last executing test programs: 1m8.427702486s ago: executing program 3 (id=768): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x84000000) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x2001}) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)='\x00!', 0x2}], 0x1, 0x73a, 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 1m6.944926855s ago: executing program 3 (id=774): ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 1m2.763215731s ago: executing program 3 (id=790): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x13, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getresuid(0x0, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000200)={0x80000000, 0x9, 0x7ffffffd, 0xfff, 0x10000, 0x2}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x3, 0x7, 0x0, 0x80000001}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m1.04744578s ago: executing program 3 (id=796): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000300)) ioprio_get$uid(0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00'}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@ipv6_newrule={0x34, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e23}}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000080000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) 1m0.111508125s ago: executing program 3 (id=799): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1d, 0x16, &(0x7f0000001600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810000000fd010000000008000100ac141400080005000a0141021800168014000300fc0000000000000000000000000000000600150002000000f79289d1e13bbe10b49e56bd59a12a02f83b8cff"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffe, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000500), 0xa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x2, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x5a, &(0x7f0000000200)={0x0}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) 56.784607893s ago: executing program 3 (id=808): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) syz_open_dev$sg(&(0x7f0000000100), 0x6, 0x121500) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xfffffffffffffff9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x448800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xe) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) read$msr(r2, &(0x7f0000034000)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/63, 0x3f}, 0x7}], 0x4000135, 0x2, 0x0) write(r4, &(0x7f00000000c0)="510003000000", 0x6) listen(r3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) syz_open_dev$sg(0x0, 0x9, 0x418800) syz_open_dev$sg(&(0x7f0000000180), 0x2, 0x601) 41.02278263s ago: executing program 32 (id=808): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) syz_open_dev$sg(&(0x7f0000000100), 0x6, 0x121500) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xfffffffffffffff9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x448800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xe) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) read$msr(r2, &(0x7f0000034000)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/63, 0x3f}, 0x7}], 0x4000135, 0x2, 0x0) write(r4, &(0x7f00000000c0)="510003000000", 0x6) listen(r3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) syz_open_dev$sg(0x0, 0x9, 0x418800) syz_open_dev$sg(&(0x7f0000000180), 0x2, 0x601) 29.239322198s ago: executing program 0 (id=864): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x13, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getresuid(0x0, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000200)={0x80000000, 0x9, 0x7ffffffd, 0xfff, 0x10000, 0x2}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x3, 0x7, 0x0, 0x80000001}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) 25.11462522s ago: executing program 0 (id=882): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xe, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002880)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x44}}, 0x20040054) 23.512095768s ago: executing program 0 (id=878): socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffdf, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0}) r3 = io_uring_setup(0x108c, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x19, &(0x7f0000000300), 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0xfffffffffffffee7) r5 = socket$packet(0x11, 0x2, 0x300) bind$ax25(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$packet_int(r5, 0x107, 0x13, &(0x7f0000000580)=0x1, 0x4) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'aio_iiro_16\x00', [0x9e1, 0x10, 0xfffffffe, 0x100000, 0xa, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x3ff, 0x1, 0xf005, 0x0, 0x8, 0x3, 0xb, 0x9, 0x100, 0x1003, 0x7, 0x7, 0x5, 0x1, 0xb0c4, 0x7db, 0x8, 0x400007, 0x1]}) 18.322535036s ago: executing program 0 (id=885): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x374b) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='fscache_resize\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xe, &(0x7f0000000740)=ANY=[@ANYRESOCT=r0], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x700, 0xe, 0x0, &(0x7f0000000380)="e460cdfbef2408000008019386dd", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000100)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0}) sched_setaffinity(r3, 0x8, &(0x7f0000000400)=0x2) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000080)=0x8, 0x5, 0x0) clock_adjtime(0x7, &(0x7f0000000840)={0x1, 0xfffffffffffffff3, 0x8, 0x4, 0x8dc, 0x8000000000000000, 0x2, 0x1, 0x8, 0x4, 0x2, 0x1, 0xffffffff, 0x1a9, 0x5, 0x100000001, 0x0, 0x4, 0xfffffffffffffff7, 0x101, 0x8, 0x100000001, 0x80000001, 0x0, 0x7, 0x4}) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x6a, 0x5, 0x20000000, 0x10004) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) remap_file_pages(&(0x7f0000378000/0x2000)=nil, 0x2000, 0x100000a, 0x1, 0x100000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x0, 0x43, 0x0, 0x1, 0x4}, 0x28) r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x80000000}) 14.659797271s ago: executing program 2 (id=888): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xe, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002880)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x44}}, 0x20040054) 14.484069365s ago: executing program 2 (id=889): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) 14.261110863s ago: executing program 2 (id=891): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) tgkill(0x0, 0x0, 0x21) wait4(0x0, 0x0, 0x40000000, 0x0) rt_tgsigqueueinfo(r0, 0x0, 0x21, &(0x7f00000003c0)={0x34, 0x6, 0x400}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000440), 0x4) 12.19000993s ago: executing program 2 (id=901): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041}) 12.146177503s ago: executing program 0 (id=893): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) r1 = getpid() prctl$PR_MCE_KILL(0x21, 0x1, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0xffffffffffffffff, &(0x7f0000000000)=0x5e) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000540)={'icmp\x00'}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) 11.173113331s ago: executing program 2 (id=895): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x32) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r7}, 0x18) syz_open_procfs(0x0, 0x0) connect$pppl2tp(r6, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x214, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1cc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1b4, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x180, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x149, 0x6, "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"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x214}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r8 = socket(0x10, 0x803, 0x0) syz_io_uring_setup(0x7125, &(0x7f0000000300)={0x0, 0x9ea8, 0x10000, 0x8, 0x326, 0x0, r0}, &(0x7f0000000540), &(0x7f0000000580)) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 8.223070709s ago: executing program 5 (id=899): prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000006000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000001c0), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) write(r1, &(0x7f0000000040), 0x0) read$FUSE(r0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d300000"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a01080000000000000000050000060800024000000003080002400000000014000000110001"], 0x4c}}, 0xc050) 7.076983961s ago: executing program 5 (id=900): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) 6.970490829s ago: executing program 1 (id=902): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2, 0x80805, 0x0) unlinkat$binderfs_device(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f00000005c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 5.866965218s ago: executing program 5 (id=903): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x65f}) 5.632603567s ago: executing program 5 (id=904): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x38, r2, 0x1, 0x4000000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x5, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}]}, 0x38}}, 0x0) 5.028582735s ago: executing program 1 (id=905): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041}) 4.983013869s ago: executing program 5 (id=906): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x129442, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x12) close(r0) 4.865732899s ago: executing program 2 (id=907): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) rt_sigaction(0x8, &(0x7f0000000080)={&(0x7f0000000200)="2437460f1c2bc4a2f99c9022000000c4a2f1002746c44179700d32233333a738e7c44240f29a3b470000a5c4c4a14d590c9736fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000db37", 0x88000007, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00') lseek(r2, 0x9, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0x64000ba6) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)=0xffff0018) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r7, 0x4b46, &(0x7f00000000c0)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) sched_setattr(r3, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x101, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) 4.813477043s ago: executing program 5 (id=908): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) writev(r0, 0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x74000000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) 4.811900463s ago: executing program 1 (id=918): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x2, 0x40010, r2, 0xfb0eb000) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f00000001c0)=@netrom={'nr', 0x0}, 0x63) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 4.574385102s ago: executing program 1 (id=909): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000200), &(0x7f0000000300)=[r3], 0x0}) 4.263393687s ago: executing program 1 (id=911): prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000006000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000001c0), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) write(r1, &(0x7f0000000040), 0x0) read$FUSE(r0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a01080000000000000000050000060800024000000003080002400000000014000000110001"], 0x4c}}, 0xc050) 3.290011715s ago: executing program 4 (id=912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002880)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x44}}, 0x20040054) 2.367197179s ago: executing program 0 (id=913): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x2, 0xc}) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x1, 0x0, 0x8, 0x1fd}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f00000002c0)={[{@undelete}, {@umask={'umask', 0x3d, 0x6}}, {@adinicb}, {@dmode}, {@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@gid}, {}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}]}, 0x1, 0xc76, &(0x7f0000000f40)="$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") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_lsm={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6825}, 0x94) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r5 = syz_clone(0x60100000, &(0x7f0000002240)="dad1fae3f59257284d33b23c2978cab5c4a0e1505290d8789cab5a429c2132c48af2fc2138f1f8f8435e76f4fd26f8cd988e8033a4a9e4e9e2c169bc929759252be0f26f7a230e8a57558e2304845e326d6c44af56a3afb1b28e823e1d", 0x5d, &(0x7f00000022c0), &(0x7f0000002300), &(0x7f0000002340)="8796c4bbac771055b68e65361aa664d1db0dc767a462a7ecef1548e4fcbe5d2f6daaa19aad67c7f12946160eb60169c94e7dfb7b98f0f3f9968f698becd0c4d7d4047267f48822fe818a81094800581d00fbead5824e885cccb54133d3123da2b2d24265858780b8970ca04005b6061eb62779f8bc62de76f06fd4e6f1a9a076f9845d1de5ed8f8358d4f71d170c1b8a8b1ec049b392396dd3ce4a6c3a6a6df66d8e77480de223d77fac3a4555ebe674a68bd9e8ac441184641012b6ab504214e4ce36c901393e4776d03817e4a7420466d72c2b4ff4fb5af93d5912a9c62e437b1c1378307f50a89d526b79ccc9f75ad1a160") sched_setscheduler(r5, 0x3, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002440)='/proc/stat\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) 2.285733356s ago: executing program 4 (id=914): syz_clone(0x142000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.150518507s ago: executing program 4 (id=915): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x6400, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f00000001c0)={'enc=', 'raw', ' hash=', {'sha512-ce\x00'}}, &(0x7f0000000240), 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x230b, 0x400000000000005}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 1.849411031s ago: executing program 1 (id=916): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x400, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@init_itable_val}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4ed, &(0x7f00000002c0)="$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") open$dir(0x0, 0x0, 0x1) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071102c00000000001d400500000000004704000001ed00000f030000000000002c440000000000006b0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a107464ffffff7f00000000617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce963b0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c3f000000315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b47623028271722fb515f31e0dd115a292f1e68481a62cd15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = socket$packet(0x11, 0x3, 0x300) dup3(r5, r4, 0x0) recvfrom$netrom(0xffffffffffffffff, &(0x7f0000000200)=""/98, 0x62, 0x40012103, &(0x7f0000000280)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast]}, 0x48) 1.102568051s ago: executing program 4 (id=917): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x2, 0x40010, r2, 0xfb0eb000) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) syz_init_net_socket$ax25(0x3, 0x2, 0xcc) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8f}, 0x19) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 965.899022ms ago: executing program 4 (id=919): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x20000400) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r5 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x800, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) io_uring_enter(r5, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) r8 = socket(0xa, 0x3, 0xff) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) 0s ago: executing program 4 (id=920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) kernel console output (not intermixed with test programs): ng interface batadv_slave_1 (retrying later): interface not active [ 56.820156][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.827396][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.853447][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.869768][ T4183] team0: Port device team_slave_0 added [ 56.880414][ T4183] team0: Port device team_slave_1 added [ 56.949283][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.956417][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.982369][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.001555][ T4186] device hsr_slave_0 entered promiscuous mode [ 57.008330][ T4186] device hsr_slave_1 entered promiscuous mode [ 57.014984][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.022757][ T4186] Cannot create hsr debugfs directory [ 57.044173][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.051118][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.077750][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.101426][ T4191] device hsr_slave_0 entered promiscuous mode [ 57.108066][ T4191] device hsr_slave_1 entered promiscuous mode [ 57.114910][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.122616][ T4191] Cannot create hsr debugfs directory [ 57.181870][ T4183] device hsr_slave_0 entered promiscuous mode [ 57.188884][ T4183] device hsr_slave_1 entered promiscuous mode [ 57.195679][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.205991][ T4183] Cannot create hsr debugfs directory [ 57.223140][ T4188] Bluetooth: hci2: command 0x0409 tx timeout [ 57.223180][ T4194] Bluetooth: hci3: command 0x0409 tx timeout [ 57.236398][ T4194] Bluetooth: hci0: command 0x0409 tx timeout [ 57.242728][ T4194] Bluetooth: hci1: command 0x0409 tx timeout [ 57.313253][ T4194] Bluetooth: hci4: command 0x0409 tx timeout [ 57.434648][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.446162][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.455299][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.467118][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.516517][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.527037][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.537340][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.554585][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.608825][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.621676][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.632061][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.647774][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.726503][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.743406][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.752135][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.765374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.777021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.793462][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.818955][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.827516][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.836042][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.863755][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.874734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.884972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.894815][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.902067][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.910408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.924790][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.935007][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.952681][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.959502][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.968719][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.979022][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.988341][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.997278][ T506] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.004355][ T506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.013272][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.042422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.051269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.060128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.069654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.078227][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.086912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.097878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.117857][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.128374][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.147571][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.159130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.168124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.176825][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.183920][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.193440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.201965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.210409][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.217474][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.226563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.234948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.243889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.252189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.260669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.269306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.296780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.308279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.326371][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.354822][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.372761][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.380662][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.390305][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.399462][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.408620][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.417088][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.425810][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.434594][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.444792][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.470544][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.492858][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.514307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.529159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.537936][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.545038][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.555748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.564943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.573508][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.580548][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.588306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.597515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.609758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.623680][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.638936][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.659464][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.702898][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.709825][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.718548][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.731708][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.739427][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.747423][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.768920][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.783625][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.799035][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.808059][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.817440][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.826864][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.840981][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.849903][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.859526][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.868205][ T506] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.875290][ T506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.887536][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.911874][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.919792][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.928759][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.937574][ T506] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.944783][ T506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.954620][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.963501][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.971994][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.980806][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.989580][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.999383][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.010270][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.023035][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.043990][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.051449][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.063539][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.072067][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.083994][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.094070][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.104482][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.127403][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.136775][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.146239][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.167804][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.178980][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.190820][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.236350][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.245169][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.259678][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.268892][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.277963][ T506] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.285061][ T506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.293485][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.302065][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.302895][ T4266] Bluetooth: hci2: command 0x041b tx timeout [ 59.310507][ T4251] Bluetooth: hci1: command 0x041b tx timeout [ 59.321930][ T506] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.322577][ T4251] Bluetooth: hci0: command 0x041b tx timeout [ 59.329060][ T506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.335140][ T4251] Bluetooth: hci3: command 0x041b tx timeout [ 59.349022][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.358032][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.367056][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.375717][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.384514][ T4251] Bluetooth: hci4: command 0x041b tx timeout [ 59.389539][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.399678][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.408469][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.416516][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.455300][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.467427][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.478811][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.488021][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.497498][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.507922][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.517218][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.526191][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.534965][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.544354][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.557103][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.570353][ T4184] device veth0_vlan entered promiscuous mode [ 59.581093][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.590612][ T4185] device veth0_vlan entered promiscuous mode [ 59.597991][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.606422][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.627711][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.635940][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.648649][ T4184] device veth1_vlan entered promiscuous mode [ 59.668786][ T4185] device veth1_vlan entered promiscuous mode [ 59.694174][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.701603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.713360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.722210][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.730910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.770515][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.788029][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.830029][ T4184] device veth0_macvtap entered promiscuous mode [ 59.845685][ T4185] device veth0_macvtap entered promiscuous mode [ 59.865198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.880802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.890088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.903814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.914108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.923900][ T4186] device veth0_vlan entered promiscuous mode [ 59.933492][ T4184] device veth1_macvtap entered promiscuous mode [ 59.943768][ T4185] device veth1_macvtap entered promiscuous mode [ 59.955644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.969320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.977618][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.986828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.996419][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.009322][ T4186] device veth1_vlan entered promiscuous mode [ 60.030620][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.039309][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.047048][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.060481][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.074015][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.085004][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.098624][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.118739][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.127018][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.136890][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.145939][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.154851][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.164244][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.172780][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.184934][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.193464][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.202036][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.216719][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.225734][ T4186] device veth0_macvtap entered promiscuous mode [ 60.237081][ T4186] device veth1_macvtap entered promiscuous mode [ 60.250870][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.261644][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.273579][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.283373][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.291354][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.299577][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.309264][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.318436][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.327471][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.344696][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.353769][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.362808][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.371511][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.394673][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.403563][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.412222][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.421237][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.433754][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.444797][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.455236][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.466593][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.479372][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.514975][ T4183] device veth0_vlan entered promiscuous mode [ 60.522191][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.531619][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.542120][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.550884][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.559503][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.567875][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.576901][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.585559][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.620152][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.631263][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.641339][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.654525][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.666344][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.678656][ T4191] device veth0_vlan entered promiscuous mode [ 60.699818][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.709290][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.718371][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.727469][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.736376][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.746389][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.766186][ T4183] device veth1_vlan entered promiscuous mode [ 60.786160][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.795880][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.805370][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.814350][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.830734][ T4191] device veth1_vlan entered promiscuous mode [ 60.923443][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.931358][ T506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.931721][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.941000][ T506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.967912][ T4191] device veth0_macvtap entered promiscuous mode [ 60.975783][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.984007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.991737][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.000879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.009758][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.018582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.027805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.043802][ T4183] device veth0_macvtap entered promiscuous mode [ 61.055653][ T4183] device veth1_macvtap entered promiscuous mode [ 61.068639][ T4191] device veth1_macvtap entered promiscuous mode [ 61.080414][ T506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.092727][ T506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.117990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.126282][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.135487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.144387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.156101][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.160475][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.175821][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.177086][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.193627][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.205208][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.215062][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.226587][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.237618][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.259865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.268310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.283109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.294399][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.306708][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.316847][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.327509][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.337707][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.348396][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.359459][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.373978][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.386381][ T4298] Bluetooth: hci3: command 0x040f tx timeout [ 61.392038][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.393527][ T4298] Bluetooth: hci0: command 0x040f tx timeout [ 61.406767][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.408481][ T4298] Bluetooth: hci1: command 0x040f tx timeout [ 61.419458][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.430364][ T4298] Bluetooth: hci2: command 0x040f tx timeout [ 61.435003][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.451985][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.461834][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.473913][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.479682][ T4298] Bluetooth: hci4: command 0x040f tx timeout [ 61.491785][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.515441][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.525271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.534754][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.544250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.569187][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.582238][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.592100][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.603263][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.613100][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.624819][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.634875][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.645564][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.657398][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.692647][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.701545][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.704785][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.719167][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.728402][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.738289][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.758432][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.758494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.777114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.784096][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.798049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.807322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.817721][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.826910][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.835857][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.844995][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.258030][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.267812][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.299073][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 62.400960][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 62.605774][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 62.813090][ T4313] vivid-002: ================= START STATUS ================= [ 62.827573][ T4310] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.854117][ T4313] vivid-002: Radio HW Seek Mode: Bounded [ 62.863658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.964350][ T4313] vivid-002: Radio Programmable HW Seek: false [ 62.970696][ T4313] vivid-002: RDS Rx I/O Mode: Block I/O [ 63.464568][ T4298] Bluetooth: hci2: command 0x0419 tx timeout [ 63.635019][ T4298] Bluetooth: hci1: command 0x0419 tx timeout [ 63.643597][ T4298] Bluetooth: hci0: command 0x0419 tx timeout [ 63.649939][ T4298] Bluetooth: hci3: command 0x0419 tx timeout [ 63.663432][ T4298] Bluetooth: hci4: command 0x0419 tx timeout [ 63.671939][ T506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.683187][ T4313] vivid-002: Generate RBDS Instead of RDS: false [ 63.705998][ T506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.715697][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.766326][ T1494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.785460][ T4313] vivid-002: RDS Reception: true [ 63.790879][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.814575][ T4313] vivid-002: RDS Program Type: 0 inactive [ 63.822138][ T4313] vivid-002: RDS PS Name: inactive [ 63.829916][ T4313] vivid-002: RDS Radio Text: inactive [ 63.845153][ T4313] vivid-002: RDS Traffic Announcement: false inactive [ 63.855954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.881450][ T1494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.905465][ T4313] vivid-002: RDS Traffic Program: false inactive [ 63.931500][ T4313] vivid-002: RDS Music: false inactive [ 63.956866][ T4313] vivid-002: ================== END STATUS ================== [ 63.993818][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.021815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.425921][ T4184] syz-executor (4184) used greatest stack depth: 19784 bytes left [ 64.785486][ T4321] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.901180][ T4321] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.047820][ T4321] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.062786][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 65.228772][ T4321] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.572293][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 65.602279][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 65.677797][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 65.677811][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 65.679181][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 65.705350][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 65.812806][ T4188] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 66.491224][ T4345] sctp: failed to load transform for md5: -2 [ 66.932750][ T4188] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 66.972198][ T4188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.175820][ T4188] usb 3-1: config 0 descriptor?? [ 67.235207][ T4188] cp210x 3-1:0.0: cp210x converter detected [ 68.075425][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 68.302434][ T4188] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 68.638620][ T4188] usb 3-1: cp210x converter now attached to ttyUSB0 [ 68.933376][ T4188] usb 3-1: USB disconnect, device number 2 [ 69.065429][ T4188] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 69.386472][ T4188] cp210x 3-1:0.0: device disconnected [ 69.580894][ T4350] chnl_net:caif_netlink_parms(): no params data found [ 70.304545][ T4350] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.327788][ T4350] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.394667][ T4350] device bridge_slave_0 entered promiscuous mode [ 70.488343][ T4350] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.564304][ T4350] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.593477][ T4188] Bluetooth: hci1: command 0x041b tx timeout [ 70.697250][ T4350] device bridge_slave_1 entered promiscuous mode [ 70.917527][ T4350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.260475][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.415545][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.531603][ T4350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.281300][ T4350] team0: Port device team_slave_0 added [ 72.672597][ T4308] Bluetooth: hci1: command 0x040f tx timeout [ 73.012462][ T4350] team0: Port device team_slave_1 added [ 73.155995][ T2238] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 73.245679][ T4350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.266646][ T4350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.335028][ T4448] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.353926][ T4350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.410118][ T4321] device hsr_slave_0 left promiscuous mode [ 73.437491][ T4321] device hsr_slave_1 left promiscuous mode [ 73.493707][ T4321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.523357][ T4321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.578061][ T4321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.612533][ T4321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.643161][ T4321] device bridge_slave_1 left promiscuous mode [ 73.650288][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.732920][ T2238] usb 3-1: config 0 has no interfaces? [ 73.761908][ T4321] device bridge_slave_0 left promiscuous mode [ 73.801423][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.208415][ T4321] device veth1_macvtap left promiscuous mode [ 74.214944][ T2238] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 74.233357][ T4321] device veth0_macvtap left promiscuous mode [ 74.264468][ T2238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.294011][ T4321] device veth1_vlan left promiscuous mode [ 74.300047][ T4321] device veth0_vlan left promiscuous mode [ 74.342705][ T2238] usb 3-1: Product: syz [ 74.364122][ T2238] usb 3-1: Manufacturer: syz [ 74.374789][ T2238] usb 3-1: SerialNumber: syz [ 74.438622][ T2238] usb 3-1: config 0 descriptor?? [ 74.742404][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 75.273623][ T4321] team0 (unregistering): Port device team_slave_1 removed [ 75.319519][ T4308] usb 3-1: USB disconnect, device number 3 [ 75.415214][ T4321] team0 (unregistering): Port device team_slave_0 removed [ 75.675241][ T4321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.840047][ T4321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.116902][ T7] cfg80211: failed to load regulatory.db [ 77.281460][ T4321] bond0 (unregistering): Released all slaves [ 77.967793][ T4350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.978382][ T4350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.006051][ T4350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.348286][ T4501] usb usb8: usbfs: process 4501 (syz.4.47) did not claim interface 0 before use [ 78.445377][ T4504] process 'syz.3.48' launched '/dev/fd/3' with NULL argv: empty string added [ 78.523807][ T4350] device hsr_slave_0 entered promiscuous mode [ 79.424543][ T4350] device hsr_slave_1 entered promiscuous mode [ 79.447830][ T4504] sctp: failed to load transform for md5: -2 [ 79.472493][ T4350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.492163][ T4350] Cannot create hsr debugfs directory [ 79.591330][ T4522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.51'. [ 79.786688][ T4522] device bond1 entered promiscuous mode [ 79.810260][ T4522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.032841][ T4538] tipc: Started in network mode [ 81.038260][ T4538] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 81.049243][ T4538] tipc: Enabled bearer , priority 10 [ 81.102355][ T2238] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.215148][ T4194] tipc: Node number set to 4269801488 [ 82.469440][ T4557] smc: net device bond0 applied user defined pnetid SYZ0 [ 85.773184][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.602362][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 86.672466][ T2238] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 86.712922][ T2238] usb 4-1: can't read configurations, error -71 [ 86.971197][ T4350] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.985234][ T4350] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.995512][ T4350] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.132664][ T7] usb 5-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 87.229648][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.367619][ T7] usb 5-1: Product: syz [ 87.373586][ T7] usb 5-1: Manufacturer: syz [ 87.469415][ T7] usb 5-1: SerialNumber: syz [ 87.653512][ T7] usb 5-1: config 0 descriptor?? [ 87.753119][ T7] usb 5-1: can't set config #0, error -71 [ 87.773444][ T7] usb 5-1: USB disconnect, device number 2 [ 87.872630][ T4350] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.956412][ T4350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.234343][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.258103][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.306917][ T4350] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.372456][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.402985][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.462523][ T2238] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 89.462638][ T506] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.477290][ T506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.686849][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.700614][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.712082][ T506] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.719212][ T506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.773445][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.845611][ T2238] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.877627][ T2238] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.908238][ T2238] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 89.912112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.927491][ T2238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.956444][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.993522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.041111][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.076939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.110874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.146772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.199086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.232472][ T2238] usb 3-1: usb_control_msg returned -32 [ 90.232915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.246019][ T2238] usbtmc 3-1:16.0: can't read capabilities [ 90.294042][ T4350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.333385][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.355251][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.382951][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.888738][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.922804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.957070][ T4350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.082996][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.101690][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.185934][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.228752][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.246703][ T4350] device veth0_vlan entered promiscuous mode [ 91.261710][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.327804][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.398421][ T4350] device veth1_vlan entered promiscuous mode [ 91.674990][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.710465][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.009931][ T4350] device veth0_macvtap entered promiscuous mode [ 92.026256][ T4350] device veth1_macvtap entered promiscuous mode [ 92.209430][ T4350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.250090][ T13] usb 3-1: USB disconnect, device number 4 [ 92.264337][ T4350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.287028][ T4350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.318920][ T4350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.361541][ T4350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.405852][ T4350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.431995][ T4350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.499837][ T4350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.540464][ T4350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.559414][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.808976][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.819404][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.005392][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.130863][ T4350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.201309][ T4350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.372903][ T4350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.425730][ T4350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.478720][ T4350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.529841][ T4350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.703657][ T4258] Bluetooth: hci0: command 0x0409 tx timeout [ 93.970047][ T4350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.037719][ T4350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.095314][ T4350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.184551][ T4742] netlink: 'syz.1.87': attribute type 3 has an invalid length. [ 94.227112][ T4742] netlink: 'syz.1.87': attribute type 3 has an invalid length. [ 94.250552][ T4742] netlink: 'syz.1.87': attribute type 3 has an invalid length. [ 94.250857][ T4742] netlink: 'syz.1.87': attribute type 3 has an invalid length. [ 94.254602][ T4742] netlink: 'syz.1.87': attribute type 3 has an invalid length. [ 94.254786][ T4742] netlink: 'syz.1.87': attribute type 3 has an invalid length. [ 94.254883][ T4742] netlink: 'syz.1.87': attribute type 3 has an invalid length. [ 94.254962][ T4742] netlink: 'syz.1.87': attribute type 3 has an invalid length. [ 94.255046][ T4742] netlink: 'syz.1.87': attribute type 3 has an invalid length. [ 94.255143][ T4742] netlink: 'syz.1.87': attribute type 3 has an invalid length. [ 94.290880][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.291496][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.294277][ T4350] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.294345][ T4350] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.294370][ T4350] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.294394][ T4350] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.618516][ T4371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.618567][ T4371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.620636][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.820629][ T4371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.821194][ T4371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.822811][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.110807][ T4761] Zero length message leads to an empty skb [ 95.560335][ T4766] loop9: detected capacity change from 0 to 7 [ 95.632373][ T4471] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 95.637066][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.651518][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 95.712526][ T4194] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 95.836982][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.847912][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 95.985921][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.996969][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.091569][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.102611][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.112079][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.123028][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.183488][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.194416][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.203425][ T4471] usb 3-1: config 0 has no interfaces? [ 96.230658][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.241577][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.250506][ T4766] ldm_validate_partition_table(): Disk read failed. [ 96.300199][ T4194] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.326073][ T4194] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.363038][ T4194] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.396735][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.407666][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.422812][ T4194] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.448019][ T4194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.456585][ T4471] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 96.475834][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.486868][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.499554][ T4471] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.509962][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.520870][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.547516][ T4194] usb 4-1: config 0 descriptor?? [ 96.567476][ T4471] usb 3-1: Product: syz [ 96.572688][ T4471] usb 3-1: Manufacturer: syz [ 96.584357][ T4766] Dev loop9: unable to read RDB block 0 [ 96.592901][ T4471] usb 3-1: SerialNumber: syz [ 96.600734][ T4766] loop9: unable to read partition table [ 96.613389][ T4766] loop9: partition table beyond EOD, truncated [ 96.636436][ T4471] usb 3-1: config 0 descriptor?? [ 96.660294][ T4766] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑøkÚ¬§½dG¤´à–ƒÝ¡¯ â·û) failed (rc=-5) [ 96.966194][ T4782] netlink: 28 bytes leftover after parsing attributes in process `syz.0.92'. [ 97.109472][ T4194] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 97.184741][ T4194] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 98.470572][ T4788] sctp: failed to load transform for md5: -2 [ 99.308216][ T2238] usb 4-1: USB disconnect, device number 4 [ 100.209369][ T4194] usb 3-1: USB disconnect, device number 5 [ 105.512347][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.752397][ T1108] usb 2-1: Using ep0 maxpacket: 32 [ 105.830167][ T4188] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 106.212515][ T1108] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 106.252344][ T1108] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 106.384136][ T4919] capability: warning: `syz.3.124' uses deprecated v2 capabilities in a way that may be insecure [ 106.399912][ T4188] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.420040][ T4188] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 106.439887][ T4188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.451846][ T4188] usb 3-1: config 0 descriptor?? [ 106.482698][ T1108] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 106.501939][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 106.516431][ T4188] pwc: Askey VC010 type 2 USB webcam detected. [ 106.563440][ T1108] usb 2-1: Product: syz [ 106.567631][ T1108] usb 2-1: Manufacturer: syz [ 106.583940][ T1108] usb 2-1: SerialNumber: syz [ 107.146932][ T4925] vivid-000: ================= START STATUS ================= [ 107.155927][ T4925] vivid-000: Radio HW Seek Mode: Bounded [ 107.161881][ T4925] vivid-000: Radio Programmable HW Seek: false [ 107.176737][ T4899] udc-core: couldn't find an available UDC or it's busy [ 107.190832][ T4925] [ 107.193603][ T4925] vivid-000: RDS Rx I/O Mode: Block I/O [ 107.202539][ T4925] vivid-000: Generate RBDS Instead of RDS: false [ 107.209004][ T4925] vivid-000: RDS Reception: [ 107.210215][ T4899] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 107.222568][ T4925] true [ 107.228318][ T4925] vivid-000: RDS Program Type: 0 inactive [ 107.235618][ T4925] vivid-000: RDS PS Name: inactive [ 107.310397][ T4925] vivid-000: RDS Radio Text: inactive [ 107.322436][ T4188] pwc: recv_control_msg error -32 req 02 val 2b00 [ 107.329093][ T4925] vivid-000: RDS Traffic Announcement: false inactive [ 107.336215][ T4925] vivid-000: RDS Traffic Program: false inactive [ 107.346371][ T4925] vivid-000: RDS Music: false inactive [ 107.352012][ T4925] vivid-000: ================== END STATUS ================== [ 107.445752][ T4188] pwc: recv_control_msg error -32 req 02 val 2700 [ 107.492465][ T4188] pwc: recv_control_msg error -32 req 02 val 2c00 [ 107.712379][ T4188] pwc: recv_control_msg error -32 req 04 val 1000 [ 107.794486][ T1108] usb 2-1: USB disconnect, device number 2 [ 107.972735][ T4188] pwc: recv_control_msg error -32 req 04 val 1400 [ 108.024244][ T4188] pwc: recv_control_msg error -32 req 02 val 2000 [ 108.082860][ T4188] pwc: recv_control_msg error -71 req 02 val 2100 [ 108.127087][ T4188] pwc: recv_control_msg error -71 req 04 val 1500 [ 108.152563][ T4188] pwc: recv_control_msg error -71 req 02 val 2500 [ 108.393190][ T4188] pwc: recv_control_msg error -71 req 02 val 2400 [ 108.423783][ T4188] pwc: recv_control_msg error -71 req 02 val 2600 [ 108.443025][ T4188] pwc: recv_control_msg error -71 req 02 val 2900 [ 108.463278][ T4188] pwc: recv_control_msg error -71 req 02 val 2800 [ 108.496107][ T4188] pwc: recv_control_msg error -71 req 04 val 1100 [ 108.506587][ T4944] validate_nla: 44 callbacks suppressed [ 108.506621][ T4944] netlink: 'syz.3.131': attribute type 3 has an invalid length. [ 108.523154][ T4944] netlink: 'syz.3.131': attribute type 3 has an invalid length. [ 108.531348][ T4944] netlink: 'syz.3.131': attribute type 3 has an invalid length. [ 108.539662][ T4944] netlink: 'syz.3.131': attribute type 3 has an invalid length. [ 108.547649][ T4188] pwc: recv_control_msg error -71 req 04 val 1200 [ 108.554393][ T4944] netlink: 'syz.3.131': attribute type 3 has an invalid length. [ 108.566315][ T4188] pwc: Registered as video103. [ 108.572495][ T4944] netlink: 'syz.3.131': attribute type 3 has an invalid length. [ 108.593228][ T4188] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 108.597403][ T4944] netlink: 'syz.3.131': attribute type 3 has an invalid length. [ 108.622524][ T4188] usb 3-1: USB disconnect, device number 6 [ 108.636622][ T4944] netlink: 'syz.3.131': attribute type 3 has an invalid length. [ 108.660723][ T4944] netlink: 'syz.3.131': attribute type 3 has an invalid length. [ 108.670184][ T4944] netlink: 'syz.3.131': attribute type 3 has an invalid length. [ 111.992391][ T4174] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 112.035219][ T4985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.143'. [ 112.192432][ T4194] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 113.182466][ T4174] usb 3-1: config 0 has no interfaces? [ 113.200468][ T4985] bond0: (slave bond_slave_0): Releasing backup interface [ 113.290902][ T4993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.144'. [ 113.300690][ T4993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.144'. [ 113.315742][ T4993] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.325171][ T4993] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.333939][ T4993] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.342688][ T4993] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.572989][ T4194] usb 4-1: Using ep0 maxpacket: 32 [ 113.592477][ T4174] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 113.625398][ T4174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.752385][ T4174] usb 3-1: Product: syz [ 113.756577][ T4174] usb 3-1: Manufacturer: syz [ 113.761173][ T4174] usb 3-1: SerialNumber: syz [ 114.532739][ T4194] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.582535][ T4194] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.605316][ T4194] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 114.767805][ T4194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.831209][ T4194] usb 4-1: config 0 descriptor?? [ 114.902742][ T4174] usb 3-1: config 0 descriptor?? [ 115.094208][ T5013] validate_nla: 44 callbacks suppressed [ 115.094219][ T5013] netlink: 'syz.0.152': attribute type 3 has an invalid length. [ 115.107755][ T5013] netlink: 'syz.0.152': attribute type 3 has an invalid length. [ 115.232884][ T5013] netlink: 'syz.0.152': attribute type 3 has an invalid length. [ 115.241349][ T5013] netlink: 'syz.0.152': attribute type 3 has an invalid length. [ 115.249482][ T5013] netlink: 'syz.0.152': attribute type 3 has an invalid length. [ 115.257535][ T5013] netlink: 'syz.0.152': attribute type 3 has an invalid length. [ 115.265541][ T5013] netlink: 'syz.0.152': attribute type 3 has an invalid length. [ 115.273508][ T5013] netlink: 'syz.0.152': attribute type 3 has an invalid length. [ 115.281403][ T5013] netlink: 'syz.0.152': attribute type 3 has an invalid length. [ 115.289404][ T5013] netlink: 'syz.0.152': attribute type 3 has an invalid length. [ 115.322396][ T4194] usbhid 4-1:0.0: can't add hid device: -71 [ 115.328362][ T4194] usbhid: probe of 4-1:0.0 failed with error -71 [ 115.379067][ T4194] usb 4-1: USB disconnect, device number 5 [ 116.303178][ T5026] netlink: 20 bytes leftover after parsing attributes in process `syz.1.154'. [ 116.785343][ T5026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 117.722408][ T1108] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 117.943363][ T1108] usb 5-1: device descriptor read/64, error -71 [ 118.982701][ T4174] usb 3-1: can't set config #0, error -71 [ 119.004594][ T4174] usb 3-1: USB disconnect, device number 7 [ 119.994661][ T5061] netlink: 20 bytes leftover after parsing attributes in process `syz.3.166'. [ 120.464922][ T5061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.166'. [ 122.652340][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 122.832398][ T4174] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.192603][ T4174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 123.211712][ T4174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 123.232621][ T4174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 123.292912][ T26] usb 1-1: config 0 has no interfaces? [ 123.628345][ T4174] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 123.782554][ T26] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 123.798531][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.806932][ T26] usb 1-1: Product: syz [ 123.811100][ T26] usb 1-1: Manufacturer: syz [ 123.816159][ T4174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.831708][ T26] usb 1-1: SerialNumber: syz [ 123.855865][ T4174] usb 4-1: Product: syz [ 123.856623][ T26] usb 1-1: config 0 descriptor?? [ 123.865726][ T4174] usb 4-1: Manufacturer: syz [ 123.878376][ T4174] usb 4-1: SerialNumber: syz [ 123.929739][ T4174] usb 4-1: config 0 descriptor?? [ 124.498933][ T4174] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 124.724664][ T4174] usb 4-1: USB disconnect, device number 6 [ 127.435913][ T5145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.192'. [ 127.960631][ T5145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.192'. [ 128.590454][ T5156] syz.3.194 uses obsolete (PF_INET,SOCK_PACKET) [ 128.717391][ T4174] usb 1-1: USB disconnect, device number 2 [ 130.762268][ T4298] Bluetooth: hci0: command 0x0c20 tx timeout [ 132.664996][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.671555][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.361655][ T5209] bridge0: port 3(gretap0) entered blocking state [ 133.368705][ T5209] bridge0: port 3(gretap0) entered disabled state [ 133.394376][ T5209] device gretap0 entered promiscuous mode [ 133.405225][ T5209] bridge0: port 3(gretap0) entered blocking state [ 133.411900][ T5209] bridge0: port 3(gretap0) entered forwarding state [ 135.242232][ C1] sched: RT throttling activated [ 136.652315][ T4174] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 136.981175][ T5233] serio: Serial port ptm0 [ 137.322498][ T4174] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.342713][ T4174] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 137.351897][ T4174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.410899][ T4174] usb 1-1: config 0 descriptor?? [ 137.454300][ T4174] pwc: Askey VC010 type 2 USB webcam detected. [ 138.214486][ T4174] pwc: recv_control_msg error -32 req 02 val 2b00 [ 138.252532][ T4174] pwc: recv_control_msg error -32 req 02 val 2700 [ 138.432382][ T4174] pwc: recv_control_msg error -32 req 02 val 2c00 [ 138.472520][ T4174] pwc: recv_control_msg error -32 req 04 val 1000 [ 138.522386][ T4174] pwc: recv_control_msg error -32 req 04 val 1300 [ 138.562535][ T4174] pwc: recv_control_msg error -32 req 04 val 1400 [ 138.612384][ T4174] pwc: recv_control_msg error -32 req 02 val 2000 [ 138.662377][ T4174] pwc: recv_control_msg error -32 req 02 val 2100 [ 138.702382][ T4174] pwc: recv_control_msg error -32 req 04 val 1500 [ 138.742418][ T4174] pwc: recv_control_msg error -32 req 02 val 2500 [ 138.782359][ T4174] pwc: recv_control_msg error -32 req 02 val 2400 [ 138.822380][ T4174] pwc: recv_control_msg error -32 req 02 val 2600 [ 138.862451][ T4174] pwc: recv_control_msg error -32 req 02 val 2900 [ 138.912385][ T4174] pwc: recv_control_msg error -32 req 02 val 2800 [ 139.172540][ T4174] pwc: recv_control_msg error -71 req 04 val 1200 [ 139.183336][ T4174] pwc: Registered as video103. [ 139.842506][ T4174] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 139.904876][ T4174] usb 1-1: USB disconnect, device number 3 [ 140.362498][ T4188] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 140.774928][ T4188] usb 3-1: config 0 has no interfaces? [ 140.962424][ T4188] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 140.982319][ T4188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.113437][ T4188] usb 3-1: Product: syz [ 141.140321][ T4188] usb 3-1: Manufacturer: syz [ 141.191759][ T4188] usb 3-1: SerialNumber: syz [ 141.258378][ T4188] usb 3-1: config 0 descriptor?? [ 141.729526][ T5294] netlink: 20 bytes leftover after parsing attributes in process `syz.3.234'. [ 143.511989][ T4188] usb 3-1: USB disconnect, device number 8 [ 146.360464][ T5327] netlink: zone id is out of range [ 146.891249][ T5320] crypto_alloc_aead failed rc=-2 [ 150.595690][ T5398] 9pnet: Insufficient options for proto=fd [ 152.012352][ T26] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 152.052358][ T13] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 153.697328][ T26] usb 1-1: too many configurations: 237, using maximum allowed: 8 [ 153.794051][ T13] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 153.834888][ T13] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 153.861762][ T13] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 153.883369][ T13] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 154.042324][ T26] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 154.043115][ T5442] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.276'. [ 154.058290][ T26] usb 1-1: can't read configurations, error -71 [ 154.059977][ T13] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 154.110979][ T13] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 154.132317][ T13] usb 3-1: Product: syz [ 154.136523][ T13] usb 3-1: Manufacturer: syz [ 154.180407][ T5439] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.276'. [ 154.204394][ T13] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 154.297520][ T5443] sctp: failed to load transform for md5: -2 [ 157.888348][ T4471] usb 3-1: USB disconnect, device number 9 [ 158.565539][ T5500] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.288' sets config #1 [ 160.628455][ T13] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 160.942331][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 161.073041][ T13] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 161.093734][ T13] usb 3-1: config 0 has no interface number 0 [ 161.150066][ T13] usb 3-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 161.290962][ T13] usb 3-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 161.327287][ T13] usb 3-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xF2, skipping [ 161.338667][ T13] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 161.360323][ T13] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 161.382478][ T13] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.466253][ T4471] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 161.672471][ T13] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 161.694420][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.753597][ T13] usb 3-1: Product: syz [ 161.830940][ T13] usb 3-1: Manufacturer: syz [ 161.852574][ T13] usb 3-1: SerialNumber: syz [ 161.877457][ T13] usb 3-1: config 0 descriptor?? [ 161.912434][ T4471] usb 2-1: config 0 has no interfaces? [ 161.922782][ T5511] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 161.945582][ T5511] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 161.983412][ T13] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 162.112532][ T4471] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 162.128621][ T4471] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.146847][ T4471] usb 2-1: Product: syz [ 162.151030][ T4471] usb 2-1: Manufacturer: syz [ 162.164569][ T4471] usb 2-1: SerialNumber: syz [ 162.191377][ T4471] usb 2-1: config 0 descriptor?? [ 162.238252][ T4188] usb 3-1: USB disconnect, device number 10 [ 162.619515][ T5537] netlink: 20 bytes leftover after parsing attributes in process `syz.0.298'. [ 163.919772][ T5546] validate_nla: 44 callbacks suppressed [ 163.919793][ T5546] netlink: 'syz.0.302': attribute type 3 has an invalid length. [ 163.959844][ T5546] netlink: 'syz.0.302': attribute type 3 has an invalid length. [ 164.250914][ T5551] block device autoloading is deprecated and will be removed. [ 164.392603][ T5546] netlink: 'syz.0.302': attribute type 3 has an invalid length. [ 164.400692][ T5546] netlink: 'syz.0.302': attribute type 3 has an invalid length. [ 164.409188][ T5546] netlink: 'syz.0.302': attribute type 3 has an invalid length. [ 164.417295][ T5546] netlink: 'syz.0.302': attribute type 3 has an invalid length. [ 164.432062][ T5546] netlink: 'syz.0.302': attribute type 3 has an invalid length. [ 164.440203][ T5546] netlink: 'syz.0.302': attribute type 3 has an invalid length. [ 164.463820][ T5546] netlink: 'syz.0.302': attribute type 3 has an invalid length. [ 164.510436][ T5546] netlink: 'syz.0.302': attribute type 3 has an invalid length. [ 165.273651][ T4194] usb 2-1: USB disconnect, device number 3 [ 170.532392][ T25] audit: type=1326 audit(1756683544.348:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5606 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7078b62be9 code=0x7fc00000 [ 171.324481][ T4188] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 171.392587][ T5571] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.400431][ T5571] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.702546][ T4188] usb 3-1: config 0 has no interfaces? [ 171.885661][ T4188] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 171.929323][ T4188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.938988][ T4188] usb 3-1: Product: syz [ 171.949610][ T4188] usb 3-1: Manufacturer: syz [ 171.987201][ T4188] usb 3-1: SerialNumber: syz [ 172.107616][ T4188] usb 3-1: config 0 descriptor?? [ 172.775933][ T5571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.870360][ T5571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.616583][ T4765] usb 3-1: USB disconnect, device number 12 [ 173.729377][ T5571] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.738998][ T5571] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.770793][ T5571] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.780014][ T5571] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.980148][ T5571] device bond1 left promiscuous mode [ 174.152593][ T4765] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 174.595796][ T5639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.324'. [ 174.605580][ T4765] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 174.627230][ T4765] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.432516][ T4765] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 175.467738][ T4765] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 175.545363][ T4765] usb 3-1: Manufacturer: syz [ 175.695854][ T4765] usb 3-1: config 0 descriptor?? [ 176.366966][ T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 176.492438][ T4765] rc_core: IR keymap rc-hauppauge not found [ 176.498361][ T4765] Registered IR keymap rc-empty [ 176.540578][ T4765] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 176.587388][ T4765] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 176.676614][ T4174] usb 3-1: USB disconnect, device number 13 [ 176.782635][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.801527][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.828309][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 176.971482][ T13] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.014864][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.040010][ T13] usb 1-1: config 0 descriptor?? [ 177.412312][ T4174] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 177.535154][ T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 177.551815][ T13] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 177.598614][ T13] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 177.802398][ T4174] usb 4-1: config 0 has no interfaces? [ 177.815723][ T13] usb 1-1: USB disconnect, device number 6 [ 177.972383][ T4174] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 177.983617][ T4174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.995169][ T4174] usb 4-1: Product: syz [ 178.000067][ T4174] usb 4-1: Manufacturer: syz [ 178.005525][ T4174] usb 4-1: SerialNumber: syz [ 178.013812][ T4174] usb 4-1: config 0 descriptor?? [ 180.683437][ T5706] binder: 5704:5706 ioctl c0306201 200000000080 returned -14 [ 180.832430][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 180.841067][ T21] Bluetooth: hci0: command 0x0406 tx timeout [ 180.882306][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 180.905728][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 181.407724][ T4471] usb 4-1: USB disconnect, device number 7 [ 183.684985][ T5732] validate_nla: 44 callbacks suppressed [ 183.685024][ T5732] netlink: 'syz.4.353': attribute type 5 has an invalid length. [ 183.852431][ T4765] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 185.092428][ T4765] usb 3-1: Using ep0 maxpacket: 32 [ 185.212839][ T4765] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 185.222889][ T4765] usb 3-1: config 0 has no interface number 0 [ 185.229270][ T4765] usb 3-1: config 0 interface 12 has no altsetting 0 [ 185.392748][ T4765] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 185.412325][ T4765] usb 3-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 185.420605][ T4765] usb 3-1: Product: syz [ 185.424890][ T4765] usb 3-1: Manufacturer: syz [ 185.430784][ T4765] usb 3-1: SerialNumber: syz [ 185.454466][ T4765] usb 3-1: config 0 descriptor?? [ 186.548414][ T4765] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 186.563518][ T4765] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 186.571730][ T4765] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 186.602403][ T4765] f81534: probe of 3-1:0.12 failed with error -71 [ 186.750203][ T4765] usb 3-1: USB disconnect, device number 14 [ 186.918596][ T5765] 9p: Unknown Cache mode readahead [ 194.117767][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.126323][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.142774][ T4188] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 195.602265][ T2403] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 196.342463][ T4188] usb 1-1: config 0 has no interfaces? [ 196.698272][ T5882] overlayfs: failed to resolve './file1': -2 [ 196.942439][ T2403] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.963596][ T2403] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.979978][ T2403] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 197.012488][ T4188] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 197.026580][ T2403] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.042369][ T4188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.066564][ T4188] usb 1-1: Product: syz [ 197.075064][ T2403] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.121408][ T2403] usb 5-1: config 0 descriptor?? [ 197.143581][ T4188] usb 1-1: Manufacturer: syz [ 197.182352][ T4188] usb 1-1: SerialNumber: syz [ 197.233085][ T4188] usb 1-1: config 0 descriptor?? [ 197.374142][ T4174] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 197.616170][ T2403] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 197.669917][ T2403] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 197.792581][ T4174] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 197.844215][ T4174] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 198.152734][ T4174] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 198.165614][ T4174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 198.173985][ T4174] usb 4-1: SerialNumber: syz [ 199.024654][ T4174] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 199.031475][ T4174] usb-storage 4-1:1.0: USB Mass Storage device detected [ 199.114271][ T4194] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 199.142113][ T4174] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 199.219385][ T4174] scsi host1: usb-storage 4-1:1.0 [ 199.357403][ T4174] usb 4-1: USB disconnect, device number 8 [ 200.142744][ T4188] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 200.467081][ T2403] usb 5-1: USB disconnect, device number 5 [ 200.492474][ T4188] usb 2-1: device descriptor read/64, error -71 [ 200.604858][ T13] usb 1-1: USB disconnect, device number 7 [ 201.316970][ T4188] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 201.922325][ T4188] usb 2-1: device descriptor read/64, error -71 [ 202.132770][ T4188] usb usb2-port1: attempt power cycle [ 206.432961][ T5962] sctp: failed to load transform for md5: -2 [ 206.566041][ T5989] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 206.566240][ T5989] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 210.245766][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'. [ 212.412270][ T4194] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 212.474435][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.436'. [ 213.652614][ T4194] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 213.661052][ T4194] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 213.837792][ T4194] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 213.852540][ T4194] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.861765][ T4194] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.881782][ T4194] usb 3-1: config 0 descriptor?? [ 213.932536][ T6045] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 213.972446][ T4194] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 217.286095][ T13] usb 3-1: USB disconnect, device number 15 [ 217.304525][ T6080] overlayfs: failed to resolve './bus': -2 [ 217.425933][ T6061] netlink: 'syz.3.440': attribute type 1 has an invalid length. [ 217.819766][ T6096] 9p: Unknown Cache mode readahead [ 218.948012][ T6093] ptrace attach of "./syz-executor exec"[4183] was attempted by "./syz-executor exec"[6093] [ 223.242087][ T6144] vivid-004: disconnect [ 224.458069][ T6138] vivid-004: reconnect [ 227.750807][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.474'. [ 234.755144][ T6262] comedi comedi3: dt2815: I/O port conflict (0x4000c6c1,2) [ 236.202346][ T4238] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 236.642440][ T4238] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 237.379092][ T4238] usb 3-1: config 0 has no interface number 0 [ 237.385604][ T4238] usb 3-1: config 0 interface 49 altsetting 0 has an invalid endpoint with address 0x29, skipping [ 237.905196][ T4238] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 238.026177][ T4238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.058393][ T4238] usb 3-1: Product: syz [ 238.065113][ T4238] usb 3-1: Manufacturer: syz [ 238.069802][ T4238] usb 3-1: SerialNumber: syz [ 238.085229][ T4238] usb 3-1: config 0 descriptor?? [ 238.112595][ T6272] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 238.362478][ T4188] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 239.126414][ T4188] usb 1-1: device descriptor read/64, error -71 [ 239.403330][ T4238] qmi_wwan: probe of 3-1:0.49 failed with error -22 [ 239.410058][ T4188] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 239.519737][ T4238] usb 3-1: USB disconnect, device number 16 [ 239.662550][ T4188] usb 1-1: device descriptor read/64, error -71 [ 239.792496][ T4188] usb usb1-port1: attempt power cycle [ 240.202384][ T4188] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 240.575952][ T4188] usb 1-1: device descriptor read/8, error -71 [ 241.324645][ T4188] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 241.411014][ T6324] device bridge0 entered promiscuous mode [ 241.419346][ T6324] device macvlan2 entered promiscuous mode [ 241.635383][ T4188] usb 1-1: device not accepting address 11, error -71 [ 241.642897][ T4188] usb usb1-port1: unable to enumerate USB device [ 242.835192][ T6340] vivid-001: disconnect [ 243.422626][ T6336] vivid-001: reconnect [ 243.863072][ T4194] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 243.877774][ T4194] Bluetooth: hci2: Injecting HCI hardware error event [ 243.907320][ T4199] Bluetooth: hci2: hardware error 0x00 [ 244.572232][ T5624] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 245.302316][ T5624] usb 3-1: device descriptor read/64, error -71 [ 246.022292][ T4188] Bluetooth: hci5: command 0x1003 tx timeout [ 246.047457][ T4312] Bluetooth: hci5: Frame reassembly failed (-84) [ 246.063143][ T4312] Bluetooth: hci5: Frame reassembly failed (-84) [ 246.222264][ T5624] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 246.418621][ T5624] usb 3-1: device descriptor read/64, error -71 [ 246.573276][ T5624] usb usb3-port1: attempt power cycle [ 248.345210][ T4174] Bluetooth: hci5: command 0x1001 tx timeout [ 248.409145][ T4202] Bluetooth: hci5: sending frame failed (-49) [ 248.438837][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 250.212334][ T4174] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 250.422410][ T13] Bluetooth: hci5: command 0x1009 tx timeout [ 250.657796][ T4174] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 250.667511][ T4174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.682915][ T4174] usb 3-1: config 0 descriptor?? [ 251.320730][ T4174] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 251.623881][ T4174] gspca_cpia1: usb_control_msg 03, error -71 [ 251.672386][ T4174] gspca_cpia1: usb_control_msg 01, error -71 [ 251.682384][ T4174] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 251.716456][ T4174] usb 3-1: USB disconnect, device number 20 [ 252.677932][ T6434] delete_channel: no stack [ 254.195111][ T6452] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 254.242317][ T6452] overlayfs: missing 'lowerdir' [ 255.544677][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.551009][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.735662][ T6462] o2cb: This node has not been configured. [ 255.741753][ T6462] o2cb: Cluster check failed. Fix errors before retrying. [ 255.808303][ T6462] (syz.1.549,6462,1):user_dlm_register:675 ERROR: status = -22 [ 255.851424][ T6462] (syz.1.549,6462,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "bus" [ 256.691144][ T6479] netlink: 'syz.0.555': attribute type 3 has an invalid length. [ 256.768948][ T6479] netlink: 'syz.0.555': attribute type 3 has an invalid length. [ 256.892267][ T6479] netlink: 'syz.0.555': attribute type 3 has an invalid length. [ 256.927252][ T6479] netlink: 'syz.0.555': attribute type 3 has an invalid length. [ 257.570827][ T6479] netlink: 'syz.0.555': attribute type 3 has an invalid length. [ 257.646341][ T4765] Bluetooth: hci1: command 0x0406 tx timeout [ 257.732846][ T6479] netlink: 'syz.0.555': attribute type 3 has an invalid length. [ 257.787229][ T6479] netlink: 'syz.0.555': attribute type 3 has an invalid length. [ 258.535941][ T6479] netlink: 'syz.0.555': attribute type 3 has an invalid length. [ 258.563977][ T6479] netlink: 'syz.0.555': attribute type 3 has an invalid length. [ 258.755877][ T6479] netlink: 'syz.0.555': attribute type 3 has an invalid length. [ 260.678227][ T6525] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 260.686725][ T6525] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 261.749620][ T6528] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 261.756425][ T6528] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 261.765155][ T6528] vhci_hcd vhci_hcd.0: Device attached [ 261.972327][ T13] vhci_hcd: vhci_device speed not set [ 262.628724][ T13] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 262.739877][ T2238] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 262.791891][ T6537] validate_nla: 44 callbacks suppressed [ 262.791907][ T6537] netlink: 'syz.3.568': attribute type 11 has an invalid length. [ 263.182453][ T2238] usb 3-1: config 0 has no interfaces? [ 263.188015][ T2238] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 263.222575][ T2238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.276670][ T2238] usb 3-1: config 0 descriptor?? [ 264.352837][ T6530] vhci_hcd: unknown pdu 2 [ 264.382696][ T4321] vhci_hcd: stop threads [ 264.386960][ T4321] vhci_hcd: release socket [ 264.442321][ T13] vhci_hcd: vhci_device speed not set [ 265.133066][ T4321] vhci_hcd: disconnect device [ 265.365363][ T4174] usb 3-1: USB disconnect, device number 21 [ 269.954297][ T6604] comedi comedi3: comedi_config --init_data is deprecated [ 279.472416][ T4194] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 279.542253][ T4238] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 279.741110][ T6694] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 279.755346][ T4194] usb 5-1: Using ep0 maxpacket: 8 [ 280.582300][ T4238] usb 4-1: config 0 has no interfaces? [ 280.589221][ T4194] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 280.592365][ T4238] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 280.622035][ T4238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.622787][ T4194] usb 5-1: config 0 has no interface number 0 [ 280.652357][ T4194] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 280.680143][ T4194] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 280.706379][ T4194] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 280.726883][ T4194] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 280.737727][ T4194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.784074][ T4238] usb 4-1: config 0 descriptor?? [ 280.816887][ T4194] usb 5-1: config 0 descriptor?? [ 281.939417][ T4194] ldusb 5-1:0.55: Interrupt in endpoint not found [ 281.947283][ T25] audit: type=1326 audit(1756683655.648:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370572ebe9 code=0x7fc00000 [ 282.059865][ T4194] usb 5-1: USB disconnect, device number 6 [ 282.197177][ T4238] usb 4-1: USB disconnect, device number 9 [ 284.362861][ T4238] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 284.624209][ T6749] tmpfs: Unknown parameter 'usrquota' [ 284.842658][ T4238] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 285.138193][ T4238] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 285.419094][ T4238] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 285.429617][ T4238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.462463][ T6744] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 287.372285][ T5624] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 287.883237][ T4238] usb 5-1: USB disconnect, device number 7 [ 288.264471][ T6783] netlink: 32 bytes leftover after parsing attributes in process `syz.4.629'. [ 289.329398][ T5624] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 289.338007][ T5624] usb 1-1: config 0 has no interface number 0 [ 289.344521][ T5624] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 289.353840][ T5624] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.456850][ T5624] usb 1-1: config 0 descriptor?? [ 289.732500][ T5624] usb 1-1: can't set config #0, error -71 [ 290.097155][ T5624] usb 1-1: USB disconnect, device number 12 [ 290.134065][ T6810] netlink: 16 bytes leftover after parsing attributes in process `syz.4.638'. [ 290.937762][ T6818] wlan0 speed is unknown, defaulting to 1000 [ 290.944151][ T6818] wlan0 speed is unknown, defaulting to 1000 [ 290.952949][ T6818] wlan0 speed is unknown, defaulting to 1000 [ 290.963833][ T6818] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 290.976937][ T6818] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 291.087768][ T6818] wlan0 speed is unknown, defaulting to 1000 [ 291.095036][ T6818] wlan0 speed is unknown, defaulting to 1000 [ 291.101743][ T6818] wlan0 speed is unknown, defaulting to 1000 [ 291.109460][ T6818] wlan0 speed is unknown, defaulting to 1000 [ 291.117579][ T6818] wlan0 speed is unknown, defaulting to 1000 [ 292.292318][ T4188] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 292.725053][ T4188] usb 4-1: Using ep0 maxpacket: 32 [ 293.523555][ T4188] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 293.539330][ T4188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 293.560820][ T4188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 295.942466][ T4188] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 296.005638][ T4188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.042184][ T4188] usb 4-1: Product: syz [ 296.062904][ T4188] usb 4-1: config 0 descriptor?? [ 296.102535][ T4188] usb 4-1: can't set config #0, error -71 [ 296.117062][ T4188] usb 4-1: USB disconnect, device number 10 [ 299.506105][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'. [ 299.516845][ T4188] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 299.622375][ T4471] Bluetooth: hci4: command 0x0406 tx timeout [ 300.281412][ T6936] netlink: 'syz.1.676': attribute type 12 has an invalid length. [ 300.773623][ T4188] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 300.969177][ T4188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.986867][ T4188] usb 5-1: Product: syz [ 301.011485][ T4188] usb 5-1: Manufacturer: syz [ 301.021638][ T4188] usb 5-1: SerialNumber: syz [ 301.078387][ T4188] usb 5-1: config 0 descriptor?? [ 301.372451][ T4188] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 303.762783][ T4188] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 304.522304][ T4188] usb 5-1: USB disconnect, device number 8 [ 305.439378][ T7004] wlan0 speed is unknown, defaulting to 1000 [ 307.512473][ T4471] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 307.912895][ T4471] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 307.961751][ T4471] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.132353][ T4471] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 308.204547][ T4471] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.752354][ T4471] usb 5-1: usb_control_msg returned -32 [ 308.757960][ T4471] usbtmc 5-1:16.0: can't read capabilities [ 309.356022][ T4188] usb 5-1: USB disconnect, device number 9 [ 311.491015][ T7079] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 312.608557][ T7090] cgroup: No subsys list or none specified [ 312.748799][ T7090] snd_dummy snd_dummy.0: control 2:8:3:syz1:4 is already present [ 313.454782][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.725'. [ 315.926915][ T7117] netlink: 'syz.4.730': attribute type 3 has an invalid length. [ 315.955217][ T7117] netlink: 'syz.4.730': attribute type 3 has an invalid length. [ 315.988439][ T7117] netlink: 'syz.4.730': attribute type 3 has an invalid length. [ 316.005235][ T7117] netlink: 'syz.4.730': attribute type 3 has an invalid length. [ 316.015439][ T7117] netlink: 'syz.4.730': attribute type 3 has an invalid length. [ 316.043179][ T7117] netlink: 'syz.4.730': attribute type 3 has an invalid length. [ 316.061669][ T7117] netlink: 'syz.4.730': attribute type 3 has an invalid length. [ 316.070048][ T7117] netlink: 'syz.4.730': attribute type 3 has an invalid length. [ 316.078810][ T7117] netlink: 'syz.4.730': attribute type 3 has an invalid length. [ 316.087195][ T7117] netlink: 'syz.4.730': attribute type 3 has an invalid length. [ 316.986594][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.995206][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.553771][ T7185] netlink: 16 bytes leftover after parsing attributes in process `syz.1.748'. [ 323.763101][ T7201] validate_nla: 43 callbacks suppressed [ 323.763113][ T7201] netlink: 'syz.4.755': attribute type 3 has an invalid length. [ 323.843733][ T7201] netlink: 'syz.4.755': attribute type 3 has an invalid length. [ 323.864862][ T7201] netlink: 'syz.4.755': attribute type 3 has an invalid length. [ 323.902446][ T7201] netlink: 'syz.4.755': attribute type 3 has an invalid length. [ 323.978531][ T7201] netlink: 'syz.4.755': attribute type 3 has an invalid length. [ 323.986640][ T7201] netlink: 'syz.4.755': attribute type 3 has an invalid length. [ 323.997610][ T7201] netlink: 'syz.4.755': attribute type 3 has an invalid length. [ 324.006105][ T7201] netlink: 'syz.4.755': attribute type 3 has an invalid length. [ 324.017463][ T7201] netlink: 'syz.4.755': attribute type 3 has an invalid length. [ 324.025548][ T7201] netlink: 'syz.4.755': attribute type 3 has an invalid length. [ 324.082291][ T4174] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 324.455242][ T4174] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 324.470813][ T4174] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 324.508665][ T4174] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 324.545939][ T4174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.832231][ T4174] usb 3-1: usb_control_msg returned -32 [ 324.837952][ T4174] usbtmc 3-1:16.0: can't read capabilities [ 325.449723][ T4174] usb 3-1: USB disconnect, device number 22 [ 326.774655][ T7223] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 327.072080][ T7227] tmpfs: Bad value for 'huge' [ 329.266757][ T7222] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.273981][ T7222] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.499759][ T7222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.645626][ T7222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.978551][ T7222] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.987542][ T7222] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.997427][ T7222] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.006370][ T7222] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.102272][ T4188] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 333.604998][ T4188] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 333.843119][ T4188] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.076304][ T4188] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 334.102283][ T4188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.288618][ T7302] serio: Serial port ptm0 [ 334.432459][ T4188] usb 4-1: usb_control_msg returned -32 [ 334.442546][ T4188] usbtmc 4-1:16.0: can't read capabilities [ 335.612732][ T4258] usb 4-1: USB disconnect, device number 11 [ 336.036445][ T4188] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 337.392402][ T4188] usb 3-1: unable to get BOS descriptor or descriptor too short [ 337.464263][ T4188] usb 3-1: not running at top speed; connect to a high speed hub [ 337.562309][ T4188] usb 3-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 337.626277][ T4188] usb 3-1: config 1 interface 0 has no altsetting 0 [ 337.802541][ T4188] usb 3-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40 [ 337.960543][ T4188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.001200][ T4188] usb 3-1: Product: syz [ 338.012163][ T4188] usb 3-1: Manufacturer: syz [ 338.036817][ T4188] usb 3-1: SerialNumber: syz [ 338.652425][ T4188] usbhid 3-1:1.0: can't add hid device: -71 [ 339.307847][ T4188] usbhid: probe of 3-1:1.0 failed with error -71 [ 339.335679][ T4188] usb 3-1: USB disconnect, device number 23 [ 339.750845][ T7366] netlink: 68 bytes leftover after parsing attributes in process `syz.4.800'. [ 341.962302][ T4188] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 342.232231][ T4188] usb 5-1: Using ep0 maxpacket: 32 [ 342.353071][ T4188] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 342.373965][ T4188] usb 5-1: config 0 has no interface number 0 [ 342.415550][ T4188] usb 5-1: config 0 interface 89 has no altsetting 0 [ 342.642408][ T4188] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 342.691068][ T4188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.701134][ T4188] usb 5-1: Product: syz [ 342.736168][ T4188] usb 5-1: Manufacturer: syz [ 342.740795][ T4188] usb 5-1: SerialNumber: syz [ 342.799813][ T4188] usb 5-1: config 0 descriptor?? [ 342.876753][ T4188] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 342.902250][ T4188] em28xx 5-1:0.89: Video interface 89 found: bulk [ 343.102294][ T4238] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 343.482316][ T4238] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.505232][ T4238] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 343.516870][ T4188] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 343.535242][ T4238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.681837][ T4238] usb 1-1: config 0 descriptor?? [ 343.744490][ T4238] pwc: Askey VC010 type 2 USB webcam detected. [ 344.182618][ T4238] pwc: recv_control_msg error -32 req 02 val 2b00 [ 344.252585][ T4238] pwc: recv_control_msg error -32 req 02 val 2700 [ 344.383241][ T4188] em28xx 5-1:0.89: board has no eeprom [ 344.388998][ T4238] pwc: recv_control_msg error -32 req 02 val 2c00 [ 344.432776][ T4238] pwc: recv_control_msg error -32 req 04 val 1000 [ 344.542280][ T4238] pwc: recv_control_msg error -32 req 04 val 1300 [ 345.202150][ T4188] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 345.219187][ T4238] pwc: recv_control_msg error -32 req 04 val 1400 [ 345.246614][ T4188] em28xx 5-1:0.89: analog set to bulk mode. [ 345.358563][ T4188] usb 5-1: USB disconnect, device number 10 [ 345.364718][ T4238] pwc: recv_control_msg error -32 req 02 val 2000 [ 345.377416][ T4188] em28xx 5-1:0.89: Disconnecting em28xx [ 345.386402][ T4174] em28xx 5-1:0.89: Registering V4L2 extension [ 345.492260][ T4238] pwc: recv_control_msg error -32 req 02 val 2100 [ 345.574656][ T4174] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 345.582030][ T4174] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 345.647776][ T4174] em28xx 5-1:0.89: No AC97 audio processor [ 345.718875][ T4174] usb 5-1: Decoder not found [ 345.741966][ T4174] em28xx 5-1:0.89: failed to create media graph [ 345.772466][ T4174] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 345.842625][ T4238] pwc: recv_control_msg error -32 req 04 val 1500 [ 346.163204][ T4174] em28xx 5-1:0.89: Registering snapshot button... [ 346.199050][ T4238] pwc: recv_control_msg error -32 req 02 val 2500 [ 346.255043][ T4174] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input13 [ 346.280924][ T4174] em28xx 5-1:0.89: Remote control support is not available for this card. [ 346.290499][ T4188] em28xx 5-1:0.89: Closing input extension [ 346.296936][ T4238] pwc: recv_control_msg error -32 req 02 val 2400 [ 346.312642][ T4188] em28xx 5-1:0.89: Deregistering snapshot button [ 346.402437][ T4238] pwc: recv_control_msg error -32 req 02 val 2600 [ 346.516326][ T4238] pwc: recv_control_msg error -32 req 02 val 2900 [ 346.523004][ T7423] netlink: 68 bytes leftover after parsing attributes in process `syz.1.812'. [ 346.537230][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.814'. [ 347.049192][ T4188] em28xx 5-1:0.89: Freeing device [ 347.232312][ T4238] pwc: recv_control_msg error -71 req 04 val 1100 [ 347.252419][ T4238] pwc: recv_control_msg error -71 req 04 val 1200 [ 347.277244][ T4238] pwc: Registered as video103. [ 347.316277][ T4238] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 347.385281][ T4238] usb 1-1: USB disconnect, device number 13 [ 347.914811][ T7437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.925361][ T7437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.935348][ T7437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.945836][ T7437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.955743][ T7437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.966274][ T7437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.983857][ T7437] batman_adv: batadv0: Adding interface: ipvlan2 [ 347.990287][ T7437] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.015988][ T7437] batman_adv: batadv0: Interface activated: ipvlan2 [ 351.782294][ T4765] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 353.062372][ T4765] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 353.080705][ T4765] usb 2-1: config 0 has no interface number 0 [ 353.087104][ T4765] usb 2-1: config 0 interface 49 altsetting 0 has an invalid endpoint with address 0x29, skipping [ 353.911363][ T7477] vivid-000: disconnect [ 353.916551][ T7476] vivid-000: reconnect [ 354.142395][ T4765] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 354.160214][ T4765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.192282][ T4765] usb 2-1: Product: syz [ 354.196471][ T4765] usb 2-1: Manufacturer: syz [ 354.222232][ T4765] usb 2-1: SerialNumber: syz [ 354.250563][ T4765] usb 2-1: config 0 descriptor?? [ 354.299722][ T4765] usb 2-1: can't set config #0, error -71 [ 354.347739][ T4765] usb 2-1: USB disconnect, device number 7 [ 356.252236][ T4238] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 356.802402][ T4238] usb 2-1: Using ep0 maxpacket: 32 [ 356.922479][ T4238] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 356.954457][ T4238] usb 2-1: config 0 has no interface number 0 [ 356.994960][ T4238] usb 2-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 357.152183][ T4238] usb 2-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 357.181805][ T4238] usb 2-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xF2, skipping [ 357.225828][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.835'. [ 357.252541][ T4238] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 357.306889][ T4238] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 357.468825][ T4238] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.436188][ T4238] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 358.489135][ T4238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.643786][ T4238] usb 2-1: Product: syz [ 358.798044][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.838'. [ 358.806993][ T7526] netlink: 20 bytes leftover after parsing attributes in process `syz.1.838'. [ 358.824329][ T4238] usb 2-1: Manufacturer: syz [ 359.276384][ T4238] usb 2-1: config 0 descriptor?? [ 359.292349][ T4238] usb 2-1: can't set config #0, error -71 [ 359.311866][ T4238] usb 2-1: USB disconnect, device number 8 [ 362.295790][ T7546] wlan0 speed is unknown, defaulting to 1000 [ 362.474190][ T7549] overlayfs: failed to resolve './file1': -2 [ 362.753812][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 362.764421][ T4765] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 363.604425][ T7546] chnl_net:caif_netlink_parms(): no params data found [ 363.792247][ T2403] Bluetooth: hci5: command 0x0409 tx timeout [ 364.452302][ T13] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 364.518718][ T4765] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 364.542163][ T4765] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 364.648228][ T7546] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.657383][ T7546] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.681740][ T7546] device bridge_slave_0 entered promiscuous mode [ 364.741960][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.852'. [ 364.751005][ T7577] netlink: 20 bytes leftover after parsing attributes in process `syz.4.852'. [ 364.938169][ T4765] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 364.963904][ T4765] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 364.975051][ T7546] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.982741][ T4765] usb 3-1: SerialNumber: syz [ 364.989640][ T7546] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.008875][ T7546] device bridge_slave_1 entered promiscuous mode [ 365.095626][ T4765] usb 3-1: can't set config #1, error -71 [ 365.110534][ T4765] usb 3-1: USB disconnect, device number 24 [ 366.362431][ T13] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 366.365798][ T7546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.376499][ T13] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 366.390439][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 366.403584][ T13] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 366.413327][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.424623][ T13] usb 2-1: config 0 descriptor?? [ 366.430372][ T4188] Bluetooth: hci5: command 0x041b tx timeout [ 366.442541][ T7566] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 366.465665][ T7546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.504548][ T13] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 366.578626][ T4238] usb 2-1: USB disconnect, device number 9 [ 366.612946][ T7546] team0: Port device team_slave_0 added [ 366.624275][ T7546] team0: Port device team_slave_1 added [ 366.680091][ T7546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.692178][ T7546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.726204][ T7546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.739482][ T7546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.746979][ T7546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.833605][ T7546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.251010][ T7546] device hsr_slave_0 entered promiscuous mode [ 367.287553][ T7546] device hsr_slave_1 entered promiscuous mode [ 367.314885][ T7546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.357777][ T7546] Cannot create hsr debugfs directory [ 367.580229][ T7546] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 367.590941][ T7546] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 367.617525][ T7546] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 367.631326][ T7546] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 368.607166][ T4238] Bluetooth: hci5: command 0x040f tx timeout [ 369.640698][ T7546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.664668][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 369.761156][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 369.905033][ T7546] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.974597][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.863'. [ 369.983739][ T7642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.863'. [ 370.295299][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 370.319771][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 370.357866][ T4764] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.365109][ T4764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.419087][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 370.449437][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 370.486925][ T4764] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.494065][ T4764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.560718][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 370.597100][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 370.645465][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 370.689590][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 370.719403][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 370.742392][ T4266] Bluetooth: hci5: command 0x0419 tx timeout [ 370.755546][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 370.783181][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 370.851504][ T4391] device hsr_slave_0 left promiscuous mode [ 370.944181][ T4391] device hsr_slave_1 left promiscuous mode [ 370.953369][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.973995][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.999938][ T4391] device bridge_slave_1 left promiscuous mode [ 371.036002][ T4391] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.074327][ T4391] device bridge_slave_0 left promiscuous mode [ 371.096068][ T4391] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.427381][ T4391] team0 (unregistering): Port device team_slave_1 removed [ 371.450737][ T4391] team0 (unregistering): Port device team_slave_0 removed [ 371.490091][ T4391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.535846][ T4391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.758937][ T4391] bond0 (unregistering): Released all slaves [ 374.272059][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 374.280089][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 374.290440][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 374.300955][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 374.313332][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 374.338128][ T7546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 374.729972][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.873'. [ 376.193416][ T7546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.229020][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 376.238481][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 377.866592][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 377.877426][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 377.889391][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 377.900923][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 377.973859][ T7754] 9p: Unknown Cache mode readahead [ 378.435541][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.444674][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.516020][ T7546] device veth0_vlan entered promiscuous mode [ 378.523865][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 378.599298][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 378.613153][ T7546] device veth1_vlan entered promiscuous mode [ 378.658168][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 378.695714][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 378.805021][ T7546] device veth0_macvtap entered promiscuous mode [ 378.825656][ T7546] device veth1_macvtap entered promiscuous mode [ 379.485568][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 379.520830][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 380.345462][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.443669][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.453781][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.465110][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.475457][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.486075][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.532728][ T7546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.574862][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 380.595358][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 380.616542][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.627152][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.637373][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.648699][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.658956][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.671294][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.683018][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 380.833019][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.864519][ T7546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.916751][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 380.969902][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 381.045708][ T7546] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.085328][ T7546] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.108746][ T7546] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.124366][ T7546] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.213260][ T7783] mmap: syz.0.885 (7783) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 384.457732][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.886'. [ 385.176169][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.889'. [ 387.380374][ T7825] vivid-000: disconnect [ 387.413135][ T7822] vivid-000: reconnect [ 387.572551][ T1494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.725732][ T7832] vivid-004: disconnect [ 387.747169][ T1494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.118174][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.304649][ T7823] vivid-004: reconnect [ 388.472275][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.597775][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 388.733903][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 392.231476][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.899'. [ 392.586186][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.5.900'. [ 392.738613][ T7879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.749761][ T7879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.759785][ T7879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.770314][ T7879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.780371][ T7879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.791083][ T7879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.801130][ T7879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 392.811205][ T7879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.821282][ T7879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.831958][ T7879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.850266][ T7879] batman_adv: batadv0: Adding interface: ipvlan2 [ 392.856828][ T7879] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.882439][ T7879] batman_adv: batadv0: Interface activated: ipvlan2 [ 394.080295][ T7890] validate_nla: 43 callbacks suppressed [ 394.080338][ T7890] netlink: 'syz.5.904': attribute type 5 has an invalid length. [ 394.642212][ T7895] vivid-003: disconnect [ 394.662442][ T7892] vivid-003: reconnect [ 394.798602][ T7902] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 397.388952][ T7930] loop0: detected capacity change from 0 to 2048 [ 397.525603][ T7930] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 398.476156][ T7942] loop1: detected capacity change from 0 to 512 [ 398.488085][ T7930] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 398.539514][ T7930] UDF-fs: error (device loop0): udf_read_inode: (ino 1376) failed !bh [ 398.555663][ T7942] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 398.760142][ T7930] UDF-fs: error (device loop0): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 398.822282][ T7942] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,init_itable=0x0000000000000000,errors=remount-ro,noauto_da_alloc,dioread_lock,. Quota mode: writeback. [ 398.953935][ T7942] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.564903][ T7930] [ 399.567258][ T7930] ====================================================== [ 399.574272][ T7930] WARNING: possible circular locking dependency detected [ 399.581300][ T7930] syzkaller #0 Not tainted [ 399.585714][ T7930] ------------------------------------------------------ [ 399.592729][ T7930] syz.0.913/7930 is trying to acquire lock: [ 399.598617][ T7930] ffff888024b25938 ((wq_completion)loop0){+.+.}-{0:0}, at: flush_workqueue+0x126/0x1380 [ 399.608399][ T7930] [ 399.608399][ T7930] but task is already holding lock: [ 399.615762][ T7930] ffff88802003a468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 399.624567][ T7930] [ 399.624567][ T7930] which lock already depends on the new lock. [ 399.624567][ T7930] [ 399.635160][ T7930] [ 399.635160][ T7930] the existing dependency chain (in reverse order) is: [ 399.644169][ T7930] [ 399.644169][ T7930] -> #6 (&lo->lo_mutex){+.+.}-{3:3}: [ 399.651646][ T7930] __mutex_lock_common+0x1eb/0x2390 [ 399.657373][ T7930] mutex_lock_killable_nested+0x17/0x20 [ 399.663443][ T7930] lo_open+0x6a/0x100 [ 399.667951][ T7930] blkdev_get_whole+0x90/0x390 [ 399.673232][ T7930] blkdev_get_by_dev+0x2d0/0xa60 [ 399.678692][ T7930] blkdev_open+0x12d/0x2c0 [ 399.683622][ T7930] do_dentry_open+0x7ff/0xf80 [ 399.688816][ T7930] path_openat+0x2682/0x2f30 [ 399.693929][ T7930] do_filp_open+0x1b3/0x3e0 [ 399.698957][ T7930] do_sys_openat2+0x142/0x4a0 [ 399.704212][ T7930] __x64_sys_openat+0x135/0x160 [ 399.709604][ T7930] do_syscall_64+0x4c/0xa0 [ 399.714548][ T7930] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 399.720972][ T7930] [ 399.720972][ T7930] -> #5 (&disk->open_mutex){+.+.}-{3:3}: [ 399.728807][ T7930] __mutex_lock_common+0x1eb/0x2390 [ 399.734534][ T7930] mutex_lock_nested+0x17/0x20 [ 399.739852][ T7930] blkdev_get_by_dev+0x157/0xa60 [ 399.745294][ T7930] swsusp_check+0x9b/0x2a0 [ 399.750234][ T7930] software_resume+0xc6/0x3b0 [ 399.755419][ T7930] resume_store+0xe4/0x130 [ 399.760332][ T7930] kernfs_fop_write_iter+0x379/0x4c0 [ 399.766125][ T7930] vfs_write+0x712/0xd00 [ 399.770864][ T7930] ksys_write+0x14d/0x250 [ 399.775701][ T7930] do_syscall_64+0x4c/0xa0 [ 399.780642][ T7930] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 399.787063][ T7930] [ 399.787063][ T7930] -> #4 (system_transition_mutex/1){+.+.}-{3:3}: [ 399.795587][ T7930] __mutex_lock_common+0x1eb/0x2390 [ 399.801314][ T7930] mutex_lock_nested+0x17/0x20 [ 399.806606][ T7930] software_resume+0x7c/0x3b0 [ 399.811806][ T7930] resume_store+0xe4/0x130 [ 399.816753][ T7930] kernfs_fop_write_iter+0x379/0x4c0 [ 399.822560][ T7930] vfs_write+0x712/0xd00 [ 399.827316][ T7930] ksys_write+0x14d/0x250 [ 399.832170][ T7930] do_syscall_64+0x4c/0xa0 [ 399.837324][ T7930] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 399.843730][ T7930] [ 399.843730][ T7930] -> #3 (&of->mutex){+.+.}-{3:3}: [ 399.850935][ T7930] __mutex_lock_common+0x1eb/0x2390 [ 399.856834][ T7930] mutex_lock_nested+0x17/0x20 [ 399.862126][ T7930] kernfs_seq_start+0x51/0x3c0 [ 399.867413][ T7930] seq_read_iter+0x3c4/0xd50 [ 399.872518][ T7930] vfs_read+0x725/0xcf0 [ 399.877190][ T7930] ksys_read+0x14d/0x250 [ 399.881944][ T7930] do_syscall_64+0x4c/0xa0 [ 399.886974][ T7930] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 399.893405][ T7930] [ 399.893405][ T7930] -> #2 (&p->lock){+.+.}-{3:3}: [ 399.900441][ T7930] __mutex_lock_common+0x1eb/0x2390 [ 399.906164][ T7930] mutex_lock_nested+0x17/0x20 [ 399.911451][ T7930] seq_read_iter+0xad/0xd50 [ 399.916476][ T7930] do_iter_readv_writev+0x497/0x600 [ 399.922194][ T7930] do_iter_read+0x20b/0x7c0 [ 399.927212][ T7930] loop_process_work+0x18dc/0x2480 [ 399.932840][ T7930] process_one_work+0x863/0x1000 [ 399.938298][ T7930] worker_thread+0xaa8/0x12a0 [ 399.943490][ T7930] kthread+0x436/0x520 [ 399.948078][ T7930] ret_from_fork+0x1f/0x30 [ 399.953030][ T7930] [ 399.953030][ T7930] -> #1 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}: [ 399.962424][ T7930] process_one_work+0x7bf/0x1000 [ 399.967894][ T7930] worker_thread+0xaa8/0x12a0 [ 399.973141][ T7930] kthread+0x436/0x520 [ 399.977741][ T7930] ret_from_fork+0x1f/0x30 [ 399.982676][ T7930] [ 399.982676][ T7930] -> #0 ((wq_completion)loop0){+.+.}-{0:0}: [ 399.990742][ T7930] __lock_acquire+0x2c33/0x7c60 [ 399.996105][ T7930] lock_acquire+0x197/0x3f0 [ 400.001128][ T7930] flush_workqueue+0x142/0x1380 [ 400.006483][ T7930] drain_workqueue+0xcf/0x380 [ 400.011672][ T7930] destroy_workqueue+0x7b/0xb20 [ 400.017026][ T7930] __loop_clr_fd+0x234/0xb90 [ 400.022123][ T7930] lo_ioctl+0xffa/0x1cf0 [ 400.026870][ T7930] blkdev_ioctl+0x33c/0x690 [ 400.031877][ T7930] block_ioctl+0xac/0xf0 [ 400.036623][ T7930] __se_sys_ioctl+0xfa/0x170 [ 400.041717][ T7930] do_syscall_64+0x4c/0xa0 [ 400.046634][ T7930] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 400.053031][ T7930] [ 400.053031][ T7930] other info that might help us debug this: [ 400.053031][ T7930] [ 400.063237][ T7930] Chain exists of: [ 400.063237][ T7930] (wq_completion)loop0 --> &disk->open_mutex --> &lo->lo_mutex [ 400.063237][ T7930] [ 400.076771][ T7930] Possible unsafe locking scenario: [ 400.076771][ T7930] [ 400.084200][ T7930] CPU0 CPU1 [ 400.089548][ T7930] ---- ---- [ 400.094904][ T7930] lock(&lo->lo_mutex); [ 400.099130][ T7930] lock(&disk->open_mutex); [ 400.106237][ T7930] lock(&lo->lo_mutex); [ 400.112980][ T7930] lock((wq_completion)loop0); [ 400.117812][ T7930] [ 400.117812][ T7930] *** DEADLOCK *** [ 400.117812][ T7930] [ 400.125932][ T7930] 1 lock held by syz.0.913/7930: [ 400.130849][ T7930] #0: ffff88802003a468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 400.140064][ T7930] [ 400.140064][ T7930] stack backtrace: [ 400.145929][ T7930] CPU: 0 PID: 7930 Comm: syz.0.913 Not tainted syzkaller #0 [ 400.153453][ T7930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 400.163505][ T7930] Call Trace: [ 400.166766][ T7930] [ 400.169678][ T7930] dump_stack_lvl+0x168/0x230 [ 400.174346][ T7930] ? load_image+0x3b0/0x3b0 [ 400.178879][ T7930] ? show_regs_print_info+0x20/0x20 [ 400.184081][ T7930] ? print_circular_bug+0x12b/0x1a0 [ 400.189291][ T7930] check_noncircular+0x274/0x310 [ 400.194348][ T7930] ? add_chain_block+0x940/0x940 [ 400.199284][ T7930] ? lockdep_lock+0xdc/0x1e0 [ 400.203898][ T7930] ? lockdep_unlock+0x134/0x2d0 [ 400.208748][ T7930] ? mark_lock+0x94/0x320 [ 400.213073][ T7930] __lock_acquire+0x2c33/0x7c60 [ 400.217928][ T7930] ? verify_lock_unused+0x140/0x140 [ 400.223113][ T7930] ? verify_lock_unused+0x140/0x140 [ 400.228298][ T7930] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 400.234384][ T7930] ? memset+0x1e/0x40 [ 400.238360][ T7930] lock_acquire+0x197/0x3f0 [ 400.242846][ T7930] ? flush_workqueue+0x126/0x1380 [ 400.247858][ T7930] ? read_lock_is_recursive+0x10/0x10 [ 400.253218][ T7930] ? __init_swait_queue_head+0xa5/0x150 [ 400.258752][ T7930] flush_workqueue+0x142/0x1380 [ 400.263734][ T7930] ? flush_workqueue+0x126/0x1380 [ 400.268745][ T7930] ? __lock_acquire+0x7c60/0x7c60 [ 400.273756][ T7930] ? __mutex_lock_common+0x431/0x2390 [ 400.279225][ T7930] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 400.284598][ T7930] ? lockdep_hardirqs_off+0x70/0x100 [ 400.289871][ T7930] ? rcu_work_rcufn+0x110/0x110 [ 400.294710][ T7930] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 400.300345][ T7930] ? finish_wait+0xc0/0x1d0 [ 400.304842][ T7930] drain_workqueue+0xcf/0x380 [ 400.309508][ T7930] destroy_workqueue+0x7b/0xb20 [ 400.314349][ T7930] __loop_clr_fd+0x234/0xb90 [ 400.318935][ T7930] lo_ioctl+0xffa/0x1cf0 [ 400.323174][ T7930] ? lo_release+0x1f0/0x1f0 [ 400.327708][ T7930] ? mark_lock+0x94/0x320 [ 400.332021][ T7930] ? verify_lock_unused+0x140/0x140 [ 400.337297][ T7930] ? __lock_acquire+0x12d9/0x7c60 [ 400.342306][ T7930] ? mark_lock+0x94/0x320 [ 400.346630][ T7930] ? rcu_lock_release+0x5/0x20 [ 400.351421][ T7930] ? __lock_acquire+0x7c60/0x7c60 [ 400.356429][ T7930] ? deref_stack_reg+0xd0/0x120 [ 400.361276][ T7930] ? 0xffffffffa002e000 [ 400.365409][ T7930] ? is_bpf_text_address+0x254/0x270 [ 400.370688][ T7930] ? __kernel_text_address+0x9a/0x100 [ 400.376047][ T7930] ? unwind_get_return_address+0x49/0x80 [ 400.381758][ T7930] ? stack_trace_save+0xe0/0xe0 [ 400.386605][ T7930] ? arch_stack_walk+0xf2/0x140 [ 400.391445][ T7930] ? kfree+0xef/0x2a0 [ 400.395420][ T7930] ? stack_trace_save+0x98/0xe0 [ 400.400262][ T7930] ? stack_trace_snprint+0xf0/0xf0 [ 400.405372][ T7930] ? slab_free_freelist_hook+0xea/0x170 [ 400.410911][ T7930] ? security_file_ioctl+0x6c/0xa0 [ 400.416025][ T7930] ? __se_sys_ioctl+0x48/0x170 [ 400.420777][ T7930] ? do_syscall_64+0x4c/0xa0 [ 400.425354][ T7930] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 400.431406][ T7930] ? kfree+0xef/0x2a0 [ 400.435371][ T7930] ? kasan_set_track+0x62/0x70 [ 400.440118][ T7930] ? kasan_set_track+0x4b/0x70 [ 400.444948][ T7930] ? kasan_set_free_info+0x1f/0x40 [ 400.450133][ T7930] ? ____kasan_slab_free+0xd5/0x110 [ 400.455336][ T7930] ? slab_free_freelist_hook+0xea/0x170 [ 400.460866][ T7930] ? kfree+0xef/0x2a0 [ 400.464831][ T7930] ? tomoyo_path_number_perm+0x48f/0x5d0 [ 400.470446][ T7930] ? security_file_ioctl+0x6c/0xa0 [ 400.475543][ T7930] ? __se_sys_ioctl+0x48/0x170 [ 400.480290][ T7930] ? do_syscall_64+0x4c/0xa0 [ 400.484875][ T7930] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 400.490936][ T7930] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 400.496906][ T7930] ? lock_chain_count+0x20/0x20 [ 400.501743][ T7930] ? do_vfs_ioctl+0xcc3/0x1de0 [ 400.506494][ T7930] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 400.512136][ T7930] ? rcu_lock_release+0x5/0x20 [ 400.516888][ T7930] ? __lock_acquire+0x7c60/0x7c60 [ 400.521900][ T7930] ? kfree+0xef/0x2a0 [ 400.525871][ T7930] ? blkdev_common_ioctl+0x686/0x1c70 [ 400.531229][ T7930] ? verify_lock_unused+0x140/0x140 [ 400.536414][ T7930] ? blkdev_bszset+0x200/0x200 [ 400.541172][ T7930] ? lo_release+0x1f0/0x1f0 [ 400.545685][ T7930] blkdev_ioctl+0x33c/0x690 [ 400.550177][ T7930] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 400.555619][ T7930] ? blkdev_iopoll+0x100/0x100 [ 400.560365][ T7930] block_ioctl+0xac/0xf0 [ 400.564591][ T7930] __se_sys_ioctl+0xfa/0x170 [ 400.569168][ T7930] do_syscall_64+0x4c/0xa0 [ 400.573564][ T7930] ? clear_bhb_loop+0x30/0x80 [ 400.578223][ T7930] ? clear_bhb_loop+0x30/0x80 [ 400.582903][ T7930] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 400.588800][ T7930] RIP: 0033:0x7f370572e7eb [ 400.593214][ T7930] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 400.612840][ T7930] RSP: 002b:00007f3703995e10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.621246][ T7930] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f370572e7eb [ 400.629203][ T7930] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000005 [ 400.637368][ T7930] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000a00000 [ 400.645333][ T7930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 400.653307][ T7930] R13: 00007f3703995eb0 R14: 0000000000000c76 R15: 00002000000002c0 [ 400.661272][ T7930]