last executing test programs: 9.118509648s ago: executing program 3 (id=227): socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000012c0)=ANY=[@ANYRES32, @ANYRES32], 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c0000000c0a010100000000000000000a00000609"], 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$can_bcm(0x1d, 0x2, 0x2) listen(r6, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0xfffffffc, 0xffffffff) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3c0, 0x2e0, 0x2e0, 0x3c0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d, 0x0, 0x0, 0x55}, {}, {}, {0x0, 0x0, 0x40, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xfc}, {0x0, 0x0, 0x0, 0x4b6}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0xd73a}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x6, 0x1}, {0x1}}}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4e4) 7.912917538s ago: executing program 1 (id=228): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) memfd_secret(0x80000) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0xfffffff1, @local}}]}, 0x8c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x2, 0x0, 0x0, 0xff, 0x5, 0x2000}, [@RTA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 7.769019031s ago: executing program 1 (id=231): setns(0xc9, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00031000"], 0xf) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000140), r1) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x10000080}, 0x40000) 6.676017687s ago: executing program 1 (id=239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010328bd70000000000001000000080001006300000008000300", @ANYBLOB], 0x24}}, 0x44) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0x400}, [@TCA_NETEM_RATE={0x14, 0xd, {0xfffffffd, 0x0, 0x3}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x1000, 0x7f, 0xffffffff, 0xb8, 0x5}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x90}, 0x0) socket(0x1f, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x511300, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r4 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c7cb5b0006000000009b7a000100e83ac55324dcd8cdde11b71f986ea0c28be9", 0x28, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r5, r4}, &(0x7f00000000c0)=""/83, 0x53, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000300)="f341b61a35d4", 0x6}], 0x1, &(0x7f00000007c0)=[@op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x6}], 0x20, 0x4}], 0x1, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r7, 0xc08c5335, &(0x7f0000000780)={0x0, 0x80, 0x1, 'queue0\x00', 0x101}) preadv2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/15, 0xf}, {&(0x7f0000000080)=""/63, 0x3f}, {&(0x7f0000000180)=""/27, 0x1b}], 0x3, 0x5, 0x920b, 0x2) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000440)={'geneve0\x00', {0x2, 0x4e21, @rand_addr=0xdffefc13}}) 6.58165629s ago: executing program 1 (id=241): pipe2(&(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$nl_generic(0x11, 0x3, 0x10) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0xd) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) 6.205816439s ago: executing program 3 (id=244): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 6.029037813s ago: executing program 3 (id=246): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x40}, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000003d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[{0x10, 0x119, 0x10}], 0x10}}], 0x1, 0x4000000) 5.938408175s ago: executing program 3 (id=247): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x5, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a", @ANYBLOB="4ad8"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000013000100fcff0700040000000300000004004880100001800c002470363e108004000880"], 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4048094) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11}, 0x0) syz_open_dev$vim2m(0x0, 0x6, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x0, 0x2, {0x0, 0x1, 0x0, 0x1, 0x5}, 0x4}) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$pfkey(0xffffff9c, &(0x7f00000002c0), 0x40400, 0x0) 5.200232813s ago: executing program 1 (id=249): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) r4 = openat$sndtimer(0xffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000280)={0x1, 0x1, 0x2, 0x2, 0x5}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x2000c840) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bda7, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) pread64(r6, &(0x7f0000000a00)=""/126, 0x7e, 0x7) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) pread64(r0, &(0x7f000001a240)=""/102388, 0x18ff4, 0x100008) syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x33f8, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0), 0x0) 5.134562335s ago: executing program 4 (id=251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010328bd70000000000001000000080001006300000008000300", @ANYBLOB], 0x24}}, 0x44) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0x400}, [@TCA_NETEM_RATE={0x14, 0xd, {0xfffffffd, 0x0, 0x3}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x1000, 0x7f, 0xffffffff, 0xb8, 0x5}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x90}, 0x0) socket(0x1f, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x511300, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r4 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c7cb5b0006000000009b7a000100e83ac55324dcd8cdde11b71f986ea0c28be9", 0x28, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r5, r4}, &(0x7f00000000c0)=""/83, 0x53, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000300)="f341b61a35d4", 0x6}], 0x1, &(0x7f00000007c0)=[@op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x6}], 0x20, 0x4}], 0x1, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r7, 0xc08c5335, &(0x7f0000000780)={0x0, 0x80, 0x1, 'queue0\x00', 0x101}) preadv2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/15, 0xf}, {&(0x7f0000000080)=""/63, 0x3f}, {&(0x7f0000000180)=""/27, 0x1b}], 0x3, 0x5, 0x920b, 0x2) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000440)={'geneve0\x00', {0x2, 0x4e21, @rand_addr=0xdffefc13}}) 5.015311308s ago: executing program 4 (id=252): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r0, 0x0, 0x41000004, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) 4.687332165s ago: executing program 4 (id=253): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) r1 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140), 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r2], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 4.649514896s ago: executing program 4 (id=254): r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x4) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x63, 0x86, 0x35, 0x10, 0xcf3, 0x1010, 0x3687, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0x7c, 0xb, 0x0, 0xa4, 0xca, 0xd4}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}}) syz_usb_disconnect(r1) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000e00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8f, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x4, 0x10, 0x2, {0x8, 0xb, 0x1, 0x1, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5409, 0xb, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2, 0x1, 0x80, {0x8, 0x25, 0x1, 0x80, 0x0, 0x6, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x81, 0x6, 0x9, {0x8, 0x25, 0x1, 0x0, 0x3c, 0x3, 0x9}}}}}}}}]}}, &(0x7f00000012c0)={0x0, 0x0, 0x5, &(0x7f0000000f40)={0x5, 0xf, 0x5}}) fsmount(r0, 0x1, 0x1) r2 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc25c4110, &(0x7f0000000100)={0x4, [[0x6265, 0x9, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4b79f128], [0x800, 0x4, 0x7aa, 0x0, 0xa7, 0xfffffffd, 0x0, 0x2], [0xffffffff, 0x0, 0x2, 0x8, 0xfffffffd, 0x800]], '\x00', [{0x0, 0xc278}, {0x0, 0x0, 0x0, 0x1}, {0xfffffc00, 0x0, 0x0, 0x1}, {0x1}, {}, {}, {}, {}, {0x0, 0x2}, {0x0, 0x2700}, {0x1, 0xc}], '\x00', 0x6b0}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)={0x0, 0x2, 0x10001, 0x2, 0x1002, 0xffffff73}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r5, 0x1, 0x0, 0x0, {0x54}, [@nsim={{0x1f}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x4, 0x12) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="140000001000010000006f4cde539b0b4ab89dcc9035b900a4cac3a59e9fa0be5a8759ce1434620000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800a00010072616e67650000002c000ef0bf7ed1c6d94fc4d902800c000480050001006b0000000c000380050001005d00000008a6e37d2e00014000000012080002400000000109"], 0x94}}, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x381040, 0x158) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r9 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000140)={{0x200002, 0x0, 0x5, 0xfffffffe, 'syz0\x00', 0xf5}, 0x3, 0x40, 0x3e, r9, 0x1, 0x2, 'syz1\x00', &(0x7f0000000640)=['syz0\x00\x9cB\xd1}\xb7\xe2\xde\xb0\xc0\xab\x18]\xe5\xa1\x1anK\xadL\xe0\x00\xfd\xbc\xf2\x89\x8f\xe5)\xa8\xdeuYD\x14\x84\x01\xd3e?\xde/\x80y]\xa6\xb4^\xa66_\xb2RR\r\xc2\xa6\xb2\xa23\x1e\x880$\x87\xcdb\xa1\xf1\x19\x00d\xf1}\"\x9f#\x9a\xd2T\xfc\x84\xce\x8cW[AQ\xc4R\xec\xef7o\x03\x90\x8c\x01O\x89\xb7\r\x90\xd1\xde\xa6`\xbe\x93\xe96\xeei8\x8b~b+\x02\xbfy\x96\xb3\xc2E{=8\b\b\xc5\v\xeac\x98\xd8\x95\xd3\x1f\x03\x00\x9d\x8f\xeb\x16 \xa0u\xad\xc2\xd4UH\x82\xbb\xe5\xd9\x19\xb7P\xfc\xf2\x02{\xba&\x0f/\xb2d\aC\xd0Q\x9e\xb2\x16\xea\xfe\x06\x92`\xdaV\xe3\xb0'], 0xbe}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xb4, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0x8c, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x28, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, {0x14, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}]}, @NFT_MSG_NEWSETELEM={0xc0, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x94, 0x3, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x60, 0x6, 0x1, 0x0, "5b47da55858f23d61cdfbdc5be3d390f35dbd52379994daa7e204e6be3fcec524b45dcbe2cf1342b9bca44bb40bf0ceca278e9e734f76e14a154d379ccbfc11e41194cf77f166899e040ab65807de656dbbe15f585a2f6ca53857a7e"}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x19c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1f, &(0x7f0000000380)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @exit, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x3, 0x3, 0x4, 0x8, 0x2, 0x8, 0xfffffffffffffffc}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}, @ringbuf_query, @jmp={0x5, 0x1, 0x1, 0x0, 0x8, 0xffffffffffffffff, 0x4}, @jmp={0x5, 0x1, 0x5, 0x2, 0x7, 0xffffffffffffffe0, 0x4}, @ringbuf_query, @cb_func={0x18, 0xb}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000200)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) 3.773777367s ago: executing program 1 (id=255): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.584871856s ago: executing program 3 (id=259): pipe2(&(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0xd) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) 2.167827826s ago: executing program 0 (id=262): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010328bd70000000000001000000080001006300000008000300", @ANYBLOB], 0x24}}, 0x44) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0x400}, [@TCA_NETEM_RATE={0x14, 0xd, {0xfffffffd, 0x0, 0x3}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x1000, 0x7f, 0xffffffff, 0xb8, 0x5}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x90}, 0x0) socket(0x1f, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x511300, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r4 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c7cb5b0006000000009b7a000100e83ac55324dcd8cdde11b71f986ea0c28be9", 0x28, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r5, r4}, &(0x7f00000000c0)=""/83, 0x53, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000300)="f341b61a35d4", 0x6}], 0x1, &(0x7f00000007c0)=[@op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x6}], 0x20, 0x4}], 0x1, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r7, 0xc08c5335, &(0x7f0000000780)={0x0, 0x80, 0x1, 'queue0\x00', 0x101}) preadv2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/15, 0xf}, {&(0x7f0000000080)=""/63, 0x3f}, {&(0x7f0000000180)=""/27, 0x1b}], 0x3, 0x5, 0x920b, 0x2) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000440)={'geneve0\x00', {0x2, 0x4e21, @rand_addr=0xdffefc13}}) 2.089600528s ago: executing program 0 (id=263): bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0xb43f1b2dbc9da57b}, 0x10) 1.984066331s ago: executing program 0 (id=264): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) r1 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140), 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r2], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 1.950629252s ago: executing program 0 (id=265): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 1.892437373s ago: executing program 2 (id=266): socket$inet_tcp(0x2, 0x1, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x5, 0x4, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000400)=[{r1}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0xa20}, {0x65b, 0x0, 0x7}]}) prlimit64(0x0, 0x1, &(0x7f0000000100)={0x401, 0x1}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000010) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.847878874s ago: executing program 0 (id=267): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000980)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x300, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.715826928s ago: executing program 0 (id=268): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYBLOB="10000000150005015f"], 0x10}, 0x13, 0x0, 0x0, 0x880}, 0x20040840) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f00000000c0)={0xc, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000280)={0xf0f022}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r7, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) landlock_restrict_self(0xffffffffffffffff, 0xc) ioctl$TIOCSETD(r6, 0x5423, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}, @TCA_CAKE_WASH={0x8, 0xd, 0xffffffff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x6, 0x0, 0x106, 0xa}}, 0x20) connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e20, @private=0xa010100}, 0x10) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r11, &(0x7f0000000080)=[{&(0x7f00000028c0)=""/4098, 0x1052}], 0x2) ioctl$TCFLSH(r6, 0x400455c8, 0x4) r12 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x1, 0x0) ioctl$VHOST_SET_FEATURES(r12, 0x4008af00, &(0x7f0000000040)=0x800001c) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000980)={0x2, @win={{0x4, 0x7, 0x2, 0x40}, 0x2, 0xc, 0x0, 0xd, 0x0, 0x8}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r13, @ANYBLOB="94e40700100c000064001280110001006272696467655f736c617665000000004c0005800800030001000000050021000000000005001b000000000005000c0001"], 0x84}}, 0x200088c2) close_range(r1, 0xffffffffffffffff, 0x0) 1.365883276s ago: executing program 3 (id=269): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x5, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a", @ANYBLOB="4ad8"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000013000100fcff0700040000000300000004004880100001800c002470363e108004000880"], 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4048094) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11}, 0x0) syz_open_dev$vim2m(0x0, 0x6, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x0, 0x2, {0x0, 0x1, 0x0, 0x1, 0x5}, 0x4}) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$pfkey(0xffffff9c, &(0x7f00000002c0), 0x40400, 0x0) 1.185280551s ago: executing program 4 (id=270): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(0x0, 0x80) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) r3 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r3, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) flock(r0, 0x2) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) r6 = syz_open_dev$loop(&(0x7f0000002280), 0xffff, 0x121ac3) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002240)=ANY=[@ANYRES16=r4], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005040000000600150005000000280016802400010001"], 0x4c}}, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, 0x0) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x100, 0x0) r8 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x4, 0x13, r8, 0x0) 924.767277ms ago: executing program 2 (id=271): write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x6d, 0x8, 0x0, 0x80, 0x2, 0x3e, 0x6, 0x3bc, 0x34, 0x73, 0x5, 0x5, 0x20, 0x3, 0x7, 0xffc0, 0xc2}, [{0x7, 0x5, 0x69, 0x9, 0x5, 0x7ff, 0xfffffff9, 0x3}, {0x2, 0x4, 0x7, 0x8, 0x80000000, 0x8d, 0x2}, {0x70000000, 0x2, 0x3, 0x8, 0x1ff, 0xfffffff6, 0x5, 0x9}], "0ba6b30eb10f965c71715a57a8aa36e3ff7175d4c90d259b6f77cdd21504260fc107de61088ecabc8eaf0431dc1a02aa95de4898cd67d605575d5926dc5e296c5adc05164bc4b7d04df70cf416"}, 0xe1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, 0xb5b, 0x9, 0xfffffffffffffff7, 0x1ff, 0x3e}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socket$l2tp(0x2, 0x2, 0x73) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/106, 0x6a}], 0x1) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) 868.490628ms ago: executing program 2 (id=272): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f0000000340)}) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f00000002c0)) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 645.868014ms ago: executing program 2 (id=273): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010328bd70000000000001000000080001006300000008000300", @ANYBLOB], 0x24}}, 0x44) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0x400}, [@TCA_NETEM_RATE={0x14, 0xd, {0xfffffffd, 0x0, 0x3}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x1000, 0x7f, 0xffffffff, 0xb8, 0x5}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x90}, 0x0) socket(0x1f, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x511300, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r5 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c7cb5b0006000000009b7a000100e83ac55324dcd8cdde11b71f986ea0c28be9", 0x28, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r6, r5}, &(0x7f00000000c0)=""/83, 0x53, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000300)="f341b61a35d4", 0x6}], 0x1, &(0x7f00000007c0)=[@op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x6}], 0x20, 0x4}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x39) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r9, 0xc08c5335, &(0x7f0000000780)={0x0, 0x80, 0x1, 'queue0\x00', 0x101}) preadv2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/15, 0xf}, {&(0x7f0000000080)=""/63, 0x3f}, {&(0x7f0000000180)=""/27, 0x1b}], 0x3, 0x5, 0x920b, 0x2) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000440)={'geneve0\x00', {0x2, 0x4e21, @rand_addr=0xdffefc13}}) 542.754616ms ago: executing program 2 (id=274): openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x110) 467.641928ms ago: executing program 2 (id=275): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x5, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000013000100fcff0700040000000300000004004880100001800c002470363e108004000880"], 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4048094) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11}, 0x0) syz_open_dev$vim2m(0x0, 0x6, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x0, 0x2, {0x0, 0x1, 0x0, 0x1, 0x5}, 0x4}) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = openat$pfkey(0xffffff9c, &(0x7f00000002c0), 0x40400, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000140)={{&(0x7f000087a000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) syz_genetlink_get_family_id$wireguard(0x0, r3) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000100)=0xffff0000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=276): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000440)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x47dfffa, 0x1e0b82) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0x1c, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x2, 0x3fd]}}) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}]}], {0x14}}, 0x70}}, 0x0) syz_emit_vhci(&(0x7f0000004e40)=ANY=[@ANYBLOB="02c92012000e0005"], 0x17) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.22' (ED25519) to the list of known hosts. [ 59.737671][ T4174] cgroup: Unknown subsys name 'net' [ 59.853576][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.317647][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.852206][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 62.934758][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 62.952306][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 62.968972][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 63.033296][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 63.056172][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.063436][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.072412][ T4196] device bridge_slave_0 entered promiscuous mode [ 63.100339][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.107433][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.115620][ T4196] device bridge_slave_1 entered promiscuous mode [ 63.185202][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.192617][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.200851][ T4186] device bridge_slave_0 entered promiscuous mode [ 63.215184][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.223257][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.231314][ T4186] device bridge_slave_1 entered promiscuous mode [ 63.238939][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.246035][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.254684][ T4192] device bridge_slave_0 entered promiscuous mode [ 63.272874][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.289813][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.296914][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.304958][ T4192] device bridge_slave_1 entered promiscuous mode [ 63.314762][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.322376][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.330263][ T4187] device bridge_slave_0 entered promiscuous mode [ 63.343851][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.350966][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.359270][ T4187] device bridge_slave_1 entered promiscuous mode [ 63.368507][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.399590][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.418188][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.440079][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.447260][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.455618][ T4197] device bridge_slave_0 entered promiscuous mode [ 63.464020][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.471183][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.479494][ T4197] device bridge_slave_1 entered promiscuous mode [ 63.500391][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.517279][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.534092][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.545500][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.572050][ T4186] team0: Port device team_slave_0 added [ 63.582106][ T4196] team0: Port device team_slave_0 added [ 63.596074][ T4196] team0: Port device team_slave_1 added [ 63.617706][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.630977][ T4186] team0: Port device team_slave_1 added [ 63.649039][ T4187] team0: Port device team_slave_0 added [ 63.665290][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.690778][ T4192] team0: Port device team_slave_0 added [ 63.697715][ T4187] team0: Port device team_slave_1 added [ 63.704602][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.712032][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.738236][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.756210][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.763414][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.789669][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.802790][ T4192] team0: Port device team_slave_1 added [ 63.828905][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.835904][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.861926][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.879700][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.886685][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.913504][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.945041][ T4197] team0: Port device team_slave_0 added [ 63.956572][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.964047][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.990926][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.009980][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.016968][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.043170][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.056928][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.064125][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.090907][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.104027][ T4197] team0: Port device team_slave_1 added [ 64.125190][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.132447][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.159314][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.180146][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.187140][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.213173][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.243311][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.250521][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.277070][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.300253][ T4186] device hsr_slave_0 entered promiscuous mode [ 64.307241][ T4186] device hsr_slave_1 entered promiscuous mode [ 64.324014][ T4196] device hsr_slave_0 entered promiscuous mode [ 64.331313][ T4196] device hsr_slave_1 entered promiscuous mode [ 64.338458][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.346156][ T4196] Cannot create hsr debugfs directory [ 64.382963][ T4187] device hsr_slave_0 entered promiscuous mode [ 64.390198][ T4187] device hsr_slave_1 entered promiscuous mode [ 64.396708][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.404486][ T4187] Cannot create hsr debugfs directory [ 64.434719][ T4192] device hsr_slave_0 entered promiscuous mode [ 64.441831][ T4192] device hsr_slave_1 entered promiscuous mode [ 64.449008][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.456625][ T4192] Cannot create hsr debugfs directory [ 64.490265][ T4197] device hsr_slave_0 entered promiscuous mode [ 64.497021][ T4197] device hsr_slave_1 entered promiscuous mode [ 64.504120][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.511796][ T4197] Cannot create hsr debugfs directory [ 64.548876][ T1324] Bluetooth: hci2: command 0x0409 tx timeout [ 64.556024][ T1324] Bluetooth: hci0: command 0x0409 tx timeout [ 64.565317][ T1324] Bluetooth: hci3: command 0x0409 tx timeout [ 64.571874][ T1324] Bluetooth: hci1: command 0x0409 tx timeout [ 64.584761][ T1324] Bluetooth: hci4: command 0x0409 tx timeout [ 64.831440][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.844785][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.858281][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.867480][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.925539][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.935766][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.946667][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.964219][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.992075][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.003494][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.013610][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.031678][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.135938][ T4197] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.145736][ T4197] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.166486][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.182515][ T4197] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.214425][ T4197] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.232983][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.243486][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.274623][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.294729][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.304316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.314758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.324263][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.331596][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.345196][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.353332][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.372086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.386309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.394243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.411336][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.420808][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.432375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.441855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.451565][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.458730][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.466775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.497254][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.509371][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.516630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.526275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.535815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.548003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.556566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.565516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.574221][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.585060][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.604687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.613168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.622361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.631980][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.639138][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.647036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.656397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.665247][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.672374][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.681542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.691146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.724622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.733667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.743205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.755159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.765998][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.773136][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.783253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.792373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.801799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.810516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.819412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.827838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.836314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.855217][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.868628][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.882600][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.895603][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.906299][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.922627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.931496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.941210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.950318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.959057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.967353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.976208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.985290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.994982][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.002107][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.034097][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.060090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.069840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.084676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.110291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.118946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.172939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.189336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.200864][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.208022][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.216243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.226388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.248719][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.255840][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.264639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.274267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.283380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.292683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.322363][ T4196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.333068][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.345998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.354553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.363685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.372543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.382420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.391890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.401192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.409722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.418440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.426966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.435961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.444836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.454624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.463203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.473291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.482738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.514502][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.526336][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.543204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.556215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.567723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.580369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.593293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.602687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.612879][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.629053][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 66.631405][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.638220][ T4235] Bluetooth: hci1: command 0x041b tx timeout [ 66.690348][ T4235] Bluetooth: hci3: command 0x041b tx timeout [ 66.698417][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.738556][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 66.751983][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 66.759730][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.775117][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.799841][ T4192] device veth0_vlan entered promiscuous mode [ 66.808564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.829135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.847077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.855378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.881486][ T4192] device veth1_vlan entered promiscuous mode [ 66.913050][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.931510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.949045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.957258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.986640][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.003074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.012023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.022050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.032000][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.040828][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.048061][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.061919][ T4192] device veth0_macvtap entered promiscuous mode [ 67.088839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.100085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.114820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.124452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.135746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.150299][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.157404][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.165279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.174693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.183075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.192987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.205452][ T4192] device veth1_macvtap entered promiscuous mode [ 67.229630][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.253712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.262716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.273491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.284828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.313492][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.322527][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.331809][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.341084][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.357031][ T4196] device veth0_vlan entered promiscuous mode [ 67.372295][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.385989][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.394175][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.405410][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.413980][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.423305][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.432736][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.441670][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.450908][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.459827][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.474149][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.483412][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.497479][ T4196] device veth1_vlan entered promiscuous mode [ 67.506768][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.515736][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.526268][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.537151][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.564408][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.577836][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.587729][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.596915][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.605828][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.615068][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.623698][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.633008][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.641752][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.650095][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.658202][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.667912][ T4186] device veth0_vlan entered promiscuous mode [ 67.678316][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.687265][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.696577][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.707580][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.729464][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.743455][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.767011][ T4197] device veth0_vlan entered promiscuous mode [ 67.804735][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.813472][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.826893][ T4186] device veth1_vlan entered promiscuous mode [ 67.854433][ T4197] device veth1_vlan entered promiscuous mode [ 67.884684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.899400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.925085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.939003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.948631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.966006][ T4196] device veth0_macvtap entered promiscuous mode [ 68.030339][ T4196] device veth1_macvtap entered promiscuous mode [ 68.050302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.057831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.065706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.075589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.088657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.097292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.112055][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.130457][ T4186] device veth0_macvtap entered promiscuous mode [ 68.139640][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.147745][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.156771][ T4186] device veth1_macvtap entered promiscuous mode [ 68.171382][ T4197] device veth0_macvtap entered promiscuous mode [ 68.182751][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.193850][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.205380][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.230726][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.241120][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.250171][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.259048][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.267075][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.276354][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.285215][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.294033][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.305564][ T4197] device veth1_macvtap entered promiscuous mode [ 68.315681][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.326483][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.338228][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.368386][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.376622][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.386738][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.396427][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.405725][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.414670][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.423376][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.437575][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.447175][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.456186][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.467268][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.484036][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.494845][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.505515][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.516633][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.529108][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.540728][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.552542][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.562733][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.573432][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.584986][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.596622][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.607432][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.616735][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.625786][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.636545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.645792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.655208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.663850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.674628][ T4187] device veth0_vlan entered promiscuous mode [ 68.691911][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.700162][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.707038][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.708736][ T4235] Bluetooth: hci3: command 0x040f tx timeout [ 68.724727][ T4235] Bluetooth: hci1: command 0x040f tx timeout [ 68.728501][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.731254][ T4235] Bluetooth: hci4: command 0x040f tx timeout [ 68.748481][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.759245][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.769171][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.779727][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.789008][ T4235] Bluetooth: hci2: command 0x040f tx timeout [ 68.795664][ T4235] Bluetooth: hci0: command 0x040f tx timeout [ 68.797630][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.824461][ T4187] device veth1_vlan entered promiscuous mode [ 68.834401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.842558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.850962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.860373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.879785][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.890699][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.901088][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.913495][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.923459][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.934076][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.945951][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.995479][ T4197] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.005398][ T4197] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.016436][ T4197] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.026361][ T4197] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.053410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.062629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.071406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.120200][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.146665][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.162656][ T4187] device veth0_macvtap entered promiscuous mode [ 69.229032][ T4187] device veth1_macvtap entered promiscuous mode [ 69.237482][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.253719][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.266559][ T4265] ODEBUG: Out of memory. ODEBUG disabled [ 69.278012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.286140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.309720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.343904][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.354985][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.359108][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.374392][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.385781][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.396782][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.406986][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.418100][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.430356][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.441219][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.453069][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.471278][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.483419][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.493216][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.536651][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.554862][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.565335][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.576276][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.586503][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.597416][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.607554][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.619127][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.630443][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.661197][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.671021][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.680656][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.683503][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.705488][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.708046][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.725460][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.734314][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.758807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.768920][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.780700][ T699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.794264][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.802271][ T699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.828985][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.839414][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.874064][ T699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.898674][ T4267] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.898681][ T699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.925389][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.003673][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.020690][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.083460][ T4277] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.102267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.130194][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.140006][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.160851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.208005][ T4267] usb 3-1: Using ep0 maxpacket: 16 [ 70.348552][ T4267] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.364429][ T4267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 70.378050][ T4267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 70.397617][ T4267] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 70.407660][ T4267] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.443911][ T4230] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.498157][ T4267] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 70.507352][ T4267] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 70.516212][ T4267] usb 3-1: Manufacturer: syz [ 70.542192][ T4267] usb 3-1: config 0 descriptor?? [ 70.788785][ T2300] Bluetooth: hci4: command 0x0419 tx timeout [ 70.795201][ T2300] Bluetooth: hci1: command 0x0419 tx timeout [ 70.801819][ T2300] Bluetooth: hci3: command 0x0419 tx timeout [ 70.865263][ T4230] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 70.869251][ T2300] Bluetooth: hci0: command 0x0419 tx timeout [ 70.880990][ T4230] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.903793][ T4230] usb 1-1: config 0 has no interface number 0 [ 70.912567][ T2300] Bluetooth: hci2: command 0x0419 tx timeout [ 70.917317][ T4230] usb 1-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 70.938921][ T4230] usb 1-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 70.953765][ T4281] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.961538][ T4230] usb 1-1: config 0 interface 106 has no altsetting 0 [ 70.969024][ T4267] rc_core: IR keymap rc-hauppauge not found [ 70.975374][ T4267] Registered IR keymap rc-empty [ 70.981378][ T4267] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 70.989278][ T4230] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 70.999847][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.024349][ T4230] usb 1-1: config 0 descriptor?? [ 71.030960][ T4267] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 71.071041][ T4267] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 71.087411][ T4267] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 71.126334][ T4230] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 71.136630][ T4267] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 71.178103][ T4267] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 71.233962][ T4267] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 71.242770][ T4281] usb 2-1: Using ep0 maxpacket: 16 [ 71.288503][ T4267] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 71.328226][ T4267] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 71.367733][ T4267] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 71.376392][ T4281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 71.395136][ T4281] usb 2-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 71.404863][ T4281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.420471][ T4313] process 'syz.3.12' launched './file2' with NULL argv: empty string added [ 71.430294][ T4267] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 71.454304][ T4281] usb 2-1: config 0 descriptor?? [ 71.478338][ T4267] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 71.528158][ T4267] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 71.558638][ T4267] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 71.577998][ T2300] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.591427][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.598028][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.609585][ T4267] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 71.623959][ T4267] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 71.754174][ T4297] udc-core: couldn't find an available UDC or it's busy [ 71.778983][ T4297] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 71.816194][ T4297] udc-core: couldn't find an available UDC or it's busy [ 71.824031][ T4297] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 71.837390][ T4297] udc-core: couldn't find an available UDC or it's busy [ 71.845589][ T4297] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 71.978020][ T2300] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 71.993913][ T2300] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.031460][ T2300] usb 5-1: config 0 has no interface number 0 [ 72.038396][ T2300] usb 5-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 72.059530][ T2300] usb 5-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 72.092676][ T2300] usb 5-1: config 0 interface 106 has no altsetting 0 [ 72.107854][ T2300] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 72.136812][ T2300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.158494][ T9] usb 1-1: Failed to submit usb control message: -110 [ 72.177106][ T9] usb 1-1: unable to send the bmi data to the device: -110 [ 72.195061][ T2300] usb 5-1: config 0 descriptor?? [ 72.233031][ T9] usb 1-1: unable to get target info from device [ 72.242230][ T9] usb 1-1: could not get target info (-110) [ 72.250589][ T9] usb 1-1: could not probe fw (-110) [ 72.256614][ T2300] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 72.288140][ T4281] usbhid 2-1:0.0: can't add hid device: -71 [ 72.306616][ T4281] usbhid: probe of 2-1:0.0 failed with error -71 [ 72.354335][ T4281] usb 2-1: USB disconnect, device number 2 [ 72.553380][ T23] usb 3-1: USB disconnect, device number 2 [ 72.895073][ T4328] tipc: Started in network mode [ 72.911373][ T4328] tipc: Node identity ac14140f, cluster identity 4711 [ 72.943105][ T4328] tipc: New replicast peer: 172.30.0.3 [ 73.002313][ T4328] tipc: Enabled bearer , priority 10 [ 73.278066][ T9] usb 5-1: Failed to submit usb control message: -110 [ 73.291063][ T9] usb 5-1: unable to send the bmi data to the device: -110 [ 73.360787][ T9] usb 5-1: unable to get target info from device [ 73.382849][ T9] usb 5-1: could not get target info (-110) [ 73.403847][ T9] usb 5-1: could not probe fw (-110) [ 73.902908][ T2300] usb 1-1: USB disconnect, device number 2 [ 74.003650][ T21] tipc: Node number set to 2886997007 [ 74.618015][ T2300] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 74.877998][ T2300] usb 1-1: Using ep0 maxpacket: 16 [ 74.998191][ T2300] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.041085][ T2300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 75.086036][ T2300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 75.108575][ T26] audit: type=1326 audit(1786771618.451:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.2.28" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54652d0d9 code=0x7ffc0000 [ 75.147959][ T2300] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 75.154895][ T26] audit: type=1326 audit(1786771618.491:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.2.28" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54652d0d9 code=0x7ffc0000 [ 75.179486][ T2300] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.189064][ T26] audit: type=1326 audit(1786771618.501:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.2.28" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54652d0d9 code=0x7ffc0000 [ 75.227187][ T26] audit: type=1326 audit(1786771618.501:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.2.28" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54652d0d9 code=0x7ffc0000 [ 75.240782][ T4190] usb 5-1: USB disconnect, device number 2 [ 75.271893][ T26] audit: type=1326 audit(1786771618.511:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.2.28" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc54652d0d9 code=0x7ffc0000 [ 75.303379][ T26] audit: type=1326 audit(1786771618.511:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.2.28" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54652d0d9 code=0x7ffc0000 [ 75.318309][ T2300] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 75.388279][ T2300] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 75.422311][ T26] audit: type=1326 audit(1786771618.511:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.2.28" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54652d0d9 code=0x7ffc0000 [ 75.489937][ T2300] usb 1-1: Manufacturer: syz [ 75.521054][ T26] audit: type=1326 audit(1786771618.531:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.2.28" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54652d0d9 code=0x7ffc0000 [ 75.582589][ T2300] usb 1-1: config 0 descriptor?? [ 75.605899][ T26] audit: type=1326 audit(1786771618.531:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.2.28" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54652d0d9 code=0x7ffc0000 [ 75.751477][ T4378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.31'. [ 75.772940][ T26] audit: type=1326 audit(1786771618.551:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.2.28" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc54652d0d9 code=0x7ffc0000 [ 76.038062][ T2300] rc_core: IR keymap rc-hauppauge not found [ 76.044238][ T4231] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.056022][ T2300] Registered IR keymap rc-empty [ 76.081776][ T2300] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 76.138059][ T2300] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 76.181921][ T2300] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 76.224806][ T2300] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 76.260637][ T2300] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 76.299498][ T2300] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 76.338311][ T2300] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 76.368016][ T2300] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 76.398162][ T2300] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 76.438317][ T4231] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 76.448093][ T2300] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 76.462330][ T4231] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.491057][ T4231] usb 4-1: config 0 has no interface number 0 [ 76.498547][ T2300] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 76.532823][ T4231] usb 4-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 76.544320][ T2300] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 76.605111][ T2300] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 76.644876][ T4231] usb 4-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 76.658768][ T2300] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 76.720236][ T2300] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 76.728402][ T2300] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 76.742600][ T4231] usb 4-1: config 0 interface 106 has no altsetting 0 [ 76.780289][ T4231] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 76.817117][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.856006][ T4231] usb 4-1: config 0 descriptor?? [ 76.931934][ T4231] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 77.408015][ T4423] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 77.501722][ T13] usb 1-1: USB disconnect, device number 3 [ 77.922665][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.014539][ T4432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'. [ 78.817923][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 78.827918][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 78.837917][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 78.878991][ T9] usb 4-1: Failed to submit usb control message: -110 [ 78.887918][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #21a!!! [ 78.907915][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #29a!!! [ 78.920024][ T9] usb 4-1: unable to send the bmi data to the device: -110 [ 78.950614][ T9] usb 4-1: unable to get target info from device [ 78.986487][ T9] usb 4-1: could not get target info (-110) [ 79.018385][ T9] usb 4-1: could not probe fw (-110) [ 79.271294][ T23] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 79.283527][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.318193][ T23] usb 3-1: config 0 has no interface number 0 [ 79.334828][ T23] usb 3-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 79.377260][ T23] usb 3-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 79.418181][ T23] usb 3-1: config 0 interface 106 has no altsetting 0 [ 79.448086][ T23] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 79.485016][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.517797][ T23] usb 3-1: config 0 descriptor?? [ 79.608263][ T23] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 79.637947][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 80.164687][ T4281] usb 4-1: USB disconnect, device number 2 [ 80.496975][ T4469] netlink: 822 bytes leftover after parsing attributes in process `syz.0.53'. [ 80.647607][ T4469] netlink: 72 bytes leftover after parsing attributes in process `syz.0.53'. [ 80.648117][ T4214] usb 3-1: Failed to submit usb control message: -110 [ 80.687682][ T4214] usb 3-1: unable to send the bmi data to the device: -110 [ 80.714154][ T4214] usb 3-1: unable to get target info from device [ 80.729310][ T4281] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 80.742576][ T4214] usb 3-1: could not get target info (-110) [ 80.765390][ T4214] usb 3-1: could not probe fw (-110) [ 80.852909][ T4470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 81.028110][ T4281] usb 4-1: Using ep0 maxpacket: 8 [ 81.190489][ T4281] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 81.221207][ T4281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.299706][ T4281] pvrusb2: Hardware description: Terratec Grabster AV400 [ 81.326861][ T4281] pvrusb2: ********** [ 81.358035][ T4281] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 81.384734][ T4281] pvrusb2: Important functionality might not be entirely working. [ 81.403070][ T4281] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 81.447457][ T4281] pvrusb2: ********** [ 81.509098][ T2425] pvrusb2: Invalid write control endpoint [ 81.618012][ T4267] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 81.704570][ T2425] pvrusb2: Invalid write control endpoint [ 81.723568][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 81.756662][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 81.777829][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 81.795704][ T2425] pvrusb2: Device being rendered inoperable [ 81.823884][ T4466] pvrusb2: Attempted to execute control transfer when device not ok [ 81.848627][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 81.850103][ T2300] usb 4-1: USB disconnect, device number 3 [ 81.866020][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 81.906217][ T2425] pvrusb2: Attached sub-driver cx25840 [ 81.927191][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 81.957785][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 82.187646][ T13] usb 3-1: USB disconnect, device number 3 [ 82.191673][ T4267] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 82.241390][ T4267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.266292][ T4267] usb 2-1: Product: syz [ 82.276449][ T4267] usb 2-1: Manufacturer: syz [ 82.283935][ T4267] usb 2-1: SerialNumber: syz [ 82.317739][ T4267] usb 2-1: config 0 descriptor?? [ 82.571495][ T4267] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 82.818058][ T1324] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 82.868674][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 83.238160][ T1324] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 83.247130][ T1324] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.257489][ T1324] usb 3-1: config 0 has no interface number 0 [ 83.263704][ T1324] usb 3-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 83.275171][ T1324] usb 3-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 83.289025][ T1324] usb 3-1: config 0 interface 106 has no altsetting 0 [ 83.295833][ T1324] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 83.305092][ T1324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.317504][ T1324] usb 3-1: config 0 descriptor?? [ 83.328097][ T13] usb 5-1: unable to get BOS descriptor or descriptor too short [ 83.360716][ T1324] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 83.418390][ T13] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 83.608186][ T13] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 83.630423][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.646131][ T13] usb 5-1: Product: syz [ 83.653391][ T13] usb 5-1: Manufacturer: syz [ 83.662043][ T13] usb 5-1: SerialNumber: syz [ 84.078272][ T13] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 84.118171][ T13] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 84.196873][ T13] usb 5-1: USB disconnect, device number 3 [ 84.398347][ T4252] usb 3-1: Failed to submit usb control message: -110 [ 84.409866][ T4252] usb 3-1: unable to send the bmi data to the device: -110 [ 84.436454][ T4252] usb 3-1: unable to get target info from device [ 84.462582][ T4252] usb 3-1: could not get target info (-110) [ 84.477241][ T4252] usb 3-1: could not probe fw (-110) [ 84.510704][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 84.908038][ T13] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 85.318614][ T13] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 85.331853][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.348173][ T13] usb 5-1: config 0 has no interface number 0 [ 85.354923][ T13] usb 5-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 85.379678][ T13] usb 5-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 85.403123][ T13] usb 5-1: config 0 interface 106 has no altsetting 0 [ 85.417028][ T13] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 85.437995][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.463673][ T13] usb 5-1: config 0 descriptor?? [ 85.534667][ T13] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 85.903786][ T21] usb 3-1: USB disconnect, device number 4 [ 85.928067][ T4281] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 86.187975][ T4281] usb 4-1: Using ep0 maxpacket: 32 [ 86.308752][ T4281] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 86.326527][ T4281] usb 4-1: config 0 has no interface number 0 [ 86.332927][ T4267] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 86.379717][ T4267] usb 2-1: USB disconnect, device number 3 [ 86.426412][ T4281] usb 4-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 86.462696][ T4281] usb 4-1: config 0 interface 1 has no altsetting 0 [ 86.529090][ T4546] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 86.568034][ T9] usb 5-1: Failed to submit usb control message: -110 [ 86.590005][ T9] usb 5-1: unable to send the bmi data to the device: -110 [ 86.623477][ T9] usb 5-1: unable to get target info from device [ 86.647804][ T4544] netlink: 220 bytes leftover after parsing attributes in process `syz.2.75'. [ 86.648186][ T4281] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 86.666835][ T9] usb 5-1: could not get target info (-110) [ 86.686277][ T9] usb 5-1: could not probe fw (-110) [ 86.704741][ T4281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.729551][ T4281] usb 4-1: Product: syz [ 86.733779][ T4281] usb 4-1: Manufacturer: syz [ 86.739983][ T26] kauditd_printk_skb: 68 callbacks suppressed [ 86.739998][ T26] audit: type=1326 audit(1786771630.091:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.75" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54652d0d9 code=0x7ffc0000 [ 86.796058][ T4281] usb 4-1: SerialNumber: syz [ 86.817606][ T4281] usb 4-1: config 0 descriptor?? [ 86.868159][ T26] audit: type=1326 audit(1786771630.121:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.75" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54652d0d9 code=0x7ffc0000 [ 86.916598][ T26] audit: type=1326 audit(1786771630.181:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.75" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc54652d0d9 code=0x7ffc0000 [ 86.947410][ T26] audit: type=1326 audit(1786771630.181:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.75" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54652d0d9 code=0x7ffc0000 [ 86.973202][ T7] cfg80211: failed to load regulatory.db [ 86.983164][ T26] audit: type=1326 audit(1786771630.181:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.75" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54652d0d9 code=0x7ffc0000 [ 87.058113][ T26] audit: type=1326 audit(1786771630.181:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.75" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc54652d0d9 code=0x7ffc0000 [ 87.089416][ T4281] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 87.128165][ T4281] cx231xx 4-1:0.1: Failed to read PCB config [ 87.138398][ T26] audit: type=1326 audit(1786771630.181:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.75" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54652d0d9 code=0x7ffc0000 [ 87.162841][ T4281] cx231xx: probe of 4-1:0.1 failed with error -71 [ 87.179650][ T4281] usb 4-1: USB disconnect, device number 4 [ 87.258789][ T26] audit: type=1326 audit(1786771630.181:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.75" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54652d0d9 code=0x7ffc0000 [ 87.380046][ T26] audit: type=1326 audit(1786771630.181:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.75" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc54652d0d9 code=0x7ffc0000 [ 87.497552][ T26] audit: type=1326 audit(1786771630.181:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.75" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54652d0d9 code=0x7ffc0000 [ 87.668342][ T4281] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 87.917972][ T4281] usb 4-1: Using ep0 maxpacket: 32 [ 88.038148][ T4281] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 88.056441][ T4281] usb 4-1: config 0 has no interface number 0 [ 88.079406][ T4281] usb 4-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 88.126089][ T4281] usb 4-1: config 0 interface 1 has no altsetting 0 [ 88.348233][ T4281] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 88.371009][ T4281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.399201][ T4281] usb 4-1: Product: syz [ 88.423763][ T4281] usb 4-1: Manufacturer: syz [ 88.438590][ T4281] usb 4-1: SerialNumber: syz [ 88.462406][ T4281] usb 4-1: config 0 descriptor?? [ 88.479467][ T4267] usb 5-1: USB disconnect, device number 4 [ 88.730597][ T4281] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 88.788291][ T4281] cx231xx 4-1:0.1: Failed to read PCB config [ 88.794375][ T4281] cx231xx: probe of 4-1:0.1 failed with error -71 [ 88.854720][ T4281] usb 4-1: USB disconnect, device number 5 [ 89.957982][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 90.329856][ T7] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 90.350090][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.400412][ T7] usb 5-1: config 0 has no interface number 0 [ 90.432431][ T7] usb 5-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 90.478380][ T7] usb 5-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 90.517974][ T7] usb 5-1: config 0 interface 106 has no altsetting 0 [ 90.528289][ T7] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 90.564073][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.601615][ T7] usb 5-1: config 0 descriptor?? [ 90.664684][ T7] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 91.689215][ T154] usb 5-1: Failed to submit usb control message: -110 [ 91.701956][ T154] usb 5-1: unable to send the bmi data to the device: -110 [ 91.739025][ T154] usb 5-1: unable to get target info from device [ 91.751294][ T26] kauditd_printk_skb: 921 callbacks suppressed [ 91.751312][ T26] audit: type=1326 audit(1786771635.101:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.1.91" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae1c249459 code=0x7ffc0000 [ 91.800695][ T154] usb 5-1: could not get target info (-110) [ 91.822608][ T154] usb 5-1: could not probe fw (-110) [ 91.902664][ T26] audit: type=1326 audit(1786771635.101:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.1.91" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae1c249459 code=0x7ffc0000 [ 92.013511][ T26] audit: type=1326 audit(1786771635.101:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.1.91" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae1c249459 code=0x7ffc0000 [ 92.125828][ T26] audit: type=1326 audit(1786771635.101:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.1.91" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae1c249459 code=0x7ffc0000 [ 92.250849][ T26] audit: type=1326 audit(1786771635.101:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.1.91" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae1c249459 code=0x7ffc0000 [ 92.426966][ T26] audit: type=1326 audit(1786771635.101:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.1.91" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae1c249459 code=0x7ffc0000 [ 92.536418][ T26] audit: type=1326 audit(1786771635.101:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.1.91" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae1c249459 code=0x7ffc0000 [ 92.699483][ T26] audit: type=1326 audit(1786771635.101:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.1.91" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae1c249459 code=0x7ffc0000 [ 92.837498][ T26] audit: type=1326 audit(1786771635.101:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.1.91" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae1c249459 code=0x7ffc0000 [ 92.933619][ T26] audit: type=1326 audit(1786771635.101:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.1.91" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae1c249459 code=0x7ffc0000 [ 93.498013][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.748105][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 93.868244][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.901956][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.968796][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 94.040704][ T7] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 94.103855][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.119832][ T4190] usb 5-1: USB disconnect, device number 5 [ 94.188141][ T7] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 94.209111][ T7] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 94.226155][ T7] usb 2-1: Manufacturer: syz [ 94.253480][ T7] usb 2-1: config 0 descriptor?? [ 94.628917][ T7] rc_core: IR keymap rc-hauppauge not found [ 94.634910][ T7] Registered IR keymap rc-empty [ 94.648037][ T1108] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.674935][ T7] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 94.728153][ T7] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 94.758693][ T7] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 94.818954][ T7] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 94.871223][ T7] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 94.923099][ T7] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 94.960899][ T7] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.000448][ T2300] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 95.008290][ T7] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.038079][ T7] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.048189][ T1108] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 95.093456][ T7] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.128182][ T7] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.157996][ T7] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.182163][ T4267] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 95.198055][ T7] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.244867][ T1108] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 95.258018][ T7] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.258114][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.268882][ T2300] usb 5-1: Using ep0 maxpacket: 32 [ 95.285602][ T1108] usb 1-1: Product: syz [ 95.290505][ T7] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 95.293538][ T1108] usb 1-1: Manufacturer: syz [ 95.305937][ T1108] usb 1-1: SerialNumber: syz [ 95.319620][ T7] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 95.360082][ T1108] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 95.398238][ T2300] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 95.460358][ T2300] usb 5-1: config 0 has no interface number 0 [ 95.466621][ T2300] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 95.497415][ T2300] usb 5-1: config 0 interface 89 has no altsetting 0 [ 95.608171][ T4267] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 95.616668][ T4267] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.626974][ T4267] usb 4-1: config 0 has no interface number 0 [ 95.634648][ T4267] usb 4-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 95.645827][ T4267] usb 4-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 95.658078][ T2300] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 95.660236][ T4267] usb 4-1: config 0 interface 106 has no altsetting 0 [ 95.677823][ T4267] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 95.683909][ T2300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.696158][ T4267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.701582][ T2300] usb 5-1: Product: syz [ 95.708909][ T2300] usb 5-1: Manufacturer: syz [ 95.713651][ T2300] usb 5-1: SerialNumber: syz [ 95.736312][ T2300] usb 5-1: config 0 descriptor?? [ 95.738947][ T4267] usb 4-1: config 0 descriptor?? [ 95.780643][ T2300] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 95.797158][ T2300] em28xx 5-1:0.89: Video interface 89 found: [ 95.820827][ T4267] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 96.235411][ T1108] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 96.247531][ T7] usb 2-1: USB disconnect, device number 4 [ 96.271105][ T1108] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 96.323752][ T1108] usb 1-1: media controller created [ 96.334596][ T4752] kernel profiling enabled (shift: 4) [ 96.373437][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.432343][ T2300] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 96.623951][ T1108] usb 1-1: USB disconnect, device number 4 [ 96.838181][ T4267] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 96.878047][ T4467] usb 4-1: Failed to submit usb control message: -110 [ 96.885102][ T4467] usb 4-1: unable to send the bmi data to the device: -110 [ 96.922559][ T4467] usb 4-1: unable to get target info from device [ 96.946859][ T4467] usb 4-1: could not get target info (-110) [ 96.981609][ T4467] usb 4-1: could not probe fw (-110) [ 97.107990][ T4267] usb 3-1: Using ep0 maxpacket: 32 [ 97.238154][ T4267] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 97.276417][ T4267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 97.287836][ T1108] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 97.308494][ T4267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 97.513582][ T4267] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 97.529987][ T4267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.558078][ T4267] usb 3-1: Product: syz [ 97.576748][ T4267] usb 3-1: Manufacturer: syz [ 97.578203][ T2300] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 97.596079][ T4267] usb 3-1: SerialNumber: syz [ 97.610434][ T2300] em28xx 5-1:0.89: board has no eeprom [ 97.625376][ T4267] usb 3-1: config 0 descriptor?? [ 97.728201][ T1108] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.748815][ T2300] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 97.763513][ T1108] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.766265][ T2300] em28xx 5-1:0.89: analog set to bulk mode. [ 97.796774][ T1108] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.820420][ T1108] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.856521][ T1108] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 97.868819][ T7] em28xx 5-1:0.89: Registering V4L2 extension [ 97.884888][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.888735][ T2300] usb 5-1: USB disconnect, device number 6 [ 97.960498][ T2300] em28xx 5-1:0.89: Disconnecting em28xx [ 98.016361][ T7] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 98.087943][ T7] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 98.105339][ T7] em28xx 5-1:0.89: No AC97 audio processor [ 98.147542][ T7] usb 5-1: Decoder not found [ 98.186059][ T7] em28xx 5-1:0.89: failed to create media graph [ 98.193968][ T4769] device syzkaller0 entered promiscuous mode [ 98.202969][ T7] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 98.245112][ T4769] tipc: Started in network mode [ 98.248273][ T7] em28xx 5-1:0.89: Registering snapshot button... [ 98.250098][ T4769] tipc: Node identity ca8584861ef6, cluster identity 4711 [ 98.308690][ T7] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input8 [ 98.326504][ T4769] tipc: Enabled bearer , priority 0 [ 98.358194][ T7] em28xx 5-1:0.89: Remote control support is not available for this card. [ 98.396516][ T2300] em28xx 5-1:0.89: Closing input extension [ 98.410434][ T2300] em28xx 5-1:0.89: Deregistering snapshot button [ 98.447988][ T4768] tipc: Resetting bearer [ 98.484735][ T4768] tipc: Disabling bearer [ 98.529495][ T2300] em28xx 5-1:0.89: Freeing device [ 98.617712][ T4281] usb 4-1: USB disconnect, device number 6 [ 98.798446][ T4784] fuse: Bad value for 'fd' [ 99.044216][ T4267] usb 3-1: USB disconnect, device number 5 [ 99.112269][ T1108] [drm] Initialized gud 1.0.0 20200422 for 1-1:1.0 on minor 2 [ 99.148230][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 99.218204][ T4281] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 99.395450][ T1108] gud 1-1:1.0: [drm] fb1: guddrmfb frame buffer device [ 99.428020][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 99.443402][ T1108] usb 1-1: USB disconnect, device number 5 [ 99.588745][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.608227][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.627946][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 99.654547][ T21] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 99.668071][ T4281] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 99.676790][ T4281] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.687444][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.700571][ T4281] usb 4-1: config 0 has no interface number 0 [ 99.706829][ T4281] usb 4-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 99.718700][ T4281] usb 4-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 99.732870][ T4281] usb 4-1: config 0 interface 106 has no altsetting 0 [ 99.739985][ T4281] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 99.751149][ T4281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.761394][ T4281] usb 4-1: config 0 descriptor?? [ 99.798362][ T21] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 99.817925][ T21] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 99.826053][ T21] usb 2-1: Manufacturer: syz [ 99.833622][ T21] usb 2-1: config 0 descriptor?? [ 99.945169][ T4281] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 100.347964][ T21] rc_core: IR keymap rc-hauppauge not found [ 100.354865][ T21] Registered IR keymap rc-empty [ 100.363771][ T21] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.408031][ T21] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.438634][ T21] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 100.469709][ T21] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 100.508177][ T21] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.554196][ T21] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.561462][ T4267] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 100.612219][ T21] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.651905][ T21] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.688106][ T21] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.731447][ T21] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.769596][ T21] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.808055][ T21] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.828689][ T4267] usb 1-1: Using ep0 maxpacket: 8 [ 100.848265][ T21] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.888260][ T21] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.938591][ T21] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 100.948516][ T4267] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 100.962017][ T21] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 100.971053][ T4267] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.015697][ T4267] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.048281][ T699] usb 4-1: Failed to submit usb control message: -110 [ 101.058567][ T699] usb 4-1: unable to send the bmi data to the device: -110 [ 101.069362][ T4267] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.103835][ T4267] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.131153][ T699] usb 4-1: unable to get target info from device [ 101.137653][ T699] usb 4-1: could not get target info (-110) [ 101.178722][ T4267] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 101.200405][ T699] usb 4-1: could not probe fw (-110) [ 101.217739][ T4267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.508834][ T4267] usb 1-1: usb_control_msg returned -71 [ 101.516442][ T4267] usbtmc 1-1:16.0: can't read capabilities [ 101.552462][ T4267] usb 1-1: USB disconnect, device number 6 [ 101.668385][ T4190] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 101.870078][ T4267] usb 2-1: USB disconnect, device number 5 [ 101.899383][ T4826] fuse: Bad value for 'fd' [ 102.078147][ T4190] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 102.101394][ T4190] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.126054][ T4190] usb 5-1: config 0 has no interface number 0 [ 102.135428][ T4190] usb 5-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 102.167079][ T4190] usb 5-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 102.181094][ T4190] usb 5-1: config 0 interface 106 has no altsetting 0 [ 102.197001][ T4190] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 102.231899][ T4190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.293703][ T4190] usb 5-1: config 0 descriptor?? [ 102.338025][ T4267] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 102.460949][ T21] usb 4-1: USB disconnect, device number 7 [ 102.484268][ T4190] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 102.868335][ T4267] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 102.892564][ T4267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.910009][ T4267] usb 2-1: Product: syz [ 102.914369][ T4267] usb 2-1: Manufacturer: syz [ 102.919658][ T4267] usb 2-1: SerialNumber: syz [ 103.078029][ T4230] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 103.317943][ T4230] usb 1-1: Using ep0 maxpacket: 16 [ 103.441264][ T4230] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.454065][ T4230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.468071][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 103.476735][ T4230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 103.490253][ T4230] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 103.501072][ T4230] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.548382][ T9] usb 5-1: Failed to submit usb control message: -110 [ 103.555370][ T9] usb 5-1: unable to send the bmi data to the device: -110 [ 103.567622][ T9] usb 5-1: unable to get target info from device [ 103.574854][ T9] usb 5-1: could not get target info (-110) [ 103.584324][ T9] usb 5-1: could not probe fw (-110) [ 103.598154][ T4230] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 103.614761][ T4230] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 103.635418][ T4230] usb 1-1: Manufacturer: syz [ 103.659941][ T4230] usb 1-1: config 0 descriptor?? [ 103.678159][ T4190] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 103.791503][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 103.908994][ T7] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 103.915065][ T4828] udc-core: couldn't find an available UDC or it's busy [ 103.924147][ T7] usb 3-1: config 0 has no interface number 0 [ 103.924202][ T7] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 103.924228][ T7] usb 3-1: config 0 interface 89 has no altsetting 0 [ 103.985590][ T4828] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 104.008081][ T4267] (unnamed net_device) (uninitialized): Assigned a random MAC address: 8a:5c:d2:81:6a:0d [ 104.018021][ T4230] rc_core: IR keymap rc-hauppauge not found [ 104.030496][ T4230] Registered IR keymap rc-empty [ 104.043999][ T4230] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 104.065462][ T4267] rtl8150 2-1:1.0: eth1: rtl8150 is detected [ 104.079436][ T4190] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 104.091703][ T4190] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.098034][ T4230] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 104.109119][ T7] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 104.126326][ T4267] usb 2-1: USB disconnect, device number 6 [ 104.128885][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.147659][ T4190] usb 4-1: config 0 has no interface number 0 [ 104.184653][ T7] usb 3-1: Product: syz [ 104.190562][ T4190] usb 4-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 104.198535][ T4230] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 104.214854][ T7] usb 3-1: Manufacturer: syz [ 104.220648][ T7] usb 3-1: SerialNumber: syz [ 104.225678][ T4190] usb 4-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 104.254045][ T4190] usb 4-1: config 0 interface 106 has no altsetting 0 [ 104.261504][ T7] usb 3-1: config 0 descriptor?? [ 104.267646][ T4190] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 104.277519][ T4190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.280787][ T4230] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 104.289064][ T4190] usb 4-1: config 0 descriptor?? [ 104.306562][ T7] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 104.330252][ T7] em28xx 3-1:0.89: Video interface 89 found: [ 104.348446][ T4230] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 104.388706][ T4230] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 104.409511][ T4190] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 104.419296][ T4230] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 104.446674][ T4190] usb 5-1: USB disconnect, device number 7 [ 104.483749][ T4230] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 104.533875][ T4230] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 104.578039][ T4230] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 104.633622][ T4230] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 104.708096][ T4230] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 104.748206][ T4230] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 104.790097][ T4230] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 104.840267][ T4230] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 104.861026][ T4230] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 104.949522][ T7] em28xx 3-1:0.89: chip ID is em2884 [ 105.518640][ T4467] usb 4-1: Failed to submit usb control message: -110 [ 105.528087][ T7] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 105.544780][ T4467] usb 4-1: unable to send the bmi data to the device: -110 [ 105.546788][ T7] em28xx 3-1:0.89: board has no eeprom [ 105.572155][ T4467] usb 4-1: could not get target info (-110) [ 105.584799][ T4467] usb 4-1: could not probe fw (-110) [ 105.678348][ T7] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 105.694501][ T7] em28xx 3-1:0.89: analog set to bulk mode. [ 105.760860][ T7] usb 3-1: USB disconnect, device number 6 [ 105.801100][ T4230] usb 1-1: USB disconnect, device number 7 [ 105.816844][ T4190] em28xx 3-1:0.89: Registering V4L2 extension [ 105.861100][ T7] em28xx 3-1:0.89: Disconnecting em28xx [ 106.007159][ T4190] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 106.014660][ T4190] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 106.047973][ T4190] em28xx 3-1:0.89: No AC97 audio processor [ 106.133914][ T4190] usb 3-1: Decoder not found [ 106.165199][ T4190] em28xx 3-1:0.89: failed to create media graph [ 106.208910][ T4190] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 106.254190][ T4190] em28xx 3-1:0.89: Registering snapshot button... [ 106.258182][ T21] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 106.333943][ T4190] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input11 [ 106.372040][ T4190] em28xx 3-1:0.89: Remote control support is not available for this card. [ 106.411069][ T7] em28xx 3-1:0.89: Closing input extension [ 106.417047][ T7] em28xx 3-1:0.89: Deregistering snapshot button [ 106.465274][ T7] em28xx 3-1:0.89: Freeing device [ 106.658106][ T21] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 106.696875][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.738030][ T21] usb 2-1: config 0 has no interface number 0 [ 106.767977][ T21] usb 2-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 106.812011][ T21] usb 2-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 106.888175][ T21] usb 2-1: config 0 interface 106 has no altsetting 0 [ 106.895657][ T21] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 106.938079][ T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 106.976092][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.033150][ T21] usb 2-1: config 0 descriptor?? [ 107.137492][ T21] ath10k_warn: 1 callbacks suppressed [ 107.137513][ T21] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 107.227998][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 107.370082][ T7] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 107.392617][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.427179][ T7] usb 3-1: config 0 has no interface number 0 [ 107.470088][ T7] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 107.534349][ T4230] usb 4-1: USB disconnect, device number 8 [ 107.584658][ T7] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 107.644562][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.686874][ T7] usb 3-1: config 0 descriptor?? [ 107.729922][ T7] ldusb 3-1:0.55: Interrupt in endpoint not found [ 107.989648][ T4190] usb 3-1: USB disconnect, device number 7 [ 108.058034][ T4230] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 108.118072][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 108.168246][ T4467] usb 2-1: Failed to submit usb control message: -110 [ 108.177452][ T4467] usb 2-1: unable to send the bmi data to the device: -110 [ 108.210315][ T4467] usb 2-1: unable to get target info from device [ 108.268773][ T4467] usb 2-1: could not get target info (-110) [ 108.308025][ T4230] usb 4-1: Using ep0 maxpacket: 16 [ 108.313844][ T4467] usb 2-1: could not probe fw (-110) [ 108.417973][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 108.428207][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.456978][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.484527][ T4230] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 108.567744][ T4230] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 108.584362][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.603581][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.603612][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 108.663035][ T4230] usb 4-1: config 0 descriptor?? [ 108.693438][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 108.730574][ T7] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 108.776717][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.918126][ T7] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 108.955520][ T7] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 108.977977][ T7] usb 1-1: Manufacturer: syz [ 109.010363][ T7] usb 1-1: config 0 descriptor?? [ 109.200821][ T4230] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 109.222422][ T4230] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 109.242021][ T4230] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 109.261920][ T4230] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 109.281404][ T4230] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 109.308041][ T4230] appleir 0003:05AC:8241.0001: No inputs registered, leaving [ 109.381192][ T4230] appleir 0003:05AC:8241.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 109.428060][ T7] rc_core: IR keymap rc-hauppauge not found [ 109.437081][ T7] Registered IR keymap rc-empty [ 109.483221][ T7] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 109.489504][ T4230] usb 4-1: USB disconnect, device number 9 [ 109.580754][ T7] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 109.595819][ T4996] fido_id[4996]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 109.622363][ T1108] usb 2-1: USB disconnect, device number 7 [ 109.706104][ T7] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 109.736474][ T7] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input12 [ 109.781924][ T5000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.199'. [ 109.795331][ T5000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.199'. [ 109.804311][ T7] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 109.838081][ T7] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 109.870435][ T7] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 109.918973][ T7] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 109.944585][ T5000] syz.1.199 (5000) used greatest stack depth: 20976 bytes left [ 109.958564][ T7] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 109.998124][ T7] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 110.038396][ T7] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 110.078230][ T7] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 110.128564][ T7] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 110.179407][ T7] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 110.207491][ T5007] netlink: 48 bytes leftover after parsing attributes in process `syz.1.202'. [ 110.223687][ T5006] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 110.234176][ T7] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 110.293357][ T7] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 110.855194][ T1108] usb 1-1: USB disconnect, device number 8 [ 111.758009][ T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 111.823796][ T5032] device syzkaller0 entered promiscuous mode [ 111.876488][ T5032] tipc: Started in network mode [ 111.900717][ T5032] tipc: Node identity 0aba8c906125, cluster identity 4711 [ 111.920014][ T5032] tipc: Enabled bearer , priority 0 [ 111.938283][ T5003] sctp: failed to load transform for md5: -4 [ 111.951541][ T5032] tipc: Resetting bearer [ 111.957660][ T5003] syz.4.200 (5003) used greatest stack depth: 20464 bytes left [ 111.985965][ T5031] tipc: Resetting bearer [ 112.010334][ T5031] tipc: Disabling bearer [ 112.158034][ T7] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 112.166290][ T1324] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 112.179557][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.191635][ T7] usb 2-1: config 0 has no interface number 0 [ 112.197765][ T7] usb 2-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 112.209425][ T7] usb 2-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 112.229820][ T7] usb 2-1: config 0 interface 106 has no altsetting 0 [ 112.236654][ T7] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 112.246938][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.270159][ T7] usb 2-1: config 0 descriptor?? [ 112.311479][ T7] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 112.457969][ T1108] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 112.548110][ T1324] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 112.556604][ T1324] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.581541][ T1324] usb 1-1: config 0 has no interface number 0 [ 112.594030][ T1324] usb 1-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 112.609098][ T1324] usb 1-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 112.630520][ T1324] usb 1-1: config 0 interface 106 has no altsetting 0 [ 112.637567][ T1324] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 112.647027][ T1324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.658128][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 112.670100][ T1324] usb 1-1: config 0 descriptor?? [ 112.721830][ T1324] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 112.838100][ T1108] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.853829][ T1108] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 112.864319][ T1108] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 112.874672][ T1108] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.888082][ T1108] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 112.897285][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.908263][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 113.028462][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.057177][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.082935][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 113.104786][ T7] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 113.183240][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.318250][ T7] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 113.351138][ T7] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 113.378086][ T4252] usb 2-1: Failed to submit usb control message: -110 [ 113.399839][ T4252] usb 2-1: unable to send the bmi data to the device: -110 [ 113.424145][ T4252] usb 2-1: unable to get target info from device [ 113.434117][ T7] usb 3-1: Manufacturer: syz [ 113.444872][ T4252] usb 2-1: could not get target info (-110) [ 113.460596][ T7] usb 3-1: config 0 descriptor?? [ 113.468967][ T4252] usb 2-1: could not probe fw (-110) [ 113.768073][ T9] usb 1-1: Failed to submit usb control message: -110 [ 113.787776][ T9] usb 1-1: unable to send the bmi data to the device: -110 [ 113.850251][ T9] usb 1-1: unable to get target info from device [ 113.887509][ T9] usb 1-1: could not get target info (-110) [ 113.902135][ T9] usb 1-1: could not probe fw (-110) [ 113.918118][ T7] rc_core: IR keymap rc-hauppauge not found [ 113.924293][ T7] Registered IR keymap rc-empty [ 113.939961][ T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 113.998404][ T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 114.038375][ T7] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 114.060464][ T1108] [drm] Initialized gud 1.0.0 20200422 for 5-1:1.0 on minor 2 [ 114.132720][ T7] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13 [ 114.166661][ T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 114.227643][ T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 114.298054][ T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 114.331026][ T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 114.361097][ T1108] gud 5-1:1.0: [drm] fb1: guddrmfb frame buffer device [ 114.388837][ T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 114.414140][ T4267] usb 2-1: USB disconnect, device number 8 [ 114.429458][ T1108] usb 5-1: USB disconnect, device number 8 [ 114.448192][ T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 114.478502][ T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 114.558121][ T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 114.587999][ T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 114.618108][ T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.060807][ T7] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 115.069515][ T7] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 115.307887][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 115.834096][ T1108] usb 3-1: USB disconnect, device number 8 [ 116.001019][ T5105] syz.1.231 uses obsolete (PF_INET,SOCK_PACKET) [ 116.744211][ T1108] usb 1-1: USB disconnect, device number 9 [ 117.297967][ T1108] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 117.418151][ T21] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 117.698046][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 117.728099][ T1108] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 117.753856][ T1108] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.780007][ T1108] usb 1-1: config 0 has no interface number 0 [ 117.814041][ T1108] usb 1-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 117.826491][ T1108] usb 1-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 117.840748][ T1108] usb 1-1: config 0 interface 106 has no altsetting 0 [ 117.856847][ T1108] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 117.866391][ T21] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 117.876953][ T21] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 117.891460][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.911326][ T1108] usb 1-1: config 0 descriptor?? [ 117.963866][ T1108] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 118.088087][ T21] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 118.097496][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.105768][ T21] usb 3-1: Product: syz [ 118.110158][ T21] usb 3-1: Manufacturer: syz [ 118.115471][ T21] usb 3-1: SerialNumber: syz [ 118.130309][ T21] usb 3-1: config 0 descriptor?? [ 118.152891][ T5125] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 118.179745][ T21] powermate: probe of 3-1:0.0 failed with error -22 [ 118.198105][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 118.608759][ T23] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 118.619191][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.644124][ T23] usb 4-1: config 0 has no interface number 0 [ 118.658133][ T23] usb 4-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 118.685973][ T23] usb 4-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 118.733436][ T23] usb 4-1: config 0 interface 106 has no altsetting 0 [ 118.784509][ T23] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 118.810425][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.844452][ T23] usb 4-1: config 0 descriptor?? [ 118.971760][ T23] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 119.038102][ T4252] usb 1-1: Failed to submit usb control message: -110 [ 119.052183][ T4252] usb 1-1: unable to send the bmi data to the device: -110 [ 119.092722][ T4252] usb 1-1: unable to get target info from device [ 119.135736][ T4252] usb 1-1: could not get target info (-110) [ 119.147655][ T4252] usb 1-1: could not probe fw (-110) [ 119.448071][ T4190] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 119.698353][ T4190] usb 5-1: Using ep0 maxpacket: 16 [ 119.898542][ T4190] usb 5-1: config 127 has an invalid interface number: 124 but max is 0 [ 119.918631][ T4190] usb 5-1: config 127 has no interface number 0 [ 119.942301][ T4190] usb 5-1: config 127 interface 124 has no altsetting 0 [ 120.008529][ T5093] usb 4-1: Failed to submit usb control message: -110 [ 120.026319][ T5093] usb 4-1: unable to send the bmi data to the device: -110 [ 120.086346][ T1108] usb 3-1: USB disconnect, device number 9 [ 120.143636][ T4190] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 120.163462][ T4190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.175008][ T5093] usb 4-1: unable to get target info from device [ 120.197333][ T4190] usb 5-1: Product: syz [ 120.211359][ T5093] usb 4-1: could not get target info (-110) [ 120.221183][ T4190] usb 5-1: Manufacturer: syz [ 120.234676][ T5093] usb 4-1: could not probe fw (-110) [ 120.252379][ T4190] usb 5-1: SerialNumber: syz [ 120.270081][ T7] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 120.285287][ T7] Bluetooth: hci1: Injecting HCI hardware error event [ 120.298125][ T23] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 120.326298][ T4203] Bluetooth: hci1: hardware error 0x00 [ 120.466994][ T1108] usb 1-1: USB disconnect, device number 10 [ 120.617053][ T5191] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 120.974146][ T23] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 120.988151][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.996315][ T23] usb 2-1: Product: syz [ 121.016594][ T23] usb 2-1: Manufacturer: syz [ 121.026192][ T23] usb 2-1: SerialNumber: syz [ 121.057206][ T23] usb 2-1: config 0 descriptor?? [ 121.122064][ T4267] usb 4-1: USB disconnect, device number 10 [ 121.233179][ T4190] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 121.318094][ T23] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 121.918603][ T5216] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 122.008113][ T4190] usb 5-1: failed to restore interface 124 altsetting 11 (error=-71) [ 122.051619][ T4190] usb 5-1: USB disconnect, device number 9 [ 122.288036][ T4267] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 122.558247][ T4267] usb 1-1: Using ep0 maxpacket: 8 [ 122.644238][ T4190] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 122.655948][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 122.655965][ T26] audit: type=1326 audit(1786771666.011:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5222 comm="syz.4.270" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d2d390d9 code=0x7ffc0000 [ 122.716027][ T26] audit: type=1326 audit(1786771666.041:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5222 comm="syz.4.270" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d2d390d9 code=0x7ffc0000 [ 122.767316][ T26] audit: type=1326 audit(1786771666.041:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5222 comm="syz.4.270" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe2d2d390d9 code=0x7ffc0000 [ 122.792306][ T26] audit: type=1326 audit(1786771666.041:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5222 comm="syz.4.270" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d2d390d9 code=0x7ffc0000 [ 122.885101][ T26] audit: type=1326 audit(1786771666.041:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5222 comm="syz.4.270" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe2d2d390d9 code=0x7ffc0000 [ 122.910039][ T26] audit: type=1326 audit(1786771666.041:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5222 comm="syz.4.270" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d2d390d9 code=0x7ffc0000 [ 122.939247][ T26] audit: type=1326 audit(1786771666.041:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5222 comm="syz.4.270" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe2d2d390d9 code=0x7ffc0000 [ 122.964663][ T4267] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 122.975955][ T4267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.985157][ T4267] usb 1-1: Product: syz [ 122.990177][ T4267] usb 1-1: Manufacturer: syz [ 122.995538][ T4267] usb 1-1: SerialNumber: syz [ 123.001409][ T26] audit: type=1326 audit(1786771666.041:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5222 comm="syz.4.270" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d2d390d9 code=0x7ffc0000 [ 123.008218][ T4190] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 123.035497][ T26] audit: type=1326 audit(1786771666.041:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5222 comm="syz.4.270" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe2d2d390d9 code=0x7ffc0000 [ 123.064156][ T4267] usb 1-1: config 0 descriptor?? [ 123.098563][ T26] audit: type=1326 audit(1786771666.041:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5222 comm="syz.4.270" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d2d390d9 code=0x7ffc0000 [ 123.127116][ T4267] gspca_main: se401-2.14.0 probing 047d:5003 [ 123.158132][ T4190] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.198296][ T4190] usb 4-1: config 0 has no interface number 0 [ 123.217666][ T4190] usb 4-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 123.265573][ T4190] usb 4-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 123.281792][ T4190] usb 4-1: config 0 interface 106 has no altsetting 0 [ 123.289205][ T4190] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 123.299374][ T4190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.313217][ T4190] usb 4-1: config 0 descriptor?? [ 123.368828][ T4190] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 123.549503][ T4267] gspca_se401: Wrong descriptor type [ 123.598010][ T4190] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 123.753745][ T5219] [ 123.756114][ T5219] ====================================================== [ 123.763219][ T5219] WARNING: possible circular locking dependency detected [ 123.770437][ T5219] syzkaller #0 Not tainted [ 123.774865][ T5219] ------------------------------------------------------ [ 123.781899][ T5219] syz.0.268/5219 is trying to acquire lock: [ 123.787813][ T5219] ffff888062fc5028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 123.798918][ T5219] [ 123.798918][ T5219] but task is already holding lock: [ 123.806315][ T5219] ffffffff8d6d5ea8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 123.815992][ T5219] [ 123.815992][ T5219] which lock already depends on the new lock. [ 123.815992][ T5219] [ 123.826616][ T5219] [ 123.826616][ T5219] the existing dependency chain (in reverse order) is: [ 123.835759][ T5219] [ 123.835759][ T5219] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 123.843817][ T5219] __mutex_lock_common+0x1e5/0x2400 [ 123.849574][ T5219] mutex_lock_nested+0x17/0x20 [ 123.854876][ T5219] rfkill_register+0x2f/0x970 [ 123.860228][ T5219] hci_register_dev+0x459/0x980 [ 123.865696][ T5219] vhci_create_device+0x32e/0x5c0 [ 123.871243][ T5219] vhci_write+0x389/0x440 [ 123.876096][ T5219] vfs_write+0x748/0xd70 [ 123.880852][ T5219] ksys_write+0x153/0x260 [ 123.885696][ T5219] do_syscall_64+0x4c/0xa0 [ 123.890738][ T5219] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.897187][ T5219] [ 123.897187][ T5219] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 123.905003][ T5219] __mutex_lock_common+0x1e5/0x2400 [ 123.910722][ T5219] mutex_lock_nested+0x17/0x20 [ 123.916004][ T5219] vhci_send_frame+0x88/0x100 [ 123.921196][ T5219] hci_send_frame+0x1a9/0x2e0 [ 123.926408][ T5219] hci_tx_work+0x9b5/0x16d0 [ 123.931535][ T5219] process_one_work+0x867/0xff0 [ 123.937013][ T5219] worker_thread+0xad7/0x12a0 [ 123.942405][ T5219] kthread+0x42e/0x520 [ 123.947010][ T5219] ret_from_fork+0x1f/0x30 [ 123.951954][ T5219] [ 123.951954][ T5219] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 123.961151][ T5219] __flush_work+0x116/0x210 [ 123.966178][ T5219] hci_dev_do_close+0x201/0x1020 [ 123.971894][ T5219] hci_error_reset+0x101/0x2c0 [ 123.977186][ T5219] process_one_work+0x867/0xff0 [ 123.982579][ T5219] worker_thread+0xad7/0x12a0 [ 123.987808][ T5219] kthread+0x42e/0x520 [ 123.992410][ T5219] ret_from_fork+0x1f/0x30 [ 123.997353][ T5219] [ 123.997353][ T5219] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 124.005003][ T5219] __mutex_lock_common+0x1e5/0x2400 [ 124.010720][ T5219] mutex_lock_nested+0x17/0x20 [ 124.016003][ T5219] bg_scan_update+0x44/0x3b0 [ 124.021107][ T5219] process_one_work+0x867/0xff0 [ 124.026471][ T5219] worker_thread+0xad7/0x12a0 [ 124.031760][ T5219] kthread+0x42e/0x520 [ 124.036342][ T5219] ret_from_fork+0x1f/0x30 [ 124.041281][ T5219] [ 124.041281][ T5219] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 124.051084][ T5219] __lock_acquire+0x2c66/0x7b50 [ 124.056465][ T5219] lock_acquire+0x19e/0x400 [ 124.061507][ T5219] __flush_work+0x116/0x210 [ 124.066523][ T5219] __cancel_work_timer+0x3f4/0x560 [ 124.072146][ T5219] hci_request_cancel_all+0xcc/0x300 [ 124.077946][ T5219] hci_dev_do_close+0x4e/0x1020 [ 124.083332][ T5219] hci_rfkill_set_block+0x101/0x180 [ 124.089053][ T5219] rfkill_set_block+0x1c1/0x3c0 [ 124.094471][ T5219] rfkill_fop_write+0x453/0x560 [ 124.099867][ T5219] vfs_write+0x304/0xd70 [ 124.104649][ T5219] ksys_write+0x153/0x260 [ 124.109492][ T5219] do_syscall_64+0x4c/0xa0 [ 124.114428][ T5219] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.120850][ T5219] [ 124.120850][ T5219] other info that might help us debug this: [ 124.120850][ T5219] [ 124.131158][ T5219] Chain exists of: [ 124.131158][ T5219] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 124.131158][ T5219] [ 124.147236][ T5219] Possible unsafe locking scenario: [ 124.147236][ T5219] [ 124.154780][ T5219] CPU0 CPU1 [ 124.160250][ T5219] ---- ---- [ 124.165609][ T5219] lock(rfkill_global_mutex); [ 124.170450][ T5219] lock(&data->open_mutex); [ 124.177548][ T5219] lock(rfkill_global_mutex); [ 124.185011][ T5219] lock((work_completion)(&hdev->bg_scan_update)); [ 124.191609][ T5219] [ 124.191609][ T5219] *** DEADLOCK *** [ 124.191609][ T5219] [ 124.199776][ T5219] 1 lock held by syz.0.268/5219: [ 124.204707][ T5219] #0: ffffffff8d6d5ea8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 124.214791][ T5219] [ 124.214791][ T5219] stack backtrace: [ 124.220671][ T5219] CPU: 0 PID: 5219 Comm: syz.0.268 Not tainted syzkaller #0 [ 124.227947][ T5219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.238014][ T5219] Call Trace: [ 124.241368][ T5219] [ 124.244318][ T5219] dump_stack_lvl+0x188/0x250 [ 124.248995][ T5219] ? load_image+0x410/0x410 [ 124.253507][ T5219] ? show_regs_print_info+0x20/0x20 [ 124.258723][ T5219] ? print_circular_bug+0x12b/0x1a0 [ 124.263911][ T5219] check_noncircular+0x296/0x330 [ 124.268854][ T5219] ? look_up_lock_class+0x71/0x110 [ 124.273980][ T5219] ? add_chain_block+0x9b0/0x9b0 [ 124.278907][ T5219] ? lockdep_lock+0xf1/0x1f0 [ 124.283488][ T5219] ? __lock_acquire+0x1305/0x7b50 [ 124.288506][ T5219] ? mark_lock+0x94/0x320 [ 124.292825][ T5219] ? _find_first_zero_bit+0xd1/0xf0 [ 124.298034][ T5219] __lock_acquire+0x2c66/0x7b50 [ 124.302884][ T5219] ? verify_lock_unused+0x140/0x140 [ 124.308082][ T5219] ? verify_lock_unused+0x140/0x140 [ 124.313376][ T5219] ? mark_lock+0x94/0x320 [ 124.317796][ T5219] ? verify_lock_unused+0x140/0x140 [ 124.322992][ T5219] lock_acquire+0x19e/0x400 [ 124.327580][ T5219] ? __flush_work+0xfa/0x210 [ 124.332250][ T5219] ? __lock_acquire+0x7b50/0x7b50 [ 124.337267][ T5219] ? read_lock_is_recursive+0x10/0x10 [ 124.342634][ T5219] ? start_flush_work+0x784/0x830 [ 124.347648][ T5219] ? __lock_acquire+0x13dc/0x7b50 [ 124.352683][ T5219] __flush_work+0x116/0x210 [ 124.357190][ T5219] ? __flush_work+0xfa/0x210 [ 124.361780][ T5219] ? flush_work+0x20/0x20 [ 124.366099][ T5219] ? try_to_grab_pending+0xfb/0x820 [ 124.371686][ T5219] ? mark_lock+0x94/0x320 [ 124.376054][ T5219] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.382045][ T5219] ? lock_chain_count+0x20/0x20 [ 124.386890][ T5219] ? mark_lock+0x94/0x320 [ 124.391233][ T5219] ? __cancel_work_timer+0x36a/0x560 [ 124.396602][ T5219] __cancel_work_timer+0x3f4/0x560 [ 124.401822][ T5219] ? cancel_work_sync+0x20/0x20 [ 124.406820][ T5219] ? __cancel_work+0x1f9/0x2e0 [ 124.411607][ T5219] ? lockdep_hardirqs_on+0x94/0x140 [ 124.416806][ T5219] ? __cancel_work+0x27b/0x2e0 [ 124.421565][ T5219] ? cancel_work+0x20/0x20 [ 124.425980][ T5219] hci_request_cancel_all+0xcc/0x300 [ 124.431260][ T5219] hci_dev_do_close+0x4e/0x1020 [ 124.436121][ T5219] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 124.442014][ T5219] ? _raw_spin_unlock+0x40/0x40 [ 124.446903][ T5219] hci_rfkill_set_block+0x101/0x180 [ 124.452193][ T5219] ? rcu_lock_release+0x20/0x20 [ 124.457055][ T5219] rfkill_set_block+0x1c1/0x3c0 [ 124.462117][ T5219] rfkill_fop_write+0x453/0x560 [ 124.466994][ T5219] ? rfkill_fop_read+0x560/0x560 [ 124.471945][ T5219] ? common_file_perm+0x100/0x1c0 [ 124.476968][ T5219] ? fsnotify_perm+0x5d/0x560 [ 124.481635][ T5219] ? security_file_permission+0x75/0xa0 [ 124.487335][ T5219] ? rfkill_fop_read+0x560/0x560 [ 124.492279][ T5219] vfs_write+0x304/0xd70 [ 124.496669][ T5219] ? file_end_write+0x250/0x250 [ 124.501618][ T5219] ? __fget_files+0x402/0x470 [ 124.506299][ T5219] ? __fdget_pos+0x1e2/0x370 [ 124.510905][ T5219] ? ksys_write+0x70/0x260 [ 124.515320][ T5219] ksys_write+0x153/0x260 [ 124.519746][ T5219] ? __ia32_sys_read+0x80/0x80 [ 124.524500][ T5219] do_syscall_64+0x4c/0xa0 [ 124.529049][ T5219] ? clear_bhb_loop+0x30/0x80 [ 124.533761][ T5219] ? clear_bhb_loop+0x30/0x80 [ 124.538459][ T5219] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.544355][ T5219] RIP: 0033:0x7f6f59d9a0d9 [ 124.548769][ T5219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.569344][ T5219] RSP: 002b:00007f6f57ff2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.577952][ T5219] RAX: ffffffffffffffda RBX: 00007f6f5a021fa0 RCX: 00007f6f59d9a0d9 [ 124.586035][ T5219] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: 000000000000000a [ 124.594196][ T5219] RBP: 00007f6f59e31024 R08: 0000000000000000 R09: 0000000000000000 [ 124.602176][ T5219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.610149][ T5219] R13: 00007f6f5a022038 R14: 00007f6f5a021fa0 R15: 00007ffc4cd83358 [ 124.618136][ T5219] [ 124.709159][ T4951] usb 4-1: Failed to submit usb control message: -110 [ 124.720921][ T4951] usb 4-1: unable to send the bmi data to the device: -110 [ 124.721201][ T5245] netlink: 40 bytes leftover after parsing attributes in process `syz.0.268'. [ 124.747068][ T4951] usb 4-1: unable to get target info from device [ 124.758440][ T4951] usb 4-1: could not get target info (-110) [ 124.771662][ T4951] usb 4-1: could not probe fw (-110) [ 124.784800][ T21] usb 1-1: USB disconnect, device number 11 [ 124.788116][ T4190] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 124.810032][ T4190] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.825917][ T4190] usb 3-1: config 0 has no interface number 0 [ 124.835918][ T4190] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 124.852558][ T4190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.868149][ T4190] usb 3-1: config 0 descriptor?? [ 124.920997][ T4190] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 125.058299][ T23] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 125.078063][ T23] usb 2-1: USB disconnect, device number 9 [ 125.998898][ T3089] usb 3-1: Failed to submit usb control message: -110 [ 126.006832][ T3089] usb 3-1: unable to send the bmi data to the device: -110 [ 126.014188][ T3089] usb 3-1: unable to get target info from device [ 126.021684][ T3089] usb 3-1: could not get target info (-110) [ 126.027611][ T3089] usb 3-1: could not probe fw (-110) [ 126.199461][ T23] usb 4-1: USB disconnect, device number 11 [ 126.611946][ T23] usb 3-1: USB disconnect, device number 10 [ 133.039079][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.045399][ T1431] ieee802154 phy1 wpan1: encryption failed: -22