last executing test programs: 4m16.271430091s ago: executing program 0 (id=190): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getown(r1, 0x9) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) openat$cgroup_ro(r6, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000680)={0xc}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) syz_emit_ethernet(0x6f, &(0x7f0000000100)=ANY=[], 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 4m11.528013203s ago: executing program 0 (id=198): sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="bc000000", @ANYRES32, @ANYBLOB="00042abd7000ffdbdf250300000048000180060001000200000005000200080000001400040000000000000000000000ffffac1414bb060001000a00000008000700", @ANYBLOB="050002000100000006"], 0xbc}, 0x1, 0x0, 0x0, 0x81}, 0x800) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000006000000000a00000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000001d000000000000007f0000000000000000000000000000000000000000000000dd020000000000000000000000000000000100020000000084010500ac141438000000000000000000000000000004d32b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000000000000003200000000000000ac1414aa000000000000000000000000000000000100000000000000ffffffff0000000000000000000000000000000000000001000000003c00000002000000fc0000000000000000000000000000010000000001030000000000000600000000000000ff020000000000000000000000000001000000003c00000002000000fe8000000000000000000000000000aa00000000020000000000000003000000286a8b2700000000000000000000000000000000000000003c"], 0x23c}}, 0x0) 4m10.854631829s ago: executing program 0 (id=200): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000240)={0x1, 0x1, {0xa, 0x2e, 0x4, 0x4, 0x7, 0xfe3, 0x0, 0x151, 0xffffffffffffffff}}) 4m9.535645618s ago: executing program 0 (id=202): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 4m8.048503364s ago: executing program 0 (id=207): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r1 = syz_io_uring_setup(0x109, &(0x7f00000000c0)={0x0, 0x8006d89, 0x100, 0x2, 0x20000066}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x6000, @fd=r1, 0xffffffff, 0x18f, 0xc69, 0x0, 0x1}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r6 = dup(r5) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="38010000fe00004a59ac3fab5a3b30692619d523a7eb0167d4f100fd8bcb"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_any}]}}) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) io_uring_enter(r1, 0x8aa, 0x0, 0x0, 0x0, 0x0) 4m1.383948757s ago: executing program 0 (id=210): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000002280)=ANY=[@ANYRES32]) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x40082) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') read$FUSE(r4, &(0x7f0000000240)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3m46.067972031s ago: executing program 32 (id=210): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000002280)=ANY=[@ANYRES32]) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x40082) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') read$FUSE(r4, &(0x7f0000000240)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 24.422921956s ago: executing program 2 (id=499): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) fcntl$dupfd(r0, 0x0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) ftruncate(r1, 0x9) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, 0xee01, &(0x7f0000000200)) lseek(0xffffffffffffffff, 0x1000000000931f, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x5f12}, 0x20000}}, {0x20, 0x2, @in6={0xa, 0xfffd, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 21.14763205s ago: executing program 3 (id=502): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000002280)=ANY=[@ANYRES32]) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') read$FUSE(r3, &(0x7f0000000240)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 18.994572256s ago: executing program 2 (id=506): shmget(0x0, 0x1000, 0x812, &(0x7f0000ffe000/0x1000)=nil) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0), 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)}], 0x1, 0x4000001, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) 18.132399107s ago: executing program 1 (id=509): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x7c}}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f00000001c0)) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 17.41793438s ago: executing program 4 (id=510): socket$netlink(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 16.476067839s ago: executing program 3 (id=511): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$sndctrl(0x0, 0x2, 0x141240) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x64, 0x4, 0x3b0, 0xffffffff, 0x128, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}, @common=@ah={{0x30}, {[], 0x0, 0x0, 0x5}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'wlan0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r7 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x80, 0x7, 0x2, 0x0, r6}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) writev(r6, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e20, @local}}, [0x9, 0x8, 0x0, 0x7fffffffffffffff, 0x1, 0xf, 0x838, 0x7, 0x9, 0x3ff, 0x5, 0x100000000, 0x2, 0x4, 0x2]}, &(0x7f0000000040)=0x100) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 14.607551728s ago: executing program 1 (id=514): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r3, 0x0, 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r3, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read(r1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ed:cb2e') close_range(r2, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) setuid(0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) 14.300032009s ago: executing program 2 (id=515): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000002280)=ANY=[@ANYRES32]) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') read$FUSE(r3, &(0x7f0000000240)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 13.200127798s ago: executing program 5 (id=516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r8}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, 0xa, 0x30, 0x60}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x200000003, 0x0, 0x40}, {0x1, 0x4, 0x0, 0x6}, 0x3, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 11.32171784s ago: executing program 4 (id=517): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) 11.054253242s ago: executing program 5 (id=518): socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') getsockname$packet(0xffffffffffffffff, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x10da) r0 = syz_io_uring_setup(0x8d2, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0xa25d, 0x0, 0x0, 0x0) 10.419841473s ago: executing program 5 (id=519): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000900000002000000"]) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = dup(r0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x2008cc10}, 0x4004883) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)={0x1ff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = syz_io_uring_setup(0xcd0, &(0x7f0000000340)={0x0, 0x7f0a, 0x80, 0xfffffffe, 0x21c}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0xa3d, 0x0, 0x0, 0x0, 0xff39) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0xa) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="400f01c3650f07470f01cab9800000c02e6726f3400fc7b50000000008040421000f30c4417ff030b9800000c00f3235000100000f30640f01cf65490fc79ce656000000f30f1efc6764653e470f1b690c", 0x51}], 0x1, 0xb, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x57, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r12, 0x4048aecb, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000005009803"]) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz0\x00', {0x7, 0x4, 0x5, 0xfffa}, 0x1d, [0x7ffe, 0x4, 0xfffffff3, 0x80, 0x80, 0x2, 0x0, 0x7f, 0x6, 0x8, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x5, 0x101, 0x7fff, 0x4c74, 0x80000000, 0xa42, 0x3, 0xe, 0x0, 0x4bf12ccc, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x2, 0x4, 0x8, 0x0, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000006, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x9, 0xea4, 0x0, 0x5, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x9, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7d, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0xfffffffc, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x7c19, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x8, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x7, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x16, 0xaaed, 0x4, 0x5aac], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x7, 0x2, 0xf58, 0x5, 0x2, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x4, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xb6, 0x6, 0xffffffff, 0x80000000, 0x6b4d7043, 0x8, 0x10c8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x1ff, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) 10.367569918s ago: executing program 4 (id=520): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016901992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85ff1c5df40229f0981507171aec7dc97abd981893d51a27e8a1033fa344fa3c6c27705648a6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, 0xa, 0x30, 0x60}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x200000003, 0x0, 0x40}, {0x1, 0x4, 0x0, 0x6}, 0x3, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 8.99434899s ago: executing program 4 (id=521): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r1, 0x0, 0x880) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 8.853908598s ago: executing program 3 (id=522): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 8.011387403s ago: executing program 5 (id=523): r0 = gettid() r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) clock_gettime(0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.921566079s ago: executing program 1 (id=524): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0xb, 0x2, 0x5, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_address={0x3, 0x17, 0x3c9a5253c36338db, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}]}, 0x28}}, 0x20008004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x3}}}}) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r7, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) close(r6) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@getlink={0x28, 0x12, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x9, 0x40}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x400}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r5) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r8) r10 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r10, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r9, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x4008815}, 0x0) sendmmsg$inet6(r3, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) 7.850436095s ago: executing program 4 (id=525): shmget(0x0, 0x1000, 0x812, &(0x7f0000ffe000/0x1000)=nil) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0), 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)}], 0x1, 0x4000001, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) 6.628647273s ago: executing program 2 (id=526): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x7c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 6.575776361s ago: executing program 1 (id=527): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) fcntl$dupfd(r0, 0x0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) ftruncate(r1, 0x9) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, 0xee01, &(0x7f0000000200)) lseek(0xffffffffffffffff, 0x1000000000931f, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x5f12}, 0x20000}}, {0x20, 0x2, @in6={0xa, 0xfffd, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 5.999499586s ago: executing program 5 (id=528): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000002540)="e2f21f5df2b498", 0x7}], 0x1}}], 0x1, 0xc1) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r4, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x800}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) listen(0xffffffffffffffff, 0x0) 5.606113691s ago: executing program 3 (id=529): socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') getsockname$packet(0xffffffffffffffff, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x10da) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, 0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0xa25d, 0x0, 0x0, 0x0) 4.09187518s ago: executing program 3 (id=530): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121300, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000000c0)=0x1) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, 0xffffffffffffffff, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x4003, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x48, 0xb, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_SET_POLICY={0x8}]}, @NFT_MSG_DELRULE={0xec, 0x8, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x9e, 0x7, 0x1, 0x0, "8f41cee1071fb65603a242878348ecdc5ba38729b8c5556db6329cd401a2021038aaa2aed0172763bc18f050da1fd2b9bf2d24ccd60b8bfd76853ae1b918528ee1a71abec61cf3c83340550461eb18748c28576473c9c6178e3251861cadbb33067af089729d1b788c9e091f4b173c8d01f27148e106423562d977a35c13922247aa5b4f5d6897d9ed0e1c05e5d02238739ebeb55c62df9cfb8e"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x15c}, 0x1, 0x0, 0x0, 0x20004802}, 0x4004000) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfffffffffffffff1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x38) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x0, 0xffff}, 0x90) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) 3.58671997s ago: executing program 4 (id=531): socket$inet_sctp(0x2, 0x5, 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r3, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x800}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) listen(0xffffffffffffffff, 0x0) 2.197909553s ago: executing program 3 (id=532): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000080)={0x60, 0x5, 0x2, '#('}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.16004906s ago: executing program 2 (id=533): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x6a040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x12000) pread64(r0, &(0x7f00000002c0)=""/22, 0x16, 0x3ff) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff51ae00"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, r4, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8000000000000001}}, 0x30) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x18, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x3, 0x800}}}}}}}, 0x0) 1.820731087s ago: executing program 1 (id=534): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016901992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85ff1c5df40229f0981507171aec7dc97abd981893d51a27e8a1033fa344fa3c6c27705648a6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, 0xa, 0x30, 0x60}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x200000003, 0x0, 0x40}, {0x1, 0x4, 0x0, 0x6}, 0x3, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 239.349978ms ago: executing program 1 (id=535): vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r2, r3, 0x0, 0x8000fb00) 84.930489ms ago: executing program 2 (id=536): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) fcntl$dupfd(r0, 0x0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) ftruncate(r1, 0x9) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, 0xee01, &(0x7f0000000200)) lseek(0xffffffffffffffff, 0x1000000000931f, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x5f12}, 0x20000}}, {0x20, 0x2, @in6={0xa, 0xfffd, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=537): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r3, 0x0, 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r3, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read(r1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ed:cb2e') close_range(r2, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) setuid(0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) kernel console output (not intermixed with test programs): [ 87.101751][ T1249] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.191' (ED25519) to the list of known hosts. [ 91.164080][ T5828] cgroup: Unknown subsys name 'net' [ 91.405256][ T5828] cgroup: Unknown subsys name 'cpuset' [ 91.460393][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.480922][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.796683][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.810780][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.830241][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.833501][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.834494][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.865494][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.867950][ T5156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.868887][ T5156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.898069][ T5156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.909810][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.932716][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.937457][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.961559][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.965442][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.966065][ T5156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.971456][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.975603][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.976676][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.004622][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.006011][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.076081][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.078037][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.078815][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.082204][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.083799][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.208745][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 98.273559][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 98.322810][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 98.343159][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 98.590392][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 98.931302][ T5847] Bluetooth: hci0: command tx timeout [ 99.009676][ T5847] Bluetooth: hci2: command tx timeout [ 99.089595][ T5847] Bluetooth: hci3: command tx timeout [ 99.169677][ T5847] Bluetooth: hci4: command tx timeout [ 99.249929][ T5847] Bluetooth: hci1: command tx timeout [ 99.414200][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.415869][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.416299][ T5841] bridge_slave_0: entered allmulticast mode [ 99.418534][ T5841] bridge_slave_0: entered promiscuous mode [ 99.693886][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.694004][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.694144][ T5841] bridge_slave_1: entered allmulticast mode [ 99.696583][ T5841] bridge_slave_1: entered promiscuous mode [ 99.797916][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.798166][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.798445][ T5839] bridge_slave_0: entered allmulticast mode [ 99.806392][ T5839] bridge_slave_0: entered promiscuous mode [ 100.041817][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.042100][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.042313][ T5849] bridge_slave_0: entered allmulticast mode [ 100.045856][ T5849] bridge_slave_0: entered promiscuous mode [ 100.050356][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.050601][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.050841][ T5839] bridge_slave_1: entered allmulticast mode [ 100.054416][ T5839] bridge_slave_1: entered promiscuous mode [ 100.068171][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.068330][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.068541][ T5838] bridge_slave_0: entered allmulticast mode [ 100.072797][ T5838] bridge_slave_0: entered promiscuous mode [ 100.272973][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.273241][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.273457][ T5849] bridge_slave_1: entered allmulticast mode [ 100.280234][ T5849] bridge_slave_1: entered promiscuous mode [ 100.438320][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.438452][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.438604][ T5838] bridge_slave_1: entered allmulticast mode [ 100.442027][ T5838] bridge_slave_1: entered promiscuous mode [ 100.540729][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.751329][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.751586][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.751789][ T5851] bridge_slave_0: entered allmulticast mode [ 100.755032][ T5851] bridge_slave_0: entered promiscuous mode [ 100.760790][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.836594][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.911190][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.911367][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.911565][ T5851] bridge_slave_1: entered allmulticast mode [ 100.913633][ T5851] bridge_slave_1: entered promiscuous mode [ 101.009705][ T5847] Bluetooth: hci0: command tx timeout [ 101.015599][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.019100][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.037152][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.089731][ T5847] Bluetooth: hci2: command tx timeout [ 101.169735][ T5847] Bluetooth: hci3: command tx timeout [ 101.177143][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.249885][ T5847] Bluetooth: hci4: command tx timeout [ 101.272566][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.333343][ T5841] team0: Port device team_slave_0 added [ 101.339905][ T5847] Bluetooth: hci1: command tx timeout [ 101.556953][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.559380][ T5841] team0: Port device team_slave_1 added [ 101.667547][ T5839] team0: Port device team_slave_0 added [ 101.969115][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.072002][ T5849] team0: Port device team_slave_0 added [ 102.074290][ T5839] team0: Port device team_slave_1 added [ 102.076205][ T5838] team0: Port device team_slave_0 added [ 102.216209][ T5849] team0: Port device team_slave_1 added [ 102.295812][ T5838] team0: Port device team_slave_1 added [ 102.383838][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.383858][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.383887][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.663935][ T5851] team0: Port device team_slave_0 added [ 102.665562][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.665576][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.665605][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.761417][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.761436][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.761463][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.874249][ T5851] team0: Port device team_slave_1 added [ 102.943545][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.943565][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.943594][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.946556][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.946572][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.946599][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.954271][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.954287][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.954309][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.099749][ T5847] Bluetooth: hci0: command tx timeout [ 103.131521][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.131540][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.131568][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.141700][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.141716][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.141739][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.169541][ T5847] Bluetooth: hci2: command tx timeout [ 103.249724][ T5847] Bluetooth: hci3: command tx timeout [ 103.339853][ T5847] Bluetooth: hci4: command tx timeout [ 103.361796][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.361814][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.361841][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.412825][ T5847] Bluetooth: hci1: command tx timeout [ 103.474912][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.474928][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.474947][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.601540][ T5841] hsr_slave_0: entered promiscuous mode [ 103.602571][ T5841] hsr_slave_1: entered promiscuous mode [ 103.935069][ T5839] hsr_slave_0: entered promiscuous mode [ 103.936682][ T5839] hsr_slave_1: entered promiscuous mode [ 103.937818][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 103.937928][ T5839] Cannot create hsr debugfs directory [ 104.105241][ T5849] hsr_slave_0: entered promiscuous mode [ 104.106159][ T5849] hsr_slave_1: entered promiscuous mode [ 104.106727][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 104.106761][ T5849] Cannot create hsr debugfs directory [ 104.201079][ T5838] hsr_slave_0: entered promiscuous mode [ 104.202714][ T5838] hsr_slave_1: entered promiscuous mode [ 104.204320][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 104.204347][ T5838] Cannot create hsr debugfs directory [ 104.586575][ T5851] hsr_slave_0: entered promiscuous mode [ 104.587577][ T5851] hsr_slave_1: entered promiscuous mode [ 104.588220][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 104.588240][ T5851] Cannot create hsr debugfs directory [ 105.170021][ T5847] Bluetooth: hci0: command tx timeout [ 105.252522][ T5847] Bluetooth: hci2: command tx timeout [ 105.329725][ T5847] Bluetooth: hci3: command tx timeout [ 105.409725][ T5847] Bluetooth: hci4: command tx timeout [ 105.489965][ T5847] Bluetooth: hci1: command tx timeout [ 106.276994][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.308616][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.335784][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.374782][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.537289][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.578206][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.623960][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.678541][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.839123][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.919176][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.982826][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.066626][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.288649][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.335925][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.378126][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.432590][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.672582][ T5851] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.713193][ T5851] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.751175][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.757493][ T5851] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.806967][ T5851] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.967509][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.014408][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.038624][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.039244][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.112860][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.113026][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.215552][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.234214][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.290927][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.291181][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.362423][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.362632][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.410994][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.473476][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.479008][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.479689][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.545429][ T3635] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.545638][ T3635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.685139][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.754320][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.755831][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.798441][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.836222][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.836474][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.031268][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.164800][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.165076][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.225093][ T3165] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.225289][ T3165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.235145][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.663923][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.831744][ T5841] veth0_vlan: entered promiscuous mode [ 109.905568][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.910666][ T5841] veth1_vlan: entered promiscuous mode [ 110.133900][ T5839] veth0_vlan: entered promiscuous mode [ 110.253579][ T5839] veth1_vlan: entered promiscuous mode [ 110.266917][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.287296][ T5841] veth0_macvtap: entered promiscuous mode [ 110.331582][ T5841] veth1_macvtap: entered promiscuous mode [ 110.377504][ T5849] veth0_vlan: entered promiscuous mode [ 110.457040][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.481447][ T5849] veth1_vlan: entered promiscuous mode [ 110.496061][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.566855][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.612559][ T5839] veth0_macvtap: entered promiscuous mode [ 110.678454][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.692877][ T5839] veth1_macvtap: entered promiscuous mode [ 110.714002][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.732172][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.733172][ T5838] veth0_vlan: entered promiscuous mode [ 110.736095][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.836940][ T5838] veth1_vlan: entered promiscuous mode [ 110.913832][ T5849] veth0_macvtap: entered promiscuous mode [ 110.933068][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.015362][ T5849] veth1_macvtap: entered promiscuous mode [ 111.023299][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.089733][ T41] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.099329][ T1143] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.126530][ T1143] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.140906][ T1143] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.316570][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.350151][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.350177][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.438979][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.441523][ T5838] veth0_macvtap: entered promiscuous mode [ 111.573147][ T5838] veth1_macvtap: entered promiscuous mode [ 111.582362][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.623519][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.626993][ T3635] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.627014][ T3635] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.676282][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.694709][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.732626][ T5851] veth0_vlan: entered promiscuous mode [ 111.767289][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.767312][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.918990][ T5851] veth1_vlan: entered promiscuous mode [ 111.935672][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.065355][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.066790][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.066820][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.204653][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.232179][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.237264][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.247713][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.269711][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.269734][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.712288][ T5851] veth0_macvtap: entered promiscuous mode [ 114.221569][ T5851] veth1_macvtap: entered promiscuous mode [ 114.242561][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.242579][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.576941][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.576965][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.732181][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.953981][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.988501][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.017384][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.017407][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.178803][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 115.201284][ T3165] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.265269][ T3165] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.266416][ T3165] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.266677][ T3165] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.440215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.557999][ T5982] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.717739][ T5980] fido_id[5980]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 115.719539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.519481][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.747830][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.747855][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.879505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.879629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.879808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.879970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.969686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.199549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.199653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.288623][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.288639][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.940399][ T5996] mmap: syz.2.7 (5996) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 120.142318][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 123.422444][ T6008] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 123.635216][ T6008] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 123.635260][ T6008] usb 2-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 123.635284][ T6008] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.635308][ T6008] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 123.713032][ T6008] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 123.713073][ T6008] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.713103][ T6008] usb 2-1: Product: syz [ 123.713117][ T6008] usb 2-1: Manufacturer: syz [ 123.713136][ T6008] usb 2-1: SerialNumber: syz [ 123.923611][ T6008] usb 2-1: config 0 descriptor?? [ 125.663564][ T6039] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 125.665487][ T6039] exFAT-fs (loop0): unable to read boot sector [ 125.665544][ T6039] exFAT-fs (loop0): failed to read boot sector [ 125.665582][ T6039] exFAT-fs (loop0): failed to recognize exfat type [ 126.503525][ T6037] bridge_slave_0: left allmulticast mode [ 126.503563][ T6037] bridge_slave_0: left promiscuous mode [ 126.505233][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.575794][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.627501][ T45] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 126.821854][ T6037] bridge_slave_1: left allmulticast mode [ 126.821879][ T6037] bridge_slave_1: left promiscuous mode [ 126.822079][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.119318][ T6044] fido_id[6044]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 127.142435][ T6037] bond0: (slave bond_slave_0): Releasing backup interface [ 127.578358][ T6037] bond0: (slave bond_slave_1): Releasing backup interface [ 127.891406][ T6037] team0: Port device team_slave_0 removed [ 127.961969][ T6037] team0: Port device team_slave_1 removed [ 127.972161][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.972194][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.070186][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.070219][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.482493][ T5981] usb 2-1: USB disconnect, device number 2 [ 130.839680][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 131.010781][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 131.014047][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.014084][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 131.014129][ T45] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 131.014152][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.085959][ T5981] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 131.134796][ T45] usb 2-1: config 0 descriptor?? [ 131.301317][ T5981] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.301358][ T5981] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.301414][ T5981] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.301444][ T5981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.824945][ T5981] usb 5-1: usb_control_msg returned -32 [ 131.824982][ T5981] usbtmc 5-1:16.0: can't read capabilities [ 131.864858][ T45] HID 045e:07da: Invalid code 65791 type 1 [ 131.973514][ T6079] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.004057][ T45] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0003/input/input5 [ 132.201513][ T45] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 132.206804][ T5981] usb 5-1: USB disconnect, device number 2 [ 132.290144][ T45] usb 2-1: USB disconnect, device number 3 [ 133.492710][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.492828][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.226837][ T5909] udevd[5909]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 134.227110][ T5909] udevd[5909]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 134.442622][ T6103] tipc: Started in network mode [ 134.442658][ T6103] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 134.442722][ T6103] tipc: Enabling of bearer rejected, failed to enable media [ 134.641307][ T5981] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 135.883599][ T5981] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 135.883620][ T5981] usb 5-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 135.883631][ T5981] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.883641][ T5981] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 135.952956][ T5981] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 135.952978][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.952990][ T5981] usb 5-1: Product: syz [ 135.952999][ T5981] usb 5-1: Manufacturer: syz [ 135.953008][ T5981] usb 5-1: SerialNumber: syz [ 136.076508][ T5981] usb 5-1: config 0 descriptor?? [ 136.939852][ T6093] bridge_slave_0: left allmulticast mode [ 136.939879][ T6093] bridge_slave_0: left promiscuous mode [ 136.940118][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.284598][ T6093] bridge_slave_1: left allmulticast mode [ 137.284637][ T6093] bridge_slave_1: left promiscuous mode [ 137.285176][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.530610][ T6093] bond0: (slave bond_slave_0): Releasing backup interface [ 137.706144][ T6093] bond0: (slave bond_slave_1): Releasing backup interface [ 137.822507][ T6093] team0: Port device team_slave_0 removed [ 138.002923][ T6093] team0: Port device team_slave_1 removed [ 138.004148][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.004180][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.201895][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.201942][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.554115][ T1249] usb 5-1: USB disconnect, device number 3 [ 140.983085][ T5913] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 141.963429][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 142.056625][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.056665][ T5913] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 142.056712][ T5913] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 142.056736][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.122656][ T5913] usb 5-1: config 0 descriptor?? [ 143.988674][ T5913] usbhid 5-1:0.0: can't add hid device: -71 [ 143.988822][ T5913] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 144.016228][ T5913] usb 5-1: USB disconnect, device number 4 [ 144.724348][ T6169] tipc: Enabled bearer , priority 0 [ 144.810608][ T6169] tipc: Resetting bearer [ 145.143155][ T6170] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 145.871514][ T5910] tipc: Node number set to 24339 [ 147.391655][ T6160] tipc: Disabling bearer [ 154.907025][ T6236] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 155.013700][ T6235] syzkaller0: entered promiscuous mode [ 155.013746][ T6235] syzkaller0: entered allmulticast mode [ 156.103058][ T6244] tipc: Started in network mode [ 156.103093][ T6244] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 156.103154][ T6244] tipc: Enabling of bearer rejected, failed to enable media [ 159.049859][ T1249] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 160.157888][ T1249] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 160.157920][ T1249] usb 3-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 160.157939][ T1249] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.157950][ T1249] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 160.188826][ T1249] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 160.188855][ T1249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.188874][ T1249] usb 3-1: Product: syz [ 160.188886][ T1249] usb 3-1: Manufacturer: syz [ 160.188907][ T1249] usb 3-1: SerialNumber: syz [ 160.254282][ T1249] usb 3-1: config 0 descriptor?? [ 160.474999][ T6255] bridge_slave_0: left allmulticast mode [ 160.475027][ T6255] bridge_slave_0: left promiscuous mode [ 160.475232][ T6255] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.621005][ T6255] bridge_slave_1: left allmulticast mode [ 160.621029][ T6255] bridge_slave_1: left promiscuous mode [ 160.621185][ T6255] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.898110][ T6255] bond0: (slave bond_slave_0): Releasing backup interface [ 161.042033][ T6255] bond0: (slave bond_slave_1): Releasing backup interface [ 161.475715][ T6281] Zero length message leads to an empty skb [ 161.732241][ T6255] team0: Port device team_slave_0 removed [ 162.145993][ T5910] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 163.100872][ T6255] team0: Port device team_slave_1 removed [ 163.101561][ T6255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.101581][ T6255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.230737][ T5910] usb 5-1: Using ep0 maxpacket: 16 [ 163.233359][ T5910] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 163.233388][ T5910] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 163.233408][ T5910] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 163.233426][ T5910] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 163.233443][ T5910] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 163.233462][ T5910] usb 5-1: config 0 has no interface number 0 [ 163.233516][ T5910] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 163.233541][ T5910] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 163.233561][ T5910] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 163.233595][ T5910] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.233619][ T5910] usb 5-1: config 0 interface 125 has no altsetting 0 [ 163.233646][ T5910] usb 5-1: config 0 interface 125 has no altsetting 2 [ 163.271574][ T5910] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 163.272364][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.275617][ T5910] usb 5-1: Product: syz [ 163.276272][ T5910] usb 5-1: Manufacturer: syz [ 163.276668][ T5910] usb 5-1: SerialNumber: syz [ 163.315923][ T6255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.315950][ T6255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.327694][ T5910] usb 5-1: config 0 descriptor?? [ 163.359533][ T5910] usb 5-1: selecting invalid altsetting 2 [ 163.742618][ C0] usb 5-1: async_complete: urb error -71 [ 163.742742][ C0] usb 5-1: async_complete: urb error -71 [ 163.742851][ C0] usb 5-1: async_complete: urb error -71 [ 163.744531][ T5910] get_1284_register: usb error -71 [ 163.744681][ T5910] uss720 5-1:0.125: probe with driver uss720 failed with error -71 [ 163.788905][ T5910] usb 5-1: USB disconnect, device number 5 [ 163.975310][ T5913] usb 3-1: USB disconnect, device number 2 [ 169.344261][ T6316] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 170.339671][ T1249] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 170.509561][ T1249] usb 4-1: Using ep0 maxpacket: 16 [ 170.513196][ T1249] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 170.513217][ T1249] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 170.513229][ T1249] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 170.513240][ T1249] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 170.513250][ T1249] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 170.513262][ T1249] usb 4-1: config 0 has no interface number 0 [ 170.513305][ T1249] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 170.513320][ T1249] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 170.513333][ T1249] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 170.513363][ T1249] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 170.513378][ T1249] usb 4-1: config 0 interface 125 has no altsetting 0 [ 170.513389][ T1249] usb 4-1: config 0 interface 125 has no altsetting 2 [ 170.516376][ T1249] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 170.516395][ T1249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.516406][ T1249] usb 4-1: Product: syz [ 170.516414][ T1249] usb 4-1: Manufacturer: syz [ 170.516423][ T1249] usb 4-1: SerialNumber: syz [ 170.706875][ T1249] usb 4-1: config 0 descriptor?? [ 170.773242][ T1249] usb 4-1: selecting invalid altsetting 2 [ 171.863452][ T5981] usb 4-1: USB disconnect, device number 2 [ 173.230876][ T6336] input: syz0 as /devices/virtual/input/input6 [ 181.543391][ T6365] tipc: Started in network mode [ 181.543426][ T6365] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 181.543486][ T6365] tipc: Enabling of bearer rejected, failed to enable media [ 185.901609][ T6388] syzkaller0: entered promiscuous mode [ 185.901643][ T6388] syzkaller0: entered allmulticast mode [ 194.671821][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.671913][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.382292][ T6421] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 196.919634][ T1249] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 197.089586][ T1249] usb 2-1: Using ep0 maxpacket: 16 [ 197.091531][ T1249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.091553][ T1249] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 197.091578][ T1249] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 197.091592][ T1249] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.095155][ T1249] usb 2-1: config 0 descriptor?? [ 197.109605][ T5913] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 197.261753][ T5913] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 197.261773][ T5913] usb 4-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 197.261784][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.261795][ T5913] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 197.267227][ T5913] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 197.267247][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.267258][ T5913] usb 4-1: Product: syz [ 197.267267][ T5913] usb 4-1: Manufacturer: syz [ 197.267275][ T5913] usb 4-1: SerialNumber: syz [ 197.350649][ T5913] usb 4-1: config 0 descriptor?? [ 197.626275][ T1249] HID 045e:07da: Invalid code 65791 type 1 [ 197.654128][ T1249] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0004/input/input7 [ 197.866080][ T1249] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 197.897596][ T1249] usb 2-1: USB disconnect, device number 4 [ 198.042045][ T6429] bridge_slave_0: left allmulticast mode [ 198.042084][ T6429] bridge_slave_0: left promiscuous mode [ 198.042410][ T6429] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.487139][ T6429] bridge_slave_1: left allmulticast mode [ 198.487185][ T6429] bridge_slave_1: left promiscuous mode [ 198.487617][ T6429] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.980152][ T6429] bond0: (slave bond_slave_0): Releasing backup interface [ 199.015178][ T6439] fido_id[6439]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 199.020042][ T1249] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 199.403404][ T6429] bond0: (slave bond_slave_1): Releasing backup interface [ 199.462143][ T1249] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 199.462189][ T1249] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.462233][ T1249] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 199.462255][ T1249] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.649822][ T6429] team0: Port device team_slave_0 removed [ 199.790379][ T6429] team0: Port device team_slave_1 removed [ 199.794277][ T6429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.794305][ T6429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.837957][ T1249] usb 2-1: GET_CAPABILITIES returned 0 [ 199.837990][ T1249] usbtmc 2-1:16.0: can't read capabilities [ 199.886701][ T6429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.886738][ T6429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.222799][ T5918] usb 2-1: USB disconnect, device number 5 [ 200.511055][ T10] usb 4-1: USB disconnect, device number 3 [ 204.480003][ T5932] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 210.129528][ T5932] usb 5-1: device descriptor read/64, error -110 [ 210.389596][ T5932] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 210.546894][ T5932] usb 5-1: device descriptor read/64, error -32 [ 210.664301][ T5932] usb usb5-port1: attempt power cycle [ 211.059544][ T5932] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 211.079889][ T5932] usb 5-1: device descriptor read/8, error -32 [ 211.192282][ T5932] raw-gadget.0 gadget.4: failed to queue suspend event [ 211.192832][ T5932] raw-gadget.0 gadget.4: failed to queue reset event [ 211.260981][ T5932] raw-gadget.0 gadget.4: failed to queue resume event [ 211.319523][ T5932] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 211.341525][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 211.341670][ T5932] usb 5-1: device descriptor read/8, error -32 [ 211.392312][ T5913] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 211.454563][ T5932] raw-gadget.0 gadget.4: failed to queue suspend event [ 211.454853][ T5932] usb usb5-port1: unable to enumerate USB device [ 211.561317][ T5913] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 211.561382][ T5913] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 211.561410][ T5913] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 211.561436][ T5913] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 211.561462][ T5913] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 211.565611][ T5913] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 211.565675][ T5913] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 211.565702][ T5913] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 211.565727][ T5913] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 211.565753][ T5913] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 211.571330][ T5913] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 211.571394][ T5913] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 211.571421][ T5913] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 211.571446][ T5913] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 211.571471][ T5913] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 211.584453][ T5913] usb 2-1: string descriptor 0 read error: -22 [ 211.584631][ T5913] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 211.584655][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.601271][ T5913] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 212.380294][ T6463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.381320][ T6463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.356521][ T6482] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 214.530131][ T6451] raw-gadget.0 gadget.4: failed to queue disconnect event [ 214.735556][ T5918] usb 2-1: USB disconnect, device number 6 [ 215.519494][ T5932] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 215.700186][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 215.702789][ T5932] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 215.702807][ T5932] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 215.702818][ T5932] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 215.702829][ T5932] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 215.702839][ T5932] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 215.702850][ T5932] usb 2-1: config 0 has no interface number 0 [ 215.702879][ T5932] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 215.702895][ T5932] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 215.702907][ T5932] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 215.702931][ T5932] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.702945][ T5932] usb 2-1: config 0 interface 125 has no altsetting 0 [ 215.702955][ T5932] usb 2-1: config 0 interface 125 has no altsetting 2 [ 215.704850][ T5932] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 215.704866][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.704876][ T5932] usb 2-1: Product: syz [ 215.704884][ T5932] usb 2-1: Manufacturer: syz [ 215.704892][ T5932] usb 2-1: SerialNumber: syz [ 215.713558][ T5932] usb 2-1: config 0 descriptor?? [ 215.717104][ T5932] usb 2-1: selecting invalid altsetting 2 [ 216.956556][ T6008] usb 2-1: USB disconnect, device number 7 [ 217.740918][ T5932] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 217.928730][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 217.936904][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.936938][ T5932] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 217.936978][ T5932] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 217.936999][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.953622][ T5932] usb 3-1: config 0 descriptor?? [ 218.579102][ T6504] syzkaller0: entered promiscuous mode [ 218.579133][ T6504] syzkaller0: entered allmulticast mode [ 218.693478][ T5932] HID 045e:07da: Invalid code 65791 type 1 [ 218.811438][ T5932] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0005/input/input8 [ 218.866635][ T5932] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 219.024543][ T5932] usb 3-1: USB disconnect, device number 3 [ 223.092494][ T6517] fido_id[6517]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 223.642703][ T6525] syzkaller0: entered promiscuous mode [ 223.642736][ T6525] syzkaller0: entered allmulticast mode [ 223.929463][ T5918] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 224.226102][ T5918] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 224.226158][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.226181][ T5918] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 224.267318][ T5918] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 224.267347][ T5918] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 224.267365][ T5918] usb 1-1: Manufacturer: syz [ 224.329696][ T5918] usb 1-1: config 0 descriptor?? [ 224.861696][ T5856] Bluetooth: hci2: command 0x0406 tx timeout [ 224.861841][ T5856] Bluetooth: hci3: command tx timeout [ 224.861866][ T5856] Bluetooth: hci4: command tx timeout [ 224.861888][ T5856] Bluetooth: hci0: command tx timeout [ 224.861911][ T5856] Bluetooth: hci1: command tx timeout [ 224.868970][ T5918] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 225.004338][ T6534] tipc: Enabled bearer , priority 0 [ 225.038265][ T6530] tipc: Resetting bearer [ 226.011524][ T6008] tipc: Node number set to 24339 [ 226.143348][ T6518] tipc: Disabling bearer [ 226.555109][ T6542] usb 1-1: USB disconnect, device number 2 [ 233.892009][ T6601] netlink: 'syz.1.154': attribute type 6 has an invalid length. [ 235.196061][ T6609] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 235.200774][ T6609] exFAT-fs (loop0): unable to read boot sector [ 235.200847][ T6609] exFAT-fs (loop0): failed to read boot sector [ 235.201011][ T6609] exFAT-fs (loop0): failed to recognize exfat type [ 237.465760][ T6598] ipvlan0: entered promiscuous mode [ 247.489797][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 247.509561][ T6542] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 247.639610][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 247.642312][ T10] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 247.642342][ T10] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 247.642361][ T10] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 247.642381][ T10] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 247.642400][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 247.642421][ T10] usb 4-1: config 0 has no interface number 0 [ 247.642480][ T10] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 247.642509][ T10] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 247.642532][ T10] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 247.642572][ T10] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 247.642600][ T10] usb 4-1: config 0 interface 125 has no altsetting 0 [ 247.642618][ T10] usb 4-1: config 0 interface 125 has no altsetting 2 [ 247.647596][ T10] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 247.647626][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.647646][ T10] usb 4-1: Product: syz [ 247.647661][ T10] usb 4-1: Manufacturer: syz [ 247.647675][ T10] usb 4-1: SerialNumber: syz [ 247.803544][ T10] usb 4-1: config 0 descriptor?? [ 247.819175][ T10] usb 4-1: selecting invalid altsetting 2 [ 247.976514][ T6542] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 247.976546][ T6542] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.976566][ T6542] usb 2-1: Product: syz [ 247.976579][ T6542] usb 2-1: Manufacturer: syz [ 247.976593][ T6542] usb 2-1: SerialNumber: syz [ 248.244589][ T6663] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 248.398576][ T6542] usb 2-1: config 0 descriptor?? [ 248.665004][ T6542] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 248.966067][ T10] usb 4-1: USB disconnect, device number 4 [ 250.548385][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 250.548785][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 250.549155][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 250.549525][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 250.551777][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 250.551936][ T6542] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 250.589964][ T6542] usb 2-1: USB disconnect, device number 8 [ 250.769573][ T5981] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 250.944084][ T5981] usb 1-1: Using ep0 maxpacket: 8 [ 250.960400][ T5981] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 250.960433][ T5981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.960453][ T5981] usb 1-1: Product: syz [ 250.960466][ T5981] usb 1-1: Manufacturer: syz [ 250.960480][ T5981] usb 1-1: SerialNumber: syz [ 251.008947][ T5981] usb 1-1: config 0 descriptor?? [ 251.260624][ T5981] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 252.845917][ T5981] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 252.900181][ T5981] usb 1-1: USB disconnect, device number 3 [ 254.126600][ T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 254.328479][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 254.328502][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.328515][ T10] usb 1-1: Product: syz [ 254.328523][ T10] usb 1-1: Manufacturer: syz [ 254.328531][ T10] usb 1-1: SerialNumber: syz [ 254.394694][ T10] usb 1-1: config 0 descriptor?? [ 254.841024][ T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 256.242355][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.242445][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.068346][ T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 257.074933][ T10] usb 1-1: USB disconnect, device number 4 [ 260.667835][ T6728] tipc: Enabling of bearer rejected, failed to enable media [ 266.671073][ T5913] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 266.909422][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 266.914394][ T5913] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 266.914413][ T5913] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 266.914426][ T5913] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 266.914436][ T5913] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 266.914446][ T5913] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 266.914458][ T5913] usb 5-1: config 0 has no interface number 0 [ 266.914489][ T5913] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 266.914505][ T5913] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 266.914526][ T5913] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 266.914546][ T5913] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 266.914562][ T5913] usb 5-1: config 0 interface 125 has no altsetting 0 [ 266.914572][ T5913] usb 5-1: config 0 interface 125 has no altsetting 2 [ 266.918854][ T5913] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 266.918873][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.918884][ T5913] usb 5-1: Product: syz [ 266.918892][ T5913] usb 5-1: Manufacturer: syz [ 266.918900][ T5913] usb 5-1: SerialNumber: syz [ 267.101938][ T5913] usb 5-1: config 0 descriptor?? [ 267.189715][ T5913] usb 5-1: selecting invalid altsetting 2 [ 268.154018][ T5913] usb 5-1: USB disconnect, device number 10 [ 270.829495][ T6008] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 270.997367][ T6008] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 270.997401][ T6008] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.997421][ T6008] usb 3-1: Product: syz [ 270.997436][ T6008] usb 3-1: Manufacturer: syz [ 270.997451][ T6008] usb 3-1: SerialNumber: syz [ 271.850413][ T6008] usb 3-1: config 0 descriptor?? [ 272.083553][ T6008] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 272.287347][ T6805] ipvlan0: entered promiscuous mode [ 273.636681][ T6008] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 273.671615][ T6008] usb 3-1: USB disconnect, device number 4 [ 280.615183][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 281.739471][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 281.742482][ T31] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 281.742499][ T31] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 281.742511][ T31] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 281.742521][ T31] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 281.742531][ T31] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 281.742543][ T31] usb 4-1: config 0 has no interface number 0 [ 281.742572][ T31] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 281.742588][ T31] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 281.742601][ T31] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 281.742621][ T31] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 281.742636][ T31] usb 4-1: config 0 interface 125 has no altsetting 0 [ 281.742646][ T31] usb 4-1: config 0 interface 125 has no altsetting 2 [ 281.744756][ T31] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 281.744772][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.744784][ T31] usb 4-1: Product: syz [ 281.744792][ T31] usb 4-1: Manufacturer: syz [ 281.744799][ T31] usb 4-1: SerialNumber: syz [ 281.748465][ T31] usb 4-1: config 0 descriptor?? [ 281.753280][ T31] usb 4-1: selecting invalid altsetting 2 [ 282.989871][ T31] usb 4-1: USB disconnect, device number 5 [ 294.611270][ T6867] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 297.873797][ T6907] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.594190][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.622560][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.624158][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.625549][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.626347][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.880352][ T6542] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 299.069554][ T6542] usb 2-1: Using ep0 maxpacket: 16 [ 299.133164][ T6542] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.133200][ T6542] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.133223][ T6542] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.135155][ T6542] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 299.135182][ T6542] usb 2-1: New USB device strings: Mfr=225, Product=0, SerialNumber=0 [ 299.135203][ T6542] usb 2-1: Manufacturer: syz [ 299.222309][ T6542] usb 2-1: config 0 descriptor?? [ 299.892621][ T6542] usbhid 2-1:0.0: can't add hid device: -71 [ 299.892770][ T6542] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 299.920046][ T6542] usb 2-1: USB disconnect, device number 9 [ 300.117191][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.362157][ T5156] Bluetooth: hci0: command tx timeout [ 306.405101][ T5156] Bluetooth: hci0: command tx timeout [ 307.334830][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.456747][ T5156] Bluetooth: hci0: command tx timeout [ 308.939637][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.016788][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.529614][ T5156] Bluetooth: hci0: command tx timeout [ 314.770083][ T6910] chnl_net:caif_netlink_parms(): no params data found [ 315.708375][ T13] bridge_slave_1: left allmulticast mode [ 315.718333][ T13] bridge_slave_1: left promiscuous mode [ 315.784593][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.168353][ T13] bridge_slave_0: left allmulticast mode [ 316.168381][ T13] bridge_slave_0: left promiscuous mode [ 316.168578][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.678417][ T6990] input: syz0 as /devices/virtual/input/input9 [ 316.961070][ T6008] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 317.115524][ T6008] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 317.493438][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.493545][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.559650][ T6008] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 320.712728][ T6008] usb 2-1: Using ep0 maxpacket: 16 [ 320.732605][ T6008] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 320.732640][ T6008] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 320.764485][ T6008] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 320.764516][ T6008] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.764537][ T6008] usb 2-1: Product: syz [ 320.764551][ T6008] usb 2-1: Manufacturer: syz [ 320.764566][ T6008] usb 2-1: SerialNumber: syz [ 320.812074][ T6008] usb 2-1: config 0 descriptor?? [ 320.833951][ T6008] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 320.834007][ T6008] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 321.514287][ T6008] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 321.519002][ T6008] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 321.920241][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.961977][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.996228][ T13] bond0 (unregistering): Released all slaves [ 322.168823][ T6008] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 322.169732][ T6008] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 322.170394][ T6008] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 322.171077][ T6008] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 322.171592][ T6008] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 322.172071][ T6008] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 322.189168][ T6008] usb 2-1: USB disconnect, device number 10 [ 322.356299][ T7017] tipc: Enabling of bearer rejected, failed to enable media [ 322.512643][ T7025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.244930][ T6910] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.258097][ T6910] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.258290][ T6910] bridge_slave_0: entered allmulticast mode [ 324.312845][ T6910] bridge_slave_0: entered promiscuous mode [ 324.351635][ T6910] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.351727][ T6910] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.351908][ T6910] bridge_slave_1: entered allmulticast mode [ 324.353629][ T6910] bridge_slave_1: entered promiscuous mode [ 327.428331][ T6910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.529921][ T7054] tipc: Enabling of bearer rejected, failed to enable media [ 327.545294][ T6910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.270495][ T6910] team0: Port device team_slave_0 added [ 330.272917][ T6910] team0: Port device team_slave_1 added [ 330.769651][ T5919] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 330.919460][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 330.921448][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 330.921469][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 330.923663][ T5919] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 330.923680][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.923692][ T5919] usb 5-1: Product: syz [ 330.923699][ T5919] usb 5-1: Manufacturer: syz [ 330.923707][ T5919] usb 5-1: SerialNumber: syz [ 330.927475][ T5919] usb 5-1: config 0 descriptor?? [ 331.032123][ T5919] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 331.032147][ T5919] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 331.675567][ T5919] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 331.676103][ T5919] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 331.757683][ T13] hsr_slave_0: left promiscuous mode [ 331.810491][ T13] hsr_slave_1: left promiscuous mode [ 331.811773][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.811867][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.859898][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.859935][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.197853][ T13] veth1_macvtap: left promiscuous mode [ 332.198155][ T13] veth0_macvtap: left promiscuous mode [ 332.198523][ T13] veth1_vlan: left promiscuous mode [ 332.198897][ T13] veth0_vlan: left promiscuous mode [ 332.287972][ T5919] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 332.292562][ T5919] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 332.711957][ T5919] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 332.712467][ T5919] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 332.714958][ T5919] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 332.717248][ T5919] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 332.763150][ T5919] usb 5-1: USB disconnect, device number 11 [ 333.182469][ T7097] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 340.361358][ T13] team0 (unregistering): Port device team_slave_1 removed [ 340.530002][ T13] team0 (unregistering): Port device team_slave_0 removed [ 342.836779][ T6910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.836798][ T6910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.836826][ T6910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.020623][ T6910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.020642][ T6910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.020671][ T6910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.542853][ T6910] hsr_slave_0: entered promiscuous mode [ 345.559140][ T6910] hsr_slave_1: entered promiscuous mode [ 345.566614][ T6910] debugfs: 'hsr0' already exists in 'hsr' [ 345.566647][ T6910] Cannot create hsr debugfs directory [ 346.213478][ T7163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 348.349562][ T1249] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 348.517583][ T6910] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 348.544868][ T1249] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 348.544888][ T1249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.544899][ T1249] usb 4-1: Product: syz [ 348.544906][ T1249] usb 4-1: Manufacturer: syz [ 348.544914][ T1249] usb 4-1: SerialNumber: syz [ 348.616127][ T1249] usb 4-1: config 0 descriptor?? [ 348.757523][ T6910] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 348.823643][ T1249] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 349.005785][ T6910] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 349.107727][ T6910] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 350.254142][ T1249] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 350.304280][ T1249] usb 4-1: USB disconnect, device number 6 [ 350.719689][ T992] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 350.755547][ T6910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.892628][ T992] usb 3-1: Using ep0 maxpacket: 16 [ 350.937559][ T6910] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.940588][ T992] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 350.940615][ T992] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 350.940633][ T992] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 350.940649][ T992] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 350.940666][ T992] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 350.940684][ T992] usb 3-1: config 0 has no interface number 0 [ 350.940731][ T992] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 350.940756][ T992] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 350.940775][ T992] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 350.940826][ T992] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 350.940850][ T992] usb 3-1: config 0 interface 125 has no altsetting 0 [ 350.940865][ T992] usb 3-1: config 0 interface 125 has no altsetting 2 [ 350.946721][ T992] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 350.946748][ T992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.946765][ T992] usb 3-1: Product: syz [ 350.946778][ T992] usb 3-1: Manufacturer: syz [ 350.946790][ T992] usb 3-1: SerialNumber: syz [ 350.961808][ T992] usb 3-1: config 0 descriptor?? [ 351.011234][ T992] usb 3-1: selecting invalid altsetting 2 [ 352.058719][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.059616][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.095615][ T992] usb 3-1: USB disconnect, device number 5 [ 352.418534][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.419601][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.200948][ T7221] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 353.309651][ T67] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.335367][ T67] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.357191][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.360409][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.505578][ T6910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.577167][ T7253] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 357.182639][ T7266] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 358.951741][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 358.959654][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 358.964450][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 358.967790][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 358.968438][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.099407][ T5846] Bluetooth: hci0: command tx timeout [ 363.169550][ T5846] Bluetooth: hci0: command tx timeout [ 366.502523][ T5846] Bluetooth: hci0: command tx timeout [ 367.353023][ T6008] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 367.535301][ T6008] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 367.535334][ T6008] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.535355][ T6008] usb 2-1: Product: syz [ 367.535369][ T6008] usb 2-1: Manufacturer: syz [ 367.535383][ T6008] usb 2-1: SerialNumber: syz [ 367.575516][ T6008] usb 2-1: config 0 descriptor?? [ 367.800426][ T6008] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 368.261785][ T7344] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 368.809605][ T5156] Bluetooth: hci0: command tx timeout [ 369.275877][ T6008] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 369.319012][ T6008] usb 2-1: USB disconnect, device number 11 [ 369.613055][ T7276] chnl_net:caif_netlink_parms(): no params data found [ 371.247745][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.319664][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.390024][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.496761][ T12] bridge_slave_1: left allmulticast mode [ 372.496800][ T12] bridge_slave_1: left promiscuous mode [ 372.499829][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.408201][ T12] bridge_slave_0: left allmulticast mode [ 373.408230][ T12] bridge_slave_0: left promiscuous mode [ 373.408419][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.349791][ T7384] netlink: 'syz.2.332': attribute type 6 has an invalid length. [ 376.459516][ C1] vkms_vblank_simulate: vblank timer overrun [ 378.273086][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.347243][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.386175][ T12] bond0 (unregistering): Released all slaves [ 379.008817][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.008894][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.241605][ C0] vkms_vblank_simulate: vblank timer overrun [ 379.410949][ C0] vkms_vblank_simulate: vblank timer overrun [ 379.473937][ C0] vkms_vblank_simulate: vblank timer overrun [ 380.249409][ C0] vkms_vblank_simulate: vblank timer overrun [ 380.447353][ T7276] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.447498][ T7276] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.447732][ T7276] bridge_slave_0: entered allmulticast mode [ 380.460000][ T7276] bridge_slave_0: entered promiscuous mode [ 380.498160][ T7276] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.498326][ T7276] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.498600][ T7276] bridge_slave_1: entered allmulticast mode [ 380.505023][ T7276] bridge_slave_1: entered promiscuous mode [ 381.400885][ T7411] ======================================================= [ 381.400885][ T7411] WARNING: The mand mount option has been deprecated and [ 381.400885][ T7411] and is ignored by this kernel. Remove the mand [ 381.400885][ T7411] option from the mount to silence this warning. [ 381.400885][ T7411] ======================================================= [ 381.486490][ T7276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.997967][ T12] hsr_slave_0: left promiscuous mode [ 382.087148][ T12] hsr_slave_1: left promiscuous mode [ 382.090580][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.209681][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.253735][ T12] team0 (unregistering): Port device team_slave_1 removed [ 388.780246][ T12] team0 (unregistering): Port device team_slave_0 removed [ 389.959369][ C0] vkms_vblank_simulate: vblank timer overrun [ 390.242460][ C0] vkms_vblank_simulate: vblank timer overrun [ 390.685583][ C0] vkms_vblank_simulate: vblank timer overrun [ 390.838192][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.109658][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.629508][ T5981] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 392.792366][ T5981] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 392.792388][ T5981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.792401][ T5981] usb 4-1: Product: syz [ 392.792408][ T5981] usb 4-1: Manufacturer: syz [ 392.792416][ T5981] usb 4-1: SerialNumber: syz [ 392.834092][ T5981] usb 4-1: config 0 descriptor?? [ 393.167828][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.189629][ T5981] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 393.294889][ T7276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.840708][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 393.989492][ T5913] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 394.009716][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 394.071257][ T7276] team0: Port device team_slave_0 added [ 394.075132][ T7276] team0: Port device team_slave_1 added [ 394.091688][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 394.091954][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 394.098359][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 394.098632][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.098654][ T9] usb 3-1: Product: syz [ 394.098669][ T9] usb 3-1: Manufacturer: syz [ 394.098683][ T9] usb 3-1: SerialNumber: syz [ 394.275028][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 394.320995][ T9] usb 3-1: config 0 descriptor?? [ 394.360742][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 394.360771][ T9] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 394.378636][ T5913] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 394.378670][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 394.436936][ T5913] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 394.436968][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.437053][ T5913] usb 5-1: Product: syz [ 394.437091][ T5913] usb 5-1: Manufacturer: syz [ 394.437106][ T5913] usb 5-1: SerialNumber: syz [ 394.645995][ T5913] usb 5-1: config 0 descriptor?? [ 394.684539][ T5981] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 394.770046][ T5913] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 394.770084][ T5913] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 394.848633][ T5981] usb 4-1: USB disconnect, device number 7 [ 394.939207][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 394.950595][ T9] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 395.631513][ T5913] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 395.632198][ T5913] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 395.724014][ T9] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 395.724916][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 396.149497][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 396.149987][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 396.150459][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 396.151504][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 396.163242][ T7276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.163262][ T7276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.163291][ T7276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.255982][ T5913] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 396.265170][ T5913] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 396.327957][ T5913] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 396.347679][ T9] usb 3-1: USB disconnect, device number 6 [ 396.578786][ T7276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.578805][ T7276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.578833][ T7276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.864400][ T5913] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 396.864880][ T5913] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 396.865416][ T5913] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 397.028485][ T5913] usb 5-1: USB disconnect, device number 12 [ 397.387293][ T7276] hsr_slave_0: entered promiscuous mode [ 397.397702][ T7276] hsr_slave_1: entered promiscuous mode [ 397.405337][ T7276] debugfs: 'hsr0' already exists in 'hsr' [ 397.405359][ T7276] Cannot create hsr debugfs directory [ 401.442456][ T7276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.495683][ T7276] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.626545][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.639568][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.667129][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.667306][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.159208][ T7276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.494969][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 406.661378][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 406.691521][ T9] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 406.691553][ T9] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 406.691573][ T9] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 406.691592][ T9] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 406.691611][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 406.691631][ T9] usb 4-1: config 0 has no interface number 0 [ 406.691689][ T9] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 406.691728][ T9] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 406.691748][ T9] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 406.691773][ T9] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 406.691788][ T9] usb 4-1: config 0 interface 125 has no altsetting 0 [ 406.691797][ T9] usb 4-1: config 0 interface 125 has no altsetting 2 [ 406.694171][ T9] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 406.694188][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.694199][ T9] usb 4-1: Product: syz [ 406.694207][ T9] usb 4-1: Manufacturer: syz [ 406.694215][ T9] usb 4-1: SerialNumber: syz [ 406.735380][ T9] usb 4-1: config 0 descriptor?? [ 406.876853][ T9] usb 4-1: selecting invalid altsetting 2 [ 407.860621][ T10] usb 4-1: USB disconnect, device number 8 [ 408.055049][ T7276] veth0_vlan: entered promiscuous mode [ 408.084346][ T7276] veth1_vlan: entered promiscuous mode [ 408.359719][ T7276] veth0_macvtap: entered promiscuous mode [ 408.376994][ T7276] veth1_macvtap: entered promiscuous mode [ 408.555126][ T7276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.662487][ T7276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.730704][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.730721][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.881455][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.881477][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.609450][ T992] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 412.762571][ T992] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 412.762627][ T992] usb 3-1: config 0 has no interface number 0 [ 412.767061][ T992] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 412.767091][ T992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.767111][ T992] usb 3-1: Product: syz [ 412.767126][ T992] usb 3-1: Manufacturer: syz [ 412.767140][ T992] usb 3-1: SerialNumber: syz [ 412.840875][ T992] usb 3-1: config 0 descriptor?? [ 413.477001][ T992] usb 3-1: Firmware version (0.0) predates our first public release. [ 413.477020][ T992] usb 3-1: Please update to version 0.2 or newer [ 413.859572][ T992] usb 3-1: USB disconnect, device number 7 [ 415.513593][ T992] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 415.687684][ T992] usb 3-1: Using ep0 maxpacket: 16 [ 415.734830][ T992] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 415.734865][ T992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 415.761958][ T992] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 415.761991][ T992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.762011][ T992] usb 3-1: Product: syz [ 415.762025][ T992] usb 3-1: Manufacturer: syz [ 415.762039][ T992] usb 3-1: SerialNumber: syz [ 415.834659][ T992] usb 3-1: config 0 descriptor?? [ 415.874267][ T992] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 415.874327][ T992] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 416.549454][ T992] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 416.557886][ T992] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 417.168825][ T992] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 417.170153][ T992] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 417.576779][ T992] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 417.577340][ T992] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 417.577826][ T992] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 417.578331][ T992] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 417.640145][ T992] usb 3-1: USB disconnect, device number 8 [ 422.079890][ T5913] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 422.239905][ T5913] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 422.239976][ T5913] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 422.240001][ T5913] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 422.240024][ T5913] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 422.240050][ T5913] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 422.317295][ T5913] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 422.317360][ T5913] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 422.317387][ T5913] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 422.317412][ T5913] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 422.317438][ T5913] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 422.325359][ T5913] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 422.325422][ T5913] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 422.325446][ T5913] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 422.325469][ T5913] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 422.325503][ T5913] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 422.464584][ T5913] usb 4-1: string descriptor 0 read error: -22 [ 422.464764][ T5913] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 422.464787][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.733735][ T5913] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 423.065515][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 423.227373][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 423.249543][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 423.249567][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 423.251970][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 423.251989][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.252000][ T9] usb 6-1: Product: syz [ 423.252008][ T9] usb 6-1: Manufacturer: syz [ 423.252016][ T9] usb 6-1: SerialNumber: syz [ 423.333949][ T9] usb 6-1: config 0 descriptor?? [ 423.345049][ T9] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 423.345070][ T9] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 423.467141][ T7681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.481474][ T7681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.061522][ T9] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 424.063467][ T9] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 424.631571][ T7704] netlink: 'syz.2.391': attribute type 6 has an invalid length. [ 424.736826][ T9] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 424.841731][ T9] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 424.842405][ T9] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 424.843087][ T9] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 424.843756][ T9] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 424.844111][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 424.845739][ T9] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 424.899528][ T9] usb 6-1: USB disconnect, device number 2 [ 425.034913][ T7704] netlink: 'syz.2.391': attribute type 12 has an invalid length. [ 425.034938][ T7704] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.391'. [ 425.229497][ T5981] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 425.385740][ T5981] usb 5-1: Using ep0 maxpacket: 16 [ 425.401323][ T5981] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 425.401346][ T5981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 425.410149][ T5981] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 425.410180][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.410202][ T5981] usb 5-1: Product: syz [ 425.410216][ T5981] usb 5-1: Manufacturer: syz [ 425.410230][ T5981] usb 5-1: SerialNumber: syz [ 425.511146][ T5981] usb 5-1: config 0 descriptor?? [ 425.540859][ T5981] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 425.540898][ T5981] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 426.246765][ T5981] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 426.248055][ T5981] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 427.185058][ T7721] overlayfs: failed to resolve './file0': -2 [ 427.948631][ T5981] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 427.949163][ T5981] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 427.949747][ T5981] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 427.950219][ T5981] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 427.950690][ T5981] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 427.951239][ T5981] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 429.162407][ T5919] usb 4-1: USB disconnect, device number 9 [ 429.269741][ T5913] usb 5-1: USB disconnect, device number 13 [ 431.522574][ T9] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 431.578821][ T5913] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 431.821879][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 431.821926][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 431.821942][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 431.821956][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 431.821971][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 431.834718][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 431.834758][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 431.834774][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 431.834787][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 431.834802][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 431.993293][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 431.993334][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 431.993349][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 431.993368][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 431.993382][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 432.005565][ T9] usb 3-1: string descriptor 0 read error: -22 [ 432.005671][ T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 432.005685][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.056258][ T5913] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 432.056288][ T5913] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 432.056308][ T5913] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.060748][ T5913] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 432.060776][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.060794][ T5913] usb 2-1: Product: syz [ 432.060807][ T5913] usb 2-1: Manufacturer: syz [ 432.060819][ T5913] usb 2-1: SerialNumber: syz [ 432.759460][ T7768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.776389][ T7768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.197217][ T9] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 433.239579][ T5913] hub 2-1:1.0: bad descriptor, ignoring hub [ 433.239607][ T5913] hub 2-1:1.0: probe with driver hub failed with error -5 [ 433.344419][ T5913] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 433.639731][ T9] usb 2-1: USB disconnect, device number 12 [ 433.679693][ T9] usblp1: removed [ 436.878324][ T6542] usb 3-1: USB disconnect, device number 9 [ 437.069475][ T1249] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 437.219435][ T1249] usb 4-1: Using ep0 maxpacket: 16 [ 437.222131][ T1249] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 437.222164][ T1249] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 437.228127][ T1249] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 437.228154][ T1249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.228174][ T1249] usb 4-1: Product: syz [ 437.228188][ T1249] usb 4-1: Manufacturer: syz [ 437.228202][ T1249] usb 4-1: SerialNumber: syz [ 437.229596][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 437.346162][ T1249] usb 4-1: config 0 descriptor?? [ 437.395187][ T1249] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 437.395224][ T1249] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 437.399537][ T6542] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 437.441304][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 437.441338][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 437.441370][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 437.447556][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 437.447587][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.447608][ T10] usb 2-1: Product: syz [ 437.447623][ T10] usb 2-1: Manufacturer: syz [ 437.447637][ T10] usb 2-1: SerialNumber: syz [ 437.549442][ T6542] usb 3-1: Using ep0 maxpacket: 16 [ 437.571701][ T6542] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 437.571721][ T6542] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 437.571732][ T6542] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 437.571742][ T6542] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 437.571752][ T6542] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 437.571764][ T6542] usb 3-1: config 0 has no interface number 0 [ 437.571840][ T6542] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 437.571856][ T6542] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 437.571869][ T6542] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 437.571890][ T6542] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 437.571905][ T6542] usb 3-1: config 0 interface 125 has no altsetting 0 [ 437.571915][ T6542] usb 3-1: config 0 interface 125 has no altsetting 2 [ 437.574277][ T6542] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 437.574294][ T6542] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.574347][ T6542] usb 3-1: Product: syz [ 437.574360][ T6542] usb 3-1: Manufacturer: syz [ 437.574368][ T6542] usb 3-1: SerialNumber: syz [ 437.885963][ T10] hub 2-1:1.0: bad descriptor, ignoring hub [ 437.886006][ T10] hub 2-1:1.0: probe with driver hub failed with error -5 [ 437.907243][ T6542] usb 3-1: config 0 descriptor?? [ 437.948944][ T6542] usb 3-1: selecting invalid altsetting 2 [ 438.110985][ T1249] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 438.112162][ T1249] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 438.412390][ T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 438.566057][ T1249] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 438.566081][ T1249] em28xx 4-1:0.0: No AC97 audio processor [ 438.790122][ T31] usb 2-1: USB disconnect, device number 13 [ 438.823670][ T31] usblp0: removed [ 439.260709][ T5981] usb 3-1: USB disconnect, device number 10 [ 439.938837][ T7823] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 439.939673][ T7823] exFAT-fs (loop1): unable to read boot sector [ 439.939713][ T7823] exFAT-fs (loop1): failed to read boot sector [ 439.939748][ T7823] exFAT-fs (loop1): failed to recognize exfat type [ 440.982903][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.982994][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.190448][ T5981] usb 4-1: USB disconnect, device number 10 [ 441.193246][ T5981] em28xx 4-1:0.0: Disconnecting em28xx [ 441.364037][ T5981] em28xx 4-1:0.0: Freeing device [ 442.020188][ T7832] bond0: (slave vxlan0): Releasing backup interface [ 442.478816][ T7842] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 442.969723][ T1154] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.973079][ T1154] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.974967][ T1154] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.974998][ T1154] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.429416][ T1249] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 447.579474][ T1249] usb 4-1: Using ep0 maxpacket: 16 [ 447.581940][ T1249] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 447.581962][ T1249] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 447.692563][ T1249] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 447.692600][ T1249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.692620][ T1249] usb 4-1: Product: syz [ 447.692636][ T1249] usb 4-1: Manufacturer: syz [ 447.692650][ T1249] usb 4-1: SerialNumber: syz [ 448.015659][ T7882] tipc: Started in network mode [ 448.015694][ T7882] tipc: Node identity 320dac3c6b49, cluster identity 4711 [ 448.015953][ T7882] tipc: Enabled bearer , priority 0 [ 448.017404][ T7882] syzkaller0: entered promiscuous mode [ 448.017433][ T7882] syzkaller0: entered allmulticast mode [ 448.032216][ T1249] usb 4-1: config 0 descriptor?? [ 448.064801][ T1249] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 448.064823][ T1249] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 448.834032][ T1249] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 448.834794][ T1249] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 449.129437][ T31] tipc: Node number set to 1497672764 [ 449.237903][ T1249] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 449.237928][ T1249] em28xx 4-1:0.0: No AC97 audio processor [ 449.272637][ T7887] tipc: Resetting bearer [ 449.417692][ T7877] tipc: Resetting bearer [ 449.851065][ T7877] tipc: Disabling bearer [ 450.287830][ T6031] usb 4-1: USB disconnect, device number 11 [ 450.295474][ T6031] em28xx 4-1:0.0: Disconnecting em28xx [ 450.326696][ T6031] em28xx 4-1:0.0: Freeing device [ 451.097274][ T7906] tipc: Enabling of bearer rejected, failed to enable media [ 451.212031][ T1249] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 451.243147][ T1249] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 451.745882][ T7915] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 451.747163][ T7915] exFAT-fs (loop2): unable to read boot sector [ 451.747208][ T7915] exFAT-fs (loop2): failed to read boot sector [ 451.747243][ T7915] exFAT-fs (loop2): failed to recognize exfat type [ 455.099424][ T9] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 455.281018][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 455.281086][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 455.281112][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 455.281137][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 455.281162][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 455.288380][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 455.288470][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 455.288487][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 455.288501][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 455.288515][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 455.292742][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 455.292793][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 455.292809][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 455.292822][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 455.292837][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 455.308547][ T9] usb 5-1: string descriptor 0 read error: -22 [ 455.308663][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 455.308677][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.323476][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 456.118305][ T7945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.182723][ T7945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.280398][ T6031] usb 5-1: USB disconnect, device number 14 [ 466.826104][ T8014] tipc: Started in network mode [ 466.826140][ T8014] tipc: Node identity 82cfa531743f, cluster identity 4711 [ 466.826614][ T8014] tipc: Enabled bearer , priority 0 [ 466.828408][ T8014] syzkaller0: entered promiscuous mode [ 466.828445][ T8014] syzkaller0: entered allmulticast mode [ 467.990100][ T6031] tipc: Node number set to 4142966065 [ 468.619522][ T8027] tipc: Resetting bearer [ 468.726373][ T8007] tipc: Resetting bearer [ 469.542719][ T8007] tipc: Disabling bearer [ 470.589404][ T5913] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 470.844520][ T5913] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 470.844554][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.844574][ T5913] usb 4-1: Product: syz [ 470.844588][ T5913] usb 4-1: Manufacturer: syz [ 470.844603][ T5913] usb 4-1: SerialNumber: syz [ 470.855439][ T5913] usb 4-1: config 0 descriptor?? [ 471.140570][ T5913] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 472.186269][ T8059] tipc: Enabling of bearer rejected, failed to enable media [ 472.947854][ T5913] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 473.013108][ T5913] usb 4-1: USB disconnect, device number 12 [ 474.805856][ T8074] netlink: 'syz.5.464': attribute type 6 has an invalid length. [ 475.028727][ T8074] netlink: 'syz.5.464': attribute type 12 has an invalid length. [ 475.028745][ T8074] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.464'. [ 477.599457][ T6031] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 478.537628][ T6031] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.537657][ T6031] usb 3-1: config 0 has no interfaces? [ 478.800695][ T6031] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 478.800728][ T6031] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.800748][ T6031] usb 3-1: Product: syz [ 478.800761][ T6031] usb 3-1: Manufacturer: syz [ 478.800775][ T6031] usb 3-1: SerialNumber: syz [ 478.888842][ T6031] usb 3-1: config 0 descriptor?? [ 479.649578][ T5913] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 479.817425][ T1249] usb 3-1: USB disconnect, device number 11 [ 479.819756][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 479.822597][ T5913] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 479.822621][ T5913] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 479.822639][ T5913] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 479.822656][ T5913] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 479.822673][ T5913] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 479.822691][ T5913] usb 2-1: config 0 has no interface number 0 [ 479.822740][ T5913] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 479.822773][ T5913] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 479.822792][ T5913] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 479.822825][ T5913] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 479.822848][ T5913] usb 2-1: config 0 interface 125 has no altsetting 0 [ 479.822864][ T5913] usb 2-1: config 0 interface 125 has no altsetting 2 [ 479.860080][ T5913] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 479.860110][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.860128][ T5913] usb 2-1: Product: syz [ 479.860141][ T5913] usb 2-1: Manufacturer: syz [ 479.860153][ T5913] usb 2-1: SerialNumber: syz [ 480.045176][ T5913] usb 2-1: config 0 descriptor?? [ 480.098000][ T5913] usb 2-1: selecting invalid altsetting 2 [ 480.454469][ C1] usb 2-1: async_complete: urb error -71 [ 480.454599][ C1] usb 2-1: async_complete: urb error -71 [ 480.454709][ C1] usb 2-1: async_complete: urb error -71 [ 480.454817][ T5913] get_1284_register: usb error -71 [ 480.454964][ T5913] uss720 2-1:0.125: probe with driver uss720 failed with error -71 [ 480.722379][ T5913] usb 2-1: USB disconnect, device number 14 [ 482.412657][ T8140] tipc: Enabling of bearer rejected, failed to enable media [ 483.543467][ T5156] Bluetooth: hci0: command 0x0406 tx timeout [ 489.699408][ T5913] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 489.859157][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 489.862132][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.862157][ T5913] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 489.862192][ T5913] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 489.862213][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.896287][ T5913] usb 4-1: config 0 descriptor?? [ 491.692468][ T8200] netlink: 'syz.4.490': attribute type 6 has an invalid length. [ 492.703029][ T5981] usb 4-1: USB disconnect, device number 13 [ 497.241936][ T8233] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 497.242705][ T8233] exFAT-fs (loop4): unable to read boot sector [ 497.242743][ T8233] exFAT-fs (loop4): failed to read boot sector [ 497.242779][ T8233] exFAT-fs (loop4): failed to recognize exfat type [ 501.826743][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.826843][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.519574][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 503.882142][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 503.891759][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 503.891802][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 503.895701][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 503.895730][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.895760][ T10] usb 6-1: Product: syz [ 503.895783][ T10] usb 6-1: Manufacturer: syz [ 503.895797][ T10] usb 6-1: SerialNumber: syz [ 503.982215][ T10] usb 6-1: config 0 descriptor?? [ 503.986150][ T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 503.986171][ T10] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 504.700736][ T10] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 504.701281][ T10] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 504.701777][ T10] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 504.701788][ T10] em28xx 6-1:0.0: No AC97 audio processor [ 505.019771][ T1249] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 505.229477][ T1249] usb 5-1: Using ep0 maxpacket: 16 [ 505.255660][ T1249] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 505.255692][ T1249] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 505.255712][ T1249] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.255731][ T1249] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 505.255751][ T1249] usb 5-1: config 0 has no interface number 0 [ 505.255814][ T1249] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 505.255843][ T1249] usb 5-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 505.255869][ T1249] usb 5-1: config 0 interface 125 has no altsetting 0 [ 505.268377][ T1249] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 505.268406][ T1249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.268423][ T1249] usb 5-1: Product: syz [ 505.268436][ T1249] usb 5-1: Manufacturer: syz [ 505.268449][ T1249] usb 5-1: SerialNumber: syz [ 505.281205][ T1249] usb 5-1: config 0 descriptor?? [ 506.389593][ T10] usb 6-1: USB disconnect, device number 3 [ 506.391174][ T10] em28xx 6-1:0.0: Disconnecting em28xx [ 506.393973][ T10] em28xx 6-1:0.0: Freeing device [ 506.526544][ T8296] netlink: 'syz.5.512': attribute type 6 has an invalid length. [ 507.284044][ C1] vkms_vblank_simulate: vblank timer overrun [ 507.326525][ C1] vkms_vblank_simulate: vblank timer overrun [ 507.702395][ C1] vkms_vblank_simulate: vblank timer overrun [ 508.897925][ C1] vkms_vblank_simulate: vblank timer overrun [ 508.908594][ T8120] usb 5-1: USB disconnect, device number 15 [ 509.973022][ C1] vkms_vblank_simulate: vblank timer overrun [ 510.185573][ C1] vkms_vblank_simulate: vblank timer overrun [ 511.329669][ C1] vkms_vblank_simulate: vblank timer overrun [ 511.491531][ C1] vkms_vblank_simulate: vblank timer overrun [ 512.119514][ C1] vkms_vblank_simulate: vblank timer overrun [ 512.869405][ T6031] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 513.019999][ T6031] usb 4-1: Using ep0 maxpacket: 16 [ 513.025171][ T6031] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 513.025194][ T6031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 513.060218][ T6031] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 513.060239][ T6031] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.060250][ T6031] usb 4-1: Product: syz [ 513.060258][ T6031] usb 4-1: Manufacturer: syz [ 513.060266][ T6031] usb 4-1: SerialNumber: syz [ 513.113736][ T6031] usb 4-1: config 0 descriptor?? [ 513.312682][ T6031] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 513.312719][ T6031] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 513.689850][ T8339] netlink: 'syz.1.524': attribute type 6 has an invalid length. [ 513.816060][ T8339] netlink: 'syz.1.524': attribute type 12 has an invalid length. [ 513.816086][ T8339] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.524'. [ 513.972528][ T6031] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 513.978004][ T6031] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 513.979901][ T6031] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 513.979922][ T6031] em28xx 4-1:0.0: No AC97 audio processor [ 515.666574][ T1249] usb 4-1: USB disconnect, device number 14 [ 515.668140][ T1249] em28xx 4-1:0.0: Disconnecting em28xx [ 515.692781][ T1249] em28xx 4-1:0.0: Freeing device [ 519.379834][ T6031] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 519.548263][ T6031] usb 4-1: Using ep0 maxpacket: 8 [ 519.557041][ T6031] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 519.557070][ T6031] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.557088][ T6031] usb 4-1: Product: syz [ 519.557101][ T6031] usb 4-1: Manufacturer: syz [ 519.557113][ T6031] usb 4-1: SerialNumber: syz [ 519.589207][ T6031] usb 4-1: config 0 descriptor?? [ 521.013401][ T6031] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -110 [ 521.013536][ T6031] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 521.869438][ T5919] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 522.074503][ T5919] usb 2-1: config 0 has no interfaces? [ 522.077499][ T5919] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 522.077519][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.077530][ T5919] usb 2-1: Product: syz [ 522.077538][ T5919] usb 2-1: Manufacturer: syz [ 522.077546][ T5919] usb 2-1: SerialNumber: syz [ 522.250753][ T5919] usb 2-1: config 0 descriptor?? [ 522.309811][ T8378] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 522.309837][ T8378] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 8378, name: syz.3.532 [ 522.309853][ T8378] preempt_count: 0, expected: 0 [ 522.309863][ T8378] RCU nest depth: 0, expected: 0 [ 522.309874][ T8378] 1 lock held by syz.3.532/8378: [ 522.309885][ T8378] #0: ffff888027c98058 (&dum_hcd->dum->lock){+.+.}-{3:3}, at: dummy_dequeue+0x164/0x480 [ 522.310115][ T8378] irq event stamp: 2832 [ 522.310124][ T8378] hardirqs last enabled at (2831): [] _raw_spin_unlock_irq+0x23/0x50 [ 522.310249][ T8378] hardirqs last disabled at (2832): [] dummy_dequeue+0x151/0x480 [ 522.310274][ T8378] softirqs last enabled at (0): [] copy_process+0x979/0x3ae0 [ 522.310353][ T8378] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 522.310380][ T8378] CPU: 1 UID: 0 PID: 8378 Comm: syz.3.532 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 522.310404][ T8378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 522.310416][ T8378] Call Trace: [ 522.310424][ T8378] [ 522.310434][ T8378] dump_stack_lvl+0x189/0x250 [ 522.310500][ T8378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 522.310538][ T8378] ? print_lock_name+0xde/0x100 [ 522.310567][ T8378] __might_resched+0x44b/0x5d0 [ 522.310618][ T8378] ? __pfx___might_resched+0x10/0x10 [ 522.310641][ T8378] ? dummy_dequeue+0x164/0x480 [ 522.310690][ T8378] rt_spin_lock+0xc7/0x2c0 [ 522.310710][ T8378] ? _raw_spin_unlock_irq+0x23/0x50 [ 522.310737][ T8378] ? __pfx_rt_spin_lock+0x10/0x10 [ 522.310765][ T8378] ? rcu_is_watching+0x15/0xb0 [ 522.310827][ T8378] dummy_dequeue+0x164/0x480 [ 522.310856][ T8378] ? __pfx_dummy_dequeue+0x10/0x10 [ 522.310877][ T8378] ? __pfx_schedule_timeout+0x10/0x10 [ 522.310901][ T8378] ? __pfx___wait_for_common+0x10/0x10 [ 522.310939][ T8378] usb_ep_dequeue+0x66/0x250 [ 522.310987][ T8378] raw_process_ep0_io+0x435/0x980 [ 522.311054][ T8378] raw_ioctl+0x2609/0x3ba0 [ 522.311081][ T8378] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 522.311165][ T8378] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 522.311193][ T8378] ? do_vfs_ioctl+0xbeb/0x1440 [ 522.311256][ T8378] ? __pfx_raw_ioctl+0x10/0x10 [ 522.311280][ T8378] ? __pfx_smack_log+0x10/0x10 [ 522.311357][ T8378] ? smk_access+0x14c/0x4e0 [ 522.311394][ T8378] ? smk_tskacc+0x2fc/0x370 [ 522.311428][ T8378] ? smack_file_ioctl+0x2ac/0x340 [ 522.311449][ T8378] ? __pfx_smack_file_ioctl+0x10/0x10 [ 522.311478][ T8378] ? __fget_files+0x2a/0x420 [ 522.311501][ T8378] ? __fget_files+0x3a6/0x420 [ 522.311526][ T8378] ? __fget_files+0x2a/0x420 [ 522.311558][ T8378] ? bpf_lsm_file_ioctl+0x9/0x20 [ 522.311602][ T8378] ? __pfx_raw_ioctl+0x10/0x10 [ 522.311625][ T8378] __se_sys_ioctl+0xfc/0x170 [ 522.311650][ T8378] do_syscall_64+0xfa/0x3b0 [ 522.311722][ T8378] ? lockdep_hardirqs_on+0x9c/0x150 [ 522.311748][ T8378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.311794][ T8378] ? clear_bhb_loop+0x60/0xb0 [ 522.311819][ T8378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.311838][ T8378] RIP: 0033:0x7fe970d0e7eb [ 522.311857][ T8378] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 522.311872][ T8378] RSP: 002b:00007fe96ef6bf60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 522.311893][ T8378] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fe970d0e7eb [ 522.311908][ T8378] RDX: 00007fe96ef6bfe0 RSI: 00000000c0085504 RDI: 0000000000000003 [ 522.311919][ T8378] RBP: 00007fe970d91e19 R08: 0000000000001000 R09: 0000000000000601 [ 522.311931][ T8378] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fe96ef6bfe8 [ 522.311944][ T8378] R13: 0000000000000000 R14: 00007fe970f35fa0 R15: 00007ffdaa331ef8 [ 522.311978][ T8378] [ 522.722203][ T5919] usb 4-1: USB disconnect, device number 15 [ 525.846536][ T10] usb 2-1: USB disconnect, device number 15