ T8332] ipt_REJECT: ECHOREPLY no longer supported. [ 210.440628][ T8332] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 210.759679][ T5847] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 210.978233][ T5847] usb 1-1: unable to get BOS descriptor or descriptor too short [ 210.988565][ T5847] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 211.005574][ T5847] usb 1-1: can't read configurations, error -71 [ 211.026268][ T8351] netlink: 'syz.2.724': attribute type 13 has an invalid length. [ 211.852149][ T5884] usb 2-1: USB disconnect, device number 18 [ 211.932842][ T8364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.729'. [ 212.429050][ T8378] netlink: 'syz.1.733': attribute type 13 has an invalid length. [ 212.463078][ T8378] netlink: 48 bytes leftover after parsing attributes in process `syz.1.733'. [ 212.929386][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 213.119364][ T8] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 213.383606][ T8403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.421982][ T8403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.635080][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 213.655334][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 213.678855][ T9] usb 3-1: can't read configurations, error -71 [ 213.900931][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 213.936264][ T8] usb 2-1: no configurations [ 213.944678][ T8] usb 2-1: can't read configurations, error -22 [ 214.354841][ T8423] netlink: 'syz.0.746': attribute type 13 has an invalid length. [ 214.364020][ T8423] netlink: 48 bytes leftover after parsing attributes in process `syz.0.746'. [ 214.809477][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 214.968802][ T8440] netlink: 24 bytes leftover after parsing attributes in process `syz.3.753'. [ 214.985272][ T8440] ------------[ cut here ]------------ [ 214.991095][ T8440] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 215.008414][ T8440] WARNING: CPU: 1 PID: 8440 at net/sched/cls_u32.c:855 u32_change+0x1ce8/0x2690 [ 215.017563][ T8440] Modules linked in: [ 215.021686][ T8440] CPU: 1 PID: 8440 Comm: syz.3.753 Not tainted syzkaller #0 [ 215.029000][ T8440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.039141][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 215.039136][ T8440] RIP: 0010:u32_change+0x1ce8/0x2690 [ 215.049654][ T8440] Code: f8 eb 59 e8 0a 71 d1 f8 c6 05 34 03 c1 05 01 b9 10 00 00 00 48 c7 c7 e0 2d c8 8b 4c 89 fe 48 c7 c2 60 2e c8 8b e8 98 3e 9b f8 <0f> 0b e9 1f f0 ff ff e8 dc 70 d1 f8 eb 24 e8 d5 70 d1 f8 c6 05 b9 [ 215.053921][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.070325][ T8440] RSP: 0018:ffffc90004176d60 EFLAGS: 00010246 [ 215.085931][ T8440] RAX: b2b3fcf204a24400 RBX: ffff88805da02000 RCX: 0000000000080000 [ 215.094112][ T8440] RDX: ffffc9000ccfa000 RSI: 0000000000006728 RDI: 0000000000006729 [ 215.102141][ T8440] RBP: ffffc90004176ef8 R08: ffffc90004176967 R09: 1ffff9200082ed2c [ 215.110273][ T8440] R10: dffffc0000000000 R11: fffff5200082ed2d R12: 1ffff9200082edbc [ 215.118282][ T8440] R13: ffff8880690d50e8 R14: ffff888054eb9dc0 R15: 0000000000000020 [ 215.126323][ T8440] FS: 00007fda64e8e6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 215.134600][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 215.135325][ T8440] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.153293][ T8440] CR2: 000000110c3d7008 CR3: 0000000067483000 CR4: 00000000003506e0 [ 215.161423][ T8440] Call Trace: [ 215.164767][ T8440] [ 215.167743][ T8440] ? u32_get+0x370/0x370 [ 215.172083][ T8440] tc_new_tfilter+0x1109/0x1820 [ 215.175658][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 215.176977][ T8440] ? tcf_proto_signal_destroying+0x240/0x240 [ 215.192828][ T8440] ? rcu_read_unlock+0x8c/0xa0 [ 215.197636][ T8440] ? tcf_proto_signal_destroying+0x240/0x240 [ 215.203692][ T8440] ? tcf_proto_signal_destroying+0x240/0x240 [ 215.209737][ T8440] rtnetlink_rcv_msg+0x892/0xf90 [ 215.213175][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 215.214701][ T8440] ? rtnetlink_rcv_msg+0x220/0xf90 [ 215.214734][ T8440] ? rtnetlink_bind+0x80/0x80 [ 215.234265][ T8440] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 215.240309][ T8440] ? lock_chain_count+0x20/0x20 [ 215.245207][ T8440] ? __local_bh_enable_ip+0x13a/0x1c0 [ 215.250672][ T8440] ? lockdep_hardirqs_on+0x98/0x150 [ 215.256415][ T8440] ? __local_bh_enable_ip+0x13a/0x1c0 [ 215.261961][ T8440] ? _local_bh_enable+0xa0/0xa0 [ 215.266046][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.266839][ T8440] ? __dev_queue_xmit+0x275/0x3630 [ 215.266874][ T8440] ? __dev_queue_xmit+0x1bc2/0x3630 [ 215.290481][ T8440] ? __dev_queue_xmit+0x275/0x3630 [ 215.293945][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 215.295631][ T8440] ? ref_tracker_free+0x686/0x830 [ 215.309831][ T8440] netlink_rcv_skb+0x235/0x4c0 [ 215.314627][ T8440] ? rtnetlink_bind+0x80/0x80 [ 215.315993][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 215.319353][ T8440] ? netlink_ack+0x1160/0x1160 [ 215.319387][ T8440] ? __lock_acquire+0x7d80/0x7d80 [ 215.319417][ T8440] ? netlink_deliver_tap+0x2e/0x1b0 [ 215.319442][ T8440] netlink_unicast+0x7b1/0x930 [ 215.347318][ T8440] netlink_sendmsg+0x8d0/0xbf0 [ 215.352189][ T8440] ? netlink_getsockopt+0x590/0x590 [ 215.358087][ T8440] ? apparmor_socket_sendmsg+0x8e/0x330 [ 215.363840][ T8440] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 215.369187][ T8440] ? security_socket_sendmsg+0x80/0xa0 [ 215.370880][ T9] usb 3-1: Manufacturer: syz [ 215.374706][ T8440] ? netlink_getsockopt+0x590/0x590 [ 215.384562][ T8440] ____sys_sendmsg+0x61b/0x980 [ 215.389536][ T8440] ? __asan_memset+0x22/0x40 [ 215.394179][ T8440] ? __sys_sendmsg_sock+0x30/0x30 [ 215.399316][ T8440] ? __import_iovec+0x5f2/0x850 [ 215.404250][ T8440] ? import_iovec+0x73/0xa0 [ 215.408821][ T8440] ___sys_sendmsg+0x2a6/0x360 [ 215.413577][ T8440] ? __sys_sendmsg+0x2b0/0x2b0 [ 215.415047][ T9] usb 3-1: config 0 descriptor?? [ 215.418408][ T8440] __sys_sendmmsg+0x2ca/0x510 [ 215.428096][ T8440] ? __ia32_sys_sendmsg+0x90/0x90 [ 215.433226][ T8440] ? __ia32_sys_get_robust_list+0x110/0x110 [ 215.439168][ T8440] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 215.445221][ T8440] ? lock_chain_count+0x20/0x20 [ 215.450140][ T8440] __x64_sys_sendmmsg+0xa0/0xb0 [ 215.455031][ T8440] do_syscall_64+0x55/0xb0 [ 215.459531][ T8440] ? clear_bhb_loop+0x40/0x90 [ 215.464809][ T8440] ? clear_bhb_loop+0x40/0x90 [ 215.469662][ T8440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.475598][ T8440] RIP: 0033:0x7fda63f9e0d9 [ 215.480106][ T8440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.499816][ T8440] RSP: 002b:00007fda64e8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 215.508278][ T8440] RAX: ffffffffffffffda RBX: 00007fda64225fa0 RCX: 00007fda63f9e0d9 [ 215.516319][ T8440] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 215.524364][ T8440] RBP: 00007fda64035024 R08: 0000000000000000 R09: 0000000000000000 [ 215.532412][ T8440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.540447][ T8440] R13: 00007fda64226038 R14: 00007fda64225fa0 R15: 00007ffda175d7b8 [ 215.548460][ T8440] [ 215.551548][ T8440] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 215.558859][ T8440] CPU: 1 PID: 8440 Comm: syz.3.753 Not tainted syzkaller #0 [ 215.566170][ T8440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.576247][ T8440] Call Trace: [ 215.579551][ T8440] [ 215.582512][ T8440] dump_stack_lvl+0x18c/0x250 [ 215.587233][ T8440] ? show_regs_print_info+0x20/0x20 [ 215.592487][ T8440] ? load_image+0x420/0x420 [ 215.597040][ T8440] panic+0x2ca/0x720 [ 215.600985][ T8440] ? bpf_jit_dump+0xd0/0xd0 [ 215.605543][ T8440] __warn+0x2e0/0x470 [ 215.609563][ T8440] ? u32_change+0x1ce8/0x2690 [ 215.614294][ T8440] ? u32_change+0x1ce8/0x2690 [ 215.619005][ T8440] report_bug+0x2be/0x4f0 [ 215.623369][ T8440] ? u32_change+0x1ce8/0x2690 [ 215.628086][ T8440] ? u32_change+0x1ce8/0x2690 [ 215.632805][ T8440] ? u32_change+0x1cea/0x2690 [ 215.637530][ T8440] handle_bug+0xcf/0x120 [ 215.641806][ T8440] exc_invalid_op+0x1a/0x50 [ 215.646340][ T8440] asm_exc_invalid_op+0x1a/0x20 [ 215.651228][ T8440] RIP: 0010:u32_change+0x1ce8/0x2690 [ 215.656556][ T8440] Code: f8 eb 59 e8 0a 71 d1 f8 c6 05 34 03 c1 05 01 b9 10 00 00 00 48 c7 c7 e0 2d c8 8b 4c 89 fe 48 c7 c2 60 2e c8 8b e8 98 3e 9b f8 <0f> 0b e9 1f f0 ff ff e8 dc 70 d1 f8 eb 24 e8 d5 70 d1 f8 c6 05 b9 [ 215.676190][ T8440] RSP: 0018:ffffc90004176d60 EFLAGS: 00010246 [ 215.682307][ T8440] RAX: b2b3fcf204a24400 RBX: ffff88805da02000 RCX: 0000000000080000 [ 215.690336][ T8440] RDX: ffffc9000ccfa000 RSI: 0000000000006728 RDI: 0000000000006729 [ 215.698353][ T8440] RBP: ffffc90004176ef8 R08: ffffc90004176967 R09: 1ffff9200082ed2c [ 215.706364][ T8440] R10: dffffc0000000000 R11: fffff5200082ed2d R12: 1ffff9200082edbc [ 215.714370][ T8440] R13: ffff8880690d50e8 R14: ffff888054eb9dc0 R15: 0000000000000020 [ 215.722412][ T8440] ? u32_get+0x370/0x370 [ 215.726754][ T8440] tc_new_tfilter+0x1109/0x1820 [ 215.731705][ T8440] ? tcf_proto_signal_destroying+0x240/0x240 [ 215.737789][ T8440] ? rcu_read_unlock+0x8c/0xa0 [ 215.742597][ T8440] ? tcf_proto_signal_destroying+0x240/0x240 [ 215.748626][ T8440] ? tcf_proto_signal_destroying+0x240/0x240 [ 215.754654][ T8440] rtnetlink_rcv_msg+0x892/0xf90 [ 215.759643][ T8440] ? rtnetlink_rcv_msg+0x220/0xf90 [ 215.764801][ T8440] ? rtnetlink_bind+0x80/0x80 [ 215.769540][ T8440] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 215.775599][ T8440] ? lock_chain_count+0x20/0x20 [ 215.780500][ T8440] ? __local_bh_enable_ip+0x13a/0x1c0 [ 215.785911][ T8440] ? lockdep_hardirqs_on+0x98/0x150 [ 215.791159][ T8440] ? __local_bh_enable_ip+0x13a/0x1c0 [ 215.796574][ T8440] ? _local_bh_enable+0xa0/0xa0 [ 215.801463][ T8440] ? __dev_queue_xmit+0x275/0x3630 [ 215.806610][ T8440] ? __dev_queue_xmit+0x1bc2/0x3630 [ 215.811854][ T8440] ? __dev_queue_xmit+0x275/0x3630 [ 215.817027][ T8440] ? ref_tracker_free+0x686/0x830 [ 215.822096][ T8440] netlink_rcv_skb+0x235/0x4c0 [ 215.826898][ T8440] ? rtnetlink_bind+0x80/0x80 [ 215.831618][ T8440] ? netlink_ack+0x1160/0x1160 [ 215.836430][ T8440] ? __lock_acquire+0x7d80/0x7d80 [ 215.841496][ T8440] ? netlink_deliver_tap+0x2e/0x1b0 [ 215.846730][ T8440] netlink_unicast+0x7b1/0x930 [ 215.851556][ T8440] netlink_sendmsg+0x8d0/0xbf0 [ 215.856357][ T8440] ? netlink_getsockopt+0x590/0x590 [ 215.861589][ T8440] ? apparmor_socket_sendmsg+0x8e/0x330 [ 215.867182][ T8440] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 215.872506][ T8440] ? security_socket_sendmsg+0x80/0xa0 [ 215.877998][ T8440] ? netlink_getsockopt+0x590/0x590 [ 215.883228][ T8440] ____sys_sendmsg+0x61b/0x980 [ 215.888039][ T8440] ? __asan_memset+0x22/0x40 [ 215.892672][ T8440] ? __sys_sendmsg_sock+0x30/0x30 [ 215.897730][ T8440] ? __import_iovec+0x5f2/0x850 [ 215.902644][ T8440] ? import_iovec+0x73/0xa0 [ 215.907189][ T8440] ___sys_sendmsg+0x2a6/0x360 [ 215.911907][ T8440] ? __sys_sendmsg+0x2b0/0x2b0 [ 215.916742][ T8440] __sys_sendmmsg+0x2ca/0x510 [ 215.921473][ T8440] ? __ia32_sys_sendmsg+0x90/0x90 [ 215.926551][ T8440] ? __ia32_sys_get_robust_list+0x110/0x110 [ 215.932495][ T8440] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 215.938514][ T8440] ? lock_chain_count+0x20/0x20 [ 215.943402][ T8440] __x64_sys_sendmmsg+0xa0/0xb0 [ 215.948288][ T8440] do_syscall_64+0x55/0xb0 [ 215.952739][ T8440] ? clear_bhb_loop+0x40/0x90 [ 215.957456][ T8440] ? clear_bhb_loop+0x40/0x90 [ 215.962253][ T8440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.968186][ T8440] RIP: 0033:0x7fda63f9e0d9 [ 215.972663][ T8440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.992296][ T8440] RSP: 002b:00007fda64e8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 216.000752][ T8440] RAX: ffffffffffffffda RBX: 00007fda64225fa0 RCX: 00007fda63f9e0d9 [ 216.008789][ T8440] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 216.016811][ T8440] RBP: 00007fda64035024 R08: 0000000000000000 R09: 0000000000000000 [ 216.024811][ T8440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.032815][ T8440] R13: 00007fda64226038 R14: 00007fda64225fa0 R15: 00007ffda175d7b8 [ 216.040838][ T8440] [ 216.044431][ T8440] Kernel Offset: disabled [ 216.048764][ T8440] Rebooting in 86400 seconds..