last executing test programs: 6.628030953s ago: executing program 3 (id=297): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000002a80)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 6.49270938s ago: executing program 3 (id=299): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x4a) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 4.590286834s ago: executing program 3 (id=309): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0xc, 0x1, 0x2, 0x1, 0x4}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905097a63"], 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) get_mempolicy(0x0, &(0x7f0000000040), 0x11880, &(0x7f0000fff000/0x1000)=nil, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x0, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4004150) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000005c0)=0xfffffffd) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000140)='./file0\x00') openat2(r5, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18) ioctl$KDGKBTYPE(r3, 0x4b48, &(0x7f0000000040)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) close(r1) 4.126725536s ago: executing program 1 (id=312): socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x3, 0x300) epoll_create(0xd) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000600)) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 4.029770352s ago: executing program 4 (id=313): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x5, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x2, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0xfa1, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) 3.990543983s ago: executing program 4 (id=314): syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x8202, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3.919443377s ago: executing program 4 (id=315): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x8800003) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) read$char_usb(r0, &(0x7f00000002c0)=""/151, 0x97) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) r2 = eventfd2(0x8, 0x1) write$eventfd(r2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000034c0), 0x0, 0x700, 0x0) 3.789723303s ago: executing program 0 (id=317): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f00000041c0), 0x0, 0x2400c084) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd0714", 0x173, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 3.731989536s ago: executing program 2 (id=318): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e, 0x0, 0x0, 0x9}, 0x10) socket$key(0xf, 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000814}, 0x20000000) 3.678701049s ago: executing program 2 (id=319): syz_open_dev$vim2m(&(0x7f0000000580), 0x3ff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401010080000000000000010004000500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) close(0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000000c0)={r2, 0x0, {0x0, 0x0, 0x0, 0x1000000, 0x9, 0x0, 0x0, 0x17, 0x14, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4b69d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "3bc529791f04004dc252840b0000000000f2fffff2845d9ee84ef80b7407cfbe", [0xfffffffffeff7ff9]}}) close(r2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000140)=0xfffffdf9) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x10, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@call={0x85, 0x0, 0x0, 0x8a}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = openat$nullb(0xffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0401273, &(0x7f0000000080)={'\x00', 0x0, 0xffffffff, 0x0, 0xfffffffffffffff9, 0x9}) r7 = getpid() r8 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r7, 0x0, 0x7fff, 'syz1\x00', 0x0}) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_setup(0x8, &(0x7f0000004200)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) io_submit(r10, 0x4, &(0x7f00000007c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0xa0a, r1, &(0x7f00000002c0)="547556e3057ab6ef122fac612ae330b2e430db1a0fa4dac93097f06a012fbeb8a6ebb471ecd68de9a64819c42e339a6bc7320dcdcc466e8eca489a25cd20585dc16fc5584d569429cc76911ac457823bad9b848c163f47888f921f4b905d59893161b3f66a2d71777daefd82935cfd504d3abcd2219a22167bfe6e4c1f6b91609860d28f9848b3b23ecc1a99e072324d0bef3c2af6869a0d822aa80e7dc1fa64ee0e1ff3944f93b74c5011bb7c26e42b9465b06cf702d6bed84d1991d1ae02022a544d78dfb414eea0f4d8988e635b0c479c93fd72109376c8b39a6339b20b8f4e0dfcefda47c91b", 0xe8, 0xc, 0x0, 0x1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3, 0x7fb, 0xffffffffffffffff, &(0x7f0000000940)="8e90bcbd18a9519cefadf0fb4171e6f63d71ddc650bbc14436c694b2455e297efd2b6a113dad42891f130932894786f792efee68d68ed8fb255fe996d36ac93b7609c6ec9c2615c62cb70161adda135d3016931cc36869079e57258b4c7f37492e3ecead77ae885af8f4fd52091779061ce4d1a72c710e90596c69d46a60b7c2d25945712c05186d277c63ad63faf9ae364d96f8b8ff68948e6b8b78d7371ba7c088c25c568e", 0xa6, 0x1, 0x0, 0x3}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x6, 0x7, r1, &(0x7f0000000640)="cdf5c5253dd80d693d2c1361d17fcb728bf699312b0161a0d6d12298b294b87e67147f2c302b23f5d3b5d269e7bb5b2dfb8c2ca8edde9c80f54821fb94b5a6c95068aec1e077f7d1a2bbb48383c01a213a653c6778a243b757d3f969a03bfb62190e14dffeb3026c1b96f0b8f5bb8635208bf56967f3131183e253842708eed01df65239cbfa00a31c6c433e3076854765329449cb0fbb6b74089cd7", 0x9c, 0x6c, 0x0, 0x1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x8, r11, &(0x7f0000000740)="8f5c0864e50f9ee37e6d4d743c925a79fa2e2a15388e57230269ee64f72c", 0x1e, 0x80, 0x0, 0x0, r9}]) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r8, 0xc0405519, &(0x7f0000000bc0)={0x5, 0x1, 0x2, 0xe2, 'syz1\x00', 0x4}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"}) socket$nl_generic(0x10, 0x3, 0x10) 3.377608804s ago: executing program 2 (id=320): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) 3.133979056s ago: executing program 2 (id=321): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c041) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e", 0x78}], 0x1}, 0x0) 3.078314218s ago: executing program 2 (id=322): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.898320457s ago: executing program 0 (id=323): syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2002, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x7f, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) ioctl$UI_DEV_DESTROY(r0, 0x5502) 2.63417697s ago: executing program 1 (id=324): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x5, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x2, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0xfa1, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) 2.63088602s ago: executing program 3 (id=325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f83edf848480000005e140602ab1100000e002b000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.492865787s ago: executing program 3 (id=326): r0 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_gettime(r3, &(0x7f0000000200)) bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$tipc(0x0, r4) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f00000003c0)={0x0, 0xa6, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r6, 0x5459, 0x0) r8 = syz_io_uring_setup(0xa07, &(0x7f0000000580)={0x0, 0xb967, 0x80, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1}) io_uring_enter(r8, 0x7855, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 2.44522376s ago: executing program 1 (id=327): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 2.300043687s ago: executing program 1 (id=328): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2275, &(0x7f00000018c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0x21, &(0x7f0000000100)={0x1f}) geteuid() getgroups(0x2, &(0x7f0000000600)=[0xee00, 0xee01]) fcntl$getownex(r0, 0x10, &(0x7f0000000640)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000680)) getegid() sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}], 0x1, 0x4008840) shutdown(0xffffffffffffffff, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001"], 0x4c}}, 0x0) syz_mount_image$fuse(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x40001, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB="2c67766f75705f69080000003b419d711a4be6477f3910c169b87fc39be0a113984925e4f76a7590504adae7380ef5ac4967", @ANYRESDEC=0xee01, @ANYBLOB=',max_read=0x0000000000000400,max_read=0x00000000000000a6,allow_other,blksize=0x0000000000003c00,default_permissions,default_permissions,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',measure,seclabel,dont_ap'], 0x1, 0x0, &(0x7f0000002b40)="97d27bec3f9532196d4bff21477d2cac00dd3cb2c515836dc3a2345e63e6864d9705df4610ccdb2b1e950c3e2fe3662d8cc760457b52843c9c6cbc04b78746650c8c25407f0f5d494a5d67165ae575e3b6d36dfd745f17c9f00768217dc5fd1e6c80806d403af9b351cb921d106e006cd1b0") open(&(0x7f0000000740)='./file0\x00', 0x200000, 0x8) getpid() geteuid() fstat(r1, &(0x7f0000001840)) sendmmsg$unix(r1, &(0x7f0000000180), 0x62, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) 2.204377832s ago: executing program 4 (id=329): r0 = syz_io_uring_setup(0x7c67, &(0x7f0000000140)={0x0, 0x3cf9, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000200), 0x4) epoll_create1(0x80000) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x400, 0x3, 0x100}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 1.957670183s ago: executing program 0 (id=330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007e, 0x8, 0x0, 0x7, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x3, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x2004, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffffeff, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0x10000, 0xa4, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x3, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7fff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffff7f, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x1, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x1, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1.768191423s ago: executing program 0 (id=331): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000180)=0x4) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x6686, 0x80, 0x2, 0x8a}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x300) 1.527788885s ago: executing program 0 (id=332): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c041) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e", 0x78}], 0x1}, 0x0) 1.42600975s ago: executing program 0 (id=333): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpgid(0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x3, 0x1, 0x50, 0xfffffffb, 0xffffffff}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x1003, r0}, 0x38) socket$kcm(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000002080500000000000000000008"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) futex(0x0, 0x7, 0x4008, 0x0, 0x0, 0xffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x404, 0x1, 0xbf22, 0x20, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1}, 0x50) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000640)=@sg0, 0x0, &(0x7f0000000700)='./file0\x00') 1.034256289s ago: executing program 4 (id=334): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2a, 0x8001, 0x2, 0x6, 0x6, 0x5, 0x3, 0x200, 0xfffffffb}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x929f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x3, 0x6, 0x8000}, {0x94, 0xfba76ce08360e191, 0xfff8, 0x3, 0x9, 0x400}, 0x8008, 0xfffffff9, 0x422}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 740.264474ms ago: executing program 4 (id=335): socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x3, 0x300) epoll_create(0xd) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000600)) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 617.04492ms ago: executing program 3 (id=336): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000680)={0x2, {{0xa, 0x4e24, 0xffffffda, @mcast1, 0x72}}, 0x1, 0x1, [{{0xa, 0x4e23, 0x7f, @rand_addr=' \x01\x00', 0x55}}]}, 0x110) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c09425, &(0x7f00000001c0)={"d9756afe522f635f4457c2de26b0c8a7", 0x0, 0x0, {0xfff, 0x2838e187}, {0xffffffffffffff33}, 0x0, [0x8, 0xb279, 0xb5c, 0xe, 0x2, 0x6a, 0x1, 0xf, 0x1, 0x93, 0xc, 0x7, 0xffffffffffffffff, 0x1, 0x7, 0xffffffffffffffff]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000010c0)={{r1}, r2, 0x6, @inherit={0x88, &(0x7f0000000280)={0x1, 0x8, 0x8, 0x9, {0x24, 0x1, 0xb4, 0xfffffffffffffff7, 0x5}, [0x2, 0x5, 0x3, 0x9, 0x7000, 0xd0, 0xfffffffffffffff9, 0x8]}}, @subvolid=0xcfe6}) ppoll(&(0x7f0000000000)=[{r1, 0x5004}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 426.237319ms ago: executing program 1 (id=337): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r0, 0x4, 0x42400) 269.821577ms ago: executing program 1 (id=338): socket$can_bcm(0x1d, 0x2, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000400)="8867e877ccd861dbc4ac96fe2951c97bbb02672a0dafe1ecac335719e87b93a2db31d2886ed844ba4a4c8df6441f413402741a38e805f5cd685936f3a05159074fef1aaec79b5f1007ad5da77d9c117746ae2ba939b1b1705a070d3c82d03005e09147a3c9f8b11fa17f59dbc0325ce0c991cbac996d7eb1ac57947728edd7164fcdaee5d16907a30b8dcab517be26ca273ba5134cc8865b9108172fc4be002dc7dc8fea97a2df9666", 0xa9}, {&(0x7f00000004c0)="ea70918135eaab3a884242c9d1d25114aa96787c02826ef6ca3afcb0b9dcdf64e03e2d393b8f9ce9a5e0ad21c8e307f9e4bb018c5b22023f073f9fbe1508819dd448be8d9873aa90426f3cf4c187d10215395e8a7807e5893b0bd80f4ff745fe7f9c316d18f69265662694261c0b194ef861", 0x72}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x428, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x3dc, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x340, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x2f8, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x4}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x428}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1ee89900", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fedbdf250a000000"], 0x14}}, 0x4000080) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0) 0s ago: executing program 2 (id=339): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): atman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.499295][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.528925][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.539840][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 70.546549][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 70.546683][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 70.546778][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 70.605820][ T4266] device hsr_slave_0 entered promiscuous mode [ 70.613157][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 70.619752][ T4266] device hsr_slave_1 entered promiscuous mode [ 70.627104][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.635278][ T4266] Cannot create hsr debugfs directory [ 70.665844][ T4267] device hsr_slave_0 entered promiscuous mode [ 70.672806][ T4267] device hsr_slave_1 entered promiscuous mode [ 70.679376][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.688390][ T4267] Cannot create hsr debugfs directory [ 70.705700][ T4270] device hsr_slave_0 entered promiscuous mode [ 70.712736][ T4270] device hsr_slave_1 entered promiscuous mode [ 70.719343][ T4270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.727356][ T4270] Cannot create hsr debugfs directory [ 71.084318][ T4276] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.097310][ T4276] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.113478][ T4276] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.130206][ T4276] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.167725][ T4280] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.178723][ T4280] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.199190][ T4280] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.223592][ T4280] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.239934][ T4270] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.257908][ T4270] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.272586][ T4270] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.305576][ T4270] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.382974][ T4267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.395017][ T4267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.409018][ T4267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.448779][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.460874][ T4267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.501949][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.514875][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.538977][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.570537][ T4266] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.581684][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.591895][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.605892][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.619315][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.629497][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.636902][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.650098][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.672000][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.680748][ T4266] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.694798][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.705522][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.718995][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.726582][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.747479][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.760675][ T4266] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.777984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.788731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.807282][ T4266] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.820538][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.839423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.850104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.859071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.895615][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.910472][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.921703][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.935173][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.944645][ T4295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.955764][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.966738][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.978402][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.987793][ T4295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.003932][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.015782][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.032843][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.042785][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.072421][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.083602][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.091814][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.105310][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.115587][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.125088][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.135430][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.155684][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.169736][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.203726][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.213067][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.221918][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.231427][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.240320][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.247479][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.256023][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.265488][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.275214][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.284270][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.293572][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.300753][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.310364][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.319746][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.328698][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.337709][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.380162][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.417585][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.435193][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.444230][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.463685][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.472645][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.488386][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.516980][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.528448][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.540517][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.551282][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.561032][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.580642][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.590149][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.603396][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.612813][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 72.618971][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 72.625600][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 72.625625][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 72.640473][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.655678][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.669108][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.685538][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.694129][ T4282] Bluetooth: hci4: command 0x041b tx timeout [ 72.707074][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.720680][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.727874][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.755999][ T4270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.768183][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.799506][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.807635][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.822932][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.831900][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.850677][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.868250][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.877843][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.885595][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.901836][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.911413][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.921263][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.930748][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.940279][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.959716][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.969238][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.980092][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.993600][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.026717][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.059494][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.085335][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.120206][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.137789][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.159381][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.183257][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.200731][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.252425][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.260329][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.280413][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.290486][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.331942][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.355673][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.366254][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.375263][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.382621][ T4295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.390835][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.400945][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.410069][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.417268][ T4295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.483332][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.510788][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.535764][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.547618][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.558844][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.575139][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.590143][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.638499][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.649771][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.660434][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.670033][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.680337][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.689448][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.697563][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.707350][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.717697][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.734609][ T4276] device veth0_vlan entered promiscuous mode [ 73.741429][ T4280] device veth0_vlan entered promiscuous mode [ 73.755731][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.768354][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.778939][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.788238][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.807483][ T4276] device veth1_vlan entered promiscuous mode [ 73.834340][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.841506][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.853906][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.861745][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.870805][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.878879][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.887538][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.895356][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.908783][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.923793][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.933358][ T4280] device veth1_vlan entered promiscuous mode [ 73.948508][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.964162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.983185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.001860][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.012256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.063080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.083386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.104978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.139598][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.149112][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.161446][ T4276] device veth0_macvtap entered promiscuous mode [ 74.180508][ T4276] device veth1_macvtap entered promiscuous mode [ 74.197504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.215848][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.233241][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.253795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.280030][ T4280] device veth0_macvtap entered promiscuous mode [ 74.302866][ T4280] device veth1_macvtap entered promiscuous mode [ 74.330228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.359559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.369994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.408189][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.436378][ T4270] device veth0_vlan entered promiscuous mode [ 74.453254][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.473312][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.487338][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.495827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.540998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.550076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.559380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.568328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.577758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.595389][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.605695][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.623744][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.640440][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.655855][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.674634][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.691264][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.700513][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 74.700524][ T4275] Bluetooth: hci3: command 0x040f tx timeout [ 74.702775][ T4278] Bluetooth: hci2: command 0x040f tx timeout [ 74.706841][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 74.728084][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.740574][ T4280] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.750394][ T4280] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.760135][ T4280] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.770173][ T4280] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.780114][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 74.809991][ T4270] device veth1_vlan entered promiscuous mode [ 74.820364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.829041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.837000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.872795][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.881716][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.899749][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.908570][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.923228][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.957588][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.968351][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.977789][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.037293][ T4267] device veth0_vlan entered promiscuous mode [ 75.050938][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.061488][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.070921][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.080162][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.089237][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.099116][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.108409][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.124074][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.166918][ T4270] device veth0_macvtap entered promiscuous mode [ 75.197434][ T4267] device veth1_vlan entered promiscuous mode [ 75.216594][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.234024][ T4295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.242033][ T4295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.246420][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.267409][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.275537][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.284102][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.296115][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.305047][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.325692][ T4270] device veth1_macvtap entered promiscuous mode [ 75.338940][ T4266] device veth0_vlan entered promiscuous mode [ 75.391765][ T4266] device veth1_vlan entered promiscuous mode [ 75.424030][ T4295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.428895][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.445398][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.447906][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.459299][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.478786][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.481394][ T4295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.494958][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.506594][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.519849][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.531163][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.541603][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.556612][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.568537][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.599019][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.607736][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.616326][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.625755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.634877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.643778][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.655731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.664689][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.676860][ T4267] device veth0_macvtap entered promiscuous mode [ 75.690532][ T4270] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.705922][ T4270] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.717926][ T4270] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.728711][ T4270] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.758922][ T4267] device veth1_macvtap entered promiscuous mode [ 75.774819][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.787298][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.796343][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.806009][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.819297][ T4266] device veth0_macvtap entered promiscuous mode [ 75.830060][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.857810][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.865921][ T4266] device veth1_macvtap entered promiscuous mode [ 75.880520][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.900993][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.911036][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.921674][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.937363][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.948475][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.959972][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.970058][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.986181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.999751][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.016549][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.033109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.085759][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.102537][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.112685][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.123402][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.134202][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.144941][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.156536][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.175054][ T4267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.184253][ T4267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.194508][ T4267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.203656][ T4267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.216580][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.230377][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.247771][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.261592][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.273624][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.284392][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.314674][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.328287][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.347844][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.375128][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.393605][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.410973][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.454781][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.475801][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.478317][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.494424][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.509669][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.537814][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.557170][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.567412][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.579959][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.590260][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.602643][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.618922][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.639618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.663361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.699866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.772213][ T4278] Bluetooth: hci1: command 0x0419 tx timeout [ 76.781435][ T4266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.790576][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 76.790596][ T4278] Bluetooth: hci0: command 0x0419 tx timeout [ 76.797419][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 76.820144][ T4266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.838747][ T4362] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.856078][ T4278] Bluetooth: hci4: command 0x0419 tx timeout [ 76.866242][ T4266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.881612][ T4266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.019296][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.080534][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.094302][ T4293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.118223][ T4293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.138969][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.158078][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.301738][ T4293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.352530][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.365484][ T4293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.373365][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.407827][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.449045][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.490205][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.505146][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.526335][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.702208][ T4312] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.847797][ T4377] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 77.855700][ T4377] netlink: 'syz.4.5': attribute type 2 has an invalid length. [ 78.041476][ T4312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.612785][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 78.615797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 78.622905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 78.638013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 78.639803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 78.663839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 78.698831][ T4282] Bluetooth: hci0: unexpected cc 0x2039 length: 9 > 1 [ 78.712742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.717840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.741731][ T4312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.783811][ T4312] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 78.822655][ T4312] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.834907][ T4312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.847677][ T4312] usb 4-1: config 0 descriptor?? [ 79.278453][ T4312] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 79.371415][ T4312] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 79.392178][ T4313] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.592286][ T4313] usb 3-1: Using ep0 maxpacket: 8 [ 79.599259][ T4313] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.649814][ T4313] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 79.702012][ T4313] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x76, skipping [ 79.766400][ T4313] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 79.832483][ T4313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.862764][ T4313] hub 3-1:1.0: bad descriptor, ignoring hub [ 79.869005][ T4313] hub: probe of 3-1:1.0 failed with error -5 [ 79.964501][ T4313] cdc_wdm 3-1:1.0: skipping garbage [ 79.969970][ T4313] cdc_wdm 3-1:1.0: skipping garbage [ 80.035483][ T4313] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 80.172886][ T4313] usb 3-1: USB disconnect, device number 2 [ 80.594238][ C0] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -1 [ 80.671486][ T4401] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.752335][ T4313] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 80.803602][ T4401] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.272179][ T4313] usb 4-1: device descriptor read/64, error -71 [ 81.456445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 81.542365][ T4313] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 81.559615][ T4313] usb 4-1: device reset changed ep0 maxpacket size! [ 81.622148][ T4316] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.643482][ T4317] usb 4-1: USB disconnect, device number 2 [ 81.813602][ T7] cfg80211: failed to load regulatory.db [ 81.838394][ T4316] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 81.862216][ T4317] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 81.891668][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.936274][ T4316] usb 1-1: Product: syz [ 81.941165][ T4316] usb 1-1: Manufacturer: syz [ 81.953521][ T4316] usb 1-1: SerialNumber: syz [ 82.001422][ T4316] usb 1-1: config 0 descriptor?? [ 82.072148][ T4317] usb 4-1: Using ep0 maxpacket: 16 [ 82.081306][ T4317] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 82.156710][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.185674][ T4317] usb 4-1: Product: syz [ 82.209493][ T4317] usb 4-1: Manufacturer: syz [ 82.228332][ T4317] usb 4-1: SerialNumber: syz [ 82.259075][ T4317] r8152-cfgselector 4-1: config 0 descriptor?? [ 82.688624][ T4317] r8152-cfgselector 4-1: Unknown version 0x0000 [ 82.703772][ T4317] r8152-cfgselector 4-1: bad CDC descriptors [ 82.724154][ T4317] r8152-cfgselector 4-1: Unknown version 0x0000 [ 82.744213][ T4317] r8152-cfgselector 4-1: USB disconnect, device number 3 [ 82.773082][ T4282] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 82.781912][ T4282] Bluetooth: hci0: Injecting HCI hardware error event [ 82.791569][ T4278] Bluetooth: hci0: hardware error 0x00 [ 82.853367][ T4316] usb 1-1: Firmware version (0.0) predates our first public release. [ 82.861976][ T4316] usb 1-1: Please update to version 0.2 or newer [ 83.257053][ T4316] usb 1-1: USB disconnect, device number 2 [ 83.562413][ T4315] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.752253][ T4317] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.761975][ T4315] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 83.774660][ T4315] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 83.792183][ T4315] usb 2-1: config 0 interface 0 has no altsetting 0 [ 83.815509][ T4315] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 83.832251][ T4315] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 83.850896][ T4315] usb 2-1: Product: syz [ 83.858731][ T4315] usb 2-1: Manufacturer: syz [ 83.864805][ T4315] usb 2-1: SerialNumber: syz [ 83.874714][ T4315] usb 2-1: config 0 descriptor?? [ 83.893346][ T4315] hub 2-1:0.0: bad descriptor, ignoring hub [ 83.900564][ T4315] hub: probe of 2-1:0.0 failed with error -5 [ 83.920652][ T4315] usb 2-1: selecting invalid altsetting 0 [ 83.952196][ T4317] usb 3-1: Using ep0 maxpacket: 32 [ 83.958884][ T4317] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 83.996817][ T4317] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 84.009365][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 84.012372][ T4316] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 84.065610][ T4317] usb 3-1: Product: syz [ 84.080592][ T4317] usb 3-1: Manufacturer: syz [ 84.102362][ T4317] usb 3-1: SerialNumber: syz [ 84.131774][ T4317] usb 3-1: config 0 descriptor?? [ 84.154564][ T4427] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 84.252215][ T4316] usb 1-1: Using ep0 maxpacket: 8 [ 84.259122][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 84.273693][ T4315] usb 2-1: USB disconnect, device number 2 [ 84.334199][ T4316] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 84.362224][ T4316] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 84.398658][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.412548][ T4316] usb 1-1: Product: syz [ 84.416772][ T4316] usb 1-1: Manufacturer: syz [ 84.421396][ T4316] usb 1-1: SerialNumber: syz [ 84.433336][ T4316] usb 1-1: config 0 descriptor?? [ 84.448349][ T4434] device syzkaller0 entered promiscuous mode [ 84.472674][ T4434] tipc: Started in network mode [ 84.478227][ T4434] tipc: Node identity 82414194fd5f, cluster identity 4711 [ 84.486708][ T4434] tipc: Enabled bearer , priority 0 [ 84.506023][ T4433] tipc: Resetting bearer [ 84.610533][ T4433] tipc: Disabling bearer [ 84.817652][ T4315] usb 3-1: USB disconnect, device number 3 [ 84.852535][ T4278] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 85.425162][ T4316] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 85.476141][ T7] usb 1-1: USB disconnect, device number 3 [ 85.527390][ T4451] fuse: Bad value for 'fd' [ 85.586743][ T4453] netlink: 36 bytes leftover after parsing attributes in process `syz.0.33'. [ 85.613490][ T4316] usb 4-1: device descriptor read/64, error -71 [ 85.807425][ T4456] device syzkaller0 entered promiscuous mode [ 85.902204][ T4316] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 86.062222][ T4316] usb 4-1: device descriptor read/64, error -71 [ 86.183305][ T4316] usb usb4-port1: attempt power cycle [ 86.276503][ T4466] device syzkaller0 entered promiscuous mode [ 86.325421][ T4466] tipc: Started in network mode [ 86.325444][ T4466] tipc: Node identity 260130ce0be8, cluster identity 4711 [ 86.326374][ T4466] tipc: Enabled bearer , priority 0 [ 86.328740][ T4465] tipc: Resetting bearer [ 86.403881][ T4465] tipc: Disabling bearer [ 86.622352][ T4316] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 86.664051][ T4316] usb 4-1: device descriptor read/8, error -71 [ 86.687744][ T4470] input: syz1 as /devices/virtual/input/input5 [ 86.942188][ T4316] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 87.032866][ T4316] usb 4-1: device descriptor read/8, error -71 [ 87.192375][ T4316] usb usb4-port1: unable to enumerate USB device [ 88.312200][ T4315] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 88.332363][ T4312] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.369565][ T4487] device syzkaller0 entered promiscuous mode [ 88.532494][ T4315] usb 1-1: Using ep0 maxpacket: 8 [ 88.539255][ T4312] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 88.558893][ T4315] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 88.592227][ T4312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.609457][ T4315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.627389][ T4491] input: syz0 as /devices/virtual/input/input6 [ 88.633960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.644909][ T4312] usb 5-1: config 0 descriptor?? [ 88.650145][ T4315] usb 1-1: Product: syz [ 88.665066][ T4312] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 88.671259][ T4315] usb 1-1: Manufacturer: syz [ 88.688812][ T4315] usb 1-1: SerialNumber: syz [ 88.708571][ T4315] usb 1-1: config 0 descriptor?? [ 88.736293][ T4315] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 88.854476][ T4311] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.051210][ T4311] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 89.060162][ T4312] gspca_cpia1: usb_control_msg 03, error -32 [ 89.067224][ T4482] netlink: 224 bytes leftover after parsing attributes in process `syz.4.44'. [ 89.091180][ T4311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.146302][ T4311] usb 2-1: config 0 descriptor?? [ 89.373938][ T4311] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 89.390975][ T4311] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 89.584003][ T4311] [drm:udl_init] *ERROR* Selecting channel failed [ 89.631400][ T4311] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 89.658965][ T4311] [drm] Initialized udl on minor 2 [ 89.691511][ T4311] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 89.732446][ T4311] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 89.752609][ T4311] usb 2-1: USB disconnect, device number 3 [ 89.783430][ T129] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 89.823103][ T129] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 89.874044][ T129] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 90.134390][ T4312] gspca_cpia1: usb_control_msg 03, error -110 [ 90.142365][ T4312] gspca_cpia1: usb_control_msg 01, error -32 [ 90.148905][ T4312] gspca_cpia1: usb_control_msg 01, error -32 [ 90.156930][ T4312] gspca_cpia1: usb_control_msg 01, error -32 [ 90.167332][ T4312] gspca_cpia1: usb_control_msg 01, error -32 [ 90.179402][ T4312] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 90.232302][ T129] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 90.393950][ T129] usb 3-1: device descriptor read/64, error -71 [ 90.682292][ T129] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 90.842426][ T129] usb 3-1: device descriptor read/64, error -71 [ 90.962577][ T129] usb usb3-port1: attempt power cycle [ 90.968373][ T4315] gspca_sonixj: reg_w1 err -71 [ 91.032268][ T4315] sonixj: probe of 1-1:0.0 failed with error -71 [ 91.066263][ T4315] usb 1-1: USB disconnect, device number 4 [ 91.067915][ T7] usb 5-1: USB disconnect, device number 2 [ 91.214052][ T4518] device syzkaller0 entered promiscuous mode [ 91.395623][ T129] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 91.443939][ T129] usb 3-1: device descriptor read/8, error -71 [ 91.659688][ T4527] input: syz0 as /devices/virtual/input/input7 [ 91.695070][ T4385] udevd[4385]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 91.728497][ T4385] udevd[4385]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 91.732134][ T129] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 91.823007][ T129] usb 3-1: device descriptor read/8, error -71 [ 91.952346][ T129] usb usb3-port1: unable to enumerate USB device [ 92.128114][ T4533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.63'. [ 94.990066][ T4546] tipc: Started in network mode [ 94.999664][ T4546] tipc: Node identity 12fe91164c53, cluster identity 4711 [ 95.013205][ T4546] tipc: Enabled bearer , priority 0 [ 95.022133][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 95.073930][ T4545] tipc: Disabling bearer [ 95.085192][ T4544] device syzkaller0 entered promiscuous mode [ 95.113555][ T4544] 0: reclassify loop, rule prio 0, protocol 800 [ 95.188452][ T7] usb 3-1: device descriptor read/64, error -71 [ 95.230924][ T4555] random: crng reseeded on system resumption [ 95.292208][ T4312] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.472869][ T7] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 95.501322][ T4312] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 95.537944][ T4312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.568825][ T4312] usb 5-1: config 0 descriptor?? [ 95.590751][ T4312] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 95.687618][ T7] usb 3-1: device descriptor read/64, error -71 [ 95.823435][ T7] usb usb3-port1: attempt power cycle [ 95.989101][ T4312] gspca_cpia1: usb_control_msg 03, error -32 [ 96.005327][ T4548] netlink: 224 bytes leftover after parsing attributes in process `syz.4.68'. [ 96.242248][ T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 96.284895][ T7] usb 3-1: device descriptor read/8, error -71 [ 96.566809][ T7] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 96.602879][ T7] usb 3-1: device descriptor read/8, error -71 [ 96.732436][ T7] usb usb3-port1: unable to enumerate USB device [ 96.907667][ T4577] syz.0.75 uses obsolete (PF_INET,SOCK_PACKET) [ 97.017174][ T4312] gspca_cpia1: usb_control_msg 03, error -110 [ 97.051003][ T4312] gspca_cpia1: usb_control_msg 01, error -32 [ 97.072652][ T4312] gspca_cpia1: usb_control_msg 01, error -32 [ 97.120178][ T4312] gspca_cpia1: usb_control_msg 01, error -32 [ 97.148231][ T4579] capability: warning: `syz.1.76' uses deprecated v2 capabilities in a way that may be insecure [ 97.162948][ T4312] gspca_cpia1: usb_control_msg 01, error -32 [ 97.186093][ T4312] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 97.450736][ T4583] device syzkaller0 entered promiscuous mode [ 97.624812][ T26] audit: type=1326 audit(1774110175.622:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ed19c799 code=0x7ffc0000 [ 97.689588][ T26] audit: type=1326 audit(1774110175.622:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f76ed19c799 code=0x7ffc0000 [ 97.790216][ T26] audit: type=1326 audit(1774110175.682:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ed19c799 code=0x7ffc0000 [ 97.930308][ T26] audit: type=1326 audit(1774110175.682:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ed19c799 code=0x7ffc0000 [ 98.054280][ T4311] usb 5-1: USB disconnect, device number 3 [ 98.090017][ T26] audit: type=1326 audit(1774110175.772:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f76ed19c799 code=0x7ffc0000 [ 98.123325][ T4604] netlink: 168 bytes leftover after parsing attributes in process `syz.2.81'. [ 98.191941][ T26] audit: type=1326 audit(1774110175.772:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ed19c799 code=0x7ffc0000 [ 98.232332][ T7] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 98.290129][ T26] audit: type=1326 audit(1774110175.772:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ed19c799 code=0x7ffc0000 [ 98.363346][ T26] audit: type=1326 audit(1774110175.782:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f76ed19c799 code=0x7ffc0000 [ 98.433850][ T26] audit: type=1326 audit(1774110175.782:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ed19c799 code=0x7ffc0000 [ 98.498796][ T26] audit: type=1326 audit(1774110175.782:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ed19c799 code=0x7ffc0000 [ 98.663724][ T4614] input: syz0 as /devices/virtual/input/input8 [ 100.694767][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 100.733239][ T7] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 100.744877][ T7] usb 2-1: can't read configurations, error -71 [ 101.231723][ T4601] tipc: Enabling of bearer rejected, failed to enable media [ 101.272356][ T4634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.356018][ T4632] netlink: 10 bytes leftover after parsing attributes in process `syz.1.88'. [ 101.370513][ T4635] netlink: 40 bytes leftover after parsing attributes in process `syz.1.88'. [ 101.682420][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 101.750990][ T4653] netlink: 40 bytes leftover after parsing attributes in process `syz.4.91'. [ 101.842135][ T7] usb 2-1: device descriptor read/64, error -71 [ 101.912424][ T4315] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 101.962305][ T7] usb usb2-port1: attempt power cycle [ 102.115427][ T4315] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 102.131435][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.149760][ T4315] usb 4-1: config 0 descriptor?? [ 102.158553][ T4315] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 102.372437][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 102.412355][ T14] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 102.420780][ T7] usb 2-1: device descriptor read/8, error -71 [ 102.559117][ T4315] gspca_cpia1: usb_control_msg 03, error -32 [ 102.571398][ T4647] netlink: 224 bytes leftover after parsing attributes in process `syz.3.92'. [ 102.602259][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 102.611742][ T14] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 102.646696][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.679417][ T14] usb 3-1: Product: syz [ 102.692229][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 102.700071][ T14] usb 3-1: Manufacturer: syz [ 102.717355][ T14] usb 3-1: SerialNumber: syz [ 102.734072][ T7] usb 2-1: device descriptor read/8, error -71 [ 102.761068][ T14] usb 3-1: config 0 descriptor?? [ 102.803856][ T14] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 102.872469][ T7] usb usb2-port1: unable to enumerate USB device [ 103.092502][ T4317] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 103.223048][ T4665] device syzkaller0 entered promiscuous mode [ 103.303995][ T4317] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 103.314613][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.331724][ T4317] usb 1-1: config 0 descriptor?? [ 103.568587][ T4317] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 103.590193][ T4317] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 103.599385][ T4317] [drm:udl_init] *ERROR* Selecting channel failed [ 103.623279][ T4317] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 103.631168][ T4317] [drm] Initialized udl on minor 2 [ 103.639903][ T4317] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 103.648632][ T4317] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 103.656384][ T4315] gspca_cpia1: usb_control_msg 03, error -110 [ 103.668072][ T4315] gspca_cpia1: usb_control_msg 01, error -32 [ 103.695190][ T4317] usb 1-1: USB disconnect, device number 5 [ 103.701812][ T4315] gspca_cpia1: usb_control_msg 01, error -32 [ 103.714544][ T4312] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 103.725419][ T4315] gspca_cpia1: usb_control_msg 01, error -32 [ 103.733428][ T4312] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 103.741547][ T4315] gspca_cpia1: usb_control_msg 01, error -32 [ 103.748311][ T4312] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 103.756037][ T4315] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 104.614600][ T14] gspca_sonixj: reg_r err -32 [ 104.646634][ T129] usb 4-1: USB disconnect, device number 8 [ 104.686846][ T14] sonixj: probe of 3-1:0.0 failed with error -32 [ 105.134537][ T129] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 105.356471][ T129] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 105.366387][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.377149][ T129] usb 4-1: config 0 descriptor?? [ 105.598594][ T129] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 105.607495][ T129] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 105.636542][ T4677] tipc: Enabling of bearer rejected, failed to enable media [ 105.679902][ T4312] usb 3-1: USB disconnect, device number 12 [ 105.799603][ T129] [drm:udl_init] *ERROR* Selecting channel failed [ 105.840747][ T129] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 105.878250][ T129] [drm] Initialized udl on minor 2 [ 105.886873][ T129] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 105.909194][ T129] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 105.937680][ T129] usb 4-1: USB disconnect, device number 9 [ 105.952778][ T7] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 105.975390][ T7] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 105.991339][ T7] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 106.281335][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 106.281345][ T26] audit: type=1326 audit(1774110184.272:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4703 comm="syz.4.108" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1578b9c799 code=0x0 [ 106.702125][ T4312] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 106.797114][ T4715] netlink: 24 bytes leftover after parsing attributes in process `syz.2.111'. [ 106.892273][ T4312] usb 4-1: Using ep0 maxpacket: 8 [ 106.901133][ T4312] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 106.922621][ T4312] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 106.932972][ T4312] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.944438][ T4312] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.958478][ T4312] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.967875][ T4312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.202941][ T4312] usb 4-1: GET_CAPABILITIES returned 0 [ 107.208508][ T4312] usbtmc 4-1:16.0: can't read capabilities [ 107.319202][ T4722] device syzkaller0 entered promiscuous mode [ 107.476943][ T129] usb 4-1: USB disconnect, device number 10 [ 107.544445][ T4312] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 107.735509][ T4312] usb 3-1: Using ep0 maxpacket: 8 [ 107.753146][ T4312] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 107.762528][ T4312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.770911][ T4312] usb 3-1: Product: syz [ 107.776614][ T4312] usb 3-1: Manufacturer: syz [ 107.781376][ T4312] usb 3-1: SerialNumber: syz [ 107.788857][ T4312] usb 3-1: config 0 descriptor?? [ 107.796848][ T4312] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 109.331594][ T4741] tipc: Enabling of bearer rejected, failed to enable media [ 109.636934][ T4312] gspca_sonixj: reg_r err -32 [ 109.693026][ T4312] sonixj: probe of 3-1:0.0 failed with error -32 [ 110.167925][ T4767] netlink: 24 bytes leftover after parsing attributes in process `syz.3.121'. [ 110.677205][ T4773] device syzkaller0 entered promiscuous mode [ 110.716313][ T4312] usb 3-1: USB disconnect, device number 13 [ 111.157059][ T4782] input: syz1 as /devices/virtual/input/input10 [ 111.282848][ T4780] device syzkaller0 entered promiscuous mode [ 113.999863][ T4800] tipc: Enabled bearer , priority 0 [ 114.011787][ T4803] device syzkaller0 entered promiscuous mode [ 114.259710][ T4803] tipc: Resetting bearer [ 114.329445][ T4803] tipc: Disabling bearer [ 114.532201][ T14] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 114.582154][ T7] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 114.694949][ T4837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.139'. [ 114.732991][ T14] usb 2-1: no configurations [ 114.744398][ T14] usb 2-1: can't read configurations, error -22 [ 114.772830][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 114.778890][ T4839] input: syz1 as /devices/virtual/input/input11 [ 114.792137][ T7] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 114.803094][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.813968][ T7] usb 3-1: Product: syz [ 114.818424][ T7] usb 3-1: Manufacturer: syz [ 114.826111][ T7] usb 3-1: SerialNumber: syz [ 114.840744][ T7] usb 3-1: config 0 descriptor?? [ 114.852628][ T7] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 114.902157][ T14] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 115.102770][ T14] usb 2-1: no configurations [ 115.112259][ T14] usb 2-1: can't read configurations, error -22 [ 115.137000][ T14] usb usb2-port1: attempt power cycle [ 115.572207][ T14] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 115.622959][ T4848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.141'. [ 115.634453][ T14] usb 2-1: no configurations [ 115.639163][ T14] usb 2-1: can't read configurations, error -22 [ 115.812228][ T14] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 115.874115][ T14] usb 2-1: no configurations [ 115.878972][ T14] usb 2-1: can't read configurations, error -22 [ 115.919422][ T14] usb usb2-port1: unable to enumerate USB device [ 116.172308][ T4315] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 116.330509][ T4853] device syzkaller0 entered promiscuous mode [ 116.392169][ T4315] usb 5-1: Using ep0 maxpacket: 16 [ 116.403329][ T4315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.438910][ T4315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.462577][ T4315] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 116.483622][ T4315] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 116.504706][ T4315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.562963][ T4315] usb 5-1: config 0 descriptor?? [ 116.667212][ T7] gspca_sonixj: reg_r err -32 [ 116.736326][ T7] sonixj: probe of 3-1:0.0 failed with error -32 [ 117.013762][ T4315] usbhid 5-1:0.0: can't add hid device: -71 [ 117.028610][ T4315] usbhid: probe of 5-1:0.0 failed with error -71 [ 117.040733][ T4315] usb 5-1: USB disconnect, device number 4 [ 117.727530][ T7] usb 3-1: USB disconnect, device number 14 [ 117.759200][ T4868] Zero length message leads to an empty skb [ 118.502188][ T7] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 118.716791][ T7] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 118.737265][ T7] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 118.778661][ T7] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 118.796451][ T7] usb 3-1: config 220 has no interface number 2 [ 118.807975][ T7] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 118.821909][ T7] usb 3-1: config 220 interface 0 has no altsetting 0 [ 118.834350][ T7] usb 3-1: config 220 interface 76 has no altsetting 0 [ 118.841412][ T7] usb 3-1: config 220 interface 1 has no altsetting 0 [ 118.857014][ T7] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 118.870703][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.879490][ T7] usb 3-1: Product: syz [ 118.883998][ T7] usb 3-1: Manufacturer: syz [ 118.888842][ T7] usb 3-1: SerialNumber: syz [ 119.801228][ T4864] device ipip0 entered promiscuous mode [ 119.809376][ T4870] netlink: 40 bytes leftover after parsing attributes in process `syz.1.146'. [ 119.821616][ T4874] netlink: 'syz.2.150': attribute type 10 has an invalid length. [ 119.880986][ T4874] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 120.028358][ T4877] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.048321][ T4871] device syzkaller0 entered promiscuous mode [ 120.056666][ T4882] netlink: 48 bytes leftover after parsing attributes in process `syz.2.150'. [ 120.067422][ T4875] tipc: Enabled bearer , priority 0 [ 120.078883][ T4866] tipc: Resetting bearer [ 120.087164][ T7] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 120.093744][ T7] usb 3-1: No valid video chain found. [ 120.099780][ T7] usb 3-1: selecting invalid altsetting 0 [ 120.124352][ T7] usb 3-1: selecting invalid altsetting 0 [ 120.131150][ T7] usbtest: probe of 3-1:220.1 failed with error -22 [ 120.158745][ T7] usb 3-1: USB disconnect, device number 15 [ 120.234992][ T4866] tipc: Disabling bearer [ 120.251126][ T4896] netlink: 'syz.3.154': attribute type 10 has an invalid length. [ 120.291506][ T4896] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 120.329433][ T4899] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.343681][ T4903] netlink: 48 bytes leftover after parsing attributes in process `syz.3.154'. [ 120.542274][ T4313] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 120.742178][ T14] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 120.749058][ T4313] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 120.763696][ T4313] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 120.778718][ T4313] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 120.791517][ T4313] usb 4-1: config 220 has no interface number 2 [ 120.804810][ T4313] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 120.820927][ T4313] usb 4-1: config 220 interface 0 has no altsetting 0 [ 120.830448][ T4313] usb 4-1: config 220 interface 76 has no altsetting 0 [ 120.843135][ T4313] usb 4-1: config 220 interface 1 has no altsetting 0 [ 120.871069][ T4313] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 120.887985][ T4313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.910521][ T4313] usb 4-1: Product: syz [ 120.925517][ T4313] usb 4-1: Manufacturer: syz [ 120.930151][ T4313] usb 4-1: SerialNumber: syz [ 120.954149][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.972202][ T14] usb 1-1: config 0 has no interfaces? [ 120.993049][ T14] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 121.013341][ T7] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 121.021857][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.042204][ T14] usb 1-1: Product: syz [ 121.047076][ T14] usb 1-1: Manufacturer: syz [ 121.051843][ T14] usb 1-1: SerialNumber: syz [ 121.077021][ T14] usb 1-1: config 0 descriptor?? [ 121.168031][ T4313] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 121.181836][ T4313] usb 4-1: No valid video chain found. [ 121.194615][ T4313] usb 4-1: selecting invalid altsetting 0 [ 121.212178][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 121.238111][ T4313] usb 4-1: selecting invalid altsetting 0 [ 121.250165][ T4313] usbtest: probe of 4-1:220.1 failed with error -22 [ 121.261799][ T7] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 121.276046][ T4313] usb 4-1: USB disconnect, device number 11 [ 121.280540][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.306527][ T7] usb 3-1: Product: syz [ 121.310865][ T7] usb 3-1: Manufacturer: syz [ 121.319626][ T7] usb 3-1: SerialNumber: syz [ 121.331128][ T7] usb 3-1: config 0 descriptor?? [ 121.360332][ T7] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 121.637099][ T4916] syz.4.159 (4916): drop_caches: 2 [ 121.662221][ T4315] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 121.872312][ T4315] usb 2-1: Using ep0 maxpacket: 8 [ 121.879471][ T4315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.911340][ T4315] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 121.949064][ T4315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.976849][ T4315] usb 2-1: config 0 descriptor?? [ 122.033540][ T4928] device syzkaller0 entered promiscuous mode [ 122.191486][ T4315] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 122.707659][ T4312] usb 2-1: USB disconnect, device number 12 [ 123.170602][ T7] gspca_sonixj: reg_r err -32 [ 123.235847][ T7] sonixj: probe of 3-1:0.0 failed with error -32 [ 123.552596][ T4315] usb 1-1: USB disconnect, device number 6 [ 124.261295][ T14] usb 3-1: USB disconnect, device number 16 [ 124.467148][ T4958] input: syz0 as /devices/virtual/input/input12 [ 125.202360][ T4312] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 125.404066][ T4312] usb 5-1: Using ep0 maxpacket: 32 [ 125.411956][ T4312] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 125.430849][ T4312] usb 5-1: config 0 has no interface number 0 [ 125.444181][ T4312] usb 5-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 125.462077][ T4312] usb 5-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 125.483269][ T4312] usb 5-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xF2, skipping [ 125.502095][ T4312] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 125.527199][ T4312] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 125.548361][ T4312] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.573982][ T4312] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 125.592086][ T4312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.620769][ T4312] usb 5-1: Product: syz [ 125.625178][ T4312] usb 5-1: Manufacturer: syz [ 125.629901][ T4312] usb 5-1: SerialNumber: syz [ 125.647185][ T4312] usb 5-1: config 0 descriptor?? [ 125.653951][ T4965] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 125.661810][ T4965] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 125.670493][ T4312] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 126.012256][ T4955] tipc: Enabling of bearer rejected, failed to enable media [ 126.034955][ T4331] usb 5-1: USB disconnect, device number 5 [ 126.128203][ T4970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.199047][ T4970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.376968][ T4970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.385091][ T4970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.632303][ T4331] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 126.832290][ T4331] usb 3-1: Using ep0 maxpacket: 16 [ 126.866480][ T4331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 126.915489][ T4331] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 126.931918][ T4331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.957508][ T4331] usb 3-1: Product: syz [ 126.966159][ T4331] usb 3-1: Manufacturer: syz [ 126.977933][ T4331] usb 3-1: SerialNumber: syz [ 126.982869][ T4311] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 127.001975][ T4331] usb 3-1: config 0 descriptor?? [ 127.025636][ T4331] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 127.044796][ T4331] em28xx 3-1:0.0: DVB interface 0 found: isoc [ 127.152637][ T7] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 127.176101][ T4313] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 127.192162][ T4311] usb 5-1: Using ep0 maxpacket: 8 [ 127.198825][ T4311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.235349][ T4311] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 127.257577][ T4311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.284637][ T4311] usb 5-1: config 0 descriptor?? [ 127.364055][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.372260][ T4313] usb 2-1: Using ep0 maxpacket: 8 [ 127.384856][ T7] usb 4-1: config 0 has no interfaces? [ 127.397233][ T4313] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 127.399279][ T7] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 127.430850][ T4313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.453370][ T4313] usb 2-1: Product: syz [ 127.455732][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.470585][ T4313] usb 2-1: Manufacturer: syz [ 127.485707][ T7] usb 4-1: Product: syz [ 127.490095][ T4313] usb 2-1: SerialNumber: syz [ 127.496761][ T7] usb 4-1: Manufacturer: syz [ 127.507404][ T4311] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 127.518326][ T7] usb 4-1: SerialNumber: syz [ 127.528502][ T4313] usb 2-1: config 0 descriptor?? [ 127.544221][ T7] usb 4-1: config 0 descriptor?? [ 127.580651][ T4313] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 128.222601][ T4331] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 128.316871][ T4331] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 128.341928][ T4331] em28xx 3-1:0.0: board has no eeprom [ 128.462424][ T4331] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 128.470333][ T4331] em28xx 3-1:0.0: dvb set to isoc mode. [ 128.494187][ T4311] em28xx 3-1:0.0: Binding DVB extension [ 128.706047][ T4311] em28xx 3-1:0.0: Registering input extension [ 128.822187][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 129.007231][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 129.022908][ T7] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 129.031555][ T7] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 129.047103][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.057890][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 129.067282][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 129.078443][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 129.091656][ T7] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 129.099629][ T4315] usb 3-1: USB disconnect, device number 17 [ 129.100827][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.118858][ T7] usb 1-1: config 0 descriptor?? [ 129.138060][ T4315] em28xx 3-1:0.0: Disconnecting em28xx [ 129.153446][ T4315] em28xx 3-1:0.0: Closing input extension [ 129.221297][ T4315] em28xx 3-1:0.0: Freeing device [ 129.392194][ T4313] gspca_sonixj: reg_r err -32 [ 129.452334][ T4313] sonixj: probe of 2-1:0.0 failed with error -32 [ 129.727535][ T7] usb 5-1: USB disconnect, device number 6 [ 129.849033][ T5011] device syzkaller0 entered promiscuous mode [ 129.887790][ T14] usb 1-1: USB disconnect, device number 7 [ 129.911096][ T4311] usb 4-1: USB disconnect, device number 12 [ 130.493198][ T4315] usb 2-1: USB disconnect, device number 13 [ 131.022171][ T4313] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 131.214689][ T4313] usb 2-1: Using ep0 maxpacket: 32 [ 131.221942][ T4313] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 131.231760][ T4313] usb 2-1: config 0 has no interface number 0 [ 131.238171][ T4313] usb 2-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 131.274444][ T4313] usb 2-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 131.287935][ T4313] usb 2-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xF2, skipping [ 131.301727][ T4313] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 131.318033][ T4313] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 131.331959][ T4313] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.348653][ T4313] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 131.358350][ T4313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.386121][ T4313] usb 2-1: Product: syz [ 131.390753][ T4313] usb 2-1: Manufacturer: syz [ 131.400274][ T4313] usb 2-1: SerialNumber: syz [ 131.408868][ T4313] usb 2-1: config 0 descriptor?? [ 131.420946][ T5027] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 131.429858][ T5027] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 131.445720][ T4313] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 132.447331][ T5034] tipc: Enabling of bearer rejected, failed to enable media [ 132.474562][ T14] usb 2-1: USB disconnect, device number 14 [ 132.679685][ T5046] tipc: Enabled bearer , priority 0 [ 132.715810][ T5046] device syzkaller0 entered promiscuous mode [ 132.780782][ T5046] tipc: Resetting bearer [ 132.823044][ T5045] tipc: Resetting bearer [ 132.885704][ T5045] tipc: Disabling bearer [ 133.015371][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.021886][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.349916][ T5074] device syzkaller0 entered promiscuous mode [ 133.842159][ T14] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 134.044188][ T14] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 134.068994][ T14] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.082889][ T14] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.098284][ T5087] device syzkaller0 entered promiscuous mode [ 134.116847][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 134.130253][ T14] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.143034][ T14] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.158627][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 134.167600][ T14] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.180674][ T14] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.196265][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 134.207811][ T5087] tipc: Started in network mode [ 134.220043][ T5087] tipc: Node identity 92c4fc26aa59, cluster identity 4711 [ 134.235255][ T14] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.252951][ T5087] tipc: Enabled bearer , priority 0 [ 134.259468][ T14] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.271774][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 134.280780][ T14] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.291864][ T14] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.305133][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 134.319677][ T5086] tipc: Resetting bearer [ 134.327866][ T14] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.340301][ T14] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.358239][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 134.381346][ T14] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.404916][ T14] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.418748][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 134.453462][ T14] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.472220][ T14] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.523777][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 134.556899][ T14] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 134.581490][ T14] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 134.591610][ T14] usb 1-1: Product: syz [ 134.600468][ T14] usb 1-1: Manufacturer: syz [ 134.620196][ T14] usb 1-1: SerialNumber: syz [ 134.637955][ T5086] tipc: Disabling bearer [ 134.655912][ T14] usb 1-1: config 0 descriptor?? [ 134.721933][ T14] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 135.040502][ T7] usb 1-1: USB disconnect, device number 8 [ 135.069811][ T7] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 135.198580][ T5103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.210'. [ 135.212199][ T5103] bridge: RTM_NEWNEIGH with invalid ether address [ 135.302537][ T26] audit: type=1400 audit(1774110213.292:23): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5098 comm="syz.3.208" [ 136.021790][ T5119] fuse: root generation should be zero [ 136.370328][ T5123] tipc: Started in network mode [ 136.385813][ T5123] tipc: Node identity 080211000001, cluster identity 4711 [ 136.402767][ T5123] tipc: Enabled bearer , priority 0 [ 136.551954][ T5128] netlink: 'syz.4.219': attribute type 10 has an invalid length. [ 136.686285][ T5128] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 136.880032][ T5131] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.144963][ T4313] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 137.334387][ T4313] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 137.342932][ T4312] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 137.359795][ T4313] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 137.370258][ T4313] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 137.391149][ T4313] usb 5-1: config 220 has no interface number 2 [ 137.398653][ T4313] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 137.421089][ T4313] usb 5-1: config 220 interface 0 has no altsetting 0 [ 137.431641][ T4313] usb 5-1: config 220 interface 76 has no altsetting 0 [ 137.441985][ T4313] usb 5-1: config 220 interface 1 has no altsetting 0 [ 137.454952][ T4317] tipc: Node number set to 134418688 [ 137.471651][ T4313] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 137.481880][ T4313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.496844][ T4313] usb 5-1: Product: syz [ 137.501668][ T4313] usb 5-1: Manufacturer: syz [ 137.507859][ T4313] usb 5-1: SerialNumber: syz [ 137.534086][ T4312] usb 2-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 137.544874][ T4312] usb 2-1: config 0 interface 0 has no altsetting 0 [ 137.556061][ T4312] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 137.565960][ T4312] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 137.575742][ T4312] usb 2-1: Product: syz [ 137.580262][ T4312] usb 2-1: Manufacturer: syz [ 137.590908][ T4312] usb 2-1: SerialNumber: syz [ 137.598458][ T4312] usb 2-1: config 0 descriptor?? [ 137.609321][ T5140] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 137.647023][ T4312] usb 2-1: selecting invalid altsetting 0 [ 137.730189][ T4313] usb 5-1: selecting invalid altsetting 0 [ 137.774664][ T4313] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 137.800027][ T4313] usb 5-1: No valid video chain found. [ 137.865221][ T4313] usb 5-1: selecting invalid altsetting 0 [ 137.924030][ T4313] usbtest: probe of 5-1:220.1 failed with error -22 [ 137.970044][ T4313] usb 5-1: USB disconnect, device number 7 [ 138.050917][ T4317] usb 2-1: USB disconnect, device number 15 [ 138.212280][ T14] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 138.422184][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 138.441185][ T14] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 138.462291][ T14] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 138.515318][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.539630][ T14] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 138.569160][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 138.620702][ T14] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 138.662388][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 138.707372][ T14] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 138.741029][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.785915][ T14] usb 1-1: config 0 descriptor?? [ 139.042346][ T4331] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 139.235003][ T4331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.258454][ T4331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.290165][ T4331] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 139.323472][ T4331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.352836][ T4331] usb 3-1: config 0 descriptor?? [ 139.571123][ T4317] usb 1-1: USB disconnect, device number 9 [ 139.789167][ T4331] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 139.802260][ T4331] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 139.837337][ T4331] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 139.858578][ T4331] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 139.878743][ T4331] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 140.190073][ T4331] hid-led 0003:27B8:01ED.0002: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 140.278629][ T4331] hid-led 0003:27B8:01ED.0002: ThingM blink(1) initialized [ 140.480940][ T4315] usb 3-1: USB disconnect, device number 18 [ 140.673837][ T5176] fido_id[5176]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 140.832371][ T4311] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 140.882215][ T4331] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 141.022274][ T4311] usb 1-1: Using ep0 maxpacket: 32 [ 141.030381][ T4311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 141.049841][ T4311] usb 1-1: config 9 has an invalid interface number: 206 but max is 0 [ 141.064600][ T4311] usb 1-1: config 9 has no interface number 0 [ 141.082151][ T4331] usb 2-1: Using ep0 maxpacket: 32 [ 141.089266][ T4331] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 141.104533][ T4311] usb 1-1: config 9 interface 206 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 141.117922][ T4331] usb 2-1: config 0 has no interface number 0 [ 141.135824][ T4331] usb 2-1: config 0 interface 255 has no altsetting 0 [ 141.145930][ T4311] usb 1-1: config 9 interface 206 has no altsetting 0 [ 141.174871][ T4331] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 141.187856][ T4311] usb 1-1: New USB device found, idVendor=128d, idProduct=0001, bcdDevice=6c.44 [ 141.216085][ T4331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.225109][ T4311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.261019][ T4331] usb 2-1: Product: syz [ 141.275065][ T4311] usb 1-1: Product: syz [ 141.281688][ T4331] usb 2-1: Manufacturer: syz [ 141.288027][ T4311] usb 1-1: Manufacturer: syz [ 141.306659][ T4331] usb 2-1: SerialNumber: syz [ 141.315986][ T4311] usb 1-1: SerialNumber: syz [ 141.328787][ T4331] usb 2-1: config 0 descriptor?? [ 141.388592][ T4331] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 141.427874][ T4331] dvb-usb: bulk message failed: -22 (4/0) [ 141.459331][ T4331] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 141.508925][ T4331] dvb-usb: bulk message failed: -22 (5/0) [ 141.538218][ T4331] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 141.586087][ T4311] ftdi_sio 1-1:9.206: FTDI USB Serial Device converter detected [ 141.627960][ T4311] ftdi_sio ttyUSB0: unknown device type: 0x6c44 [ 141.635230][ T4331] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 141.673159][ T4311] usb 1-1: USB disconnect, device number 10 [ 141.679819][ T4331] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 141.694021][ T4311] ftdi_sio 1-1:9.206: device disconnected [ 141.702713][ T4331] usb 2-1: media controller created [ 141.795201][ T4331] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.853205][ T4331] ttusb2: set interface to alts=3 failed [ 142.017980][ T4331] DVB: Unable to find symbol tda10086_attach() [ 142.026205][ T4331] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 142.055312][ T4331] dvb-usb: bulk message failed: -22 (4/0) [ 142.075513][ T4331] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 142.122278][ T4331] dvb-usb: bulk message failed: -22 (5/0) [ 142.142341][ T4331] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 142.142455][ T4331] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 142.174027][ T4331] usb 2-1: USB disconnect, device number 16 [ 142.242222][ T4315] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 142.303463][ T5205] 8021q: VLANs not supported on vcan0 [ 142.328130][ T4331] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 142.422261][ T4315] usb 4-1: Using ep0 maxpacket: 32 [ 142.429526][ T4315] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 142.453896][ T4315] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 142.484057][ T4315] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.506961][ T4315] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 142.507019][ T4315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 142.507041][ T4315] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 142.507065][ T4315] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 142.507104][ T4315] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 142.507129][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.516936][ T4315] usb 4-1: config 0 descriptor?? [ 142.843082][ T5216] netlink: 28 bytes leftover after parsing attributes in process `syz.2.250'. [ 142.857728][ T5214] netlink: 'syz.0.249': attribute type 10 has an invalid length. [ 142.927683][ T5214] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 143.001092][ T5223] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.028486][ T5214] netlink: 48 bytes leftover after parsing attributes in process `syz.0.249'. [ 143.273851][ T5240] netlink: 10 bytes leftover after parsing attributes in process `syz.2.253'. [ 143.322231][ T4311] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 143.375374][ T4313] usb 4-1: USB disconnect, device number 13 [ 143.382334][ T4315] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 143.524250][ T4311] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 143.542205][ T4311] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 143.558147][ T4311] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 143.575271][ T4315] usb 5-1: Using ep0 maxpacket: 32 [ 143.599283][ T4311] usb 1-1: config 220 has no interface number 2 [ 143.610209][ T4315] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 143.616290][ T4311] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 143.632495][ T4315] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 143.644708][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 143.648421][ T4311] usb 1-1: config 220 interface 0 has no altsetting 0 [ 143.665007][ T5248] fuse: Bad value for 'fd' [ 143.669837][ T4311] usb 1-1: config 220 interface 76 has no altsetting 0 [ 143.678193][ T4311] usb 1-1: config 220 interface 1 has no altsetting 0 [ 143.678202][ T4315] usb 5-1: Product: syz [ 143.688465][ T4311] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 143.703290][ T4311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.711693][ T4311] usb 1-1: Product: syz [ 143.717370][ T4315] usb 5-1: Manufacturer: syz [ 143.717537][ T4311] usb 1-1: Manufacturer: syz [ 143.722286][ T4315] usb 5-1: SerialNumber: syz [ 143.727758][ T4311] usb 1-1: SerialNumber: syz [ 143.739399][ T4315] usb 5-1: config 0 descriptor?? [ 143.752368][ T5232] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 143.779423][ T5247] 8021q: VLANs not supported on vcan0 [ 143.959985][ T4311] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 143.979692][ T4311] usb 1-1: No valid video chain found. [ 143.999215][ T4311] usb 1-1: selecting invalid altsetting 0 [ 144.042370][ T4315] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 144.043908][ T4311] usb 1-1: selecting invalid altsetting 0 [ 144.074742][ T4311] usbtest: probe of 1-1:220.1 failed with error -22 [ 144.144278][ T4311] usb 1-1: USB disconnect, device number 11 [ 144.246534][ T4315] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 144.268822][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.278371][ T4315] usb 3-1: Product: syz [ 144.283900][ T4315] usb 3-1: Manufacturer: syz [ 144.289130][ T4315] usb 3-1: SerialNumber: syz [ 144.292945][ T5257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.260'. [ 144.302945][ T4315] usb 3-1: config 0 descriptor?? [ 144.312800][ T4312] usb 5-1: USB disconnect, device number 8 [ 144.319544][ T5257] bridge: RTM_NEWNEIGH with invalid ether address [ 144.326429][ T4315] hub 3-1:0.0: bad descriptor, ignoring hub [ 144.350163][ T4315] hub: probe of 3-1:0.0 failed with error -5 [ 144.514128][ T4315] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 144.543713][ T4315] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 144.559485][ T4315] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 144.607164][ T4315] usb 3-1: media controller created [ 144.630977][ T4315] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 144.882000][ T4315] DVB: Unable to find symbol dib7000p_attach() [ 144.910205][ T4315] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 144.952180][ T4312] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 145.144380][ T4312] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.158406][ T4315] rc_core: IR keymap rc-dib0700-rc5 not found [ 145.170606][ T4315] Registered IR keymap rc-empty [ 145.222862][ T4312] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.231990][ T4315] dvb-usb: could not initialize remote control. [ 145.240060][ T4315] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 145.252232][ T4312] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 145.263615][ T4312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 145.271993][ T4312] usb 1-1: SerialNumber: syz [ 145.505465][ T4312] usb 1-1: 0:2 : does not exist [ 145.639005][ T4312] usb 1-1: USB disconnect, device number 12 [ 146.402793][ T4312] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 146.553315][ T5289] device syzkaller0 entered promiscuous mode [ 146.591567][ T4315] usb 3-1: USB disconnect, device number 19 [ 146.611368][ T4312] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 146.641667][ T4312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.683506][ T4312] usb 2-1: Product: syz [ 146.708577][ T4312] usb 2-1: Manufacturer: syz [ 146.725829][ T4315] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 146.737268][ T4312] usb 2-1: SerialNumber: syz [ 147.102212][ T4317] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 147.180992][ T4312] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 147.272241][ T4313] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 147.292176][ T4317] usb 1-1: Using ep0 maxpacket: 32 [ 147.298793][ T4317] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 147.307864][ T4317] usb 1-1: config 0 has no interface number 0 [ 147.314138][ T4317] usb 1-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 147.324988][ T4317] usb 1-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 147.336271][ T4317] usb 1-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xF2, skipping [ 147.347101][ T4315] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 147.355313][ T4317] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 147.366903][ T4317] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 147.377373][ T4317] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.394994][ T4317] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 147.404612][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.413282][ T4317] usb 1-1: Product: syz [ 147.417511][ T4317] usb 1-1: Manufacturer: syz [ 147.422589][ T4317] usb 1-1: SerialNumber: syz [ 147.431202][ T4317] usb 1-1: config 0 descriptor?? [ 147.437360][ T5293] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 147.445260][ T5293] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 147.455250][ T4317] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 147.465050][ T4313] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.478068][ T4313] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 147.490415][ T4313] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 147.500378][ T4313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.508834][ T4313] usb 4-1: Product: syz [ 147.513300][ T4313] usb 4-1: Manufacturer: syz [ 147.518036][ T4313] usb 4-1: SerialNumber: syz [ 147.525672][ T4313] usb 4-1: config 0 descriptor?? [ 147.562151][ T4315] usb 3-1: Using ep0 maxpacket: 32 [ 147.568805][ T4315] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 147.580948][ T4315] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 147.590315][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 147.598690][ T4315] usb 3-1: Product: syz [ 147.602941][ T4315] usb 3-1: Manufacturer: syz [ 147.608004][ T4315] usb 3-1: SerialNumber: syz [ 147.615428][ T4315] usb 3-1: config 0 descriptor?? [ 147.620998][ T5295] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 147.671043][ T4315] usb 1-1: USB disconnect, device number 13 [ 148.622317][ T4315] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 148.637279][ T4312] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 148.662791][ T4312] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 148.681990][ T4312] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 148.695611][ T4312] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 148.709831][ T4312] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 148.723270][ T4312] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 148.738330][ T4312] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 148.754642][ T4312] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 148.767740][ T4312] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 148.780175][ T4312] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 148.793901][ T4312] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 148.821499][ T4317] usb 3-1: USB disconnect, device number 20 [ 148.828717][ T4315] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 148.839491][ T4312] lan78xx: probe of 2-1:1.0 failed with error -71 [ 148.853796][ T4315] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.884878][ T4312] usb 2-1: USB disconnect, device number 17 [ 148.890933][ T4315] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.918004][ T4315] usb 5-1: config 0 interface 0 has no altsetting 0 [ 148.926752][ T4315] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.936409][ T4315] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.948305][ T4315] usb 5-1: config 0 interface 0 has no altsetting 0 [ 148.963411][ T4315] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.973014][ T4315] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.984819][ T4315] usb 5-1: config 0 interface 0 has no altsetting 0 [ 148.994411][ T4315] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.004447][ T4315] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 149.017439][ T4315] usb 5-1: config 0 interface 0 has no altsetting 0 [ 149.025976][ T4315] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.035331][ T4315] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 149.047358][ T4315] usb 5-1: config 0 interface 0 has no altsetting 0 [ 149.056456][ T4315] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.066144][ T4315] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 149.078414][ T4315] usb 5-1: config 0 interface 0 has no altsetting 0 [ 149.087271][ T4315] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.097435][ T4315] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 149.109210][ T4315] usb 5-1: config 0 interface 0 has no altsetting 0 [ 149.117977][ T4315] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.127936][ T4315] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 149.139975][ T4315] usb 5-1: config 0 interface 0 has no altsetting 0 [ 149.150137][ T4315] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 149.159362][ T4315] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 149.178757][ T4315] usb 5-1: Product: syz [ 149.183127][ T4315] usb 5-1: Manufacturer: syz [ 149.187758][ T4315] usb 5-1: SerialNumber: syz [ 149.200212][ T4315] usb 5-1: config 0 descriptor?? [ 149.249736][ T4315] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 149.444980][ T4315] usb 5-1: USB disconnect, device number 9 [ 149.459938][ T4315] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 149.522154][ T4331] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 149.692196][ T4331] usb 2-1: device descriptor read/64, error -71 [ 149.694069][ T5324] tipc: Enabled bearer , priority 0 [ 149.717486][ T5324] device syzkaller0 entered promiscuous mode [ 149.736010][ T5324] tipc: Resetting bearer [ 149.982230][ T4331] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 150.115210][ T4315] usb 4-1: USB disconnect, device number 14 [ 150.162146][ T4331] usb 2-1: device descriptor read/64, error -71 [ 150.284309][ T4331] usb usb2-port1: attempt power cycle [ 150.362199][ T4317] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 150.481563][ T5344] input: syz1 as /devices/virtual/input/input21 [ 150.582166][ T4317] usb 3-1: Using ep0 maxpacket: 32 [ 150.589584][ T4317] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 150.607243][ T4317] usb 3-1: config 0 has no interface number 0 [ 150.618428][ T4317] usb 3-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 150.634953][ T4317] usb 3-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 150.649497][ T4317] usb 3-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xF2, skipping [ 150.664888][ T4317] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 150.681996][ T4317] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 150.692547][ T4331] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 150.709161][ T4317] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.731482][ T4317] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 150.742355][ T4331] usb 2-1: device descriptor read/8, error -71 [ 150.751735][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.765502][ T4317] usb 3-1: Product: syz [ 150.772100][ T4317] usb 3-1: Manufacturer: syz [ 150.778939][ T4317] usb 3-1: SerialNumber: syz [ 150.798466][ T4317] usb 3-1: config 0 descriptor?? [ 150.805966][ T4315] tipc: Node number set to 949877798 [ 150.811632][ T5335] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 150.822591][ T5335] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 150.836814][ T4317] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 150.854613][ T7] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 151.012310][ T4331] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 151.045504][ T7] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 151.058400][ T4317] usb 3-1: USB disconnect, device number 21 [ 151.059976][ T4331] usb 2-1: device descriptor read/8, error -71 [ 151.077340][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 151.106821][ T7] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 151.122526][ T7] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 151.136450][ T7] usb 5-1: Product: syz [ 151.143105][ T7] usb 5-1: Manufacturer: syz [ 151.149702][ T7] usb 5-1: SerialNumber: syz [ 151.168762][ T7] usb 5-1: config 0 descriptor?? [ 151.175285][ T5346] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 151.195001][ T7] usb 5-1: selecting invalid altsetting 0 [ 151.202393][ T4331] usb usb2-port1: unable to enumerate USB device [ 151.430598][ T7] usb 5-1: USB disconnect, device number 10 [ 152.442400][ T4317] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 152.632252][ T4317] usb 4-1: Using ep0 maxpacket: 8 [ 152.641947][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 152.656188][ T4317] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 152.662373][ T7] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 152.675419][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.690092][ T4317] usb 4-1: config 0 descriptor?? [ 152.872284][ T4331] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 152.882952][ T7] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 152.907752][ T4317] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 152.907781][ T7] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.954711][ T7] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.967698][ T5382] tipc: Enabling of bearer rejected, already enabled [ 152.968705][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 152.991399][ T7] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.001008][ T7] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.023268][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 153.044806][ T7] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.055845][ T7] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.069589][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 153.077495][ T7] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.086917][ T4331] usb 2-1: Using ep0 maxpacket: 32 [ 153.093398][ T7] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.105538][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 153.112998][ T4331] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 153.121824][ T4331] usb 2-1: config 0 has no interface number 0 [ 153.129836][ T7] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.139828][ T4331] usb 2-1: config 0 interface 255 has no altsetting 0 [ 153.146837][ T7] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.157960][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 153.167329][ T7] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.177271][ T4331] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 153.186615][ T7] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.197692][ T4331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.205796][ T4331] usb 2-1: Product: syz [ 153.210001][ T4331] usb 2-1: Manufacturer: syz [ 153.214763][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 153.221484][ T4331] usb 2-1: SerialNumber: syz [ 153.227226][ T7] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.236803][ T7] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.250276][ T4331] usb 2-1: config 0 descriptor?? [ 153.255544][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 153.265768][ T4331] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 153.274118][ T4331] dvb-usb: bulk message failed: -22 (4/0) [ 153.280308][ T4331] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 153.291177][ T7] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.300297][ T4331] dvb-usb: bulk message failed: -22 (5/0) [ 153.306418][ T7] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.317739][ T4331] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 153.328389][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 153.338703][ T7] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 153.342395][ T4317] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 153.349346][ T4331] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 153.365955][ T7] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 153.374903][ T7] usb 5-1: Product: syz [ 153.379665][ T4331] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 153.390720][ T7] usb 5-1: Manufacturer: syz [ 153.395481][ T7] usb 5-1: SerialNumber: syz [ 153.401392][ T4331] usb 2-1: media controller created [ 153.442286][ T7] usb 5-1: config 0 descriptor?? [ 153.460481][ T4331] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.471893][ T7] yurex 5-1:0.0: USB YUREX device now attached to Yurex #1 [ 153.498116][ T5387] device syzkaller0 entered promiscuous mode [ 153.509922][ T7] usb 4-1: USB disconnect, device number 15 [ 153.528415][ T4331] ttusb2: set interface to alts=3 failed [ 153.562230][ T4317] usb 3-1: Using ep0 maxpacket: 32 [ 153.577565][ T4317] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 153.600231][ T4317] usb 3-1: config 0 has no interface number 0 [ 153.620527][ T4317] usb 3-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 153.657080][ T4317] usb 3-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 153.664295][ T4331] DVB: Unable to find symbol tda10086_attach() [ 153.678469][ T4317] usb 3-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xF2, skipping [ 153.682344][ T4331] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 153.702158][ T4317] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 153.725975][ T4331] dvb-usb: bulk message failed: -22 (4/0) [ 153.731777][ T4331] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 153.734969][ T4317] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 153.754113][ T4331] dvb-usb: bulk message failed: -22 (5/0) [ 153.759892][ T4331] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 153.762796][ T4317] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.770849][ T4331] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 153.784847][ T4315] usb 5-1: USB disconnect, device number 11 [ 153.811369][ T4317] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 153.831628][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.839121][ T4331] usb 2-1: USB disconnect, device number 22 [ 153.845649][ T4317] usb 3-1: Product: syz [ 153.850716][ T4317] usb 3-1: Manufacturer: syz [ 153.858821][ T4315] yurex 5-1:0.0: USB YUREX #1 now disconnected [ 153.887680][ T4317] usb 3-1: SerialNumber: syz [ 153.904092][ T4317] usb 3-1: config 0 descriptor?? [ 153.920477][ T5384] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 153.937526][ T4331] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 153.951324][ T5384] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 153.974672][ T4317] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 153.985031][ T4278] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 153.995182][ T4278] CPU: 0 PID: 4278 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 154.002823][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 154.012920][ T4278] Workqueue: hci3 hci_rx_work [ 154.017715][ T4278] Call Trace: [ 154.021191][ T4278] [ 154.024144][ T4278] dump_stack_lvl+0x188/0x24e [ 154.029032][ T4278] ? show_regs_print_info+0x12/0x12 [ 154.034510][ T4278] ? load_image+0x400/0x400 [ 154.039125][ T4278] sysfs_create_dir_ns+0x26a/0x290 [ 154.044357][ T4278] ? sysfs_warn_dup+0xa0/0xa0 [ 154.049051][ T4278] ? do_raw_spin_unlock+0x11d/0x230 [ 154.054317][ T4278] kobject_add_internal+0x61c/0xcc0 [ 154.059625][ T4278] kobject_add+0x160/0x230 [ 154.064151][ T4278] ? kobject_init+0x1d0/0x1d0 [ 154.068845][ T4278] ? klist_children_get+0x50/0x50 [ 154.073884][ T4278] ? get_device_parent+0x121/0x3f0 [ 154.079491][ T4278] device_add+0x483/0xfb0 [ 154.084119][ T4278] ? kmem_cache_free+0xf7/0x290 [ 154.089030][ T4278] hci_conn_add_sysfs+0xd1/0x1e0 [ 154.094077][ T4278] le_conn_complete_evt+0x105f/0x1670 [ 154.099559][ T4278] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 154.105999][ T4278] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 154.111748][ T4278] ? skb_pull_data+0xf7/0x200 [ 154.116533][ T4278] hci_le_enh_conn_complete_evt+0x185/0x460 [ 154.122464][ T4278] ? hci_le_remote_conn_param_req_evt+0xd10/0xd10 [ 154.128890][ T4278] ? hci_remote_host_features_evt+0x270/0x270 [ 154.134982][ T4278] hci_event_packet+0x7b6/0x1280 [ 154.140032][ T4278] ? bis_list+0x280/0x280 [ 154.144378][ T4278] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 154.150370][ T4278] ? kcov_remote_start+0x4c7/0x7e0 [ 154.155590][ T4278] ? spurious_interrupt+0x80/0xd0 [ 154.160716][ T4278] ? hci_send_to_monitor+0x9c/0x4a0 [ 154.166105][ T4278] hci_rx_work+0x3eb/0xd40 [ 154.170625][ T4278] ? _raw_spin_unlock+0x40/0x40 [ 154.175585][ T4278] ? process_one_work+0x7b0/0x1160 [ 154.180707][ T4278] process_one_work+0x8a2/0x1160 [ 154.185760][ T4278] ? worker_detach_from_pool+0x240/0x240 [ 154.191671][ T4278] ? _raw_spin_lock_irq+0xb7/0xf0 [ 154.196710][ T4278] ? _raw_spin_lock_irqsave+0x100/0x100 [ 154.202475][ T4278] ? kthread_data+0x4b/0xc0 [ 154.207010][ T4278] worker_thread+0xaa2/0x1270 [ 154.211921][ T4278] kthread+0x29d/0x330 [ 154.216177][ T4278] ? worker_clr_flags+0x1a0/0x1a0 [ 154.221212][ T4278] ? kthread_blkcg+0xd0/0xd0 [ 154.225813][ T4278] ret_from_fork+0x1f/0x30 [ 154.230280][ T4278] [ 154.235635][ T4278] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 154.249350][ T4278] Bluetooth: hci3: failed to register connection device [ 154.320208][ T4317] usb 3-1: USB disconnect, device number 22 [ 154.633086][ T5406] 8021q: VLANs not supported on vcan0 [ 154.722117][ T4315] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 154.750889][ T5410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.316'. [ 154.760247][ T5410] bridge: RTM_NEWNEIGH with invalid ether address [ 154.768546][ T4331] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 154.927086][ T4315] usb 4-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 154.956453][ T4315] usb 4-1: config 0 interface 0 has no altsetting 0 [ 154.962525][ T4331] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.970248][ T4315] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 154.974004][ T7] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 154.994232][ T4331] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.005126][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 155.006038][ T4331] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 155.017619][ T4315] usb 4-1: Product: syz [ 155.023229][ T4331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 155.029662][ T4315] usb 4-1: Manufacturer: syz [ 155.053236][ T4331] usb 2-1: SerialNumber: syz [ 155.053878][ T4315] usb 4-1: SerialNumber: syz [ 155.071017][ T4315] usb 4-1: config 0 descriptor?? [ 155.077358][ T5394] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 155.099482][ T4315] usb 4-1: selecting invalid altsetting 0 [ 155.219015][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 155.227460][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 155.249780][ T7] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 155.276578][ T7] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 155.296247][ T4331] usb 2-1: 0:2 : does not exist [ 155.301886][ T7] usb 5-1: Product: syz [ 155.310930][ T7] usb 5-1: Manufacturer: syz [ 155.321492][ T4331] usb 2-1: USB disconnect, device number 23 [ 155.338468][ T7] usb 5-1: SerialNumber: syz [ 155.357755][ T7] usb 5-1: config 0 descriptor?? [ 155.380606][ T5408] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 155.396138][ T4315] usb 4-1: USB disconnect, device number 16 [ 155.742714][ T5425] input: syz1 as /devices/virtual/input/input22 [ 155.802229][ T7] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 155.836854][ T4315] usb 5-1: USB disconnect, device number 12 [ 155.965892][ T7] usb 3-1: device descriptor read/64, error -71 [ 156.052666][ T5430] netlink: 10 bytes leftover after parsing attributes in process `syz.3.325'. [ 156.179332][ T5434] netlink: 'syz.1.327': attribute type 10 has an invalid length. [ 156.206387][ T5434] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 156.242449][ T7] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 156.402178][ T7] usb 3-1: device descriptor read/64, error -71 [ 156.522600][ T7] usb usb3-port1: attempt power cycle [ 156.612197][ T4331] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 156.667180][ T5443] device syzkaller0 entered promiscuous mode [ 156.822170][ T4331] usb 2-1: Using ep0 maxpacket: 32 [ 156.831776][ T4331] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 156.867094][ T4331] usb 2-1: config 0 has no interface number 0 [ 156.889710][ T4331] usb 2-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 156.932289][ T7] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 156.949942][ T4331] usb 2-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 156.995168][ T4331] usb 2-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xF2, skipping [ 157.007727][ T7] usb 3-1: device descriptor read/8, error -71 [ 157.032408][ T4331] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 157.119645][ T4331] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 157.176243][ T4331] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.231613][ T4331] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 157.271022][ T4331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.291343][ T4331] usb 2-1: Product: syz [ 157.295874][ T7] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 157.311678][ T4331] usb 2-1: Manufacturer: syz [ 157.316608][ T4331] usb 2-1: SerialNumber: syz [ 157.337311][ T4331] usb 2-1: config 0 descriptor?? [ 157.343119][ T7] usb 3-1: device descriptor read/8, error -71 [ 157.360684][ T5439] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 157.374795][ T5439] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 157.394814][ T4331] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 157.472337][ T7] usb usb3-port1: unable to enumerate USB device [ 157.613982][ T7] usb 2-1: USB disconnect, device number 24 [ 157.670026][ T5455] device syzkaller0 entered promiscuous mode [ 157.716635][ T5455] sch_tbf: peakrate 1024 is lower than or equals to rate 37535 ! [ 157.740340][ T5455] tipc: Enabled bearer , priority 0 [ 157.749201][ T5453] tipc: Resetting bearer [ 157.781496][ T5453] tipc: Disabling bearer [ 158.302619][ T7] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 158.523734][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.554524][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.621897][ T7] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 158.661258][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 158.691599][ T7] usb 5-1: SerialNumber: syz [ 158.691832][ T5471] netlink: 44 bytes leftover after parsing attributes in process `syz.2.339'. [ 158.709501][ T5471] ------------[ cut here ]------------ [ 158.715540][ T5471] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:854 (size 16) [ 158.729149][ T5471] WARNING: CPU: 1 PID: 5471 at net/sched/cls_u32.c:854 u32_change+0x1dfc/0x27e0 [ 158.738379][ T5471] Modules linked in: [ 158.742445][ T5471] CPU: 1 PID: 5471 Comm: syz.2.339 Not tainted syzkaller #0 [ 158.749860][ T5471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 158.760185][ T5471] RIP: 0010:u32_change+0x1dfc/0x27e0 [ 158.765904][ T5471] Code: f9 eb 59 e8 76 fc 1e f9 c6 05 5b fb a7 05 01 b9 10 00 00 00 48 c7 c7 a0 90 8e 8b 4c 89 fe 48 c7 c2 20 91 8e 8b e8 64 6d ea f8 <0f> 0b e9 ff ee ff ff e8 48 fc 1e f9 eb 24 e8 41 fc 1e f9 c6 05 d6 [ 158.785989][ T5471] RSP: 0018:ffffc9000464ee40 EFLAGS: 00010246 [ 158.792343][ T5471] RAX: 0ff812a283fd5500 RBX: ffff8880183032e0 RCX: 0000000000080000 [ 158.800758][ T5471] RDX: ffffc9000e189000 RSI: 0000000000023c90 RDI: 0000000000023c91 [ 158.809154][ T5471] RBP: ffffc9000464eff8 R08: ffffc9000464eac7 R09: 1ffff920008c9d58 [ 158.817394][ T5471] R10: dffffc0000000000 R11: fffff520008c9d59 R12: 0000000000000000 [ 158.825769][ T5471] R13: dffffc0000000000 R14: ffff888077767000 R15: 0000000000000020 [ 158.834215][ T5471] FS: 00007f72d7f3d6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 158.843299][ T5471] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.850149][ T5471] CR2: 0000200000006040 CR3: 000000001cf3e000 CR4: 00000000003506e0 [ 158.858404][ T5471] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 158.866438][ T5471] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 158.874638][ T5471] Call Trace: [ 158.878252][ T5471] [ 158.881219][ T5471] ? u32_get+0x370/0x370 [ 158.885521][ T5471] tc_new_tfilter+0xf29/0x1770 [ 158.890381][ T5471] ? kmem_cache_free+0xf7/0x290 [ 158.895259][ T5471] ? nlmon_xmit+0xac/0xf0 [ 158.899592][ T5471] ? dev_hard_start_xmit+0x262/0x870 [ 158.905086][ T5471] ? tcf_proto_signal_destroying+0x240/0x240 [ 158.911174][ T5471] ? rcu_read_unlock+0x8c/0xa0 [ 158.916078][ T5471] ? tcf_proto_signal_destroying+0x240/0x240 [ 158.922456][ T5471] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 158.927659][ T5471] ? tcf_proto_signal_destroying+0x240/0x240 [ 158.934119][ T5471] rtnetlink_rcv_msg+0x8cc/0xfc0 [ 158.939323][ T5471] ? rtnetlink_bind+0x80/0x80 [ 158.944220][ T5471] ? __local_bh_enable_ip+0x136/0x1c0 [ 158.949778][ T5471] ? lockdep_hardirqs_on+0x94/0x140 [ 158.955213][ T5471] ? __local_bh_enable_ip+0x136/0x1c0 [ 158.960623][ T5471] ? _local_bh_enable+0xa0/0xa0 [ 158.965582][ T5471] ? __dev_queue_xmit+0x26b/0x37c0 [ 158.970690][ T5471] ? __dev_queue_xmit+0x26b/0x37c0 [ 158.975830][ T5471] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 158.981037][ T5471] ? __dev_queue_xmit+0x26b/0x37c0 [ 158.986194][ T5471] ? ref_tracker_free+0x68c/0x840 [ 158.991242][ T5471] ? __copy_skb_header+0x3ba/0x4f0 [ 158.996406][ T5471] ? refcount_inc+0x70/0x70 [ 159.001084][ T5471] ? memcpy+0x3c/0x60 [ 159.005355][ T5471] ? __copy_skb_header+0x3ba/0x4f0 [ 159.010647][ T5471] ? __skb_clone+0x480/0x790 [ 159.015704][ T5471] netlink_rcv_skb+0x1fb/0x450 [ 159.020742][ T5471] ? rtnetlink_bind+0x80/0x80 [ 159.025623][ T5471] ? netlink_ack+0x1170/0x1170 [ 159.030482][ T5471] ? netlink_deliver_tap+0x2e/0x1b0 [ 159.035728][ T5471] netlink_unicast+0x74d/0x8d0 [ 159.040501][ T5471] netlink_sendmsg+0x8ad/0xbd0 [ 159.045559][ T5471] ? netlink_getsockopt+0x550/0x550 [ 159.050847][ T5471] ? aa_sock_msg_perm+0x94/0x150 [ 159.055990][ T5471] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 159.061723][ T5471] ? security_socket_sendmsg+0x7c/0xa0 [ 159.067318][ T5471] ? netlink_getsockopt+0x550/0x550 [ 159.072998][ T5471] ____sys_sendmsg+0x5be/0x970 [ 159.077858][ T5471] ? __sys_sendmsg_sock+0x30/0x30 [ 159.082911][ T5471] ? __import_iovec+0x315/0x500 [ 159.087853][ T5471] ? import_iovec+0x6f/0xa0 [ 159.092468][ T5471] ___sys_sendmsg+0x2a2/0x360 [ 159.097247][ T5471] ? preempt_schedule+0xbc/0xd0 [ 159.102232][ T5471] ? __sys_sendmsg+0x290/0x290 [ 159.107029][ T5471] __sys_sendmmsg+0x2c3/0x510 [ 159.111799][ T5471] ? __ia32_sys_sendmsg+0x80/0x80 [ 159.116867][ T5471] ? __ia32_sys_get_robust_list+0x100/0x100 [ 159.123654][ T5471] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 159.129642][ T5471] ? lock_chain_count+0x20/0x20 [ 159.134652][ T5471] __x64_sys_sendmmsg+0x9c/0xb0 [ 159.139509][ T5471] do_syscall_64+0x4c/0xa0 [ 159.143966][ T5471] ? clear_bhb_loop+0x60/0xb0 [ 159.148829][ T5471] ? clear_bhb_loop+0x60/0xb0 [ 159.153548][ T5471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.159635][ T5471] RIP: 0033:0x7f72d6f9c799 [ 159.164333][ T5471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.183965][ T5471] RSP: 002b:00007f72d7f3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 159.192408][ T5471] RAX: ffffffffffffffda RBX: 00007f72d7215fa0 RCX: 00007f72d6f9c799 [ 159.200812][ T5471] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000007 [ 159.208938][ T5471] RBP: 00007f72d7032c99 R08: 0000000000000000 R09: 0000000000000000 [ 159.216991][ T5471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.225103][ T5471] R13: 00007f72d7216038 R14: 00007f72d7215fa0 R15: 00007ffe12acc9c8 [ 159.233138][ T5471] [ 159.236169][ T5471] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 159.243543][ T5471] CPU: 1 PID: 5471 Comm: syz.2.339 Not tainted syzkaller #0 [ 159.250918][ T5471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 159.261080][ T5471] Call Trace: [ 159.264488][ T5471] [ 159.267618][ T5471] dump_stack_lvl+0x188/0x24e [ 159.272426][ T5471] ? memcpy+0x3c/0x60 [ 159.276422][ T5471] ? show_regs_print_info+0x12/0x12 [ 159.281985][ T5471] ? load_image+0x400/0x400 [ 159.286955][ T5471] panic+0x2e5/0x730 [ 159.291149][ T5471] ? bpf_jit_dump+0xd0/0xd0 [ 159.295760][ T5471] __warn+0x2f8/0x4f0 [ 159.299780][ T5471] ? u32_change+0x1dfc/0x27e0 [ 159.304553][ T5471] ? u32_change+0x1dfc/0x27e0 [ 159.309257][ T5471] report_bug+0x2ba/0x4f0 [ 159.313695][ T5471] ? u32_change+0x1dfc/0x27e0 [ 159.318638][ T5471] handle_bug+0x3a/0x70 [ 159.323364][ T5471] exc_invalid_op+0x16/0x40 [ 159.327882][ T5471] asm_exc_invalid_op+0x16/0x20 [ 159.332924][ T5471] RIP: 0010:u32_change+0x1dfc/0x27e0 [ 159.338237][ T5471] Code: f9 eb 59 e8 76 fc 1e f9 c6 05 5b fb a7 05 01 b9 10 00 00 00 48 c7 c7 a0 90 8e 8b 4c 89 fe 48 c7 c2 20 91 8e 8b e8 64 6d ea f8 <0f> 0b e9 ff ee ff ff e8 48 fc 1e f9 eb 24 e8 41 fc 1e f9 c6 05 d6 [ 159.358458][ T5471] RSP: 0018:ffffc9000464ee40 EFLAGS: 00010246 [ 159.364738][ T5471] RAX: 0ff812a283fd5500 RBX: ffff8880183032e0 RCX: 0000000000080000 [ 159.372751][ T5471] RDX: ffffc9000e189000 RSI: 0000000000023c90 RDI: 0000000000023c91 [ 159.380903][ T5471] RBP: ffffc9000464eff8 R08: ffffc9000464eac7 R09: 1ffff920008c9d58 [ 159.388983][ T5471] R10: dffffc0000000000 R11: fffff520008c9d59 R12: 0000000000000000 [ 159.397267][ T5471] R13: dffffc0000000000 R14: ffff888077767000 R15: 0000000000000020 [ 159.405869][ T5471] ? u32_get+0x370/0x370 [ 159.410161][ T5471] tc_new_tfilter+0xf29/0x1770 [ 159.415131][ T5471] ? kmem_cache_free+0xf7/0x290 [ 159.419976][ T5471] ? nlmon_xmit+0xac/0xf0 [ 159.424405][ T5471] ? dev_hard_start_xmit+0x262/0x870 [ 159.429698][ T5471] ? tcf_proto_signal_destroying+0x240/0x240 [ 159.435863][ T5471] ? rcu_read_unlock+0x8c/0xa0 [ 159.440985][ T5471] ? tcf_proto_signal_destroying+0x240/0x240 [ 159.447068][ T5471] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 159.452279][ T5471] ? tcf_proto_signal_destroying+0x240/0x240 [ 159.458429][ T5471] rtnetlink_rcv_msg+0x8cc/0xfc0 [ 159.463388][ T5471] ? rtnetlink_bind+0x80/0x80 [ 159.468179][ T5471] ? __local_bh_enable_ip+0x136/0x1c0 [ 159.473651][ T5471] ? lockdep_hardirqs_on+0x94/0x140 [ 159.478852][ T5471] ? __local_bh_enable_ip+0x136/0x1c0 [ 159.484322][ T5471] ? _local_bh_enable+0xa0/0xa0 [ 159.489233][ T5471] ? __dev_queue_xmit+0x26b/0x37c0 [ 159.494437][ T5471] ? __dev_queue_xmit+0x26b/0x37c0 [ 159.499757][ T5471] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 159.505096][ T5471] ? __dev_queue_xmit+0x26b/0x37c0 [ 159.510251][ T5471] ? ref_tracker_free+0x68c/0x840 [ 159.515363][ T5471] ? __copy_skb_header+0x3ba/0x4f0 [ 159.520713][ T5471] ? refcount_inc+0x70/0x70 [ 159.525494][ T5471] ? memcpy+0x3c/0x60 [ 159.530032][ T5471] ? __copy_skb_header+0x3ba/0x4f0 [ 159.535611][ T5471] ? __skb_clone+0x480/0x790 [ 159.540478][ T5471] netlink_rcv_skb+0x1fb/0x450 [ 159.545336][ T5471] ? rtnetlink_bind+0x80/0x80 [ 159.550102][ T5471] ? netlink_ack+0x1170/0x1170 [ 159.555058][ T5471] ? netlink_deliver_tap+0x2e/0x1b0 [ 159.560351][ T5471] netlink_unicast+0x74d/0x8d0 [ 159.565148][ T5471] netlink_sendmsg+0x8ad/0xbd0 [ 159.569929][ T5471] ? netlink_getsockopt+0x550/0x550 [ 159.575390][ T5471] ? aa_sock_msg_perm+0x94/0x150 [ 159.580410][ T5471] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 159.585761][ T5471] ? security_socket_sendmsg+0x7c/0xa0 [ 159.591336][ T5471] ? netlink_getsockopt+0x550/0x550 [ 159.596622][ T5471] ____sys_sendmsg+0x5be/0x970 [ 159.601481][ T5471] ? __sys_sendmsg_sock+0x30/0x30 [ 159.606689][ T5471] ? __import_iovec+0x315/0x500 [ 159.611828][ T5471] ? import_iovec+0x6f/0xa0 [ 159.616344][ T5471] ___sys_sendmsg+0x2a2/0x360 [ 159.621125][ T5471] ? preempt_schedule+0xbc/0xd0 [ 159.626170][ T5471] ? __sys_sendmsg+0x290/0x290 [ 159.631088][ T5471] __sys_sendmmsg+0x2c3/0x510 [ 159.635872][ T5471] ? __ia32_sys_sendmsg+0x80/0x80 [ 159.640921][ T5471] ? __ia32_sys_get_robust_list+0x100/0x100 [ 159.647186][ T5471] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 159.653443][ T5471] ? lock_chain_count+0x20/0x20 [ 159.658494][ T5471] __x64_sys_sendmmsg+0x9c/0xb0 [ 159.663455][ T5471] do_syscall_64+0x4c/0xa0 [ 159.667971][ T5471] ? clear_bhb_loop+0x60/0xb0 [ 159.672722][ T5471] ? clear_bhb_loop+0x60/0xb0 [ 159.677789][ T5471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.683866][ T5471] RIP: 0033:0x7f72d6f9c799 [ 159.688305][ T5471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.708538][ T5471] RSP: 002b:00007f72d7f3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 159.717226][ T5471] RAX: ffffffffffffffda RBX: 00007f72d7215fa0 RCX: 00007f72d6f9c799 [ 159.725468][ T5471] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000007 [ 159.733621][ T5471] RBP: 00007f72d7032c99 R08: 0000000000000000 R09: 0000000000000000 [ 159.741685][ T5471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.750009][ T5471] R13: 00007f72d7216038 R14: 00007f72d7215fa0 R15: 00007ffe12acc9c8 [ 159.758011][ T5471] [ 159.761292][ T5471] Kernel Offset: disabled [ 159.765631][ T5471] Rebooting in 86400 seconds..