last executing test programs: 20.973078843s ago: executing program 1 (id=2381): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acdddff4bc6e17bd735b3576550a4b33160cad82f3df56db53fbf5fbad6125c8b79", 0x4d}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000006c0)="65401c17dab81f710c1f34a22e3877ef7c436621f151ebb945c6fc3cafd11aeb26791de74b57a83021d5aeadaaeaa9af27cc7c3f8029549f0b1affc32aad63e9f1f5f9671ff7fa7573565019fa1472aac0b5ae256aa1b647b4ccbc0a02e8a6121fe5b42424bef9f3e25b67677770f73bfebbaae8bc279621bc307dee407dcdf2d3252bf41691fb9fb681735fea9c620996a7aec2c8715e2a6e18e2733689a967", 0xa0}, {&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe6aed24f77c513e80ec3b5dd887c2e06e962f824f5b806e51ff73a109", 0x6a}], 0x2}, 0x20048050) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB], 0x6f4}}, 0x0) 20.164940448s ago: executing program 1 (id=2383): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d0000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 17.931909518s ago: executing program 1 (id=2386): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x2004cb, 0x200000000000, 0x0, 0x16, 0xfffffffffffffffd, 0x0, 0x5], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16.174329579s ago: executing program 1 (id=2389): syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/protocols\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) socket$kcm(0x10, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 15.838589066s ago: executing program 1 (id=2392): socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1380, 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0x82) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r4, 0x1) connect$bt_rfcomm(r4, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r5, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x3}, {0x0, 0x4}, @note={0x9, 0x1, 0x3, 0x0, 0x8}}, {0x0, 0x0, 0x0, 0x5, @time={0xb, 0x8}, {}, {0x2, 0x9}, @addr={0xc0, 0xd}}, {0x0, 0x0, 0x0, 0x3, @time={0x10, 0x4}, {0xfd}, {}, @ext={0x0, 0x0}}], 0x54) syz_usb_connect(0x3, 0x4a, 0x0, 0x0) 9.517974904s ago: executing program 1 (id=2404): r0 = openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@iter={0x0}}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'aio_iiro_16\x00', [0x5, 0x80008000, 0x9, 0x2, 0xfffffffe, 0x0, 0x1, 0xf, 0xffe, 0x1, 0x7, 0x1, 0x1006, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x836, 0x3, 0x3fb, 0x10000, 0x800, 0xe2df, 0x2, 0xfffffffd, 0x4, 0x3, 0x7, 0x5, 0x8005]}) 6.652190855s ago: executing program 2 (id=2410): openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = io_uring_setup(0xa4e, &(0x7f0000000a80)={0x0, 0x70a9, 0x80, 0x3, 0x24d}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000100)={0x4, 0x2, 0x0, [{0x9, 0x1ff, 0x2, 0x2, 0x6d, 0xd, 0x7, '\x00', 0x8}, {0x3, 0x0, 0x34, 0xde, 0x2, 0x0, 0x7, '\x00', 0x50}]}) close_range(r4, 0xffffffffffffffff, 0x0) 5.992746348s ago: executing program 0 (id=2415): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000021"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.828310711s ago: executing program 0 (id=2416): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 5.575709452s ago: executing program 0 (id=2417): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e3", 0x8}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x10f0}], 0x1}, 0x40}], 0x1, 0x102, 0x0) 5.412814465s ago: executing program 0 (id=2418): socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000003280)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001f00)=""/100, 0x64}], 0x4}, 0x7}], 0x1, 0x40010002, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x27, 0x9, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf3, 0xfbfffffb, 0x39, 0x747d5e13, 0x8, 0x99, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0xc8, 0x40003, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0xf, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0x80, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x8, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x3ff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd3, 0x4, 0x20, 0x404, 0x4, 0x8, 0x6, 0x7, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x3f92, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x218c, 0x8001, 0x47, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x8, 0x95e, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x6, 0xd9, 0xdffb, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x2, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x7, 0x7, 0x0, 0x5, 0x1e2, 0x4, 0x9, 0x3, 0x3, 0x5, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x7fc, 0xa80a, 0x65f413f9, 0xfffffff8, 0x20008, 0x8a8, 0x2, 0x40, 0x40000409, 0x7, 0x4, 0x804, 0x10, 0x4, 0x0, 0x7fff, 0x0, 0xfffffff8, 0x401, 0x4, 0x202, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x5]}, 0x45c) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 4.423851654s ago: executing program 2 (id=2420): r0 = openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@iter={0x0}}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'aio_iiro_16\x00', [0x5, 0x80008000, 0x9, 0x2, 0xfffffffe, 0x0, 0x1, 0xf, 0xffe, 0x1, 0x7, 0x1, 0x1006, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x836, 0x3, 0x3fb, 0x10000, 0x800, 0xe2df, 0x2, 0xfffffffd, 0x4, 0x3, 0x7, 0x5, 0x8005]}) 3.821903933s ago: executing program 3 (id=2421): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x7) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)="94badbcf667789629fe4ee49e3c07642d93a99f7aa5dd54602e22c03835e30059844c9ad53f850443d0031fc4c16b2e3148fb641d174a08ebf4d46595a1be34f1e2cdb0e246cd6232b5ba0db956554dc631a87a8c229f3470d848d6fc56232118fa9df18d8511731c37833848967441cc029171613a6096b3568a391571e62b5a7284c10c167345665126878ab0fa8a4", 0x90}, {&(0x7f0000000100)="cdc352e4eb0ba1d16d93b6364643534b916e067fbe0a943f26e7a117b37ef0d0624a9dc6906cd2656dc90fbe", 0x2c}, {0x0}, {0x0}], 0x4}}], 0x1, 0x20040010) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 2.796023595s ago: executing program 0 (id=2422): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000980)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, 0x0) 2.069853194s ago: executing program 2 (id=2423): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,siz']) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) 1.958557823s ago: executing program 3 (id=2424): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x33}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='B\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000001000000010000000d"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.752609499s ago: executing program 3 (id=2425): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e44647522663503000000440f22c00fa2660fc7b2d42af30fa7d0ee0f20c066350d000000440f00c06767f2caab12bad004ec", 0x3b}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000240)={{0xdddd0000, 0x4, 0xc, 0xe, 0x5, 0x3, 0x5, 0x3, 0x7f, 0x2, 0x8, 0x7}, {0xf000, 0xeeee8000, 0xb, 0x7, 0x2, 0x4, 0x2, 0x7, 0x4, 0x41, 0x9, 0xff}, {0x80a0000, 0x1, 0x3, 0x4, 0x70, 0x4, 0x58, 0xdc, 0x4, 0x6, 0x2, 0x1}, {0x3000, 0xd000, 0xf, 0x5, 0xf9, 0x9, 0x0, 0x3, 0x7, 0xdb, 0xfe, 0x40}, {0x2000, 0x2, 0x4, 0x9, 0x7, 0x5, 0xb, 0x0, 0xd, 0x2f, 0x68}, {0xdddd1000, 0x4000, 0x0, 0x0, 0x5c, 0xc6, 0x7, 0x7f, 0x4, 0x10, 0xe, 0x9}, {0x6000, 0xeeef0000, 0x4, 0x2, 0x9, 0x2, 0x8, 0x3, 0x2, 0x9f, 0x86, 0x4}, {0x4, 0x8080000, 0x0, 0x1, 0x4, 0x7, 0xa0, 0x5, 0x5, 0x1, 0xff, 0xcf}, {0xdddd1000, 0x491}, {0x1, 0x203}, 0x10002, 0x0, 0x4, 0x20012b, 0x7, 0x2001, 0x4, [0x8, 0x4, 0x200, 0x8000000000004a43]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1.656657637s ago: executing program 3 (id=2426): socket(0x10, 0x803, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x2004cb, 0x200000000000, 0x0, 0x16, 0xfffffffffffffffd, 0x0, 0x5], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.584339642s ago: executing program 2 (id=2427): openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = io_uring_setup(0xa4e, &(0x7f0000000a80)={0x0, 0x70a9, 0x80, 0x3, 0x24d}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000100)={0x4, 0x2, 0x0, [{0x9, 0x1ff, 0x2, 0x2, 0x6d, 0xd, 0x7, '\x00', 0x8}, {0x3, 0x0, 0x34, 0xde, 0x2, 0x0, 0x7, '\x00', 0x50}]}) close_range(r4, 0xffffffffffffffff, 0x0) 567.203294ms ago: executing program 2 (id=2428): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acdddff4bc6e17bd735b3576550a4b33160cad82f3df56db53fbf5fbad6125c8b79", 0x4d}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000006c0)="65401c17dab81f710c1f34a22e3877ef7c436621f151ebb945c6fc3cafd11aeb26791de74b57a83021d5aeadaaeaa9af27cc7c3f8029549f0b1affc32aad63e9f1f5f9671ff7fa7573565019fa1472aac0b5ae256aa1b647b4ccbc0a02e8a6121fe5b42424bef9f3e25b67677770f73bfebbaae8bc279621bc307dee407dcdf2d3252bf41691fb9fb681735f", 0x8c}, {&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe6aed24f77c513e80ec3b5dd887c2e06e962f824f5b806e51ff73a109", 0x6a}], 0x2}, 0x20048050) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/539, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 445.612864ms ago: executing program 0 (id=2429): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 264.716319ms ago: executing program 3 (id=2430): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 238.866551ms ago: executing program 2 (id=2431): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000010003704", @ANYBLOB="890c04000000000060"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x4, 0x4, 0xffffffffffffff70, 0x80000000, 0x2, 0x2000000004, 0xeffffeffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x600008000000001c, 0x0, 0xffffffffffffffff, 0x6], 0xeeef0000, 0x2700}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=2432): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000001c0)=r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) kernel console output (not intermixed with test programs): miscuous mode [ 565.210520][T12037] erspan0: entered allmulticast mode [ 565.228941][T12037] ip_vti0: entered promiscuous mode [ 565.240475][T12037] ip_vti0: entered allmulticast mode [ 565.251769][T12037] ip6_vti0: entered promiscuous mode [ 565.257754][T12037] ip6_vti0: entered allmulticast mode [ 565.275038][T12037] sit0: entered promiscuous mode [ 565.279989][T12037] sit0: entered allmulticast mode [ 565.292660][T12037] ip6tnl0: entered promiscuous mode [ 565.299190][T12037] ip6tnl0: entered allmulticast mode [ 565.305421][T12037] ip6gre0: entered promiscuous mode [ 565.310615][T12037] ip6gre0: entered allmulticast mode [ 565.323619][T12037] ip6gretap0: entered promiscuous mode [ 565.329084][T12037] ip6gretap0: entered allmulticast mode [ 565.449952][T12037] bridge0: entered promiscuous mode [ 565.463242][T12037] bridge0: entered allmulticast mode [ 565.474130][T12037] bond0: entered promiscuous mode [ 565.479673][T12037] bond_slave_0: entered promiscuous mode [ 565.492839][T12037] bond_slave_1: entered promiscuous mode [ 565.501389][T12037] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 565.509782][T12037] bond0: entered allmulticast mode [ 565.515072][T12037] bond_slave_0: entered allmulticast mode [ 565.521322][T12037] bond_slave_1: entered allmulticast mode [ 565.527257][T12037] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 565.536740][T12037] team0: entered promiscuous mode [ 565.541777][T12037] team_slave_0: entered promiscuous mode [ 565.554699][T12037] team_slave_1: entered promiscuous mode [ 565.564234][T12037] team0: entered allmulticast mode [ 565.569342][T12037] team_slave_0: entered allmulticast mode [ 565.575685][T12037] team_slave_1: entered allmulticast mode [ 565.582160][T12037] dummy0: entered promiscuous mode [ 565.587574][T12037] dummy0: entered allmulticast mode [ 565.597467][T12037] nlmon0: entered promiscuous mode [ 565.602607][T12037] nlmon0: entered allmulticast mode [ 565.609329][T12037] caif0: entered promiscuous mode [ 565.621072][T12037] caif0: entered allmulticast mode [ 565.638248][T12037] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 565.689246][T12044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1562'. [ 565.724703][T12044] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 565.782722][T12074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1565'. [ 566.097047][T12074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 566.206783][T12083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1567'. [ 566.465836][T12083] netlink: 'syz.0.1567': attribute type 5 has an invalid length. [ 566.543171][T12083] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1567'. [ 566.994523][T12089] block nbd1: shutting down sockets [ 567.239997][T12100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1569'. [ 567.684161][T12100] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 567.781311][T12103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1570'. [ 568.124451][T12103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 569.096085][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1573'. [ 569.131416][T12119] lo: entered promiscuous mode [ 569.165554][T12119] lo: entered allmulticast mode [ 569.400597][T12119] tunl0: entered promiscuous mode [ 569.534277][T12119] tunl0: entered allmulticast mode [ 570.131236][T12119] gre0: entered promiscuous mode [ 570.288108][T12119] gre0: entered allmulticast mode [ 570.567370][T12119] gretap0: entered promiscuous mode [ 570.590394][T12119] gretap0: entered allmulticast mode [ 570.632483][T12119] erspan0: entered promiscuous mode [ 570.638395][T12119] erspan0: entered allmulticast mode [ 570.674239][T12119] ip_vti0: entered promiscuous mode [ 570.681827][T12119] ip_vti0: entered allmulticast mode [ 570.895970][T12119] ip6_vti0: entered promiscuous mode [ 570.901352][T12119] ip6_vti0: entered allmulticast mode [ 570.957930][T12119] sit0: entered promiscuous mode [ 571.101211][T12119] sit0: entered allmulticast mode [ 571.776476][T12119] ip6tnl0: entered promiscuous mode [ 571.781858][T12119] ip6tnl0: entered allmulticast mode [ 571.844360][T12119] ip6gre0: entered promiscuous mode [ 571.853199][T12119] ip6gre0: entered allmulticast mode [ 571.895882][T12119] syz_tun: entered promiscuous mode [ 571.901240][T12119] syz_tun: entered allmulticast mode [ 571.915778][T12119] ip6gretap0: entered promiscuous mode [ 571.931255][T12119] ip6gretap0: entered allmulticast mode [ 571.939743][T12119] bridge0: entered promiscuous mode [ 571.946411][T12119] bridge0: entered allmulticast mode [ 571.953747][T12119] vcan0: entered promiscuous mode [ 571.958902][T12119] vcan0: entered allmulticast mode [ 571.965443][T12119] bond0: entered promiscuous mode [ 571.970591][T12119] bond_slave_0: entered promiscuous mode [ 571.977409][T12119] bond_slave_1: entered promiscuous mode [ 572.016467][T12119] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 572.059953][T12119] bond0: entered allmulticast mode [ 572.072241][T12119] bond_slave_0: entered allmulticast mode [ 572.080875][T12119] bond_slave_1: entered allmulticast mode [ 572.087422][T12119] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 572.097076][T12119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.111562][T12119] team0: entered promiscuous mode [ 572.177694][T12119] team_slave_0: entered promiscuous mode [ 572.186338][T12119] team_slave_1: entered promiscuous mode [ 572.192468][T12119] team0: entered allmulticast mode [ 572.198433][T12119] team_slave_0: entered allmulticast mode [ 572.205786][T12119] team_slave_1: entered allmulticast mode [ 572.247121][T12119] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.255396][T12119] dummy0: entered promiscuous mode [ 572.260659][T12119] dummy0: entered allmulticast mode [ 572.317134][T12119] nlmon0: entered promiscuous mode [ 572.333158][T12119] nlmon0: entered allmulticast mode [ 572.342188][T12119] caif0: entered promiscuous mode [ 572.348681][T12119] caif0: entered allmulticast mode [ 572.358749][T12119] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 572.374501][T12114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1571'. [ 572.383458][T12114] netlink: 'syz.1.1571': attribute type 5 has an invalid length. [ 572.409791][T12114] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1571'. [ 572.440201][T12114] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 572.458408][T12114] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 572.467590][T12114] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 572.476621][T12114] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 572.491719][T12114] geneve2: entered promiscuous mode [ 572.508322][T12114] geneve2: entered allmulticast mode [ 572.609017][T12119] syz.0.1573 (12119) used greatest stack depth: 19528 bytes left [ 573.276040][T12167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1586'. [ 577.908555][T12226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1605'. [ 579.009021][T12230] fuse: Bad value for 'fd' [ 580.565063][T12231] Process accounting resumed [ 583.145937][T12274] fuse: Bad value for 'fd' [ 583.341307][T12274] Process accounting resumed [ 584.278411][T12291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1621'. [ 590.300278][T12364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1639'. [ 593.077601][T12408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1650'. [ 593.194540][T12408] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 593.821751][T12419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1652'. [ 593.957264][T12419] netlink: 'syz.2.1652': attribute type 5 has an invalid length. [ 595.767770][T12419] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1652'. [ 601.235738][T12480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1668'. [ 602.543152][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 602.625446][T12485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1670'. [ 602.638950][T12485] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 602.724849][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.763209][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 602.787759][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 602.806190][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.816421][ T9] usb 4-1: Product: syz [ 602.823553][ T9] usb 4-1: Manufacturer: syz [ 602.828280][ T9] usb 4-1: SerialNumber: syz [ 602.837569][ T9] usb 4-1: config 0 descriptor?? [ 602.855343][ T9] adutux 4-1:0.0: interrupt endpoints not found [ 603.403128][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 603.432589][T12517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1674'. [ 603.447346][T12517] lo: left promiscuous mode [ 603.452022][T12517] lo: left allmulticast mode [ 603.491661][T12517] tunl0: left promiscuous mode [ 603.497536][T12517] tunl0: left allmulticast mode [ 603.518045][T12517] gre0: left promiscuous mode [ 603.536952][T12517] gre0: left allmulticast mode [ 603.610220][T12517] gretap0: left promiscuous mode [ 603.615842][T12517] gretap0: left allmulticast mode [ 603.655947][ T9] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 603.670973][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 603.692915][T12517] erspan0: left promiscuous mode [ 603.699100][T12517] erspan0: left allmulticast mode [ 603.708330][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 603.727200][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 603.755720][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 603.767196][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.796822][ T9] usb 2-1: Product: syz [ 603.812571][T12517] ip_vti0: left promiscuous mode [ 603.821045][T12517] ip_vti0: left allmulticast mode [ 603.830844][ T9] usb 2-1: Manufacturer: syz [ 603.838393][T12517] ip6_vti0: left promiscuous mode [ 603.843766][T12517] ip6_vti0: left allmulticast mode [ 603.864544][ T9] usb 2-1: SerialNumber: syz [ 603.878938][ T9] usb 2-1: config 0 descriptor?? [ 603.896939][T12517] sit0: left promiscuous mode [ 603.911674][ T9] adutux 2-1:0.0: interrupt endpoints not found [ 603.955337][T12517] sit0: left allmulticast mode [ 604.265510][T12517] ip6tnl0: left promiscuous mode [ 604.289617][T12517] ip6tnl0: left allmulticast mode [ 604.390943][T12517] ip6gre0: left promiscuous mode [ 604.398477][T12517] ip6gre0: left allmulticast mode [ 604.540560][T12517] syz_tun: left promiscuous mode [ 604.549439][T12517] syz_tun: left allmulticast mode [ 604.693801][T12517] ip6gretap0: left promiscuous mode [ 604.708131][T12517] ip6gretap0: left allmulticast mode [ 604.776239][T11484] usb 4-1: USB disconnect, device number 15 [ 604.882411][T12517] bridge0: left promiscuous mode [ 604.924304][T12517] bridge0: left allmulticast mode [ 604.994323][T12517] vcan0: left promiscuous mode [ 605.033541][T12517] vcan0: left allmulticast mode [ 605.121997][T12517] bond0: left promiscuous mode [ 605.130024][T12517] bond_slave_0: left promiscuous mode [ 605.153762][T12517] bond_slave_1: left promiscuous mode [ 605.182321][T12517] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 605.321836][T12517] bond0: left allmulticast mode [ 605.350967][T12517] bond_slave_0: left allmulticast mode [ 605.362914][T12517] bond_slave_1: left allmulticast mode [ 605.369438][T12517] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 605.386902][T12517] team0: left promiscuous mode [ 605.391706][T12517] team_slave_0: left promiscuous mode [ 605.397537][T12517] team_slave_1: left promiscuous mode [ 605.403206][T12517] team0: left allmulticast mode [ 605.408078][T12517] team_slave_0: left allmulticast mode [ 605.416036][T12517] team_slave_1: left allmulticast mode [ 605.426258][T12517] dummy0: left promiscuous mode [ 605.431213][T12517] dummy0: left allmulticast mode [ 605.446224][T12517] nlmon0: left promiscuous mode [ 605.451116][T12517] nlmon0: left allmulticast mode [ 605.461595][T12517] caif0: left promiscuous mode [ 605.466683][T12517] caif0: left allmulticast mode [ 605.471781][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1676'. [ 605.498876][T12518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 606.135331][ T28] usb 2-1: USB disconnect, device number 26 [ 608.133927][T12559] block nbd2: shutting down sockets [ 608.542154][ T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 608.657456][T12580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1685'. [ 608.805303][T12580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 608.855962][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.872642][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 608.892888][ T8] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 608.914368][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.922372][ T8] usb 4-1: Product: syz [ 609.034959][ T8] usb 4-1: Manufacturer: syz [ 609.047003][ T8] usb 4-1: SerialNumber: syz [ 609.102556][T12583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1687'. [ 609.134145][T12583] lo: left promiscuous mode [ 609.138869][T12583] lo: left allmulticast mode [ 609.171861][ T8] usb 4-1: config 0 descriptor?? [ 609.179962][ T8] adutux 4-1:0.0: interrupt endpoints not found [ 609.340581][T12583] tunl0: left promiscuous mode [ 609.380403][T12583] tunl0: left allmulticast mode [ 609.475522][T12583] gre0: left promiscuous mode [ 609.480327][T12583] gre0: left allmulticast mode [ 609.768206][T12583] gretap0: left promiscuous mode [ 609.789866][T12583] gretap0: left allmulticast mode [ 609.995159][T12583] erspan0: left promiscuous mode [ 610.056232][T12583] erspan0: left allmulticast mode [ 610.202169][T12583] ip_vti0: left promiscuous mode [ 610.218950][T12583] ip_vti0: left allmulticast mode [ 610.382853][T12583] ip6_vti0: left promiscuous mode [ 610.463767][T12583] ip6_vti0: left allmulticast mode [ 610.578129][T12583] sit0: left promiscuous mode [ 610.590475][T12583] sit0: left allmulticast mode [ 610.591923][T12597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1690'. [ 610.936577][T12583] ip6tnl0: left promiscuous mode [ 610.950949][T12583] ip6tnl0: left allmulticast mode [ 610.984510][T12583] ip6gre0: left promiscuous mode [ 611.000696][T12583] ip6gre0: left allmulticast mode [ 611.043157][T12583] syz_tun: left promiscuous mode [ 611.099691][T12583] ip6gretap0: left promiscuous mode [ 611.105248][T12583] ip6gretap0: left allmulticast mode [ 611.137101][T12583] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.145098][T12583] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.153473][T12583] bridge0: left promiscuous mode [ 611.160036][T12583] bridge0: left allmulticast mode [ 611.177674][ T8] usb 4-1: USB disconnect, device number 16 [ 611.213663][T12583] vcan0: left promiscuous mode [ 611.218517][T12583] vcan0: left allmulticast mode [ 611.241565][T12583] bond0: left promiscuous mode [ 611.251046][T12583] bond_slave_0: left promiscuous mode [ 611.257051][T12583] bond_slave_1: left promiscuous mode [ 611.266863][T12583] bond0: left allmulticast mode [ 611.271895][T12583] bond_slave_0: left allmulticast mode [ 611.277933][T12583] bond_slave_1: left allmulticast mode [ 611.308445][T12583] team0: left promiscuous mode [ 611.313976][T12583] team_slave_0: left promiscuous mode [ 611.320558][T12583] team_slave_1: left promiscuous mode [ 611.326692][T12583] team0: left allmulticast mode [ 611.331551][T12583] team_slave_0: left allmulticast mode [ 611.337183][T12583] team_slave_1: left allmulticast mode [ 611.365158][T12583] dummy0: left promiscuous mode [ 611.375527][T12583] dummy0: left allmulticast mode [ 611.416540][T12583] nlmon0: left promiscuous mode [ 611.421642][T12583] nlmon0: left allmulticast mode [ 611.452035][T12583] caif0: left promiscuous mode [ 611.458086][T12583] caif0: left allmulticast mode [ 611.881026][T12583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.947582][T12583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.970423][T12583] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.998591][T12583] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.036372][T12583] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.071607][T12583] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.375051][T12583] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 613.400807][T12583] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 613.430801][T12583] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 613.460637][T12583] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 613.492763][T12583] geneve2: left promiscuous mode [ 613.501493][T12583] geneve2: left allmulticast mode [ 613.572818][T12631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1695'. [ 613.588955][T12637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1697'. [ 613.599806][T12631] netlink: 'syz.1.1695': attribute type 5 has an invalid length. [ 613.702568][T12631] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1695'. [ 614.673189][T11484] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 614.857790][T11484] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.868985][T11484] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 614.885662][T11484] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 614.894837][T11484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.902845][T11484] usb 4-1: Product: syz [ 614.907258][T11484] usb 4-1: Manufacturer: syz [ 614.911918][T11484] usb 4-1: SerialNumber: syz [ 614.922550][T11484] usb 4-1: config 0 descriptor?? [ 614.947654][T11484] adutux 4-1:0.0: interrupt endpoints not found [ 615.604852][T12676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1705'. [ 617.977597][T11484] usb 4-1: USB disconnect, device number 17 [ 619.025732][T12709] Process accounting resumed [ 619.143929][T12712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1709'. [ 619.156555][T12712] lo: entered promiscuous mode [ 619.161444][T12712] lo: entered allmulticast mode [ 619.237185][T12712] tunl0: entered promiscuous mode [ 619.244190][T12712] tunl0: entered allmulticast mode [ 619.355896][T12712] gre0: entered promiscuous mode [ 619.363452][T12712] gre0: entered allmulticast mode [ 619.394796][T12712] gretap0: entered promiscuous mode [ 619.400105][T12712] gretap0: entered allmulticast mode [ 619.428342][T12712] erspan0: entered promiscuous mode [ 619.448001][T12712] erspan0: entered allmulticast mode [ 619.518455][T12712] ip_vti0: entered promiscuous mode [ 619.546210][T12712] ip_vti0: entered allmulticast mode [ 619.685317][T12712] ip6_vti0: entered promiscuous mode [ 619.736076][T12712] ip6_vti0: entered allmulticast mode [ 619.868432][T12712] sit0: entered promiscuous mode [ 619.917499][T12712] sit0: entered allmulticast mode [ 620.079354][T12712] ip6tnl0: entered promiscuous mode [ 620.101805][T12712] ip6tnl0: entered allmulticast mode [ 620.127385][T12712] ip6gre0: entered promiscuous mode [ 620.147916][T12712] ip6gre0: entered allmulticast mode [ 620.172606][T12712] syz_tun: entered promiscuous mode [ 620.191806][T12712] syz_tun: entered allmulticast mode [ 620.215084][T12712] ip6gretap0: entered promiscuous mode [ 620.228751][T12712] ip6gretap0: entered allmulticast mode [ 620.260458][T12712] bridge0: entered promiscuous mode [ 620.299604][T12712] bridge0: entered allmulticast mode [ 620.638205][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 620.763027][T12712] vcan0: entered promiscuous mode [ 620.790463][T12712] vcan0: entered allmulticast mode [ 620.838365][T12712] bond0: entered promiscuous mode [ 620.859773][T12712] bond_slave_0: entered promiscuous mode [ 620.905028][T12712] bond_slave_1: entered promiscuous mode [ 620.915509][T12712] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 620.922683][T12712] bond0: entered allmulticast mode [ 620.932515][T12712] bond_slave_0: entered allmulticast mode [ 620.939039][T12712] bond_slave_1: entered allmulticast mode [ 620.945087][T12712] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 620.954680][T12712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.962055][T12712] team0: entered promiscuous mode [ 620.968149][T12712] team_slave_0: entered promiscuous mode [ 620.976901][T12712] team_slave_1: entered promiscuous mode [ 620.982709][T12712] team0: entered allmulticast mode [ 620.988130][T12712] team_slave_0: entered allmulticast mode [ 620.994056][T12712] team_slave_1: entered allmulticast mode [ 621.000433][T12712] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.008347][T12712] dummy0: entered promiscuous mode [ 621.013525][T12712] dummy0: entered allmulticast mode [ 621.020207][T12712] nlmon0: entered promiscuous mode [ 621.025516][T12712] nlmon0: entered allmulticast mode [ 621.031654][T12712] caif0: entered promiscuous mode [ 621.038445][T12712] caif0: entered allmulticast mode [ 621.043958][T12712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 621.224997][ T8] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 621.383733][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1717'. [ 623.478319][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.503775][ T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 623.813216][ T8] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 623.883143][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.956043][ T8] usb 3-1: Product: syz [ 623.988767][ T8] usb 3-1: Manufacturer: syz [ 623.997214][ T8] usb 3-1: SerialNumber: syz [ 624.010214][ T8] usb 3-1: config 0 descriptor?? [ 624.017324][ T8] usb 3-1: can't set config #0, error -71 [ 624.040594][ T8] usb 3-1: USB disconnect, device number 31 [ 624.132215][T12766] Process accounting resumed [ 624.507765][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.518514][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.425536][T12784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1725'. [ 626.989618][T12804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1729'. [ 627.189801][T12814] Process accounting resumed [ 627.527939][T12822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1735'. [ 630.127122][T12831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1737'. [ 631.259553][T12842] Process accounting resumed [ 633.181648][T12884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1747'. [ 633.299080][T12884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 633.374657][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1749'. [ 633.553054][ T8] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 635.375064][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 635.393056][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 635.415080][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 635.452111][ T8] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 635.461535][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.470444][ T8] usb 3-1: Product: syz [ 635.476317][ T8] usb 3-1: Manufacturer: syz [ 635.481014][ T8] usb 3-1: SerialNumber: syz [ 635.497456][ T8] usb 3-1: config 0 descriptor?? [ 635.505850][ T8] adutux 3-1:0.0: interrupt endpoints not found [ 635.654618][T12904] fuse: Bad value for 'group_id' [ 635.686890][T12904] Process accounting resumed [ 637.185237][ T5848] usb 3-1: USB disconnect, device number 32 [ 638.045403][T12952] fuse: Bad value for 'group_id' [ 638.075051][T12952] Process accounting resumed [ 638.152010][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1765'. [ 638.190243][T12959] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1766'. [ 638.576109][ T8] Process accounting resumed [ 638.910924][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1769'. [ 638.943004][T12991] lo: left promiscuous mode [ 638.948511][T12991] lo: left allmulticast mode [ 639.028820][T12991] tunl0: left promiscuous mode [ 639.038692][T12991] tunl0: left allmulticast mode [ 639.175901][T12991] gre0: left promiscuous mode [ 639.190489][T12961] Process accounting resumed [ 639.210364][T12991] gre0: left allmulticast mode [ 639.288081][T12991] gretap0: left promiscuous mode [ 639.308332][T12991] gretap0: left allmulticast mode [ 639.347522][T12991] erspan0: left promiscuous mode [ 639.352672][T12991] erspan0: left allmulticast mode [ 639.385317][T12991] ip_vti0: left promiscuous mode [ 639.390475][T12991] ip_vti0: left allmulticast mode [ 639.419583][T12991] ip6_vti0: left promiscuous mode [ 639.440605][T12991] ip6_vti0: left allmulticast mode [ 639.470295][T12991] sit0: left promiscuous mode [ 639.490234][T12991] sit0: left allmulticast mode [ 639.518166][T12991] ip6tnl0: left promiscuous mode [ 639.628586][T12991] ip6tnl0: left allmulticast mode [ 639.708127][T12991] ip6gre0: left promiscuous mode [ 639.737835][T12991] ip6gre0: left allmulticast mode [ 639.840113][T12991] ip6gretap0: left promiscuous mode [ 639.904719][T12991] ip6gretap0: left allmulticast mode [ 639.988748][T12991] bridge0: left promiscuous mode [ 640.074855][T12991] bridge0: left allmulticast mode [ 640.138809][T12991] bond0: left promiscuous mode [ 640.178510][T12991] bond_slave_0: left promiscuous mode [ 640.227767][T12991] bond_slave_1: left promiscuous mode [ 640.259889][T12991] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 640.284998][T12991] bond0: left allmulticast mode [ 640.306653][T12991] bond_slave_0: left allmulticast mode [ 640.321434][T12991] bond_slave_1: left allmulticast mode [ 640.360261][T12991] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 640.435496][T12991] team0: left promiscuous mode [ 640.440287][T12991] team_slave_0: left promiscuous mode [ 640.585674][T12991] team_slave_1: left promiscuous mode [ 640.653260][T12991] team0: left allmulticast mode [ 640.673007][T12991] team_slave_0: left allmulticast mode [ 640.693544][T12991] team_slave_1: left allmulticast mode [ 640.729104][T12991] dummy0: left promiscuous mode [ 640.774010][T12991] dummy0: left allmulticast mode [ 640.814568][T12991] nlmon0: left promiscuous mode [ 640.825493][T13023] fuse: Bad value for 'group_id' [ 640.843032][T12991] nlmon0: left allmulticast mode [ 640.903253][T12991] caif0: left promiscuous mode [ 640.913199][T12991] caif0: left allmulticast mode [ 640.940790][T12991] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 640.971374][T13023] Process accounting resumed [ 641.045757][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1770'. [ 641.284328][T13011] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 641.879194][T13034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1779'. [ 642.573056][ T8] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 642.773330][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 642.788821][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 642.800389][ T8] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 642.810093][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.827228][ T8] usb 4-1: config 0 descriptor?? [ 643.093469][ T8] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 643.341145][ T8] usb 4-1: USB disconnect, device number 18 [ 643.483104][ T55] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 643.673155][ T55] usb 3-1: Using ep0 maxpacket: 8 [ 643.681144][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 643.702167][ T55] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 643.711825][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.746675][ T55] usb 3-1: config 0 descriptor?? [ 644.002307][ T55] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 644.326922][ T55] usb 3-1: USB disconnect, device number 33 [ 646.334268][T13115] trusted_key: encrypted_key: insufficient parameters specified [ 647.086088][T13133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1795'. [ 649.246676][T11484] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 649.413445][T13161] trusted_key: encrypted_key: insufficient parameters specified [ 649.453213][T11484] usb 3-1: Using ep0 maxpacket: 8 [ 649.487000][T11484] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 649.552859][T11484] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 649.575425][T11484] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.597159][T11484] usb 3-1: config 0 descriptor?? [ 649.849248][T11484] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 650.438906][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1804'. [ 650.448277][T13178] netlink: 'syz.1.1804': attribute type 5 has an invalid length. [ 650.456555][T13178] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1804'. [ 650.509141][ T9] usb 3-1: USB disconnect, device number 34 [ 651.350890][T13195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1806'. [ 651.361323][T13195] lo: left promiscuous mode [ 651.370724][T13195] lo: left allmulticast mode [ 651.415189][T13195] tunl0: left promiscuous mode [ 651.432045][T13195] tunl0: left allmulticast mode [ 651.654085][T13195] gre0: left promiscuous mode [ 651.665221][T13195] gre0: left allmulticast mode [ 652.239904][T13195] gretap0: left promiscuous mode [ 652.267955][T13195] gretap0: left allmulticast mode [ 652.356419][T13195] erspan0: left promiscuous mode [ 652.365112][T13195] erspan0: left allmulticast mode [ 652.410520][T13195] ip_vti0: left promiscuous mode [ 652.417926][T13195] ip_vti0: left allmulticast mode [ 652.441626][T13195] ip6_vti0: left promiscuous mode [ 652.448580][T13195] ip6_vti0: left allmulticast mode [ 652.470925][T13195] sit0: left promiscuous mode [ 652.475878][T13195] sit0: left allmulticast mode [ 652.517360][T13195] ip6tnl0: left promiscuous mode [ 652.522567][T13195] ip6tnl0: left allmulticast mode [ 652.545840][T13195] ip6gre0: left promiscuous mode [ 652.550955][T13195] ip6gre0: left allmulticast mode [ 652.571334][T13213] trusted_key: encrypted_key: insufficient parameters specified [ 652.585194][T13195] syz_tun: left promiscuous mode [ 652.590158][T13195] syz_tun: left allmulticast mode [ 652.611303][T13195] ip6gretap0: left promiscuous mode [ 652.616997][T13195] ip6gretap0: left allmulticast mode [ 652.637653][T13195] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.645013][T13195] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.652396][T13195] bridge0: left promiscuous mode [ 652.658001][T13195] bridge0: left allmulticast mode [ 652.679296][T13195] vcan0: left promiscuous mode [ 652.684203][T13195] vcan0: left allmulticast mode [ 652.693875][T13195] bond0: left promiscuous mode [ 652.698661][T13195] bond_slave_0: left promiscuous mode [ 652.704602][T13195] bond_slave_1: left promiscuous mode [ 652.710154][T13195] bond0: left allmulticast mode [ 652.715528][T13195] bond_slave_0: left allmulticast mode [ 652.721083][T13195] bond_slave_1: left allmulticast mode [ 652.745346][T13195] team0: left promiscuous mode [ 652.750267][T13195] team_slave_0: left promiscuous mode [ 652.757371][T13195] team_slave_1: left promiscuous mode [ 652.762864][T13195] team0: left allmulticast mode [ 652.768744][T13195] team_slave_0: left allmulticast mode [ 652.776212][T13195] team_slave_1: left allmulticast mode [ 652.796067][T13195] dummy0: left promiscuous mode [ 652.800947][T13195] dummy0: left allmulticast mode [ 652.820041][T13195] nlmon0: left promiscuous mode [ 652.825942][T13195] nlmon0: left allmulticast mode [ 652.834383][T13195] caif0: left promiscuous mode [ 652.845826][T13195] caif0: left allmulticast mode [ 653.076706][T13195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 653.116821][T13195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 653.415961][T13195] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.425580][T13195] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.434561][T13195] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.445840][T13195] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.597438][T13221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1813'. [ 653.816619][T13227] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1816'. [ 654.210502][T13241] No buffer was provided with the request [ 654.813075][T13253] trusted_key: encrypted_key: insufficient parameters specified [ 655.673006][ T55] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 657.455183][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 657.473135][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 657.483272][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 255, changing to 11 [ 657.483287][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 657.504285][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 59391, setting to 1024 [ 657.518391][ T55] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 657.530943][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.540690][ T55] usb 4-1: Product: syz [ 657.545134][ T55] usb 4-1: Manufacturer: syz [ 657.551205][ T55] usb 4-1: SerialNumber: syz [ 657.559481][ T55] usb 4-1: config 0 descriptor?? [ 657.574024][T13263] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 657.613134][T11484] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 657.673879][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.684685][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 657.710859][ T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 657.720192][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.728309][ T9] usb 3-1: Product: syz [ 657.733319][ T9] usb 3-1: Manufacturer: syz [ 657.738058][ T9] usb 3-1: SerialNumber: syz [ 657.747248][ T9] usb 3-1: config 0 descriptor?? [ 657.755020][ T9] adutux 3-1:0.0: interrupt endpoints not found [ 657.795090][T11484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 657.797498][ T55] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 657.811858][T11484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 657.825004][T11484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 255, changing to 11 [ 657.837940][T11484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 59391, setting to 1024 [ 657.851942][T11484] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 657.866431][T11484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.887439][T11484] usb 2-1: Product: syz [ 657.892850][T11484] usb 2-1: Manufacturer: syz [ 657.908292][T11484] usb 2-1: SerialNumber: syz [ 657.923694][T11484] usb 2-1: config 0 descriptor?? [ 657.933723][T13280] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 658.014424][ T9] usb 4-1: USB disconnect, device number 19 [ 658.147920][T11484] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 658.248338][T13312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1833'. [ 658.282054][T13312] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 658.354446][ T55] usb 2-1: USB disconnect, device number 27 [ 658.790961][T13327] No buffer was provided with the request [ 659.597752][T13340] trusted_key: encrypted_key: insufficient parameters specified [ 660.503417][T11484] usb 3-1: USB disconnect, device number 35 [ 660.845491][T13353] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 661.333225][ T23] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 662.593833][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 662.605288][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 662.615057][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 255, changing to 11 [ 662.643689][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 59391, setting to 1024 [ 662.675924][ T23] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 662.686124][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.694433][ T23] usb 4-1: Product: syz [ 662.700321][ T23] usb 4-1: Manufacturer: syz [ 662.730499][ T23] usb 4-1: SerialNumber: syz [ 662.756283][ T23] usb 4-1: config 0 descriptor?? [ 662.786344][T13370] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 662.894729][T13396] trusted_key: encrypted_key: insufficient parameters specified [ 663.137990][ T23] adutux 4-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 663.189387][ T23] usb 4-1: USB disconnect, device number 20 [ 663.529427][T13415] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1849'. [ 666.750273][T13455] trusted_key: encrypted_key: insufficient parameters specified [ 667.112572][T13465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1855'. [ 667.122438][T13465] netlink: 'syz.1.1855': attribute type 5 has an invalid length. [ 667.154036][T13465] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1855'. [ 667.363137][T11484] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 667.574745][T11484] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.595551][T11484] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 667.606813][T11484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.683167][T11484] usb 4-1: Product: syz [ 667.695925][T11484] usb 4-1: Manufacturer: syz [ 667.719466][T11484] usb 4-1: SerialNumber: syz [ 667.738178][T11484] usb 4-1: config 0 descriptor?? [ 667.764718][T11484] adutux 4-1:0.0: interrupt endpoints not found [ 668.145785][T13505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1868'. [ 668.157637][T13505] lo: entered promiscuous mode [ 668.162769][T13505] lo: entered allmulticast mode [ 668.190792][T13505] tunl0: entered promiscuous mode [ 668.196212][T13505] tunl0: entered allmulticast mode [ 668.229622][T13505] gre0: entered promiscuous mode [ 668.253579][T13505] gre0: entered allmulticast mode [ 668.288323][T13505] gretap0: entered promiscuous mode [ 668.293999][T13505] gretap0: entered allmulticast mode [ 668.303304][T13505] erspan0: entered promiscuous mode [ 668.308873][T13505] erspan0: entered allmulticast mode [ 668.325613][T13505] ip_vti0: entered promiscuous mode [ 668.354744][T13505] ip_vti0: entered allmulticast mode [ 668.366792][T13505] ip6_vti0: entered promiscuous mode [ 668.373182][T13505] ip6_vti0: entered allmulticast mode [ 668.382599][T13505] sit0: entered promiscuous mode [ 668.388051][T13505] sit0: entered allmulticast mode [ 668.398178][T13505] ip6tnl0: entered promiscuous mode [ 668.407816][T13505] ip6tnl0: entered allmulticast mode [ 668.552538][T13505] ip6gre0: entered promiscuous mode [ 668.578804][T13505] ip6gre0: entered allmulticast mode [ 668.603687][T13505] ip6gretap0: entered promiscuous mode [ 668.627653][T13505] ip6gretap0: entered allmulticast mode [ 668.665906][T13505] bridge0: entered promiscuous mode [ 668.694258][T13505] bridge0: entered allmulticast mode [ 668.727903][T13505] bond0: entered promiscuous mode [ 668.786508][T13505] bond_slave_0: entered promiscuous mode [ 668.832215][T13505] bond_slave_1: entered promiscuous mode [ 668.860411][T13505] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 668.955049][T13516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1871'. [ 669.129353][T13518] trusted_key: encrypted_key: insufficient parameters specified [ 670.529885][T11484] usb 4-1: USB disconnect, device number 21 [ 670.812617][T13505] bond0: entered allmulticast mode [ 670.853132][T13505] bond_slave_0: entered allmulticast mode [ 670.858875][T13505] bond_slave_1: entered allmulticast mode [ 670.940746][T13505] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 670.984622][T13505] team0: entered promiscuous mode [ 671.006055][T13505] team_slave_0: entered promiscuous mode [ 671.028741][T13505] team_slave_1: entered promiscuous mode [ 671.051946][T13505] team0: entered allmulticast mode [ 671.072573][T13505] team_slave_0: entered allmulticast mode [ 671.093513][T13505] team_slave_1: entered allmulticast mode [ 671.115255][T13505] dummy0: entered promiscuous mode [ 671.132802][T13505] dummy0: entered allmulticast mode [ 671.151152][T13505] nlmon0: entered promiscuous mode [ 671.161782][T13505] nlmon0: entered allmulticast mode [ 671.182031][T13505] caif0: entered promiscuous mode [ 671.188793][T13505] caif0: entered allmulticast mode [ 671.198212][T13505] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 671.433617][T13534] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1875'. [ 671.863053][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1879'. [ 671.873966][T13549] lo: entered promiscuous mode [ 671.878818][T13549] lo: entered allmulticast mode [ 671.921697][T13549] tunl0: entered promiscuous mode [ 671.929550][T13549] tunl0: entered allmulticast mode [ 672.005904][T13549] gre0: entered promiscuous mode [ 672.034493][T13549] gre0: entered allmulticast mode [ 672.062880][T13549] gretap0: entered promiscuous mode [ 672.068278][T13549] gretap0: entered allmulticast mode [ 672.083113][T13549] erspan0: entered promiscuous mode [ 672.088549][T13549] erspan0: entered allmulticast mode [ 672.118892][T13549] ip_vti0: entered promiscuous mode [ 672.144969][T13549] ip_vti0: entered allmulticast mode [ 672.182795][T13549] ip6_vti0: entered promiscuous mode [ 672.219725][T13549] ip6_vti0: entered allmulticast mode [ 672.267521][T13549] sit0: entered promiscuous mode [ 672.291092][T13549] sit0: entered allmulticast mode [ 672.376729][T13549] ip6tnl0: entered promiscuous mode [ 672.412885][T13549] ip6tnl0: entered allmulticast mode [ 672.454737][T13549] ip6gre0: entered promiscuous mode [ 672.459966][T13549] ip6gre0: entered allmulticast mode [ 672.490204][T13549] syz_tun: entered promiscuous mode [ 672.512629][T13549] syz_tun: entered allmulticast mode [ 672.533112][T13549] ip6gretap0: entered promiscuous mode [ 672.557635][T13549] ip6gretap0: entered allmulticast mode [ 672.585265][T13549] bridge0: entered promiscuous mode [ 672.605383][T13549] bridge0: entered allmulticast mode [ 672.617734][T13554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1888'. [ 672.681615][T13549] vcan0: entered promiscuous mode [ 672.701105][T13549] vcan0: entered allmulticast mode [ 672.712311][T13549] bond0: entered promiscuous mode [ 672.736464][T13549] bond_slave_0: entered promiscuous mode [ 672.762761][T13549] bond_slave_1: entered promiscuous mode [ 672.768639][T13549] bond0: entered allmulticast mode [ 672.784250][T13549] bond_slave_0: entered allmulticast mode [ 672.798341][T13549] bond_slave_1: entered allmulticast mode [ 672.820643][T13549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.837595][T13549] team0: entered promiscuous mode [ 672.847119][T13549] team_slave_0: entered promiscuous mode [ 672.856681][T13549] team_slave_1: entered promiscuous mode [ 672.862527][T13549] team0: entered allmulticast mode [ 672.871050][T13549] team_slave_0: entered allmulticast mode [ 672.878205][T13549] team_slave_1: entered allmulticast mode [ 672.888844][T13549] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.897440][T13549] dummy0: entered promiscuous mode [ 672.902738][T13549] dummy0: entered allmulticast mode [ 672.924667][T13549] nlmon0: entered promiscuous mode [ 672.930073][T13549] nlmon0: entered allmulticast mode [ 672.939576][T13549] caif0: entered promiscuous mode [ 672.945521][T13549] caif0: entered allmulticast mode [ 672.951070][T13549] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 673.473028][ T28] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 675.795281][T13582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1882'. [ 675.805874][T13582] netlink: 'syz.3.1882': attribute type 5 has an invalid length. [ 675.813873][T13582] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1882'. [ 675.836954][T13582] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 675.845719][T13582] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 675.854396][T13582] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 675.863050][T13582] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 675.871803][T13582] geneve2: entered promiscuous mode [ 675.877086][T13582] geneve2: entered allmulticast mode [ 676.014813][ T28] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.042539][ T28] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 676.054646][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.082250][ T28] usb 2-1: Product: syz [ 676.116022][ T28] usb 2-1: Manufacturer: syz [ 676.120626][ T28] usb 2-1: SerialNumber: syz [ 676.141473][ T28] usb 2-1: config 0 descriptor?? [ 676.165498][T13594] fuse: Unknown parameter 'grou00000000000000000000' [ 676.207259][ T28] usb 2-1: can't set config #0, error -71 [ 676.246711][ T28] usb 2-1: USB disconnect, device number 28 [ 676.263219][ T1195] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 676.363862][T13594] Process accounting resumed [ 676.550615][ T1195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 676.582152][ T1195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 676.614290][ T1195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 255, changing to 11 [ 676.626806][ T1195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 59391, setting to 1024 [ 676.648222][ T1195] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 676.665775][ T1195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.674168][ T1195] usb 3-1: Product: syz [ 676.693066][ T1195] usb 3-1: Manufacturer: syz [ 676.707935][ T1195] usb 3-1: SerialNumber: syz [ 676.731533][ T1195] usb 3-1: config 0 descriptor?? [ 676.763724][T13588] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 676.771587][T13609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1887'. [ 676.921720][T13609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 677.064030][ T1195] adutux 3-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 677.969920][ T1195] usb 3-1: USB disconnect, device number 36 [ 678.413224][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1893'. [ 679.102037][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1892'. [ 679.251497][T13641] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 679.487339][T13649] fuse: Unknown parameter 'group_i00000000000000000000' [ 679.557950][T13649] Process accounting resumed [ 679.701677][T13654] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1899'. [ 680.897158][T13669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1901'. [ 681.029128][T13680] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1904'. [ 681.193538][ T1195] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 681.585283][ T1195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 683.139908][ T1195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 683.150803][ T1195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 255, changing to 11 [ 683.535110][ T1195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 59391, setting to 1024 [ 683.597586][ T1195] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 683.608146][ T1195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.625776][ T1195] usb 2-1: Product: syz [ 683.635134][ T1195] usb 2-1: Manufacturer: syz [ 683.639822][ T1195] usb 2-1: SerialNumber: syz [ 683.646338][ T1195] usb 2-1: config 0 descriptor?? [ 683.667936][T13689] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1907'. [ 683.678088][T13672] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 683.903166][ T8] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 683.925772][ T1195] adutux 2-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 683.961431][ T1195] usb 2-1: USB disconnect, device number 29 [ 684.114921][T13716] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1910'. [ 684.129537][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.160789][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 684.195581][ T8] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 684.214629][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.234218][ T8] usb 4-1: Product: syz [ 684.238402][ T8] usb 4-1: Manufacturer: syz [ 684.449752][ T8] usb 4-1: SerialNumber: syz [ 684.716764][ T8] usb 4-1: config 0 descriptor?? [ 684.743103][ T8] adutux 4-1:0.0: interrupt endpoints not found [ 684.810980][T13732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1914'. [ 684.936522][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1915'. [ 685.946533][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.757833][T13755] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 686.773456][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.903504][ T28] usb 4-1: USB disconnect, device number 22 [ 688.495461][T13786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1925'. [ 688.756229][T13790] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1926'. [ 689.300045][T13796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1928'. [ 689.865203][ T8] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 690.022211][T13819] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1931'. [ 690.116463][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.127453][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 690.157625][ T8] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 690.169794][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.185858][ T8] usb 3-1: Product: syz [ 690.191422][ T8] usb 3-1: Manufacturer: syz [ 690.198821][ T8] usb 3-1: SerialNumber: syz [ 690.220936][ T8] usb 3-1: config 0 descriptor?? [ 690.242503][ T8] adutux 3-1:0.0: interrupt endpoints not found [ 691.525970][T13842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1936'. [ 692.439219][ T8] usb 3-1: USB disconnect, device number 37 [ 693.713943][T13880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1947'. [ 694.197268][T13876] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1946'. [ 694.540565][T13892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1950'. [ 694.881904][T13898] input: syz1 as /devices/virtual/input/input11 [ 695.223487][T11153] Bluetooth: hci3: command 0x0406 tx timeout [ 695.430443][T13908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1951'. [ 695.440261][T13908] netlink: 'syz.0.1951': attribute type 5 has an invalid length. [ 695.448298][ T55] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 695.455930][T13908] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1951'. [ 695.907894][ T55] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 695.925960][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.013412][ T55] usb 4-1: Product: syz [ 696.018968][ T55] usb 4-1: Manufacturer: syz [ 696.035036][ T55] usb 4-1: SerialNumber: syz [ 696.774136][ T55] usb 4-1: config 0 descriptor?? [ 697.413790][ T1195] usb 4-1: USB disconnect, device number 23 [ 699.033250][T13973] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1959'. [ 701.342245][T14009] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1968'. [ 701.624123][T14014] input: syz1 as /devices/virtual/input/input12 [ 701.628654][T14016] input: syz1 as /devices/virtual/input/input13 [ 701.993938][ T8] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 702.053042][ T28] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 702.116317][T14036] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1974'. [ 702.257569][ T28] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 702.266868][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.279627][ T28] usb 4-1: Product: syz [ 702.284838][ T28] usb 4-1: Manufacturer: syz [ 702.288009][ T8] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 702.296580][ T28] usb 4-1: SerialNumber: syz [ 702.298734][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.311754][ T8] usb 2-1: Product: syz [ 702.312829][ T28] usb 4-1: config 0 descriptor?? [ 702.315971][ T8] usb 2-1: Manufacturer: syz [ 702.315987][ T8] usb 2-1: SerialNumber: syz [ 702.318195][ T8] usb 2-1: config 0 descriptor?? [ 703.106682][ T8] usb 2-1: USB disconnect, device number 30 [ 703.167459][ T28] usb 4-1: USB disconnect, device number 24 [ 703.854336][T12304] udevd[12304]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 703.945505][T12307] udevd[12307]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 704.133874][T14091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1977'. [ 704.716731][T14096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1979'. [ 705.004164][T14101] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1981'. [ 705.799612][T14111] comedi comedi0: aio_iiro_16: I/O port conflict (0x5,8) [ 705.983014][ T8] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 706.153128][ T8] usb 2-1: device descriptor read/64, error -71 [ 706.280420][T14121] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1986'. [ 706.533081][ T8] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 706.594661][T14123] input: syz1 as /devices/virtual/input/input14 [ 706.693754][ T8] usb 2-1: device descriptor read/64, error -71 [ 706.748232][T14136] fuse: Bad value for 'user_id' [ 706.775192][T14133] Process accounting resumed [ 706.813283][ T8] usb usb2-port1: attempt power cycle [ 706.851083][T14142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1992'. [ 706.855254][T14143] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1993'. [ 706.993051][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 707.616071][ T9] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 707.625763][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.634110][ T9] usb 3-1: Product: syz [ 707.638290][ T9] usb 3-1: Manufacturer: syz [ 707.642865][ T9] usb 3-1: SerialNumber: syz [ 707.649616][ T9] usb 3-1: config 0 descriptor?? [ 707.654714][ T8] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 707.662346][ T1195] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 707.694117][ T8] usb 2-1: device descriptor read/8, error -71 [ 707.840361][T14164] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1996'. [ 707.863979][ T1195] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.883749][ T1195] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 707.906447][ T1195] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 708.030326][ T9] usb 3-1: USB disconnect, device number 38 [ 708.041784][ T8] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 708.053289][ T1195] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.086639][ T1195] usb 4-1: Product: syz [ 708.090843][ T1195] usb 4-1: Manufacturer: syz [ 708.120625][ T8] usb 2-1: device descriptor read/8, error -71 [ 708.130597][ T1195] usb 4-1: SerialNumber: syz [ 708.150323][ T1195] usb 4-1: config 0 descriptor?? [ 708.160090][ T1195] adutux 4-1:0.0: interrupt endpoints not found [ 708.253557][ T8] usb usb2-port1: unable to enumerate USB device [ 709.365975][T14196] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1998'. [ 709.741100][T14197] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 709.747654][T14197] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 709.760908][T14197] vhci_hcd vhci_hcd.0: Device attached [ 710.004049][T14205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2000'. [ 710.035777][ T9] usb 4-1: USB disconnect, device number 25 [ 710.110158][ T28] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 710.122170][T14205] netlink: 'syz.0.2000': attribute type 5 has an invalid length. [ 710.174358][T14205] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2000'. [ 712.403141][T14203] vhci_hcd: connection reset by peer [ 712.630712][ T63] vhci_hcd: stop threads [ 712.642535][ T63] vhci_hcd: release socket [ 712.649248][T14223] fuse: Bad value for 'fd' [ 712.655537][ T63] vhci_hcd: disconnect device [ 712.688692][T14223] Process accounting resumed [ 714.580588][T14238] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2008'. [ 714.923247][ T55] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 715.244113][ T55] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.333147][ T55] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 715.383113][ T28] vhci_hcd: vhci_device speed not set [ 715.395351][ T55] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 715.415776][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.433003][ T55] usb 3-1: Product: syz [ 715.437271][ T55] usb 3-1: Manufacturer: syz [ 715.441879][ T55] usb 3-1: SerialNumber: syz [ 715.486993][ T55] usb 3-1: config 0 descriptor?? [ 715.494734][ T55] adutux 3-1:0.0: interrupt endpoints not found [ 715.655000][T14264] fuse: Bad value for 'fd' [ 715.864467][T14265] Process accounting resumed [ 716.225642][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 716.259279][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 716.273162][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 716.284920][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 716.292518][ T50] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 716.305362][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 716.610872][T14305] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2013'. [ 717.532077][T14270] chnl_net:caif_netlink_parms(): no params data found [ 717.692180][ T28] usb 3-1: USB disconnect, device number 39 [ 718.447932][ T50] Bluetooth: hci4: command tx timeout [ 720.033133][T14461] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 720.039694][T14461] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 720.058978][T14461] vhci_hcd vhci_hcd.0: Device attached [ 720.215262][T14270] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.323007][ T23] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 720.323358][T14270] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.431792][T14270] bridge_slave_0: entered allmulticast mode [ 720.445950][T14270] bridge_slave_0: entered promiscuous mode [ 720.503055][ T50] Bluetooth: hci4: command tx timeout [ 720.531423][T14270] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.583721][T14270] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.602035][T14270] bridge_slave_1: entered allmulticast mode [ 720.619657][ T55] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 720.624053][T14270] bridge_slave_1: entered promiscuous mode [ 720.983139][ T55] usb 4-1: device descriptor read/64, error -71 [ 721.260786][T14464] vhci_hcd: connection reset by peer [ 721.266731][ T55] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 721.316172][T14506] fuse: Bad value for 'fd' [ 721.333052][ T2972] vhci_hcd: stop threads [ 721.342311][T14505] Process accounting resumed [ 721.342715][ T2972] vhci_hcd: release socket [ 721.359407][ T2972] vhci_hcd: disconnect device [ 721.443139][ T55] usb 4-1: device descriptor read/64, error -71 [ 721.564798][ T55] usb usb4-port1: attempt power cycle [ 722.075509][T14270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.117985][T14270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.273179][ T55] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 722.323850][ T55] usb 4-1: device descriptor read/8, error -71 [ 722.444563][T14270] team0: Port device team_slave_0 added [ 722.484993][T14270] team0: Port device team_slave_1 added [ 722.549674][T14270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.561583][T14270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.593375][ T50] Bluetooth: hci4: command tx timeout [ 722.617274][T14270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.661677][T14270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.668778][T14270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.695199][ T55] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 722.703056][ T5785] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 722.713346][T14270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.754062][ T55] usb 4-1: device descriptor read/8, error -71 [ 722.886249][ T55] usb usb4-port1: unable to enumerate USB device [ 722.915429][ T5785] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.936993][T14270] hsr_slave_0: entered promiscuous mode [ 722.945930][ T5785] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 722.959575][T14270] hsr_slave_1: entered promiscuous mode [ 722.969430][ T5785] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 722.979893][T14270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 722.993609][ T5785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.995840][T14270] Cannot create hsr debugfs directory [ 723.010922][ T5785] usb 2-1: Product: syz [ 723.023496][ T5785] usb 2-1: Manufacturer: syz [ 723.033317][ T5785] usb 2-1: SerialNumber: syz [ 723.071429][ T5785] usb 2-1: config 0 descriptor?? [ 723.134617][ T5785] adutux 2-1:0.0: interrupt endpoints not found [ 723.183923][ T12] bond0: (slave wlan1): Releasing backup interface [ 723.239512][ T12] mac80211_hwsim hwsim9 wlan1 (unregistering): left promiscuous mode [ 723.283513][ T12] mac80211_hwsim hwsim9 wlan1 (unregistering): left allmulticast mode [ 723.443260][T14643] input: syz1 as /devices/virtual/input/input15 [ 723.760673][ T12] hsr_slave_0: left promiscuous mode [ 723.767574][ T12] hsr_slave_1: left promiscuous mode [ 723.781683][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 723.800532][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 723.811050][ T12] bridge_slave_1: left allmulticast mode [ 723.823004][ T12] bridge_slave_1: left promiscuous mode [ 723.830128][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.845041][ T12] bridge_slave_0: left allmulticast mode [ 723.850833][ T12] bridge_slave_0: left promiscuous mode [ 723.863042][ T55] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 723.863061][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.088291][ T55] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 724.135685][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.167700][ T55] usb 4-1: Product: syz [ 724.172351][ T55] usb 4-1: Manufacturer: syz [ 724.177015][ T55] usb 4-1: SerialNumber: syz [ 724.189806][ T55] usb 4-1: config 0 descriptor?? [ 724.517083][ T9] usb 4-1: USB disconnect, device number 30 [ 724.763742][ T50] Bluetooth: hci4: command tx timeout [ 725.303587][ T9] usb 2-1: USB disconnect, device number 35 [ 725.470754][ T23] vhci_hcd: vhci_device speed not set [ 725.579525][ T12] team_slave_1 (unregistering): left promiscuous mode [ 725.586607][ T12] team_slave_1 (unregistering): left allmulticast mode [ 725.597850][ T12] team0 (unregistering): Port device team_slave_1 removed [ 725.640625][ T12] team_slave_0 (unregistering): left promiscuous mode [ 725.647573][ T12] team_slave_0 (unregistering): left allmulticast mode [ 725.657920][ T12] team0 (unregistering): Port device team_slave_0 removed [ 725.698679][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.707496][ T12] bond_slave_1 (unregistering): left promiscuous mode [ 725.716776][ T12] bond_slave_1 (unregistering): left allmulticast mode [ 725.758148][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 725.767529][ T12] bond_slave_0 (unregistering): left promiscuous mode [ 725.776175][ T12] bond_slave_0 (unregistering): left allmulticast mode [ 726.250943][ T12] bond0 (unregistering): Released all slaves [ 726.445693][T14744] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2026'. [ 726.510720][T14750] comedi comedi0: aio_iiro_16: I/O port conflict (0x5,8) [ 726.679087][T14783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2029'. [ 727.240382][ T23] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 727.423112][ T23] usb 2-1: device descriptor read/64, error -71 [ 727.696662][T14270] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 727.723080][ T23] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 727.767601][T14270] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 727.912079][T14270] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 727.922424][T14270] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 727.963066][ T23] usb 2-1: device descriptor read/64, error -71 [ 728.095250][ T23] usb usb2-port1: attempt power cycle [ 728.179492][T14270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.255065][T14852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2031'. [ 728.266827][T14852] netlink: 'syz.3.2031': attribute type 5 has an invalid length. [ 728.275116][T14852] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2031'. [ 728.315205][T14270] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.336349][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.343506][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.437501][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.444632][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.533093][ T23] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 728.569831][ T23] usb 2-1: device descriptor read/8, error -71 [ 728.569981][T14270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 728.902976][ T23] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 728.984281][ T23] usb 2-1: device descriptor read/8, error -71 [ 729.113291][ T23] usb usb2-port1: unable to enumerate USB device [ 729.336901][T14270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.451195][T14270] veth0_vlan: entered promiscuous mode [ 729.481506][T14270] veth1_vlan: entered promiscuous mode [ 729.514458][T14270] veth0_macvtap: entered promiscuous mode [ 729.535439][T14270] veth1_macvtap: entered promiscuous mode [ 729.618849][T14270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.629753][T14270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.945999][T14270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.978540][T14270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.062181][T14270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.109554][T14270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.160858][T14882] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2035'. [ 730.197623][T14885] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2034'. [ 730.614405][T14270] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.665481][T14270] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.682009][T14270] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.692177][T14270] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.906626][T14901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2036'. [ 730.944916][T14901] netlink: 'syz.1.2036': attribute type 5 has an invalid length. [ 730.959609][T14901] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2036'. [ 731.646485][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.669195][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.779191][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.803282][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.493236][ T5848] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 734.530449][T14964] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2043'. [ 734.673100][ T55] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 734.683081][ T5848] usb 3-1: Using ep0 maxpacket: 8 [ 734.710405][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 734.774401][ T8] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 734.790878][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 734.826316][ T5848] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 734.857694][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.933753][ T5848] usb 3-1: config 0 descriptor?? [ 734.943204][ T8] usb 2-1: device descriptor read/64, error -71 [ 734.963236][ T55] usb 1-1: Using ep0 maxpacket: 8 [ 734.971552][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 734.983112][ T55] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 734.992689][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.013909][ T55] usb 1-1: config 0 descriptor?? [ 735.033850][ T55] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 735.187633][ T5848] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 735.253375][ T8] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 735.527999][T14938] iowarrior 3-1:0.0: Error -90 while submitting URB [ 735.586503][ T1195] usb 3-1: USB disconnect, device number 40 [ 735.713098][ T8] usb 2-1: device descriptor read/64, error -71 [ 735.843898][ T8] usb usb2-port1: attempt power cycle [ 736.273261][ T8] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 736.314697][ T8] usb 2-1: device descriptor read/8, error -71 [ 736.388659][T15023] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2050'. [ 736.642147][ T8] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 736.683705][ T8] usb 2-1: device descriptor read/8, error -71 [ 736.783002][ T55] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 736.803367][ T8] usb usb2-port1: unable to enumerate USB device [ 736.997568][ T55] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.085223][ T55] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 737.148051][ T55] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 737.190383][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.290424][ T55] usb 3-1: Product: syz [ 737.308112][ T55] usb 3-1: Manufacturer: syz [ 737.351005][ T55] usb 3-1: SerialNumber: syz [ 737.377151][ T55] usb 3-1: config 0 descriptor?? [ 737.392781][ T5848] usb 1-1: USB disconnect, device number 3 [ 737.405139][ T55] adutux 3-1:0.0: interrupt endpoints not found [ 737.761998][T15064] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2053'. [ 738.328709][T15077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2054'. [ 738.338673][T15077] netlink: 'syz.0.2054': attribute type 5 has an invalid length. [ 738.348475][T15077] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2054'. [ 738.412478][T15077] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 738.457865][T15077] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 738.471477][T15077] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 738.487676][T15077] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 738.497820][T15077] geneve2: entered promiscuous mode [ 738.525573][T15077] geneve2: entered allmulticast mode [ 738.603417][T15082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2055'. [ 739.899336][ T8] usb 3-1: USB disconnect, device number 41 [ 740.531726][T15104] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2056'. [ 741.335787][T15117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2059'. [ 741.344899][T15117] netlink: 'syz.3.2059': attribute type 5 has an invalid length. [ 741.352818][T15117] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2059'. [ 741.565959][ T8] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 741.723196][ T8] usb 2-1: device descriptor read/64, error -71 [ 741.993037][ T8] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 742.173101][ T8] usb 2-1: device descriptor read/64, error -71 [ 742.293211][ T8] usb usb2-port1: attempt power cycle [ 742.703582][ T8] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 742.764404][ T8] usb 2-1: device descriptor read/8, error -71 [ 742.993098][ T5848] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 743.045657][ T8] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 743.104612][ T8] usb 2-1: device descriptor read/8, error -71 [ 743.192972][ T5848] usb 3-1: Using ep0 maxpacket: 8 [ 743.209760][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 743.232636][ T5848] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 743.242197][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.243726][ T8] usb usb2-port1: unable to enumerate USB device [ 743.256214][ T5848] usb 3-1: config 0 descriptor?? [ 743.277978][ T5848] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 745.884698][T11484] usb 3-1: USB disconnect, device number 42 [ 746.337670][T15174] comedi comedi0: aio_iiro_16: I/O port conflict (0x5,8) [ 747.403450][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.409803][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.186161][T15189] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 752.192709][T15189] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 752.200496][T15189] vhci_hcd vhci_hcd.0: Device attached [ 752.358560][T15203] vhci_hcd: connection closed [ 752.358784][ T8934] vhci_hcd: stop threads [ 752.382751][ T8934] vhci_hcd: release socket [ 752.397795][T15213] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2076'. [ 752.402547][ T8934] vhci_hcd: disconnect device [ 752.423086][ T23] vhci_hcd: vhci_device speed not set [ 752.537680][ T55] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 752.733243][ T55] usb 4-1: Using ep0 maxpacket: 8 [ 752.740481][ T55] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.767312][ T55] usb 4-1: config 0 has no interfaces? [ 752.772840][ T55] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 752.802976][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.818455][ T55] usb 4-1: config 0 descriptor?? [ 753.602717][T15229] comedi comedi0: aio_iiro_16: I/O port conflict (0x5,8) [ 754.451207][T15239] input: syz1 as /devices/virtual/input/input16 [ 754.893082][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 754.964238][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2084'. [ 754.974652][T15260] netlink: 'syz.1.2084': attribute type 5 has an invalid length. [ 754.982527][T15260] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2084'. [ 755.123089][ T23] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 755.139520][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.148208][ T23] usb 1-1: Product: syz [ 755.149378][T15265] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2087'. [ 755.152588][ T23] usb 1-1: Manufacturer: syz [ 755.166516][ T23] usb 1-1: SerialNumber: syz [ 755.177123][ T23] usb 1-1: config 0 descriptor?? [ 755.372644][ T23] usb 4-1: USB disconnect, device number 31 [ 755.403747][ T8] usb 1-1: USB disconnect, device number 4 [ 756.473081][T11484] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 756.653367][T11484] usb 3-1: Using ep0 maxpacket: 8 [ 756.666140][T11484] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.679158][T11484] usb 3-1: config 0 has no interfaces? [ 756.689267][T11484] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 756.706991][T11484] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.735230][T11484] usb 3-1: config 0 descriptor?? [ 756.787235][T15317] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2092'. [ 757.661402][T15336] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2097'. [ 759.051747][T15340] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 759.133001][ T28] usb 3-1: USB disconnect, device number 43 [ 761.867487][T15378] input: syz1 as /devices/virtual/input/input17 [ 762.665792][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 762.743379][T11484] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 762.859915][T15399] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2108'. [ 762.878962][ T9] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 762.894632][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.932977][T11484] usb 4-1: Using ep0 maxpacket: 8 [ 762.940904][ T9] usb 1-1: Product: syz [ 762.953584][ T9] usb 1-1: Manufacturer: syz [ 762.958290][ T9] usb 1-1: SerialNumber: syz [ 762.966733][T11484] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.983404][ T9] usb 1-1: config 0 descriptor?? [ 762.993147][T11484] usb 4-1: config 0 has no interfaces? [ 762.998659][T11484] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 763.044113][T11484] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.091824][T11484] usb 4-1: config 0 descriptor?? [ 763.194807][ T55] usb 1-1: USB disconnect, device number 5 [ 765.173837][ T9] usb 4-1: USB disconnect, device number 32 [ 766.022012][T15501] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2119'. [ 766.242619][T15456] Process accounting resumed [ 766.264075][T15503] input: syz1 as /devices/virtual/input/input18 [ 766.923134][T11484] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 767.067575][T15519] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2121'. [ 767.138635][T11484] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 767.160787][T11484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.179405][T11484] usb 3-1: Product: syz [ 767.189891][T11484] usb 3-1: Manufacturer: syz [ 767.230444][T11484] usb 3-1: SerialNumber: syz [ 767.241977][T15525] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2123'. [ 767.254416][T11484] usb 3-1: config 0 descriptor?? [ 767.282988][ T23] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 767.482979][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 767.492177][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.529200][T11484] usb 3-1: USB disconnect, device number 44 [ 767.662989][ T23] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 767.765141][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.939656][ T23] usb 2-1: config 0 descriptor?? [ 767.963449][ T23] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 769.675907][T15572] trusted_key: encrypted_key: insufficient parameters specified [ 770.066317][ T23] usb 2-1: USB disconnect, device number 48 [ 770.107381][T15575] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2129'. [ 770.588776][T15596] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2133'. [ 771.105853][T15599] comedi comedi0: aio_iiro_16: I/O port conflict (0x5,8) [ 771.729299][T15607] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2136'. [ 772.653134][ T8] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 773.154286][ T8] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 773.210805][ T8] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 773.277741][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 773.488464][T15633] comedi comedi0: aio_iiro_16: I/O port conflict (0x5,8) [ 774.072301][ T8] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 774.089548][ T8] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 774.107918][ T8] usb 3-1: Product: syz [ 774.131898][ T8] usb 3-1: Manufacturer: syz [ 774.149454][ T8] usb 3-1: SerialNumber: syz [ 774.176146][ T8] usb 3-1: config 0 descriptor?? [ 774.205974][ T8] hub 3-1:0.0: bad descriptor, ignoring hub [ 774.214920][ T8] hub: probe of 3-1:0.0 failed with error -5 [ 774.252358][ T8] usb 3-1: selecting invalid altsetting 0 [ 774.391649][T15643] trusted_key: encrypted_key: insufficient parameters specified [ 774.908198][ T8] usb 3-1: USB disconnect, device number 45 [ 780.639007][T15702] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2149'. [ 781.253131][ T5848] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 781.365020][ T28] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 781.480220][ T5848] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 781.918365][ T5848] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 782.056920][ T5848] usb 1-1: config 0 interface 0 has no altsetting 0 [ 782.115856][ T28] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 782.128993][ T5848] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 782.141368][T15731] comedi comedi0: aio_iiro_16: I/O port conflict (0x5,8) [ 782.158793][ T28] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 782.168947][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 782.180461][ T28] usb 4-1: config 0 interface 0 has no altsetting 0 [ 782.187624][ T5848] usb 1-1: Product: syz [ 782.193189][ T5848] usb 1-1: Manufacturer: syz [ 782.198346][ T5848] usb 1-1: SerialNumber: syz [ 782.206012][ T28] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 782.219995][ T28] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 782.229881][ T28] usb 4-1: Product: syz [ 782.235361][ T5848] usb 1-1: config 0 descriptor?? [ 782.240744][ T28] usb 4-1: Manufacturer: syz [ 782.247266][ T5848] hub 1-1:0.0: bad descriptor, ignoring hub [ 782.253605][ T28] usb 4-1: SerialNumber: syz [ 782.258405][ T5848] hub: probe of 1-1:0.0 failed with error -5 [ 782.267618][ T28] usb 4-1: config 0 descriptor?? [ 782.278555][ T5848] usb 1-1: selecting invalid altsetting 0 [ 782.287732][ T28] hub 4-1:0.0: bad descriptor, ignoring hub [ 782.309293][ T28] hub: probe of 4-1:0.0 failed with error -5 [ 782.426625][T15748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2158'. [ 782.535919][ T28] usb 4-1: selecting invalid altsetting 0 [ 782.574520][ T5848] usb 1-1: USB disconnect, device number 6 [ 783.074159][T15791] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2160'. [ 783.193469][ T28] usb 4-1: reset high-speed USB device number 33 using dummy_hcd [ 783.864702][T15802] comedi comedi0: aio_iiro_16: I/O port conflict (0x5,8) [ 784.466566][T15807] comedi comedi0: aio_iiro_16: I/O port conflict (0x5,8) [ 784.658320][ T9] usb 4-1: USB disconnect, device number 33 [ 786.084835][T15829] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2164'. [ 786.537457][T15840] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2166'. [ 786.964768][T15845] comedi comedi0: aio_iiro_16: I/O port conflict (0x5,8) [ 787.375241][T15846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2169'. [ 790.517612][ T28] libceph: connect (1)[c::]:6789 error -101 [ 790.524910][ T28] libceph: mon0 (1)[c::]:6789 connect error [ 790.795335][ T28] libceph: connect (1)[c::]:6789 error -101 [ 790.869013][T15879] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 790.875570][T15879] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 790.944501][T15879] vhci_hcd vhci_hcd.0: Device attached [ 791.069594][ T28] libceph: mon0 (1)[c::]:6789 connect error [ 791.217397][T15869] ceph: No mds server is up or the cluster is laggy [ 791.243020][ T8] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 791.351584][T15899] fuse: Unknown parameter 'fd0x0000000000000003' [ 791.632504][T15907] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2183'. [ 791.948964][T15880] vhci_hcd: connection reset by peer [ 791.981732][ T63] vhci_hcd: stop threads [ 791.986589][ T63] vhci_hcd: release socket [ 791.991332][ T63] vhci_hcd: disconnect device [ 792.219168][T15916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2184'. [ 793.972438][T15920] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2185'. [ 794.296009][T15938] input: syz1 as /devices/virtual/input/input19 [ 796.433465][ T8] vhci_hcd: vhci_device speed not set [ 797.815595][T15992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2204'. [ 797.864001][T15995] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2202'. [ 798.086389][T15994] input: syz1 as /devices/virtual/input/input20 [ 798.873011][ T23] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 799.099902][ T23] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 799.114168][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.122189][ T23] usb 3-1: Product: syz [ 799.141039][ T23] usb 3-1: Manufacturer: syz [ 799.151129][ T23] usb 3-1: SerialNumber: syz [ 799.214524][ T23] usb 3-1: config 0 descriptor?? [ 799.434117][ T8] usb 3-1: USB disconnect, device number 46 [ 800.191682][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 800.405136][ T9] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 800.417978][ T9] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 800.435355][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 800.451268][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 800.463027][ T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 800.606105][ T9] usb 1-1: Product: syz [ 800.617440][T16059] comedi comedi0: aio_iiro_16: I/O port conflict (0x5,8) [ 800.624911][ T9] usb 1-1: Manufacturer: syz [ 800.653667][ T9] usb 1-1: SerialNumber: syz [ 800.699286][ T9] usb 1-1: config 0 descriptor?? [ 800.706258][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 800.712378][ T9] hub: probe of 1-1:0.0 failed with error -5 [ 800.720394][ T9] usb 1-1: selecting invalid altsetting 0 [ 800.869782][T16068] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2213'. [ 802.004539][T16032] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 802.198591][T16083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2214'. [ 804.738771][T16109] input: syz1 as /devices/virtual/input/input21 [ 805.283010][ T1195] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 805.292517][T16119] comedi comedi0: aio_iiro_16: I/O port conflict (0x5,8) [ 805.938638][ T1195] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 805.950244][ T1195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.987336][ T1195] usb 3-1: Product: syz [ 806.046209][ T1195] usb 3-1: Manufacturer: syz [ 806.072985][ T1195] usb 3-1: SerialNumber: syz [ 806.118366][ T1195] usb 3-1: config 0 descriptor?? [ 806.246399][T16130] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2223'. [ 806.380719][ T1195] usb 3-1: USB disconnect, device number 47 [ 807.250255][T16032] usb 1-1: failed to restore interface 0 altsetting 251 (error=-110) [ 807.267041][ T9] usb 1-1: USB disconnect, device number 7 [ 807.565604][T16177] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2227'. [ 808.528240][T16199] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2231'. [ 808.833485][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.840245][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.501589][T16223] input: syz1 as /devices/virtual/input/input22 [ 810.903090][ T5848] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 811.128544][ T5848] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 811.263020][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.271063][ T5848] usb 4-1: Product: syz [ 811.308231][ T5848] usb 4-1: Manufacturer: syz [ 811.322756][ T5848] usb 4-1: SerialNumber: syz [ 811.341733][ T5848] usb 4-1: config 0 descriptor?? [ 811.575040][ T1195] usb 4-1: USB disconnect, device number 34 [ 813.322984][ T1195] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 813.521718][ T1195] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 813.557116][ T1195] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 813.585432][ T1195] usb 1-1: config 0 interface 0 has no altsetting 0 [ 813.613887][ T1195] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 813.665680][ T1195] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 813.688671][ T1195] usb 1-1: Product: syz [ 813.721542][ T1195] usb 1-1: Manufacturer: syz [ 813.758362][ T1195] usb 1-1: SerialNumber: syz [ 813.784311][ T1195] usb 1-1: config 0 descriptor?? [ 813.793284][ T1195] hub 1-1:0.0: bad descriptor, ignoring hub [ 813.803081][ T1195] hub: probe of 1-1:0.0 failed with error -5 [ 813.811600][ T1195] usb 1-1: selecting invalid altsetting 0 [ 814.613055][T16288] usb 1-1: reset high-speed USB device number 9 using dummy_hcd [ 814.649466][T16340] input: syz1 as /devices/virtual/input/input23 [ 814.803100][ T5848] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 815.030311][ T5848] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 815.136882][ T5848] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 815.194788][ T5848] usb 4-1: config 0 interface 0 has no altsetting 0 [ 815.246428][ T5848] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 815.288683][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 815.330589][ T5848] usb 4-1: Product: syz [ 815.357182][ T5848] usb 4-1: Manufacturer: syz [ 815.401814][ T5848] usb 4-1: SerialNumber: syz [ 815.537046][ T55] usb 1-1: USB disconnect, device number 9 [ 815.546102][ T5848] usb 4-1: config 0 descriptor?? [ 815.557876][ T5848] hub 4-1:0.0: bad descriptor, ignoring hub [ 815.567771][ T5848] hub: probe of 4-1:0.0 failed with error -5 [ 815.591398][ T5848] usb 4-1: selecting invalid altsetting 0 [ 815.605086][ T1195] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 815.809659][ T1195] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 815.829516][ T1195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.842834][ T1195] usb 2-1: Product: syz [ 815.857486][ T1195] usb 2-1: Manufacturer: syz [ 815.924450][ T1195] usb 2-1: SerialNumber: syz [ 816.030678][ T1195] usb 2-1: config 0 descriptor?? [ 816.544790][ T1195] usb 2-1: USB disconnect, device number 49 [ 816.816024][T16333] usb 4-1: reset high-speed USB device number 35 using dummy_hcd [ 817.375560][T13935] udevd[13935]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 817.546143][T16411] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2259'. [ 818.532215][ T1195] IPVS: starting estimator thread 0... [ 818.653190][T16435] IPVS: using max 34 ests per chain, 81600 per kthread [ 818.907992][T16439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2266'. [ 821.960365][T16448] trusted_key: encrypted_key: insufficient parameters specified [ 822.354849][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 822.585299][T16333] usb 4-1: can't restore configuration #0 (error=-110) [ 822.594723][ T5848] usb 4-1: USB disconnect, device number 35 [ 822.665469][ T9] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 822.704026][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 822.733213][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 822.755134][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 822.772435][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 822.787703][ T9] usb 3-1: Product: syz [ 822.791907][ T9] usb 3-1: Manufacturer: syz [ 822.798901][ T9] usb 3-1: SerialNumber: syz [ 822.820450][ T9] usb 3-1: config 0 descriptor?? [ 822.835983][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 822.838184][T16473] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2269'. [ 822.841911][ T9] hub: probe of 3-1:0.0 failed with error -5 [ 822.854859][ T9] usb 3-1: selecting invalid altsetting 0 [ 823.128913][T16496] input: syz1 as /devices/virtual/input/input24 [ 823.859962][T11484] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 824.155025][T16447] usb 3-1: reset high-speed USB device number 48 using dummy_hcd [ 824.683208][T11484] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 824.692492][T11484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.708273][T11484] usb 2-1: Product: syz [ 824.712515][T11484] usb 2-1: Manufacturer: syz [ 824.720714][T11484] usb 2-1: SerialNumber: syz [ 824.766005][T16526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2276'. [ 827.040668][T11484] usb 2-1: config 0 descriptor?? [ 827.416705][T16528] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 827.423270][T16528] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 827.436725][T11484] usb 2-1: can't set config #0, error -71 [ 827.457399][T11484] usb 2-1: USB disconnect, device number 50 [ 827.488919][T16528] vhci_hcd vhci_hcd.0: Device attached [ 827.745829][T16547] trusted_key: encrypted_key: insufficient parameters specified [ 827.792354][ T23] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 828.432057][T16531] vhci_hcd: connection reset by peer [ 828.439861][ T8934] vhci_hcd: stop threads [ 828.444624][ T8934] vhci_hcd: release socket [ 828.449304][ T8934] vhci_hcd: disconnect device [ 829.048223][T16568] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2281'. [ 829.858357][T16447] usb 3-1: failed to restore interface 0 altsetting 251 (error=-110) [ 829.883301][ T9] usb 3-1: USB disconnect, device number 48 [ 830.225335][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 830.919046][T16602] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 831.319069][T16611] trusted_key: encrypted_key: insufficient parameters specified [ 834.155390][ T23] vhci_hcd: vhci_device speed not set [ 834.375646][T16635] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2291'. [ 835.793205][T11484] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 835.858767][T16675] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 836.013089][T11484] usb 3-1: Using ep0 maxpacket: 8 [ 836.026923][T11484] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 836.075273][T11484] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 836.130763][T11484] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 836.163302][T11484] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.244910][T11484] usb 3-1: config 0 descriptor?? [ 837.032396][T11484] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 837.213337][T11484] usb 3-1: USB disconnect, device number 50 [ 837.360200][T16666] loop0: detected capacity change from 0 to 40427 [ 837.398837][T16666] F2FS-fs (loop0): invalid crc value [ 837.432716][T16666] F2FS-fs (loop0): Found nat_bits in checkpoint [ 837.578897][T16666] F2FS-fs (loop0): Start checkpoint disabled! [ 837.614779][T16666] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 837.844427][T16713] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2302'. [ 839.282579][T16720] syzkaller0: entered promiscuous mode [ 839.414582][T16720] syzkaller0: entered allmulticast mode [ 840.355034][ T2990] kworker/u4:9: attempt to access beyond end of device [ 840.355034][ T2990] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 840.375084][ T2990] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 840.565175][ T28] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 840.683277][T11484] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 840.765043][ T28] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 840.773445][ T28] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 840.784071][ T28] usb 4-1: config 0 interface 0 has no altsetting 0 [ 840.794145][ T28] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 840.803289][ T28] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 840.811503][ T28] usb 4-1: Product: syz [ 840.816147][ T28] usb 4-1: Manufacturer: syz [ 840.820753][ T28] usb 4-1: SerialNumber: syz [ 840.861763][ T28] usb 4-1: config 0 descriptor?? [ 840.893244][T11484] usb 3-1: Using ep0 maxpacket: 8 [ 840.895101][ T28] hub 4-1:0.0: bad descriptor, ignoring hub [ 840.911310][ T28] hub: probe of 4-1:0.0 failed with error -5 [ 840.921337][ T28] usb 4-1: selecting invalid altsetting 0 [ 840.925603][T11484] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 840.951511][T11484] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 840.982796][T11484] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 841.004181][T11484] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.028504][T11484] usb 3-1: config 0 descriptor?? [ 841.217337][ T50] Bluetooth: hci4: link tx timeout [ 841.218008][ T28] usb 4-1: USB disconnect, device number 37 [ 841.229451][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 841.269678][T11484] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 841.472756][T16756] iowarrior 3-1:0.0: Error -90 while submitting URB [ 841.481024][T11484] usb 3-1: USB disconnect, device number 51 [ 843.179898][T16809] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2313'. [ 843.303105][T16782] Bluetooth: hci4: command 0x0406 tx timeout [ 844.616996][T16835] loop2: detected capacity change from 0 to 40427 [ 844.657798][T16835] F2FS-fs (loop2): invalid crc value [ 844.705972][T16835] F2FS-fs (loop2): Found nat_bits in checkpoint [ 844.758419][T16835] F2FS-fs (loop2): Start checkpoint disabled! [ 844.770915][T16835] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 844.774989][T11484] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 845.053367][T11484] usb 2-1: Using ep0 maxpacket: 8 [ 845.382240][T11484] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 845.450354][T11484] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 845.514114][T11484] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 845.571487][T11484] usb 2-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 845.623731][T11484] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 845.707830][T11484] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 845.752811][T11484] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.044173][T11484] usbtmc 2-1:16.0: bulk endpoints not found [ 846.779469][ T1195] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 847.404144][T16872] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2322'. [ 847.683069][ T1195] usb 1-1: Using ep0 maxpacket: 8 [ 847.698138][ T1195] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 847.710958][ T1195] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 847.728382][ T1195] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 847.804367][ T1195] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.829434][ T1195] usbtmc 1-1:16.0: bulk endpoints not found [ 847.854795][ T12] kworker/u4:1: attempt to access beyond end of device [ 847.854795][ T12] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 847.878671][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 848.710583][ T28] usb 2-1: USB disconnect, device number 51 [ 849.679265][ T1195] usb 1-1: USB disconnect, device number 10 [ 850.293614][ T55] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 850.738842][ T55] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 850.754249][ T55] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 850.765011][ T55] usb 2-1: config 0 interface 0 has no altsetting 0 [ 850.774921][ T55] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 850.787214][ T55] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 850.802522][ T55] usb 2-1: Product: syz [ 850.813025][ T55] usb 2-1: Manufacturer: syz [ 850.817653][ T55] usb 2-1: SerialNumber: syz [ 850.845409][ T55] usb 2-1: config 0 descriptor?? [ 850.852235][T16929] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2331'. [ 850.870704][ T55] hub 2-1:0.0: bad descriptor, ignoring hub [ 850.878156][ T55] hub: probe of 2-1:0.0 failed with error -5 [ 850.904573][ T55] usb 2-1: selecting invalid altsetting 0 [ 851.140875][T16948] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2334'. [ 851.478012][T16975] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 851.506430][T16975] kvm: pic: non byte read [ 851.511259][T16975] kvm: pic: level sensitive irq not supported [ 851.511386][T16975] kvm: pic: non byte read [ 851.741292][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2339'. [ 853.964558][T16994] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2341'. [ 856.214228][T17002] overlayfs: failed to resolve './file1': -2 [ 856.544635][T17015] trusted_key: encrypted_key: insufficient parameters specified [ 856.696796][ T55] usb 2-1: USB disconnect, device number 52 [ 857.219210][T17032] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 857.238722][T17032] kvm: pic: non byte read [ 857.243884][T17032] kvm: pic: level sensitive irq not supported [ 857.243949][T17032] kvm: pic: non byte read [ 857.566729][T17053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2352'. [ 859.491058][T17063] overlayfs: failed to resolve './file1': -2 [ 860.809922][T17076] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 860.901257][T17093] trusted_key: encrypted_key: insufficient parameters specified [ 860.932656][ T1195] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 861.036691][T17076] kvm: pic: non byte read [ 861.086019][T17076] kvm: pic: level sensitive irq not supported [ 861.087158][T17076] kvm: pic: non byte read [ 861.302323][ T1195] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 861.424097][ T1195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.432567][ T1195] usb 1-1: Product: syz [ 861.452420][ T1195] usb 1-1: Manufacturer: syz [ 861.457412][ T1195] usb 1-1: SerialNumber: syz [ 861.490537][ T1195] usb 1-1: config 0 descriptor?? [ 861.617261][T17096] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 861.661554][T17096] kvm: pic: non byte read [ 861.677914][T17096] kvm: pic: level sensitive irq not supported [ 861.678227][T17096] kvm: pic: non byte read [ 861.708397][T17111] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 861.718136][ T1195] usb 1-1: USB disconnect, device number 11 [ 861.777072][T17111] kvm: pic: non byte read [ 861.803384][T17111] kvm: pic: level sensitive irq not supported [ 861.803451][T17111] kvm: pic: non byte read [ 862.375311][T17147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2365'. [ 864.983000][T17149] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 864.989549][T17149] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 865.106960][T17149] vhci_hcd vhci_hcd.0: Device attached [ 865.388393][ T55] usb 37-1: new high-speed USB device number 4 using vhci_hcd [ 865.485345][T17153] vhci_hcd: connection reset by peer [ 865.492008][ T42] vhci_hcd: stop threads [ 865.515230][ T42] vhci_hcd: release socket [ 865.531376][ T42] vhci_hcd: disconnect device [ 865.803619][T17173] trusted_key: encrypted_key: insufficient parameters specified [ 866.456957][T17178] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 866.528516][T17178] kvm: pic: non byte read [ 866.657251][T17187] trusted_key: encrypted_key: insufficient parameters specified [ 866.893209][T17178] kvm: pic: level sensitive irq not supported [ 866.893308][T17178] kvm: pic: non byte read [ 867.362260][T17195] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2373'. [ 867.373549][T17171] loop0: detected capacity change from 0 to 40427 [ 867.395925][T17171] F2FS-fs (loop0): invalid crc value [ 867.405194][T17171] F2FS-fs (loop0): Found nat_bits in checkpoint [ 867.540366][T17171] F2FS-fs (loop0): Start checkpoint disabled! [ 867.623322][T17171] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 867.812956][T11484] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 868.134027][T11484] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 868.163080][T11484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.171155][T11484] usb 2-1: Product: syz [ 868.175633][T11484] usb 2-1: Manufacturer: syz [ 868.180347][T11484] usb 2-1: SerialNumber: syz [ 868.232654][T11484] usb 2-1: config 0 descriptor?? [ 868.510288][T11484] usb 2-1: USB disconnect, device number 53 [ 868.809946][T17224] syzkaller0: entered promiscuous mode [ 868.839825][T17224] syzkaller0: entered allmulticast mode [ 869.135290][T17016] kworker/u4:0: attempt to access beyond end of device [ 869.135290][T17016] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 869.179476][T17016] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 869.217281][T17016] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 869.236820][T17016] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 869.621898][T17249] overlayfs: failed to resolve './file0': -2 [ 869.699503][T17242] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 869.731254][T17242] kvm: pic: non byte read [ 869.736157][T17242] kvm: pic: level sensitive irq not supported [ 869.736285][T17242] kvm: pic: non byte read [ 870.267005][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.278451][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.527733][ T55] vhci_hcd: vhci_device speed not set [ 871.101720][T17281] trusted_key: encrypted_key: insufficient parameters specified [ 872.905149][T17280] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2383'. [ 873.281917][T17289] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 873.448035][T17289] kvm: pic: non byte read [ 873.452694][T17289] kvm: pic: level sensitive irq not supported [ 873.452771][T17289] kvm: pic: non byte read [ 873.554883][T17297] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 873.587883][T17297] kvm: pic: non byte read [ 873.592416][T17297] kvm: pic: level sensitive irq not supported [ 873.592469][T17297] kvm: pic: non byte read [ 875.817226][T17329] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2391'. [ 876.998305][T17341] trusted_key: encrypted_key: insufficient parameters specified [ 877.436359][T17344] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2394'. [ 877.661421][T17356] syzkaller0: entered promiscuous mode [ 877.670082][T17356] syzkaller0: entered allmulticast mode [ 877.846499][T17353] loop0: detected capacity change from 0 to 40427 [ 877.861415][T17353] F2FS-fs (loop0): invalid crc value [ 877.868861][T17353] F2FS-fs (loop0): Found nat_bits in checkpoint [ 877.911482][T17353] F2FS-fs (loop0): Start checkpoint disabled! [ 877.921585][T17353] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 878.664646][ T2972] kworker/u4:8: attempt to access beyond end of device [ 878.664646][ T2972] loop0: rw=2049, sector=40960, nr_sectors = 48 limit=40427 [ 878.694854][ T2972] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 878.702315][ T2972] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 878.726233][ T2972] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 878.760591][T17375] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 878.769407][ T2972] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 878.776801][ T2972] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 878.793502][ T2972] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 879.515281][ T1195] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 879.763335][ T1195] usb 1-1: Using ep0 maxpacket: 8 [ 879.804663][ T1195] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 879.847495][ T1195] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 879.913949][ T1195] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 879.927399][ T1195] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 879.937662][ T1195] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 879.963187][ T1195] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 879.972537][ T1195] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.206989][ T1195] usb 1-1: usb_control_msg returned -32 [ 880.212582][ T1195] usbtmc 1-1:16.0: can't read capabilities [ 880.977206][T17400] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 881.744978][T17415] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2406'. [ 882.272206][ T1195] usb 1-1: USB disconnect, device number 12 [ 883.416103][T17431] loop2: detected capacity change from 0 to 40427 [ 883.446418][T17431] F2FS-fs (loop2): invalid crc value [ 883.469058][T17431] F2FS-fs (loop2): Found nat_bits in checkpoint [ 883.497853][T17431] F2FS-fs (loop2): Start checkpoint disabled! [ 883.522644][T17431] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 884.607161][ T42] kworker/u4:2: attempt to access beyond end of device [ 884.607161][ T42] loop2: rw=2049, sector=40960, nr_sectors = 48 limit=40427 [ 884.660596][ T42] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 884.685687][ T42] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 884.692598][ T42] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 884.743047][ T42] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 884.759171][ T42] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 884.772891][ T42] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 885.261477][T17462] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2416'. [ 885.330558][T16782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 885.342476][T16782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 885.351043][T16782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 885.360806][T16782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 885.383516][T16782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 885.390944][T16782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 885.525791][ T8934] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.563576][ T8934] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 886.061870][T17485] loop3: detected capacity change from 0 to 40427 [ 886.293227][T17485] F2FS-fs (loop3): invalid crc value [ 886.318621][T17485] F2FS-fs (loop3): Found nat_bits in checkpoint [ 886.360774][T17485] F2FS-fs (loop3): Start checkpoint disabled! [ 886.381642][T17485] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 886.403938][ T55] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 886.485905][ T8934] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.616181][ T8934] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 886.731611][ T55] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 886.838400][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.016598][ T55] usb 1-1: Product: syz [ 887.020807][ T55] usb 1-1: Manufacturer: syz [ 887.036697][ T55] usb 1-1: SerialNumber: syz [ 887.063813][ T55] usb 1-1: config 0 descriptor?? [ 887.255101][ T8934] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.273152][ T8934] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 887.287555][ T55] usb 1-1: USB disconnect, device number 13 [ 887.291092][ T42] kworker/u4:2: attempt to access beyond end of device [ 887.291092][ T42] loop3: rw=2049, sector=40960, nr_sectors = 48 limit=40427 [ 887.347467][ T42] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 887.392190][ T42] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 887.404602][ T8934] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.416572][ T42] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 887.428090][ T8934] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 887.438657][ T42] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 887.446234][ T42] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 887.453419][ T42] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 887.463474][T16782] Bluetooth: hci1: command tx timeout [ 888.107997][T17463] chnl_net:caif_netlink_parms(): no params data found [ 888.562945][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 888.762961][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 888.830399][T17463] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.839300][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 888.871235][T17463] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.879143][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 888.901387][T17463] bridge_slave_0: entered allmulticast mode [ 888.913062][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 888.923035][T17463] bridge_slave_0: entered promiscuous mode [ 888.925273][T17463] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.956897][T17463] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.964117][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 888.974458][T17463] bridge_slave_1: entered allmulticast mode [ 888.992617][T17463] bridge_slave_1: entered promiscuous mode [ 888.992638][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 889.043263][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.287962][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 889.301064][ T9] usbtmc 1-1:16.0: can't read capabilities [ 889.310002][T17463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 889.365662][T17463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 889.540719][T17463] team0: Port device team_slave_0 added [ 889.548865][T16782] Bluetooth: hci1: command tx timeout [ 889.557769][T17463] team0: Port device team_slave_1 added [ 889.902327][ T28] usb 1-1: USB disconnect, device number 14 [ 890.313257][T17463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.320237][T17463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.381624][T17463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.422792][T17817] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 890.430916][T17463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.439061][T17463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.513321][T17463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.824745][T17463] hsr_slave_0: entered promiscuous mode [ 890.842149][T17463] hsr_slave_1: entered promiscuous mode [ 890.851385][T17463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 890.859503][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 890.886609][T17463] Cannot create hsr debugfs directory [ 890.892586][T17876] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2430'. [ 890.960062][ T8934] bond0: (slave wlan1): Releasing backup interface [ 890.970863][ T8934] mac80211_hwsim hwsim7 wlan1 (unregistering): left promiscuous mode [ 890.987312][ T8934] mac80211_hwsim hwsim7 wlan1 (unregistering): left allmulticast mode [ 891.013401][ T8934] ------------[ cut here ]------------ [ 891.019222][ T8934] WARNING: CPU: 1 PID: 8934 at net/mac80211/chan.c:2021 ieee80211_link_release_channel+0x154/0x180 [ 891.030435][ T8934] Modules linked in: [ 891.034675][ T8934] CPU: 1 PID: 8934 Comm: kworker/u4:11 Not tainted 6.6.102-syzkaller #0 [ 891.043110][ T8934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 891.052898][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 891.053190][ T8934] Workqueue: netns cleanup_net [ 891.060009][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 891.063086][ T8934] RIP: 0010:ieee80211_link_release_channel+0x154/0x180 [ 891.063120][ T8934] Code: 7c 2d 00 00 74 08 48 89 df e8 58 94 ea f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 21 9f 83 00 e8 0c 4d 93 f7 <0f> 0b eb c5 48 c7 c1 dc bc 4a 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 891.063136][ T8934] RSP: 0018:ffffc90004f07548 EFLAGS: 00010293 [ 891.063156][ T8934] RAX: ffffffff89f23e14 RBX: ffff88805bf79598 RCX: ffff88802c23bc00 [ 891.063172][ T8934] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 891.098030][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 891.104011][ T8934] RBP: 0000000000000000 R08: ffffffff8e4a882f R09: 1ffffffff1c95105 [ 891.104031][ T8934] R10: dffffc0000000000 R11: fffffbfff1c95106 R12: ffff88805bf7ac08 [ 891.104045][ T8934] R13: 1ffff1100b7ef2b3 R14: ffff88805bf7a3c0 R15: dffffc0000000000 [ 891.104058][ T8934] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 891.104073][ T8934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 891.104086][ T8934] CR2: 0000001b2e422ff8 CR3: 0000000061b1d000 CR4: 00000000003506e0 [ 891.104103][ T8934] Call Trace: [ 891.104112][ T8934] [ 891.104135][ T8934] ? trace_drv_return_void+0x1c0/0x1c0 [ 891.190121][ T8934] unregister_netdevice_many_notify+0x1257/0x1810 [ 891.196639][ T8934] ? lock_chain_count+0x20/0x20 [ 891.201538][ T8934] ? unregister_netdevice_many+0x20/0x20 [ 891.204767][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 891.207297][ T8934] ? kernfs_remove_by_name_ns+0x117/0x150 [ 891.222667][ T8934] ? __lock_acquire+0x7c80/0x7c80 [ 891.227880][ T8934] unregister_netdevice_queue+0x324/0x360 [ 891.234979][ T8934] ? list_netdevice+0x730/0x730 [ 891.239964][ T8934] ? kernfs_remove_by_name_ns+0x117/0x150 [ 891.245817][ T8934] _cfg80211_unregister_wdev+0x16b/0x580 [ 891.251481][ T8934] ieee80211_remove_interfaces+0x496/0x680 [ 891.257375][ T8934] ? ieee80211_do_stop+0x1db0/0x1db0 [ 891.262683][ T8934] ? rcu_is_watching+0x15/0xb0 [ 891.267530][ T8934] ieee80211_unregister_hw+0x5d/0x2a0 [ 891.272974][ T8934] mac80211_hwsim_del_radio+0x274/0x450 [ 891.278548][ T8934] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 891.284431][ T8934] hwsim_exit_net+0x585/0x640 [ 891.289137][ T8934] ? hwsim_init_net+0x90/0x90 [ 891.293881][ T8934] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 891.299714][ T8934] cleanup_net+0x6f4/0xb90 [ 891.304286][ T8934] ? ops_free_list+0x3b0/0x3b0 [ 891.309083][ T8934] ? _raw_spin_unlock_irq+0x23/0x50 [ 891.314375][ T8934] ? process_scheduled_works+0x957/0x15b0 [ 891.320111][ T8934] ? process_scheduled_works+0x957/0x15b0 [ 891.325903][ T8934] process_scheduled_works+0xa45/0x15b0 [ 891.331927][ T8934] ? assign_work+0x400/0x400 [ 891.336678][ T8934] ? assign_work+0x39e/0x400 [ 891.341293][ T8934] worker_thread+0xa55/0xfc0 [ 891.345938][ T8934] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 891.348362][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 891.351834][ T8934] ? _raw_spin_unlock+0x40/0x40 [ 891.366644][ T8934] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 891.372582][ T8934] kthread+0x2fa/0x390 [ 891.376695][ T8934] ? pr_cont_work+0x560/0x560 [ 891.381396][ T8934] ? kthread_blkcg+0xd0/0xd0 [ 891.386123][ T8934] ret_from_fork+0x48/0x80 [ 891.390538][ T8934] ? kthread_blkcg+0xd0/0xd0 [ 891.395296][ T8934] ret_from_fork_asm+0x11/0x20 [ 891.400098][ T8934] [ 891.403160][ T8934] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 891.410441][ T8934] CPU: 1 PID: 8934 Comm: kworker/u4:11 Not tainted 6.6.102-syzkaller #0 [ 891.418768][ T8934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 891.428826][ T8934] Workqueue: netns cleanup_net [ 891.433600][ T8934] Call Trace: [ 891.436867][ T8934] [ 891.439782][ T8934] dump_stack_lvl+0x16c/0x230 [ 891.444452][ T8934] ? show_regs_print_info+0x20/0x20 [ 891.449637][ T8934] ? load_image+0x3b0/0x3b0 [ 891.454141][ T8934] panic+0x2c0/0x710 [ 891.458031][ T8934] ? bpf_jit_dump+0xd0/0xd0 [ 891.462535][ T8934] ? ret_from_fork_asm+0x11/0x20 [ 891.467465][ T8934] __warn+0x2e0/0x470 [ 891.471443][ T8934] ? ieee80211_link_release_channel+0x154/0x180 [ 891.477677][ T8934] ? ieee80211_link_release_channel+0x154/0x180 [ 891.483909][ T8934] report_bug+0x2be/0x4f0 [ 891.488226][ T8934] ? ieee80211_link_release_channel+0x154/0x180 [ 891.494457][ T8934] ? ieee80211_link_release_channel+0x154/0x180 [ 891.500690][ T8934] ? ieee80211_link_release_channel+0x156/0x180 [ 891.506918][ T8934] handle_bug+0xcf/0x120 [ 891.511149][ T8934] exc_invalid_op+0x1a/0x50 [ 891.515638][ T8934] asm_exc_invalid_op+0x1a/0x20 [ 891.520486][ T8934] RIP: 0010:ieee80211_link_release_channel+0x154/0x180 [ 891.527329][ T8934] Code: 7c 2d 00 00 74 08 48 89 df e8 58 94 ea f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 21 9f 83 00 e8 0c 4d 93 f7 <0f> 0b eb c5 48 c7 c1 dc bc 4a 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 891.546925][ T8934] RSP: 0018:ffffc90004f07548 EFLAGS: 00010293 [ 891.552983][ T8934] RAX: ffffffff89f23e14 RBX: ffff88805bf79598 RCX: ffff88802c23bc00 [ 891.560939][ T8934] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 891.568892][ T8934] RBP: 0000000000000000 R08: ffffffff8e4a882f R09: 1ffffffff1c95105 [ 891.576849][ T8934] R10: dffffc0000000000 R11: fffffbfff1c95106 R12: ffff88805bf7ac08 [ 891.584805][ T8934] R13: 1ffff1100b7ef2b3 R14: ffff88805bf7a3c0 R15: dffffc0000000000 [ 891.592768][ T8934] ? ieee80211_link_release_channel+0x154/0x180 [ 891.599005][ T8934] ? ieee80211_link_release_channel+0x154/0x180 [ 891.605232][ T8934] ? trace_drv_return_void+0x1c0/0x1c0 [ 891.610683][ T8934] unregister_netdevice_many_notify+0x1257/0x1810 [ 891.617090][ T8934] ? lock_chain_count+0x20/0x20 [ 891.621940][ T8934] ? unregister_netdevice_many+0x20/0x20 [ 891.627566][ T8934] ? kernfs_remove_by_name_ns+0x117/0x150 [ 891.633275][ T8934] ? __lock_acquire+0x7c80/0x7c80 [ 891.638294][ T8934] unregister_netdevice_queue+0x324/0x360 [ 891.644007][ T8934] ? list_netdevice+0x730/0x730 [ 891.648850][ T8934] ? kernfs_remove_by_name_ns+0x117/0x150 [ 891.654563][ T8934] _cfg80211_unregister_wdev+0x16b/0x580 [ 891.660193][ T8934] ieee80211_remove_interfaces+0x496/0x680 [ 891.665995][ T8934] ? ieee80211_do_stop+0x1db0/0x1db0 [ 891.671275][ T8934] ? rcu_is_watching+0x15/0xb0 [ 891.676032][ T8934] ieee80211_unregister_hw+0x5d/0x2a0 [ 891.681395][ T8934] mac80211_hwsim_del_radio+0x274/0x450 [ 891.686930][ T8934] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 891.692470][ T8934] hwsim_exit_net+0x585/0x640 [ 891.697143][ T8934] ? hwsim_init_net+0x90/0x90 [ 891.701810][ T8934] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 891.707608][ T8934] cleanup_net+0x6f4/0xb90 [ 891.712016][ T8934] ? ops_free_list+0x3b0/0x3b0 [ 891.716772][ T8934] ? _raw_spin_unlock_irq+0x23/0x50 [ 891.721960][ T8934] ? process_scheduled_works+0x957/0x15b0 [ 891.727665][ T8934] ? process_scheduled_works+0x957/0x15b0 [ 891.733370][ T8934] process_scheduled_works+0xa45/0x15b0 [ 891.738919][ T8934] ? assign_work+0x400/0x400 [ 891.743510][ T8934] ? assign_work+0x39e/0x400 [ 891.748089][ T8934] worker_thread+0xa55/0xfc0 [ 891.752666][ T8934] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 891.758551][ T8934] ? _raw_spin_unlock+0x40/0x40 [ 891.763389][ T8934] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 891.769286][ T8934] kthread+0x2fa/0x390 [ 891.773344][ T8934] ? pr_cont_work+0x560/0x560 [ 891.778007][ T8934] ? kthread_blkcg+0xd0/0xd0 [ 891.782579][ T8934] ret_from_fork+0x48/0x80 [ 891.786981][ T8934] ? kthread_blkcg+0xd0/0xd0 [ 891.791554][ T8934] ret_from_fork_asm+0x11/0x20 [ 891.796317][ T8934] [ 891.799537][ T8934] Kernel Offset: disabled [ 891.803939][ T8934] Rebooting in 86400 seconds..