last executing test programs: 14.740814519s ago: executing program 2 (id=1467): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000000)='&', 0x1}], 0x1, &(0x7f00000003c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x81}}], 0x18}, 0x4004) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_names\x00') (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0xc, {0x8, 0xffffffff}, 0xd0, 0x9}}) (async) r5 = fanotify_init(0x202, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x5, &(0x7f0000000480)) (async) fanotify_mark(r5, 0x1, 0x4800003e, r3, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) (async) sendto$inet6(r1, &(0x7f0000000140)=' ', 0x1, 0x24000004, &(0x7f0000000340)={0xa, 0x4e2b, 0x201, @empty, 0xa7cc}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000180)={r0, 0x7, 0x100000001, 0xf}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r6, 0x0, 0xdb, 0x84, &(0x7f0000000600)="3d8abd01d3c580df9325a7aa5b55d4cecedefcc1a08a2c2b23c2fc0e9a665e32149b212ecc752546509418205030eea22cb632fd5fba7730bd4622795251e72ea82b91700928852ef28db875b1755baf54c98adfec666f00837f4d04d4aa7046a1007d5dd52d997eee046495eadc2e414026464f016690bb7bf153b64ae2e806df3d5742f1a1f485171ca8c4566083c532cd746f141b60c0a308ec159c46c23c774b3fc45cfc87e56dcb90bbf07be5d84ea222dde350758607aa1b2108962bf8ca33fcefcae5068867e6d4a3e8da31dcce897c9c197079add48148", &(0x7f0000000700)=""/132, 0xffffffff, 0x0, 0x5e, 0x16, &(0x7f0000000400)="7646e1c3024ca10e3338c32d0afe4e56c926503e11b06b4556723f03868b1401b589c804bdd62017189a09e3b8d15f4b403003380822c1addc42112bbdb4fe8ac129cb3f86727490920c6cbe4295c1472ee5a545303e7d4e413bb3bf333a", &(0x7f00000004c0)="aefbe06f0adc12fdefdb1b080cba9068d8ea7cca5046", 0x0, 0x0, 0x8}, 0x50) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@broadcast}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@multicast2, 0x2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@rand_addr=0x64010101, @multicast1]}]}}}}}) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x581180, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r9, 0x0) r10 = dup(r8) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) 14.588973823s ago: executing program 2 (id=1468): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, &(0x7f0000000240)=0x90) madvise(&(0x7f00003f3000/0x400000)=nil, 0x400000, 0x16) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000006c0)=@delsa={0x34, 0x11, 0x1, 0x0, 0x0, {@in6=@private0, 0x0, 0x0, 0xff}, [@mark={0xc}]}, 0x34}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) keyctl$session_to_parent(0x12) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000180)=[{0x80000006, 0x0, 0x0, 0x100}]}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000040)=""/41, &(0x7f0000001400)=0x29) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x10, 0x2b, 0x0, @private2, @local, {[@fragment={0x33, 0x0, 0x5, 0x0, 0x0, 0x4, 0x68}], {0x2c00, 0x0, 0x8}}}}}}, 0x0) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000003c0)={0x0, 0x0, 0xffffffc0, 0x0, 0x0, "83843c556dec3a9a90800124b904cfc27929a3"}) 14.234770083s ago: executing program 2 (id=1469): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) 12.451448156s ago: executing program 2 (id=1474): syz_emit_ethernet(0x52, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x600, 0x8003, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, {"4b669a411cd5617d"}}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x52, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x600, 0x8003, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, {"4b669a411cd5617d"}}}}}}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) 12.140492064s ago: executing program 2 (id=1477): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) shutdown(r0, 0x1) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x79, &(0x7f0000000400)=ANY=[], 0x8) splice(r0, 0x0, r1, 0x0, 0x1000, 0x8) 5.390570063s ago: executing program 4 (id=1499): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000000), 0x98) 5.380797416s ago: executing program 4 (id=1500): ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) gettid() ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f0000000080), 0x1003) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000000010104f70000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000041400109f0800014000000000080002400000000008f504fa5e48678d71f616156626492544ee3156f002d7fcee3332f80788bdcefae4bb9fbeb6a80e81d9d4eff957"], 0x4c}}, 0x0) fanotify_init(0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f0000000040)}, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x49) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x6081, 0x2) sendto$inet(r1, &(0x7f0000000000)='o', 0x1, 0x8041, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={0x0}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 5.118113445s ago: executing program 0 (id=1502): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="ba", 0x1}], 0x1}, 0x48044) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @local}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) r3 = socket(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "b438b802f7ecf2e1"}, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xb, 0x2000000058831, 0xffffffffffffffff, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x37000, 0x1000}, 0x20) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000180)=[0x1], 0x0, 0x0) getgroups(0x0, 0x0) socket(0x0, 0x0, 0x0) sendmsg$inet(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x11a}}], 0x30}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) write$binfmt_script(r7, &(0x7f0000000300)={'#! ', '', [], 0xa, "a35f0ca730c05c4c16b15b5ad577e343f525ddcc22c28cd8538f72ed77de01a3e882cd32999b31b48c8dbbbd97e15a833ad54adfd506be9ca1019b9e92255f73d0bede6ee18e69a00f1a430503a3d0e23b45e38ee2efc9483c4f279a694b84cd506b"}, 0x66) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5800000010000104ffffffffffffff7f00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e657665000014000280080001000100000005000c0001000000140003"], 0x58}}, 0x0) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000640)=[{&(0x7f00000007c0)="c109a30b00000000001dfe040e7126", 0xf}], 0x1}, 0x0) 5.038885028s ago: executing program 3 (id=1503): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004042, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async) ptrace$ARCH_SHSTK_LOCK(0x1e, r2, 0x4, 0x5003) (async) process_vm_writev(r2, &(0x7f0000000040)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f00000000c0)=""/219, 0xdb}], 0x1, 0x0) 4.823942624s ago: executing program 3 (id=1504): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f0000000040)="240000001a005f3814f9dc07000904018002200000000000000000000800010040000000", 0x24) r1 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002208000000aa8cc8a9"], 0x0}, 0x0) 4.80674236s ago: executing program 1 (id=1505): socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) dup(r4) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008000200000000001400", @ANYRES64=r5], 0x38}}, 0x0) 4.241226729s ago: executing program 1 (id=1506): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, 0x0, 0x0) sendto$unix(r3, &(0x7f0000000440)="d5314e5b06ac503bebf5c7d09a84d1f02154fe6fdd4085ba97b0321627be3becb90d9dc822c9e7ce4e0f8a8f54a24b8d729e1fdf6f4d64b7ef7fffd2b7c9c3ff4b432a524d23a7b80763f3bc6962a4db6ed44c9672bf6ae539fc6d7c58be1c5941844d455f5385192f6c6e9bd1c186749071cd704498", 0x76, 0x4000805, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) 4.04272758s ago: executing program 0 (id=1507): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x3d}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}]}, 0x40}}, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002"], 0xa4}}, 0x20000094) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0x833, 0x5, 0x2, 0x9, 0x6]}, &(0x7f0000000040)=0x78) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) 3.951730863s ago: executing program 1 (id=1508): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800f1ff00000000345566978a4c"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) futex(0x0, 0x100, 0x0, 0x0, 0x0, 0x1) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000f5", @ANYRES16=r1, @ANYRES64=r1], 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000000000003100"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000f66f31a71900000000000000000000000000050000210582d84eaf733a93adbb6810d192121763779e89799ad6c77bf268a7aaf1b3fde5069b664a55828955f4b704681c608dc2ae419ec38fd0390fd2d371e123bf13a4e03e4779006b83b7077888ee3347308c43befb0af3314d5a16c620f89536f337dd96c03a064f383eee2a8eb7aae3fb7acc06879ebb5cdbe661b9c891de87bebf3e1e8cb9d33f9d5b"], 0x48) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f00000001c0)=0x2) socket(0x28, 0x6, 0x4000000) (async) socket(0x28, 0x6, 0x4000000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x3025}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6}]}}}]}, 0x40}}, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)) 3.731819849s ago: executing program 0 (id=1509): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x1e79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000100)={"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"}) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000000), 0x98) 3.442640345s ago: executing program 0 (id=1510): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x105501, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x4, 0x6c, &(0x7f0000000080)=ANY=[], 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="09000000f5e57aa04e", 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) memfd_create(&(0x7f0000000100)='\b\x9dF\xd8\b\xb3~u\xa5\x81\xb1\x8aSpA\xd4\x98\x85D\x89>N\x8ar\x17\x00\x00\x00\x00\xe2{mn\xcc\xbf2\xc0\x90kn\xe8\xfe/\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97\xe7\xe6\x97\xf9\xb3\xf6\xbb\v\xb5$\xee\x84\x1cn,Bd8\x13\xcd\xb90\x95\xc0v\xd5?\xe5E:+Pm\x1d\xfb&3\xb9\xb5\xda\xb4\xb8k\x11\x00B\xe1\x99#\\R\xb9\x96\x11\xf5\x7fVN\xbf\xd4Ndq\x9a\x1b\xaa\x16\xab\r\xdd\xa2\xfdK\x02u\x1f\xadI\x9c\t\x00\x97\x8f\xa8vU\xa0\xcb', 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendto$l2tp(r1, &(0x7f00000000c0), 0x0, 0x20000849, &(0x7f0000000200)={0x2, 0x0, @multicast2, 0x2}, 0x10) r3 = syz_open_dev$loop(&(0x7f0000000400), 0x2, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r0, 0x50b, {0x2a00, 0x80010000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979f45fb76de072000001ea89de2b7fb0000e60080b8785d9600010000f2ff00", "2822e8dbe1082b894ad54afac11d875397bd932d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x2, 0x8]}}) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000240)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv2(r5, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000c40)=ANY=[@ANYBLOB="12010000bce81510d804300a8a0601020301090224000100000000090009050b000000000000090500"/54], 0x0) socket$unix(0x1, 0x5, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 3.277307663s ago: executing program 1 (id=1511): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4da, 0x1044, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x1, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x3, 0x9, 0x8}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "841e0049"}]}}, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 2.909763069s ago: executing program 3 (id=1512): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2a, 0x4, 0x0, 0x0, 0xa8, 0x2000, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@remote}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010121, 0x1ff}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0xb, 0x17, [@local, @local]}, @rr={0x7, 0xf, 0x0, [@remote, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x1, 0x0, 0x0, 0x1ef6, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) 2.254496191s ago: executing program 4 (id=1513): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x3c, &(0x7f0000000440)=[@in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast2}, @in6={0xa, 0x4e22, 0x0, @mcast2}]}, &(0x7f00000004c0)=0x10) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4, 0x4}}}}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) (async, rerun: 32) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x2, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000500000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000007000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) (async) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000003c0)={0x0, 0x4, 0x2, 0x0, 0xd}) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) unshare(0x2000400) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r7, &(0x7f0000000180)}, 0x20) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) (async, rerun: 32) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)=@updpolicy={0xd0, 0x19, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb1, 0x1}, [@sec_ctx={0xc, 0x8, {0x8}}, @mark={0xc}]}, 0xd0}}, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x41, 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async, rerun: 32) creat(&(0x7f0000000040)='./file0\x00', 0x1d) (rerun: 32) 2.109747596s ago: executing program 4 (id=1514): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x895}, 0x10, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a05000000000000000000010000002c000000030a0180ffffff0000000000010000000900030073797a32000000000900010073797a300000000014000000060a0104000000000000000001000000010000000000000000000000000a000000000000"], 0x7c}}, 0x0) landlock_restrict_self(r0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x20102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001f00)={'veth1\x00', &(0x7f0000001ec0)=@ethtool_cmd={0x19, 0x6, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [0x8000, 0x63e0]}}) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/234) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.946312164s ago: executing program 4 (id=1515): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000040)={0x0, 0x5, 0x10000}) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000180)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) 1.852029044s ago: executing program 0 (id=1516): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x6, 0x5, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x2, 0xffffffff}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) memfd_create(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) io_setup(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102384, 0x18ff0}], 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mbind(&(0x7f0000120000/0x1000)=nil, 0x1000, 0x8003, &(0x7f0000000000)=0x6, 0x8, 0x0) sendfile(r5, r6, 0x0, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000000900), 0x0, 0x0) 1.777116208s ago: executing program 3 (id=1517): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, 0x0, 0x0) sendto$unix(r3, &(0x7f0000000440)="d5314e5b06ac503bebf5c7d09a84d1f02154fe6fdd4085ba97b0321627be3becb90d9dc822c9e7ce4e0f8a8f54a24b8d729e1fdf6f4d64b7ef7fffd2b7c9c3ff4b432a524d23a7b80763f3bc6962a4db6ed44c9672bf6ae539fc6d7c58be1c5941844d455f5385192f6c6e9bd1c186749071cd704498", 0x76, 0x4000805, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) 1.776872495s ago: executing program 4 (id=1518): r0 = syz_open_dev$radio(&(0x7f0000000200), 0x1, 0x2) r1 = socket(0x18, 0x0, 0x0) getpeername$packet(r1, 0x0, &(0x7f0000000280)) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000001fc0)={0x45, 0x6, 0x0, {0x0, 0x0, 0x1c, 0x0, '/sys/kernel/debug/sync/info\x00'}}, 0x45) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000100)={0x0, "a3a1b56a4c84226a928a751f1cb50b3e6421ca43d00c7441b04e9026e3dbaf07"}) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e"], 0x0) syz_usb_connect$uac1(0x3, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x5, 0x60, 0xf7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x40, 0x80, 0x2}, @as_header={0x7, 0x24, 0x1, 0x8, 0x0, 0x1}, @as_header={0x7, 0x24, 0x1, 0x0, 0x5, 0x2}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x2, 0x40, 0xfc, 'V'}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x13, 0xff, 0x0, {0x7, 0x25, 0x1, 0x80, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7c, 0x3, 0x0, {0x7, 0x25, 0x1, 0xc0, 0x5, 0x3}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x4, 0x3, 0xeb, 0x8, 0x2}, 0x24, &(0x7f0000000100)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x9, 0x9, 0x8, 0xf8}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "2d43b77218274d293feabd7e4f802366"}]}, 0x8, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x440a}}, {0x2, &(0x7f0000000180)=@string={0x2}}, {0x53, &(0x7f00000001c0)=@string={0x53, 0x3, "0f41b25199b230e748188641d5635a503ce438e9466a4743ca7f4e01f3849b1c62132d47d4074961ce87d5d42553f583c557b769fe0bc3d400501078828d921dd7702a1ee076632366923fc7f6abc2bd93"}}, {0xe8, &(0x7f0000000240)=@string={0xe8, 0x3, "b72e46782f853db7b32920ca5f53ad6de8f357523648df397751894da1fb85547496d1eb4726b4da2e08593064b44e31f4a494698998c1638c1675d446bea1397f6fdcc978e787d97d4eafc7895d0b697e0d736e3718886271aa0edc4fbbeda48048f292d330f7838da8ba87170c97782182a64fadd2721163531a940b71ec5a6ee15e5b54b80aa2949c66386f7ba148b9be75bddb0f9f6f42dd4becd0fd576fedd357f12ebd69b8e975bc8a05e406c8965d886de0759adf2102809ebc09fe7babe19ca3d39528aa90f326e8b9ab70d4eafa99344b31dc895143cdb0a111fd754068acead069"}}, {0x56, &(0x7f0000000340)=@string={0x56, 0x3, "89bfb4ca855831699b0c5dcefefd2d204cbd6a2189327cc046aa74d6c3272efd2977dc87c3b052bab93ca829707426f26c1f1b41ad03bee7b6a2b06213d35f7e4b003bee1210e1f72d68198d6036549e40f5b386"}}, {0x47, &(0x7f0000000440)=@string={0x47, 0x3, "39e454099ee304dd4ba977f7ab255847123b8eced136edba711a171fe6c2b9ae8ef9e2246f9d8bc650fad6de62e96aabdb36f7325d0e6a1d0ae1ae78318a1fd12ce8673aa8"}}, {0xd3, &(0x7f00000004c0)=@string={0xd3, 0x3, "8ae95596a91fb6f4a20dc417ca3735648bd3c6439e1c078941fef889849efdc5aa81e43d197ecfa168fe6e15bc8d0c3f69a6de8eba491ac51f0d412754f6e25d30fca9882bbefc53766d6e73d345404249a3ec6292a655268521b694fb40c9c85e26b52b252b39508ce250b6cb5765e405c488d5d0fd5c7865cd6f0d6ed29d571d51707b94468880d7311364123613be47cf077bd109ba2f2dc48dd63920b4f4228b0fd246bd8ac703589798b735b5ff47b2e7113107a5eba71f7e0ec4c95ed629e9957fcb0cac308f17c732a5caaf0950"}}, {0x6b, &(0x7f00000005c0)=@string={0x6b, 0x3, "cc50f342f8f1014d0d1e88ff133d15eff66e325975f9eb2dc2d54f4a7533d4b1d29010263bb63eced15812a31dc6f3a96aee4bf4501d2eed393d190a59326022073dce205c74de539441ce0ae139b2d5358febb2a90765d35aeb692acad6cfedaec724f5a7299dd499"}}]}) syz_usb_control_io(r3, 0x0, 0x0) 1.455223473s ago: executing program 0 (id=1519): syz_emit_ethernet(0x38, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c20000000180c200000008004900002a004000000000907800000000ffffffff"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000010941220130000000000010902"], 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000200001030000100000000000020000000000000000000000080006"], 0x24}, 0x1, 0x0, 0x0, 0x24040080}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100000000000000000002"], 0x28}}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITHOUT_PARENT={0xc}, &(0x7f0000000240), 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.453876629s ago: executing program 3 (id=1520): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x41, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x3}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x3, 0xf56, 0x0, [{0x0, 0xfe}, {}, {0x0, 0x0, 0x0, '\x00', 0x3}, {0x0, 0x35, 0x0, '\x00', 0xfc}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x3}, {0x0, 0x15}, {}, {}, {0x40}, {}, {}, {}, {}, {0x3, 0xfc}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0xfc}, {0x4, 0x4}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', '', [], 0xa, "4fa2f04a6e9681498b001e00b8c7b8dde9c55b133e486850fec1da8681c17b5d9e84a395cb7ff69e44797f877e2d124c5f689d518f78f7e1019e55ec0746083560c16afb57acdac10b50d8ab848c7e7ba76b2f5345a1d3ce9b816c5b2c50f3367df12ff97088e7fe26a0cf14758bb60ab7249bb8f9a1167075be9a7d4ed90500000038dc71ffab035ff6ab107d1e346e6ef651c3715932cbe3a4eafb9f0100d817aa69c77ff7adb79354682d242a1c844e06d759e8e62a641731991516679386e9dfeb86bdb0c16912f22ee4adcdee9ce8596e0761da"}, 0xda) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r4, 0xc0044dff, &(0x7f0000001480)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$alg(0x26, 0x5, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f00000002c0)={0x2, 0x0, @empty}, 0x10) r7 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f00000000c0)=[r7], 0x1) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "f124a6bed4aee874c28a9af8168ebbbd090ffdef352b1d82f25c7719aa569b4e29f1b1c3200d701547228df8a88f6532e74900000000000200"}, 0x48}, 0x2}, 0x28004000) sendmmsg$inet(r7, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="24be649f255eab1ea63917eb4b3c825dbb007404869cd13280cf44895e34e7f475336607729c5f114724c5e27c7643034d5812d0022d8f2fd7b64834a156d79b", 0x40}], 0x1}}], 0x1, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 692.114076ms ago: executing program 2 (id=1478): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040041e1d113c812e5d601adda05c7b5d27c9"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000340)=0xe) recvfrom$rxrpc(r2, &(0x7f00000000c0)=""/19, 0x13, 0x2022, &(0x7f0000000180)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @private=0xa010102}}, 0x24) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000200)={0x7, 0x7fffffff, 0x3, 0x5, 0x8, "1edd243107e039bd22bc3b7485d774f1f00e8a"}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) r4 = openat$dlm_control(0xffffff9c, &(0x7f00000001c0), 0x800, 0x0) r5 = openat$sysctl(0xffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000400)=[r3, 0xffffffffffffffff, r4, r5], 0x4) timer_create(0x5, &(0x7f0000000540)={0x0, 0x34, 0x1, @thr={&(0x7f0000000440)="80cb643467770341c85fc8843b32", &(0x7f0000000480)="f39d3b8905b5e1289ad008fea476f0f47cd0d0a6d1f26c5ff35b72e7d9076f4ddf74fad6f0aa69856db3c7d43245156dd3eabb6330f12e764c2f7e5b83606d59920255b54d50fbbf70544a14ad2bb7e7ed075530d64212bfeceef0d12820aa8abd66ebdaacfe86ad5aa91f9729113445fe4345e10d95b83d0c201b33e0da139a85d3cb"}}, &(0x7f0000000580)) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r7 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00003a0000003a00a7ea3163fdfa964eccac45d3456808f1e3fe0c472c8d954f8999b06ca46207f2b7bd7d2944fafc2276cc6b8f8329dc50c76a16f810ac55fb"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000006000000000000009100000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) write$binfmt_aout(r8, &(0x7f0000001140)=ANY=[], 0x1a3) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f0000000040)="bc963e76ebc00bc0e2e92ff7c7dec255b8c66be4d54e8933e69a976b96e945724d6efb96dc3e8f8a2f75094ce9f61df63d553bf837c91b40533567056dc4", 0x0, 0x0, 0x0}, 0x38) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) syz_usb_connect(0x5, 0x0, 0x0, 0x0) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000005c0)) preadv(r9, &(0x7f0000000240)=[{&(0x7f0000002380)=""/102389, 0x18ff5}], 0x1, 0x0, 0x0) 318.835627ms ago: executing program 3 (id=1521): syz_usb_connect(0x0, 0x3f, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010002e0010410ef342b2009360102030109022d00018465200909040400035d8eb80909050c42ff0306029f09050202af0105030c09050f03ff03f10500"], 0x0) 189.150863ms ago: executing program 1 (id=1522): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000000400000006000000a60b000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001b48634852ca22758b08af120aad3fa26d3075cedac68e566e5e08180915d390e58c766a1f01a6a11b04e5110c203f6a5f7b9843b533ac841a21bb56393c04ee5bfe33b401800c7f87f4065ab808ded74d96a033cb28a2f73601d4acc17ec2ed6148febc0df2cf3701d2bd09373ad74ae762921c1cb9baf7f814f4eaa77bc5fb769898e2d06717cb53ac469580170f7e7986e1ccfac0c271966d87760ed1f485c9cf1c5dfd49afb60ff8ec44d85f1ab0d530009867aa8ee21739a23f730c992605f0564a5d9c7e9d930d68490a4155280d7ae2ae96b471882acd006a746e020abb79632333b5ab3c0c89c8c9fbf856", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x22e881, 0x0) (async) syz_io_uring_setup(0x6df6, &(0x7f00000000c0)={0x0, 0x21cd, 0x80, 0x200000, 0x1df, 0x0, r0}, 0x0, 0x0) (async) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) pipe(0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) (async) setsockopt$sock_int(r2, 0x1, 0x3c, 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) (async) recvmmsg(r2, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000180)=""/103, 0x67}], 0x1}}], 0x2, 0x0, 0x0) (async) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000040)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) listen(r3, 0x100101) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000e0546b3f64016ece0c927789c292d619baac672a7f0c93ab0acff33ea4f5dacd68113e74d83c7f31d3bc8f38dd087b16bf2745aaa055e6e14fc6880585e0fe7b396d17"], 0x8) (async) accept4(r3, 0x0, 0x0, 0x1000) (async) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async) syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYRESHEX=r3], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 1 (id=1523): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x7d1a, 0x4) sendmmsg$inet6(r0, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)='n', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000002580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/41, 0x29}}], 0x1, 0x12000, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3004c40d) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x0) kernel console output (not intermixed with test programs): cking state [ 445.561729][T12380] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.583366][T12380] bridge_slave_0: entered allmulticast mode [ 445.608654][T12380] bridge_slave_0: entered promiscuous mode [ 445.636142][T12380] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.643260][T12380] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.665093][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 445.684724][T12380] bridge_slave_1: entered allmulticast mode [ 445.704885][T12380] bridge_slave_1: entered promiscuous mode [ 445.821150][T12380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.837200][T12380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.853745][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 445.861130][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.878064][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.930239][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 445.965026][ T12] hsr_slave_0: left promiscuous mode [ 445.971099][ T9] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 445.988432][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.994935][ T5231] Bluetooth: hci4: command tx timeout [ 446.004208][ T9] usb 4-1: config 0 descriptor?? [ 446.024077][ T12] hsr_slave_1: left promiscuous mode [ 446.034475][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 446.047008][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 446.056922][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 446.068976][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 446.077890][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 446.091160][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 446.101117][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.118950][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.167794][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.185748][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.246040][ T12] veth1_macvtap: left promiscuous mode [ 446.251667][ T12] veth0_macvtap: left promiscuous mode [ 446.257634][ T12] veth1_vlan: left promiscuous mode [ 446.263015][ T12] veth0_vlan: left promiscuous mode [ 446.394444][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 446.447572][ T9] ntrig 0003:1B96:000A.001B: unknown main item tag 0x0 [ 446.474363][ T5231] Bluetooth: hci1: command 0x0c1a tx timeout [ 446.476237][ T9] ntrig 0003:1B96:000A.001B: unknown main item tag 0x0 [ 446.481800][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 446.488027][ T9] ntrig 0003:1B96:000A.001B: unknown main item tag 0x0 [ 446.513480][ T9] ntrig 0003:1B96:000A.001B: unknown main item tag 0x0 [ 446.542528][ T9] ntrig 0003:1B96:000A.001B: unknown main item tag 0x0 [ 446.602585][ T9] ntrig 0003:1B96:000A.001B: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 446.762976][ T9] usb 4-1: USB disconnect, device number 50 [ 447.508882][ T12] team0 (unregistering): Port device team_slave_1 removed [ 447.610808][ T12] team0 (unregistering): Port device team_slave_0 removed [ 448.093709][ T54] Bluetooth: hci4: command tx timeout [ 448.153864][ T54] Bluetooth: hci2: command tx timeout [ 448.743073][T12442] netlink: 'syz.1.1294': attribute type 3 has an invalid length. [ 448.788731][T12380] team0: Port device team_slave_0 added [ 448.812233][T12380] team0: Port device team_slave_1 added [ 448.922434][ T5287] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 448.934322][T12380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.941636][T12380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.000391][T12380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.055643][T12380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.101697][T12380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.125424][ T5287] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 449.140858][ T5287] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 449.151224][ T5287] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 449.161354][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.184391][T12440] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 449.196922][ T5287] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 449.223573][T12380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.416127][T12380] hsr_slave_0: entered promiscuous mode [ 449.423460][T12380] hsr_slave_1: entered promiscuous mode [ 449.434887][ T5287] usb 4-1: USB disconnect, device number 51 [ 449.711666][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.732568][T12434] chnl_net:caif_netlink_parms(): no params data found [ 449.843471][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.131573][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.153929][ T54] Bluetooth: hci4: command tx timeout [ 450.234006][ T54] Bluetooth: hci2: command tx timeout [ 450.448101][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.503106][T12434] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.510588][T12434] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.557256][T12434] bridge_slave_0: entered allmulticast mode [ 450.577804][T12434] bridge_slave_0: entered promiscuous mode [ 450.668904][T12434] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.684905][T12434] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.702471][T12434] bridge_slave_1: entered allmulticast mode [ 450.735633][T12434] bridge_slave_1: entered promiscuous mode [ 450.878354][T12512] could not allocate digest TFM handle sha256-arm64-neon [ 451.070014][T12434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.079485][T12519] tipc: Started in network mode [ 451.085003][T12519] tipc: Node identity 4, cluster identity 4711 [ 451.091253][T12519] tipc: Node number set to 4 [ 451.106505][T12434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.149121][ T5231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 451.161468][ T5231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 451.172886][ T5231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 451.182237][ T5231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 451.190782][ T5231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 451.198803][ T5231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 451.426339][T12434] team0: Port device team_slave_0 added [ 451.434968][T12434] team0: Port device team_slave_1 added [ 451.484910][T12531] syz.1.1314 uses obsolete (PF_INET,SOCK_PACKET) [ 451.496955][ T12] bridge_slave_1: left allmulticast mode [ 451.502781][ T12] bridge_slave_1: left promiscuous mode [ 451.512397][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.521875][ T12] bridge_slave_0: left allmulticast mode [ 451.529448][ T12] bridge_slave_0: left promiscuous mode [ 451.535785][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.023450][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.037718][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.049736][ T12] bond0 (unregistering): Released all slaves [ 452.060492][T12532] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1313'. [ 452.083362][T12434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.090504][T12434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.124087][T12434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.251924][ T5231] Bluetooth: hci4: command tx timeout [ 452.300528][T12434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.307728][T12434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.333786][ T5231] Bluetooth: hci2: command tx timeout [ 452.339858][T12434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.415646][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 452.415667][ T29] audit: type=1800 audit(1727985891.998:392): pid=12538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1316" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 452.752958][T12434] hsr_slave_0: entered promiscuous mode [ 452.769308][T12434] hsr_slave_1: entered promiscuous mode [ 452.786536][T12434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 452.795465][T12434] Cannot create hsr debugfs directory [ 452.857885][ T12] hsr_slave_0: left promiscuous mode [ 452.864533][ T12] hsr_slave_1: left promiscuous mode [ 452.872114][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.883407][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.892208][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.900181][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.930594][ T12] veth1_macvtap: left promiscuous mode [ 452.936874][ T12] veth0_macvtap: left promiscuous mode [ 452.942773][ T12] veth1_vlan: left promiscuous mode [ 452.948827][ T12] veth0_vlan: left promiscuous mode [ 453.104041][ T5287] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 453.264134][ T5287] usb 1-1: device descriptor read/64, error -71 [ 453.280811][ T5231] Bluetooth: hci1: command tx timeout [ 453.504069][ T5287] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 453.654529][ T5287] usb 1-1: device descriptor read/64, error -71 [ 453.784655][ T5287] usb usb1-port1: attempt power cycle [ 453.802880][ T12] team0 (unregistering): Port device team_slave_1 removed [ 453.877709][ T12] team0 (unregistering): Port device team_slave_0 removed [ 454.134216][ T5287] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 454.175983][ T5287] usb 1-1: device descriptor read/8, error -71 [ 454.394415][ T5231] Bluetooth: hci2: command tx timeout [ 454.413807][ T5287] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 454.444265][ T5287] usb 1-1: device descriptor read/8, error -71 [ 454.554540][ T5287] usb usb1-port1: unable to enumerate USB device [ 454.902592][T12380] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 454.971549][T12380] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 454.992997][T12380] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 455.080865][T12380] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 455.353779][ T5231] Bluetooth: hci1: command tx timeout [ 455.397402][T12523] chnl_net:caif_netlink_parms(): no params data found [ 455.731846][T12523] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.753931][T12523] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.761153][T12523] bridge_slave_0: entered allmulticast mode [ 455.784793][T12523] bridge_slave_0: entered promiscuous mode [ 455.813299][T12380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.832828][T12523] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.855956][T12523] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.863307][T12523] bridge_slave_1: entered allmulticast mode [ 455.885406][T12523] bridge_slave_1: entered promiscuous mode [ 456.000115][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.045346][T12523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.076321][T12523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.105885][T12380] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.145057][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.312405][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.337352][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.344539][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.384949][T12523] team0: Port device team_slave_0 added [ 456.404008][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.411157][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.458694][T12434] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 456.589447][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.686624][T12523] team0: Port device team_slave_1 added [ 456.753902][T12434] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 456.763522][T12434] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 456.853417][T12380] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 456.874418][T12380] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 456.914209][T12434] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 456.983592][T12434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.001213][T12434] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.042791][T12523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.064651][T12523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.112300][T12523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.139661][ T7088] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.146867][ T7088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.171582][ T7088] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.178776][ T7088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.221323][T12523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.228714][T12523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.255090][T12523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.314337][T12380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.350598][T12380] veth0_vlan: entered promiscuous mode [ 457.363526][T12380] veth1_vlan: entered promiscuous mode [ 457.380390][ T5234] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 457.438008][T12523] hsr_slave_0: entered promiscuous mode [ 457.443933][ T5231] Bluetooth: hci1: command tx timeout [ 457.460925][T12523] hsr_slave_1: entered promiscuous mode [ 457.468811][T12523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 457.484207][T12523] Cannot create hsr debugfs directory [ 457.502987][T12434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.557455][ T5234] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.574203][ T5234] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 457.604269][ T5234] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 457.613361][ T5234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.638479][T12380] veth0_macvtap: entered promiscuous mode [ 457.645899][ T5234] usb 1-1: config 0 descriptor?? [ 457.697811][ T12] bridge_slave_1: left allmulticast mode [ 457.703573][ T12] bridge_slave_1: left promiscuous mode [ 457.723017][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.744518][ T12] bridge_slave_0: left allmulticast mode [ 457.750260][ T12] bridge_slave_0: left promiscuous mode [ 457.775128][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.115278][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.150503][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.197598][ T12] bond0 (unregistering): Released all slaves [ 459.349550][T12380] veth1_macvtap: entered promiscuous mode [ 459.519656][ T5231] Bluetooth: hci1: command tx timeout [ 459.775562][T12607] syz.0.1325 (12607): drop_caches: 2 [ 459.865173][ T5234] usb 1-1: USB disconnect, device number 78 [ 459.892531][T12434] veth0_vlan: entered promiscuous mode [ 459.941661][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.983605][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.993524][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.040348][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.074138][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.094209][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.122025][T12380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.165864][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.193678][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.203550][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.234712][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.245956][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.256788][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.268293][T12380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.287030][ T12] hsr_slave_0: left promiscuous mode [ 460.295753][ T12] hsr_slave_1: left promiscuous mode [ 460.301701][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.322512][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.332651][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.340645][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.382317][ T12] veth1_macvtap: left promiscuous mode [ 460.388903][ T12] veth0_macvtap: left promiscuous mode [ 460.395003][ T12] veth1_vlan: left promiscuous mode [ 460.400302][ T12] veth0_vlan: left promiscuous mode [ 461.359568][ T12] team0 (unregistering): Port device team_slave_1 removed [ 461.456873][ T12] team0 (unregistering): Port device team_slave_0 removed [ 462.330474][T12380] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.363696][T12380] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.372429][T12380] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.381870][T12380] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.540184][T12434] veth1_vlan: entered promiscuous mode [ 462.791100][T12434] veth0_macvtap: entered promiscuous mode [ 462.800543][T12434] veth1_macvtap: entered promiscuous mode [ 462.815915][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.826515][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.836510][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.847060][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.857084][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.867640][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.878926][T12434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.889385][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.899957][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.909884][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.920677][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.930788][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.941436][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.955904][T12434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.062165][T12434] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.072401][T12434] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.084259][T12434] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.093007][T12434] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.396054][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.404091][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.412772][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.420718][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.469511][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 463.642380][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 463.653457][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 463.732556][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 463.740708][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 463.750188][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 463.858737][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.859239][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.871872][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.925604][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.965132][T12523] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 464.049462][T12523] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 464.068253][T12523] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 464.264093][T12523] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 464.322862][T12680] bridge_slave_0: left allmulticast mode [ 464.330721][T12680] bridge_slave_0: left promiscuous mode [ 464.336907][T12680] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.368684][T12680] bridge_slave_1: left allmulticast mode [ 464.384996][T12680] bridge_slave_1: left promiscuous mode [ 464.392333][T12680] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.419698][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1337'. [ 464.458692][T12680] bond0: (slave bond_slave_0): Releasing backup interface [ 464.486609][T12680] bond0: (slave bond_slave_1): Releasing backup interface [ 464.540553][T12680] team0: Port device team_slave_0 removed [ 464.560819][T12680] team0: Port device team_slave_1 removed [ 464.568956][T12680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.581879][T12680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.592837][T12680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.604596][T12680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.705899][T12690] team0: Port device wg2 added [ 464.771024][ T2912] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.929067][ T2912] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.126825][ T2912] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.378598][ T2912] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.462440][T12719] fuse: Bad value for 'group_id' [ 465.473527][T12719] fuse: Bad value for 'group_id' [ 465.512599][T12722] fuse: Bad value for 'group_id' [ 465.518522][T12722] fuse: Bad value for 'group_id' [ 465.544356][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 465.558649][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 465.565976][ T5307] usb 5-1: new low-speed USB device number 73 using dummy_hcd [ 465.583254][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 465.601996][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 465.614550][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 465.621985][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 465.701859][T12523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.712304][T12718] ======================================================= [ 465.712304][T12718] WARNING: The mand mount option has been deprecated and [ 465.712304][T12718] and is ignored by this kernel. Remove the mand [ 465.712304][T12718] option from the mount to silence this warning. [ 465.712304][T12718] ======================================================= [ 465.788695][T12662] chnl_net:caif_netlink_parms(): no params data found [ 465.790002][ T5307] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 465.821085][ T5307] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 465.854552][ T5307] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 16, setting to 8 [ 465.876733][T12523] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.914597][ T54] Bluetooth: hci5: command tx timeout [ 466.028900][ T5310] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 466.186615][ T5310] usb 3-1: config 0 has an invalid interface number: 223 but max is 0 [ 466.195025][ T5310] usb 3-1: config 0 has no interface number 0 [ 466.201158][ T5310] usb 3-1: config 0 interface 223 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 466.214780][ T5310] usb 3-1: New USB device found, idVendor=1608, idProduct=0008, bcdDevice=2e.37 [ 466.224128][ T5310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.232210][ T5310] usb 3-1: Product: syz [ 466.236861][ T5310] usb 3-1: Manufacturer: syz [ 466.241603][ T5310] usb 3-1: SerialNumber: syz [ 466.251515][ T5310] usb 3-1: config 0 descriptor?? [ 466.278100][ T5310] io_edgeport 3-1:0.223: required endpoints missing [ 466.449463][ T2912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.464133][ T2912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.478331][ T2912] bond0 (unregistering): Released all slaves [ 466.479271][ T5310] usb 3-1: USB disconnect, device number 73 [ 466.639880][ T7088] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.640628][ T2912] tipc: Left network mode [ 466.647080][ T7088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.751295][T12662] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.762608][T12662] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.778864][T12662] bridge_slave_0: entered allmulticast mode [ 466.792276][T12662] bridge_slave_0: entered promiscuous mode [ 466.804772][T12662] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.811963][T12662] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.819689][T12662] bridge_slave_1: entered allmulticast mode [ 466.835070][T12662] bridge_slave_1: entered promiscuous mode [ 466.848362][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.855593][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.998970][T12662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.058284][T12662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.187904][T12726] chnl_net:caif_netlink_parms(): no params data found [ 467.300636][T12662] team0: Port device team_slave_0 added [ 467.323437][T12662] team0: Port device team_slave_1 added [ 467.387742][T12523] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 467.399434][T12523] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 467.516043][ T2912] hsr_slave_0: left promiscuous mode [ 467.522383][ T2912] hsr_slave_1: left promiscuous mode [ 467.529263][ T2912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.544062][ T2912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.552386][ T2912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.563252][ T2912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.617620][ T2912] veth1_macvtap: left promiscuous mode [ 467.623429][ T2912] veth0_macvtap: left promiscuous mode [ 467.631554][ T2912] veth1_vlan: left promiscuous mode [ 467.637455][ T2912] veth0_vlan: left promiscuous mode [ 467.673982][ T54] Bluetooth: hci0: command tx timeout [ 467.993906][ T54] Bluetooth: hci5: command tx timeout [ 468.015292][T12763] futex_wake_op: syz.2.1346 tries to shift op by -1; fix this program [ 468.352326][ T5307] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.40 [ 468.387957][ T5307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.441247][ T5307] usb 5-1: can't set config #1, error -71 [ 468.455214][ T5307] usb 5-1: USB disconnect, device number 73 [ 468.702161][ T2912] team0 (unregistering): Port device team_slave_1 removed [ 468.773572][ T2912] team0 (unregistering): Port device team_slave_0 removed [ 468.775203][ T5307] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 468.954049][ T5307] usb 5-1: Using ep0 maxpacket: 16 [ 468.965339][ T5307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.979544][ T5307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.989552][ T5307] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 468.998762][ T5307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.010970][ T5307] usb 5-1: config 0 descriptor?? [ 469.403950][ T5287] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 469.532993][ T5307] corsair 0003:1B1C:1B02.001C: unknown main item tag 0x0 [ 469.573697][ T5287] usb 3-1: Using ep0 maxpacket: 16 [ 469.580013][ T5307] corsair 0003:1B1C:1B02.001C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 469.584007][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.604861][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.615162][ T5287] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 469.635506][ T5287] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 469.645073][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.662361][ T5287] usb 3-1: config 0 descriptor?? [ 469.681756][T12662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.689252][T12662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.715225][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.724901][T12662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.740233][ T5307] corsair 0003:1B1C:1B02.001C: Failed to get K90 initial state (error -71). [ 469.745256][T12662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.757080][ T54] Bluetooth: hci0: command tx timeout [ 469.766704][ T5307] usb 5-1: USB disconnect, device number 74 [ 469.773508][T12662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.805863][T12662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.854751][T12523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.868419][T12771] tap0: tun_chr_ioctl cmd 1074025676 [ 469.873990][T12771] tap0: owner set to 0 [ 469.927006][T12726] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.934895][T12726] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.942224][T12726] bridge_slave_0: entered allmulticast mode [ 469.950584][T12726] bridge_slave_0: entered promiscuous mode [ 469.974805][T12726] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.995598][T12726] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.002869][T12726] bridge_slave_1: entered allmulticast mode [ 470.010131][T12726] bridge_slave_1: entered promiscuous mode [ 470.074170][ T54] Bluetooth: hci5: command tx timeout [ 470.082354][ T5287] usbhid 3-1:0.0: can't add hid device: -71 [ 470.091986][ T5287] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 470.102360][ T5287] usb 3-1: USB disconnect, device number 74 [ 470.152225][T12726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.174813][T12726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.193418][T12662] hsr_slave_0: entered promiscuous mode [ 470.200367][T12662] hsr_slave_1: entered promiscuous mode [ 470.207210][T12662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.214936][T12662] Cannot create hsr debugfs directory [ 470.278493][T12726] team0: Port device team_slave_0 added [ 470.297418][T12726] team0: Port device team_slave_1 added [ 470.382976][T12726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.392277][T12726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.418240][ C1] vkms_vblank_simulate: vblank timer overrun [ 470.446143][T12726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.499593][T12726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.508088][T12726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.537128][T12726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.643110][T12523] veth0_vlan: entered promiscuous mode [ 470.683172][T12726] hsr_slave_0: entered promiscuous mode [ 470.691267][T12726] hsr_slave_1: entered promiscuous mode [ 470.704625][T12726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.712240][T12726] Cannot create hsr debugfs directory [ 470.723825][ T5241] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 470.762238][ T2912] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.890326][T12523] veth1_vlan: entered promiscuous mode [ 470.893883][ T5241] usb 5-1: Using ep0 maxpacket: 32 [ 470.913805][ T5241] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.953989][ T5241] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.988382][ T5241] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 471.000338][ T5241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.015762][ T2912] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.021187][ T5241] usb 5-1: config 0 descriptor?? [ 471.043335][ T5241] hub 5-1:0.0: USB hub found [ 471.153391][ T2912] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.197990][T12801] mac80211_hwsim hwsim103 wlan0: entered promiscuous mode [ 471.253439][T12797] mac80211_hwsim hwsim103 wlan0: left promiscuous mode [ 471.269007][ T5241] hub 5-1:0.0: 1 port detected [ 471.339604][ T2912] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.589486][ T5241] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 471.608700][T12523] veth0_macvtap: entered promiscuous mode [ 471.638974][ T5241] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 471.640368][T12523] veth1_macvtap: entered promiscuous mode [ 471.668031][ T5241] usbhid 5-1:0.0: can't add hid device: -71 [ 471.681714][T12523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.690718][ T5241] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 471.708574][T12523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.733675][T12523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.755171][ T5241] usb 5-1: USB disconnect, device number 75 [ 471.764412][T12523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.783331][T12523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.833563][T12523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.853333][ T54] Bluetooth: hci0: command tx timeout [ 471.864755][T12523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.884516][T12523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.927862][T12523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.955931][T12523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.038719][T12523] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.052158][T12523] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.061678][T12523] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.078623][T12523] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.154242][ T54] Bluetooth: hci5: command tx timeout [ 472.185854][ T2912] bridge_slave_1: left allmulticast mode [ 472.191541][ T2912] bridge_slave_1: left promiscuous mode [ 472.205053][ T2912] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.216301][ T2912] bridge_slave_0: left allmulticast mode [ 472.222003][ T2912] bridge_slave_0: left promiscuous mode [ 472.228839][ T2912] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.264340][ T5287] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 472.413772][ T5287] usb 3-1: Using ep0 maxpacket: 16 [ 472.426037][ T5287] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.446962][ T5287] usb 3-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 472.473873][ T5287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.481919][ T5287] usb 3-1: Product: syz [ 472.494934][ T5287] usb 3-1: Manufacturer: syz [ 472.521459][ T5287] usb 3-1: SerialNumber: syz [ 472.529114][ T5287] usb 3-1: config 0 descriptor?? [ 472.751083][ T5287] usb 3-1: USB disconnect, device number 75 [ 473.001614][ T2912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.014609][ T2912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.025857][ T2912] bond0 (unregistering): Released all slaves [ 473.044850][T12842] netlink: 'syz.4.1354': attribute type 19 has an invalid length. [ 473.387074][T12662] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 473.499649][T12662] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 473.579461][ T2912] hsr_slave_0: left promiscuous mode [ 473.589768][ T2912] hsr_slave_1: left promiscuous mode [ 473.640143][ T2912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.651596][ T2912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.660442][ T2912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.678373][ T2912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.729093][ T2912] veth1_macvtap: left promiscuous mode [ 473.743754][ T2912] veth0_macvtap: left promiscuous mode [ 473.753933][ T2912] veth1_vlan: left promiscuous mode [ 473.759298][ T2912] veth0_vlan: left promiscuous mode [ 473.843758][ T5234] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 473.916273][ T54] Bluetooth: hci0: command tx timeout [ 474.020301][ T5234] usb 5-1: Using ep0 maxpacket: 32 [ 474.032180][ T5234] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 474.044126][T12885] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1358'. [ 474.068840][ T5234] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 474.081779][ T5234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 474.112923][ T5234] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 474.172087][ T5234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 474.206748][ T5234] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 474.269194][ T5234] usb 5-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 474.300312][ T5234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.328828][ T5234] usb 5-1: Product: syz [ 474.338154][ T5234] usb 5-1: Manufacturer: syz [ 474.346880][ T5234] usb 5-1: SerialNumber: syz [ 474.353473][ T5234] usb 5-1: config 0 descriptor?? [ 474.381851][T12875] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 474.398444][ T5234] pn533_usb 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 474.621402][ T5234] usb 5-1: USB disconnect, device number 76 [ 474.802091][ T2912] team0 (unregistering): Port device team_slave_1 removed [ 474.859635][ T2912] team0 (unregistering): Port device team_slave_0 removed [ 475.576529][T12894] loop2: detected capacity change from 0 to 7 [ 475.601349][T12894] Dev loop2: unable to read RDB block 7 [ 475.608581][T12894] loop2: unable to read partition table [ 475.611726][T12662] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 475.614857][T12894] loop2: partition table beyond EOD, truncated [ 475.629100][T12894] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 475.643028][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.654172][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.708419][T12662] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 475.783789][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.792380][ T4684] Dev loop2: unable to read RDB block 7 [ 475.807677][ T4684] loop2: unable to read partition table [ 475.819524][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.827842][ T4684] loop2: partition table beyond EOD, truncated [ 475.829365][T12894] syzkaller0: entered promiscuous mode [ 475.845815][T12894] syzkaller0: entered allmulticast mode [ 476.689402][ T4684] Dev loop2: unable to read RDB block 7 [ 476.700738][ T4684] loop2: unable to read partition table [ 476.713961][ T4684] loop2: partition table beyond EOD, truncated [ 477.013948][ T5234] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 477.182378][ T5234] usb 3-1: Using ep0 maxpacket: 16 [ 477.191565][ T5234] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 477.201503][ T5234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.210346][ T5234] usb 3-1: Product: syz [ 477.214780][ T5234] usb 3-1: Manufacturer: syz [ 477.219427][ T5234] usb 3-1: SerialNumber: syz [ 477.239109][ T5234] r8152-cfgselector 3-1: Unknown version 0x0000 [ 477.246310][ T5234] r8152-cfgselector 3-1: config 0 descriptor?? [ 477.469044][ T5234] r8152-cfgselector 3-1: Unknown version 0x50e0 [ 477.487371][ T5234] r8152-cfgselector 3-1: bad CDC descriptors [ 478.211444][ T5234] r8152-cfgselector 3-1: USB disconnect, device number 76 [ 478.248910][ T4684] Dev loop2: unable to read RDB block 7 [ 478.273890][ T4684] loop2: unable to read partition table [ 478.280298][ T4684] loop2: partition table beyond EOD, truncated [ 479.322461][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1363'. [ 479.332405][T12904] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1363'. [ 479.469053][T12662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.482571][T12662] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.528859][T12662] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 479.539386][T12662] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 479.578316][T12662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.610338][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.617539][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.637753][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.644945][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.703581][T12662] veth0_vlan: entered promiscuous mode [ 479.709350][ T5310] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 479.884114][ T5310] usb 5-1: Using ep0 maxpacket: 16 [ 479.886722][T12662] veth1_vlan: entered promiscuous mode [ 479.909604][ T5310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.944775][ T5310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.963758][ T5310] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 479.982203][ T5310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.010874][ T5310] usb 5-1: config 0 descriptor?? [ 480.028589][T12726] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 480.051888][T12726] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 480.115129][T12662] veth0_macvtap: entered promiscuous mode [ 480.132662][T12662] veth1_macvtap: entered promiscuous mode [ 480.145892][T12726] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 480.194950][T12726] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 480.216732][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.242195][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.253357][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.271034][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.294744][T12662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.307247][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.328403][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.341158][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.372319][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.395557][T12662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.446969][T12662] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.486332][T12662] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.515740][T12662] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.524104][T12908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.543741][T12662] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.564856][T12908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.767756][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.790863][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.874982][ T2912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.882867][ T2912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.033581][T12726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.105289][T12726] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.138868][ T7088] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.146058][ T7088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.180863][ T2912] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.188115][ T2912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.233515][T12726] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 481.244308][T12726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 481.329174][T12726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.450130][T12953] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 481.473482][ T5310] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 481.473504][T12726] veth0_vlan: entered promiscuous mode [ 481.481425][T12726] veth1_vlan: entered promiscuous mode [ 481.527274][ T5310] letsketch 0003:6161:4D15.001D: probe with driver letsketch failed with error -71 [ 481.537055][T12726] veth0_macvtap: entered promiscuous mode [ 481.559813][T12726] veth1_macvtap: entered promiscuous mode [ 481.564136][ T5310] usb 5-1: USB disconnect, device number 77 [ 481.633869][ T5285] usb 2-1: new low-speed USB device number 100 using dummy_hcd [ 481.635770][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.666861][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.678686][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.690513][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.701044][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.712073][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.726208][T12726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.744327][T12955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1372'. [ 481.759233][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.784049][ T5285] usb 2-1: device descriptor read/64, error -71 [ 481.784115][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.804884][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.816009][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.827601][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.841455][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.856436][T12726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.895481][T12726] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.935615][T12726] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.963462][T12726] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.980103][T12726] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.109867][ T5285] usb 2-1: new low-speed USB device number 101 using dummy_hcd [ 482.209555][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.267933][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.433931][ T5285] usb 2-1: device descriptor read/64, error -71 [ 482.439040][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.492624][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.546116][ T5285] usb usb2-port1: attempt power cycle [ 482.943917][ T5285] usb 2-1: new low-speed USB device number 102 using dummy_hcd [ 482.964688][ T5285] usb 2-1: device descriptor read/8, error -71 [ 483.213816][ T5285] usb 2-1: new low-speed USB device number 103 using dummy_hcd [ 483.246350][ T5285] usb 2-1: device descriptor read/8, error -71 [ 483.276670][ T5241] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 483.364325][ T5285] usb usb2-port1: unable to enumerate USB device [ 483.445517][ T5241] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.463103][ T5241] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.488136][ T5241] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 483.500118][ T5241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.542023][ T5241] usb 3-1: config 0 descriptor?? [ 483.583295][T12994] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 483.980317][ T5241] pyra 0003:1E7D:2CF6.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 484.213226][ T5241] pyra 0003:1E7D:2CF6.001E: couldn't init struct pyra_device [ 484.233812][ T5241] pyra 0003:1E7D:2CF6.001E: couldn't install mouse [ 484.251845][ T5241] pyra 0003:1E7D:2CF6.001E: probe with driver pyra failed with error -71 [ 484.305676][ T5241] usb 3-1: USB disconnect, device number 77 [ 484.307936][T13022] xt_TCPMSS: Only works on TCP SYN packets [ 484.779951][T13042] netlink: 5300 bytes leftover after parsing attributes in process `syz.3.1386'. [ 484.814487][T13042] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 484.834439][ T5241] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 484.991685][T13055] loop7: detected capacity change from 0 to 16384 [ 484.993814][ T5241] usb 3-1: Using ep0 maxpacket: 8 [ 485.011281][ T5241] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 485.021404][ T5241] usb 3-1: config 0 has no interface number 0 [ 485.034216][ T8] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 485.036165][ T5241] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 485.063031][ T5241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.085820][ T5241] usb 3-1: config 0 descriptor?? [ 485.185124][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 485.202962][ T8] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 485.217582][ T5241] viperboard 3-1:0.143: version 0.00 found at bus 003 address 078 [ 485.223752][ T5285] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 485.247561][ T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 485.259931][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.283676][ T8] usb 1-1: Product: 栙힢뎅⟳Ḹ藱뗣㍄㴌挭ﯵ줇橉ญ࠭䖪儧 [ 485.312928][ T8] usb 1-1: Manufacturer: Ћ [ 485.319807][ T5241] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 485.329132][ T8] usb 1-1: SerialNumber: 奫䶰蕹੩앥犯澥莾擸儃薐쭲ꭧ놘酎㹫೒넽픞斸燞됄⢗곭퉩⫽ኑප㙣쎆뾂톃뵑鸁獗란ﱒള긷牐跄嵽紼┳ࡸ鄣䟔荦骓鸞隊䯬鳁돆럷牼㊰㈰撤뵋綘憷牊斖뫻䊮酒읟 [ 485.368685][T13033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.377430][ T5241] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 485.394062][T13033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.402582][ T5285] usb 5-1: Using ep0 maxpacket: 8 [ 485.420452][ T5285] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 485.433331][ T5285] usb 5-1: config 0 has no interface number 0 [ 485.451550][ T5285] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 485.471547][ T5241] usb 3-1: USB disconnect, device number 78 [ 485.471704][ T5285] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 485.591732][ T5285] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 108, changing to 10 [ 485.605508][ T8] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 485.667468][ T5285] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 8949, setting to 1024 [ 485.688562][ T8] usb 1-1: USB disconnect, device number 79 [ 485.709705][ T5285] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.739950][T10878] udevd[10878]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.789514][ T5285] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 485.807791][ T5285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.860072][ T5285] usb 5-1: Product: syz [ 485.869333][ T5285] usb 5-1: Manufacturer: syz [ 485.892910][ T5285] usb 5-1: SerialNumber: syz [ 485.917545][ T5285] usb 5-1: config 0 descriptor?? [ 485.999593][ T148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.108347][T13069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.133868][T13069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.165209][T13052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.211552][T13052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.228098][ T148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.353933][ T5234] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 486.419345][ T148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.504060][ T5234] usb 4-1: Using ep0 maxpacket: 32 [ 486.515219][ T5234] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d2.24 [ 486.524801][ T5234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.558522][ T5234] usb 4-1: Product: syz [ 486.578232][ T5234] usb 4-1: Manufacturer: syz [ 486.606607][ T5285] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 486.629565][ T5234] usb 4-1: SerialNumber: syz [ 486.656401][ T5234] r8152-cfgselector 4-1: Unknown version 0x0000 [ 486.663421][ T148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.674080][ T5234] r8152-cfgselector 4-1: config 0 descriptor?? [ 486.724300][ T5285] usb 5-1: USB disconnect, device number 78 [ 486.761792][ T5285] iowarrior 5-1:0.186: I/O-Warror #0 now disconnected [ 486.763814][ T5241] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 486.769577][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 486.790090][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 486.802202][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 486.825648][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 486.833457][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 486.845209][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 486.886896][ T5234] r8152-cfgselector 4-1: Unknown version 0x0000 [ 486.946540][ T5234] r8152-cfgselector 4-1: bad CDC descriptors [ 486.978939][ T5234] r8152-cfgselector 4-1: USB disconnect, device number 52 [ 487.063942][ T5241] usb 1-1: Using ep0 maxpacket: 16 [ 487.086645][ T5241] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 487.111690][ T5241] usb 1-1: config 0 has no interface number 0 [ 487.125553][ T5241] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 487.155899][ T5241] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 487.166991][ T5241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.175764][ T5241] usb 1-1: Product: syz [ 487.182470][ T5241] usb 1-1: Manufacturer: syz [ 487.188962][ T5241] usb 1-1: SerialNumber: syz [ 487.197390][ T5241] usb 1-1: config 0 descriptor?? [ 487.271249][ T148] bridge_slave_1: left allmulticast mode [ 487.277306][ T148] bridge_slave_1: left promiscuous mode [ 487.283227][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.299033][ T148] bridge_slave_0: left allmulticast mode [ 487.304988][ T148] bridge_slave_0: left promiscuous mode [ 487.310848][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.506271][ T5285] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 487.679722][ T5285] usb 3-1: Using ep0 maxpacket: 16 [ 487.690474][ T5285] usb 3-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 487.700752][ T5285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.709693][ T5285] usb 3-1: Product: syz [ 487.714031][ T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 487.721830][ T5285] usb 3-1: Manufacturer: syz [ 487.726746][ T5285] usb 3-1: SerialNumber: syz [ 487.733224][ T5285] usb 3-1: config 0 descriptor?? [ 487.887276][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 487.888042][ T5241] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.214/input/input35 [ 487.894098][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.925605][ T9] usb 4-1: New USB device found, idVendor=13d3, idProduct=3340, bcdDevice=ab.0b [ 487.935035][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.949341][ T5234] usb 3-1: USB disconnect, device number 79 [ 487.958934][ T9] usb 4-1: config 0 descriptor?? [ 487.967525][ T9] r8712u: register rtl8712_netdev_ops to netdev_ops [ 487.975034][ T9] usb 4-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 488.088188][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.123169][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.123211][ T5241] usb 1-1: USB disconnect, device number 80 [ 488.153057][ T148] bond0 (unregistering): Released all slaves [ 488.226825][T13079] chnl_net:caif_netlink_parms(): no params data found [ 488.396713][ T9] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 488.403446][ T9] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 488.411580][ T9] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 488.616563][ T5285] usb 4-1: USB disconnect, device number 53 [ 488.770164][T13115] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1405'. [ 488.909603][T13079] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.917207][T13079] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.937615][T13079] bridge_slave_0: entered allmulticast mode [ 488.955677][ T5231] Bluetooth: hci3: command tx timeout [ 488.984926][T13079] bridge_slave_0: entered promiscuous mode [ 489.015143][T13079] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.022287][T13079] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.044165][T13079] bridge_slave_1: entered allmulticast mode [ 489.051239][T13079] bridge_slave_1: entered promiscuous mode [ 489.088494][T13115] netem: incorrect ge model size [ 489.105777][T13115] netem: change failed [ 489.130941][T13127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1407'. [ 489.182080][T13079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.237159][ T148] hsr_slave_0: left promiscuous mode [ 489.247961][ T148] hsr_slave_1: left promiscuous mode [ 489.282261][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.311659][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.344533][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.364083][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.430018][ T148] veth1_macvtap: left promiscuous mode [ 489.442283][ T148] veth0_macvtap: left promiscuous mode [ 489.450764][ T148] veth1_vlan: left promiscuous mode [ 489.465677][ T148] veth0_vlan: left promiscuous mode [ 489.945823][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 490.186969][T13152] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 490.360072][T13158] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1415'. [ 490.412409][ T148] team0 (unregistering): Port device team_slave_1 removed [ 490.492702][ T148] team0 (unregistering): Port device team_slave_0 removed [ 491.033928][ T5231] Bluetooth: hci3: command tx timeout [ 491.246188][T13079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.382601][T13159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1415'. [ 491.412249][T13159] bridge_slave_1: left allmulticast mode [ 491.423834][T13159] bridge_slave_1: left promiscuous mode [ 491.449857][T13159] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.474556][T13159] bridge_slave_0: left allmulticast mode [ 491.490450][T13159] bridge_slave_0: left promiscuous mode [ 491.506917][T13159] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.699734][T13079] team0: Port device team_slave_0 added [ 491.750918][T13079] team0: Port device team_slave_1 added [ 491.870361][T13079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.913672][T13079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.998748][T13079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.030653][T13079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.058503][T13079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.179424][T13079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.529258][T13079] hsr_slave_0: entered promiscuous mode [ 492.568733][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 492.590779][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 492.602555][T13079] hsr_slave_1: entered promiscuous mode [ 492.610599][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 492.630221][T13079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 492.647204][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 492.650200][T13079] Cannot create hsr debugfs directory [ 492.678027][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 492.694949][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 493.073227][ T148] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.114177][ T5231] Bluetooth: hci3: command tx timeout [ 493.232438][T13202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1424'. [ 493.342311][ T148] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.484321][ T8] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 493.541277][ T148] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.722989][ T148] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.738846][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 493.755484][T13222] netlink: 87 bytes leftover after parsing attributes in process `syz.0.1430'. [ 493.801002][ T8] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 493.810473][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.838680][ T8] usb 5-1: Product: syz [ 493.842908][ T8] usb 5-1: Manufacturer: syz [ 493.853781][ T8] usb 5-1: SerialNumber: syz [ 493.872244][ T8] usb 5-1: config 0 descriptor?? [ 493.897939][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 493.914696][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 493.925114][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 493.936436][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 493.950815][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 493.960873][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 493.973573][T13195] chnl_net:caif_netlink_parms(): no params data found [ 494.092392][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 494.102204][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 494.109797][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 494.117339][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 494.125288][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 494.132510][ T8] speedtch 5-1:0.0: speedtch_bind: data interface not found! [ 494.139993][ T8] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 494.169268][ T8] usb 5-1: USB disconnect, device number 79 [ 494.273037][T13241] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 494.343998][ T148] bridge_slave_1: left allmulticast mode [ 494.349759][ T148] bridge_slave_1: left promiscuous mode [ 494.399139][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.410009][ T148] bridge_slave_0: left allmulticast mode [ 494.424338][ T148] bridge_slave_0: left promiscuous mode [ 494.441430][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.538408][ T9] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 494.712105][ T9] usb 1-1: config 0 has an invalid interface number: 56 but max is 0 [ 494.744803][ T9] usb 1-1: config 0 has no interface number 0 [ 494.755188][ T9] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 494.764386][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.772424][ T9] usb 1-1: Product: syz [ 494.788446][ T9] usb 1-1: Manufacturer: syz [ 494.793104][ T9] usb 1-1: SerialNumber: syz [ 494.795279][ T54] Bluetooth: hci4: command tx timeout [ 494.815741][ T9] usb 1-1: config 0 descriptor?? [ 494.835312][ T9] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 494.858102][ T9] pctv452e: pctv452e_power_ctrl: 1 [ 494.858102][ T9] [ 494.865841][ T9] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 494.865841][ T9] [ 494.876762][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 494.912742][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 494.948580][ T9] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 495.031808][ T5287] usb 1-1: USB disconnect, device number 81 [ 495.196930][ T54] Bluetooth: hci3: command tx timeout [ 495.218520][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.230649][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.268316][ T148] bond0 (unregistering): Released all slaves [ 495.314800][T13195] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.322497][T13195] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.337723][T13195] bridge_slave_0: entered allmulticast mode [ 495.346739][T13195] bridge_slave_0: entered promiscuous mode [ 495.481271][T13195] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.492651][T13195] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.501976][T13195] bridge_slave_1: entered allmulticast mode [ 495.518518][T13195] bridge_slave_1: entered promiscuous mode [ 495.661645][T13195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.709395][T13195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.917868][T13195] team0: Port device team_slave_0 added [ 495.923754][ T5287] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 495.942030][T13079] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 495.968669][T13079] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 495.999968][ T54] Bluetooth: hci1: command tx timeout [ 496.044404][ T148] hsr_slave_0: left promiscuous mode [ 496.066963][ T148] hsr_slave_1: left promiscuous mode [ 496.083808][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.091301][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.106806][ T5287] usb 1-1: Using ep0 maxpacket: 16 [ 496.114529][ T5287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.114755][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.144059][ T5287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.149650][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.178284][ T5287] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 496.187187][ T148] veth1_macvtap: left promiscuous mode [ 496.193250][ T148] veth0_macvtap: left promiscuous mode [ 496.206441][ T5287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.208343][ T148] veth1_vlan: left promiscuous mode [ 496.226924][ T148] veth0_vlan: left promiscuous mode [ 496.238087][ T5287] usb 1-1: config 0 descriptor?? [ 496.874808][ T54] Bluetooth: hci4: command tx timeout [ 497.336089][ T148] team0 (unregistering): Port device team_slave_1 removed [ 497.414556][ T148] team0 (unregistering): Port device team_slave_0 removed [ 498.078967][ T54] Bluetooth: hci1: command tx timeout [ 498.227257][T13195] team0: Port device team_slave_1 added [ 498.233753][T13079] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 498.384567][ T5287] usbhid 1-1:0.0: can't add hid device: -71 [ 498.411641][ T5287] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 498.453253][T13195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.461225][T13195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.466388][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 498.487697][T13195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.511761][ T5287] usb 1-1: USB disconnect, device number 82 [ 498.526630][T13079] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 498.572586][T13195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.580896][T13195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.613956][T13195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.694769][T13195] hsr_slave_0: entered promiscuous mode [ 498.702310][T13195] hsr_slave_1: entered promiscuous mode [ 498.858201][T13231] chnl_net:caif_netlink_parms(): no params data found [ 498.955293][ T54] Bluetooth: hci4: command tx timeout [ 499.074903][T13231] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.082063][T13231] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.113865][T13231] bridge_slave_0: entered allmulticast mode [ 499.120981][T13231] bridge_slave_0: entered promiscuous mode [ 499.133053][T13231] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.140578][T13231] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.147953][T13231] bridge_slave_1: entered allmulticast mode [ 499.155322][T13231] bridge_slave_1: entered promiscuous mode [ 499.208387][T13231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.223800][ T5285] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 499.244355][T13231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.375002][ T5285] usb 1-1: Using ep0 maxpacket: 32 [ 499.382137][ T5285] usb 1-1: config 0 has an invalid interface number: 121 but max is 0 [ 499.401337][ T5285] usb 1-1: config 0 has no interface number 0 [ 499.424705][ T5285] usb 1-1: config 0 interface 121 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 499.448138][ T5285] usb 1-1: config 0 interface 121 altsetting 3 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 499.474952][ T5285] usb 1-1: config 0 interface 121 altsetting 3 endpoint 0x85 has invalid maxpacket 46480, setting to 1024 [ 499.490076][ T5285] usb 1-1: config 0 interface 121 altsetting 3 bulk endpoint 0x85 has invalid maxpacket 1024 [ 499.505568][ T5285] usb 1-1: config 0 interface 121 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 499.527832][ T5285] usb 1-1: config 0 interface 121 has no altsetting 0 [ 499.537481][ T5285] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0111, bcdDevice=78.03 [ 499.550663][ T5285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.557200][ T148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.562572][ T5285] usb 1-1: Product: syz [ 499.574272][ T5285] usb 1-1: Manufacturer: syz [ 499.579142][ T5285] usb 1-1: SerialNumber: syz [ 499.593459][ T5285] usb 1-1: config 0 descriptor?? [ 499.607026][T13317] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 499.643170][T13231] team0: Port device team_slave_0 added [ 499.809732][ T148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.831864][ T5285] kvaser_usb 1-1:0.121: error -ENODEV: Cannot get usb endpoint(s) [ 499.856135][T13231] team0: Port device team_slave_1 added [ 499.870901][ T5285] usb 1-1: USB disconnect, device number 83 [ 499.958742][ T148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.028997][T13231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.037610][T13231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.074573][T13231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.130418][ T148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.153931][ T54] Bluetooth: hci1: command tx timeout [ 500.160167][T13231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.171727][T13231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.197690][ C0] vkms_vblank_simulate: vblank timer overrun [ 500.209978][T13231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.256961][T13079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.355704][T13231] hsr_slave_0: entered promiscuous mode [ 500.362544][T13231] hsr_slave_1: entered promiscuous mode [ 500.370125][T13231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 500.374985][ T9] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 500.383350][T13231] Cannot create hsr debugfs directory [ 500.476819][T13079] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.512319][T13195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 500.566337][ T9] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 500.593495][T13352] fuse: Unknown parameter '' [ 500.595593][T13195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 500.598467][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.617960][T13195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 500.626907][ T9] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 500.642621][ T9] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 500.650756][ T9] usb 5-1: Manufacturer: syz [ 500.666371][T13218] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.668141][ T9] usb 5-1: config 0 descriptor?? [ 500.673561][T13218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.696402][T13218] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.703665][T13218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.742998][T13195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 500.758040][ T9] rc_core: IR keymap rc-hauppauge not found [ 500.766757][ T9] Registered IR keymap rc-empty [ 500.773563][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 500.806106][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input36 [ 501.034086][ T54] Bluetooth: hci4: command tx timeout [ 501.045102][T13345] Unknown options in mask 2474 [ 501.565692][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.585725][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.602484][ T148] bond0 (unregistering): Released all slaves [ 501.709220][ T5241] usb 5-1: USB disconnect, device number 80 [ 501.764080][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.770516][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.040724][T13397] netlink: 'syz.0.1447': attribute type 4 has an invalid length. [ 502.053443][T13396] netlink: 'syz.0.1447': attribute type 4 has an invalid length. [ 502.233831][ T54] Bluetooth: hci1: command tx timeout [ 502.614085][ T148] hsr_slave_0: left promiscuous mode [ 502.640728][ T148] hsr_slave_1: left promiscuous mode [ 502.647499][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.655408][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.663867][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.670705][T13422] tipc: Can't bind to reserved service type 0 [ 502.671324][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.696390][ T8] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 502.737499][ T148] veth1_macvtap: left promiscuous mode [ 502.744601][ T148] veth0_macvtap: left promiscuous mode [ 502.750287][ T148] veth1_vlan: left promiscuous mode [ 502.761580][ T148] veth0_vlan: left promiscuous mode [ 502.875596][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.898315][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.923844][ T8] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 502.933254][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.961705][ T8] usb 5-1: config 0 descriptor?? [ 503.409234][ T8] steelseries 0003:1038:12B6.001F: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.4-1/input0 [ 503.767883][ T148] team0 (unregistering): Port device team_slave_1 removed [ 503.841950][ T8] usb 5-1: USB disconnect, device number 81 [ 503.853230][ T148] team0 (unregistering): Port device team_slave_0 removed [ 504.745933][T13079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.028939][T13079] veth0_vlan: entered promiscuous mode [ 505.101826][T13195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.211249][T13079] veth1_vlan: entered promiscuous mode [ 505.260743][T13195] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.309392][T13218] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.316575][T13218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.399225][T13231] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 505.431209][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.438402][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.471184][T13231] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 505.518510][T13231] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 505.542523][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 505.559100][T13231] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 505.570572][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 505.579645][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 505.592592][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 505.606223][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 505.616206][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 505.676251][T13079] veth0_macvtap: entered promiscuous mode [ 505.770616][T13079] veth1_macvtap: entered promiscuous mode [ 505.922372][T13079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.940405][T13079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.958913][T13079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.072491][ T148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.083876][ T8] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 506.122923][T13079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.140341][T13079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.163884][T13079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.218278][ T148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.243987][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 506.253351][ T8] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 506.265084][ T8] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 506.278559][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 506.291885][T13195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.305778][T13079] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.315639][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 506.326934][T13079] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.335752][T13079] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.344683][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 506.347354][T13079] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.359573][ T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 506.376947][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.386275][ T8] usb 5-1: Product: syz [ 506.390482][ T8] usb 5-1: Manufacturer: syz [ 506.395723][ T8] usb 5-1: SerialNumber: syz [ 506.416466][ T8] usb 5-1: config 0 descriptor?? [ 506.427617][ T148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.550182][ T148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.648271][T13464] chnl_net:caif_netlink_parms(): no params data found [ 506.680474][T13466] netlink: 'syz.4.1456': attribute type 4 has an invalid length. [ 506.693280][ T8] appledisplay 5-1:0.0: Error while getting initial brightness: -110 [ 506.720748][ T8] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110 [ 506.735359][T13231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.740342][ T8] usb 5-1: USB disconnect, device number 82 [ 506.803550][T13195] veth0_vlan: entered promiscuous mode [ 506.847057][T13195] veth1_vlan: entered promiscuous mode [ 506.856420][T13231] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.892259][T13464] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.900495][T13464] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.908278][T13464] bridge_slave_0: entered allmulticast mode [ 506.915544][T13464] bridge_slave_0: entered promiscuous mode [ 506.923450][T13464] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.931358][T13464] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.938832][T13464] bridge_slave_1: entered allmulticast mode [ 506.947462][T13464] bridge_slave_1: entered promiscuous mode [ 506.994106][T13218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.012398][T13218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.027969][T13464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.040485][T13464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.069712][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.076881][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.099743][ T148] bridge_slave_1: left allmulticast mode [ 507.106347][ T148] bridge_slave_1: left promiscuous mode [ 507.112106][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.123008][ T148] bridge_slave_0: left allmulticast mode [ 507.129566][ T148] bridge_slave_0: left promiscuous mode [ 507.135604][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.678158][ T5231] Bluetooth: hci0: command tx timeout [ 507.704501][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.720726][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.731786][ T148] bond0 (unregistering): Released all slaves [ 507.768166][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.775421][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.860641][T13464] team0: Port device team_slave_0 added [ 507.869747][T13464] team0: Port device team_slave_1 added [ 507.885622][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.894355][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.978954][T13195] veth0_macvtap: entered promiscuous mode [ 508.013001][T13464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.031611][T13464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.057525][ C1] vkms_vblank_simulate: vblank timer overrun [ 508.077865][T13464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.092608][T13464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.099807][T13464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.126188][T13464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.147431][T13195] veth1_macvtap: entered promiscuous mode [ 508.261090][T13464] hsr_slave_0: entered promiscuous mode [ 508.274951][T13464] hsr_slave_1: entered promiscuous mode [ 508.283031][T13464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.295414][T13464] Cannot create hsr debugfs directory [ 508.324747][ T5285] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 508.357789][ T148] hsr_slave_0: left promiscuous mode [ 508.371560][ T148] hsr_slave_1: left promiscuous mode [ 508.379412][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.396046][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.415963][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.430987][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.464579][ T148] veth1_macvtap: left promiscuous mode [ 508.470365][ T148] veth0_macvtap: left promiscuous mode [ 508.478149][ T148] veth1_vlan: left promiscuous mode [ 508.487106][ T5285] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 508.489286][ T148] veth0_vlan: left promiscuous mode [ 508.495291][ T5285] usb 5-1: config 0 has no interface number 0 [ 508.527183][ T5285] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 508.540918][ T5285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.549139][ T5285] usb 5-1: Product: syz [ 508.553340][ T5285] usb 5-1: Manufacturer: syz [ 508.558131][ T5285] usb 5-1: SerialNumber: syz [ 508.577401][ T5285] usb 5-1: config 0 descriptor?? [ 508.789020][T13497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.801998][T13497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.967825][ T5285] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 508.990023][ T5285] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 509.010325][ T5285] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 509.019176][ T5285] usb 5-1: media controller created [ 509.050726][ T5285] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 509.373818][ T5287] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 509.460022][ T148] team0 (unregistering): Port device team_slave_1 removed [ 509.526130][ T148] team0 (unregistering): Port device team_slave_0 removed [ 509.533965][ T5287] usb 2-1: Using ep0 maxpacket: 32 [ 509.543172][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 509.561670][ T5287] usb 2-1: New USB device found, idVendor=07ca, idProduct=0337, bcdDevice=97.1e [ 509.571385][ T5287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.603849][ T5287] usb 2-1: Product: syz [ 509.608077][ T5287] usb 2-1: Manufacturer: syz [ 509.612716][ T5287] usb 2-1: SerialNumber: syz [ 509.640283][ T5287] usb 2-1: config 0 descriptor?? [ 509.763505][ T5231] Bluetooth: hci0: command tx timeout [ 509.864515][ T5287] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 509.885262][ T5287] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 509.908345][ T5287] usb 2-1: USB disconnect, device number 104 [ 510.389920][T13195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.404094][T13195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.416973][T13195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.546846][T13195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.571472][T13195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.621436][T13195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.646753][T13195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.663694][T13195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.672457][T13195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.690680][T13195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.836999][T13231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.287410][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.318682][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.333435][T13231] veth0_vlan: entered promiscuous mode [ 511.348542][T13231] veth1_vlan: entered promiscuous mode [ 511.398762][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.422941][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.517022][T13231] veth0_macvtap: entered promiscuous mode [ 511.538765][ T5284] usb 5-1: USB disconnect, device number 83 [ 511.540192][T13231] veth1_macvtap: entered promiscuous mode [ 511.573925][ T5310] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 511.632802][T13559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.651545][T13464] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 511.667277][T13559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.683272][T13464] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 511.726912][T13464] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 511.742383][T13464] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 511.761903][T13231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.782513][T13231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.792507][T13231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.803459][T13231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.803833][ T5310] usb 2-1: Using ep0 maxpacket: 8 [ 511.828246][T13231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.828311][ T5310] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 511.848057][ T5310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.849795][ T5231] Bluetooth: hci0: command tx timeout [ 511.856428][ T5310] usb 2-1: Product: syz [ 511.856450][ T5310] usb 2-1: Manufacturer: syz [ 511.856467][ T5310] usb 2-1: SerialNumber: syz [ 511.858981][ T5310] usb 2-1: config 0 descriptor?? [ 511.874956][ T5287] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 511.904885][T13231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.916324][T13231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.932806][T13231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.956611][T13231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.014046][ T5284] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 512.026152][T13231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.071119][T13231] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.088392][T13231] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.100230][ T5310] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 512.109993][T13231] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.137278][T13231] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.192946][ T5284] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 512.214868][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.242616][ T5284] usb 5-1: config 0 descriptor?? [ 512.460369][ T1838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.495902][ T1838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.521795][ T5284] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 512.537916][ T5284] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 512.576322][T13464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.605997][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.635499][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.644041][ T5284] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 512.672163][T13464] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.692335][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.699547][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.714795][ T5284] [drm] Initialized udl on minor 2 [ 512.769789][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.776979][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.870234][T13464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 512.943156][T13464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.973412][T13594] netlink: 'syz.3.1429': attribute type 15 has an invalid length. [ 512.990912][T13561] usb usb1: usbfs: process 13561 (syz.4.1466) did not claim interface 0 before use [ 513.001267][ T5287] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 513.018558][ T5284] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 513.050836][ T5284] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 513.063716][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 513.078532][T13464] veth0_vlan: entered promiscuous mode [ 513.096122][ T5284] usb 5-1: USB disconnect, device number 84 [ 513.109676][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 513.123534][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 513.148160][T13464] veth1_vlan: entered promiscuous mode [ 513.175605][ T5287] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 513.208763][T13464] veth0_macvtap: entered promiscuous mode [ 513.209937][ T5287] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 513.238175][T13464] veth1_macvtap: entered promiscuous mode [ 513.254067][ T5287] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 513.271465][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.295573][T13464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.305401][T13585] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 513.316235][T13464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.322041][ T5287] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 513.353678][T13464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.375090][T13464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.425908][T13464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.438543][T13464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.457552][T13464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.480929][T13464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.494864][T13464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.506218][T13464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.517580][T13464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.527919][T13464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.548214][T13464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.585103][T13464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.619407][T13464] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.631645][ T5287] usb 3-1: USB disconnect, device number 81 [ 513.635878][T13464] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.651237][T13464] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.661034][T13464] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.829159][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.850434][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.887072][ T1838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.892879][ T5284] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 513.896266][ T1838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.914244][ T5231] Bluetooth: hci0: command tx timeout [ 514.065758][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 514.102436][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 514.116421][ T5284] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 514.130907][ T5284] usb 4-1: New USB device found, idVendor=707f, idProduct=133b, bcdDevice= 0.cd [ 514.143114][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.164745][T13552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.181670][T13552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.198220][ T5284] usb 4-1: config 0 descriptor?? [ 514.213024][T13604] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 514.239988][ T5310] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 514.277493][ T5284] usbhid 4-1:0.0: can't add hid device: -22 [ 514.283550][ T5284] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 514.315999][ T5310] usb 2-1: USB disconnect, device number 105 [ 514.461272][T13619] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1475'. [ 514.496954][T13619] netlink: 'syz.4.1475': attribute type 11 has an invalid length. [ 514.713434][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.941652][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.047657][T13625] netlink: 'syz.4.1479': attribute type 15 has an invalid length. [ 515.160237][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.382222][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 515.397935][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.410558][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 515.425867][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 515.444736][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 515.455709][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 515.463214][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 515.914628][ T5236] usb 2-1: new low-speed USB device number 106 using dummy_hcd [ 515.951009][ T12] bridge_slave_1: left allmulticast mode [ 515.957294][ T12] bridge_slave_1: left promiscuous mode [ 515.963201][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.981247][ T12] bridge_slave_0: left allmulticast mode [ 515.987337][ T12] bridge_slave_0: left promiscuous mode [ 515.993276][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.063847][ T5236] usb 2-1: device descriptor read/64, error -71 [ 516.133742][ T46] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 516.328340][ T5236] usb 2-1: new low-speed USB device number 107 using dummy_hcd [ 516.337724][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 516.346786][ T46] usb 5-1: config 0 has no interfaces? [ 516.352407][ T46] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 516.381575][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.405346][ T46] usb 5-1: config 0 descriptor?? [ 516.475185][ T5236] usb 2-1: device descriptor read/64, error -71 [ 516.584172][ T5236] usb usb2-port1: attempt power cycle [ 516.662980][ T8] usb 4-1: USB disconnect, device number 54 [ 516.944071][ T5236] usb 2-1: new low-speed USB device number 108 using dummy_hcd [ 516.993172][ T5236] usb 2-1: device descriptor read/8, error -71 [ 517.177087][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.209973][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.233879][ T12] bond0 (unregistering): Released all slaves [ 517.254929][ T5236] usb 2-1: new low-speed USB device number 109 using dummy_hcd [ 517.314343][ T5236] usb 2-1: device descriptor read/8, error -71 [ 517.405727][T13640] chnl_net:caif_netlink_parms(): no params data found [ 517.447072][ T5236] usb usb2-port1: unable to enumerate USB device [ 517.514328][ T54] Bluetooth: hci4: command tx timeout [ 517.568471][ T29] audit: type=1326 audit(1727985957.158:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.3.1492" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8412f7dff9 code=0x0 [ 518.221521][ T12] hsr_slave_0: left promiscuous mode [ 518.232132][ T12] hsr_slave_1: left promiscuous mode [ 518.246235][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.258773][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.271938][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.280541][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.325088][ T12] veth1_macvtap: left promiscuous mode [ 518.336225][ T12] veth0_macvtap: left promiscuous mode [ 518.358540][ T12] veth1_vlan: left promiscuous mode [ 518.369250][ T12] veth0_vlan: left promiscuous mode [ 518.395674][ T5284] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 518.577807][ T5284] usb 4-1: unable to get BOS descriptor or descriptor too short [ 518.608961][ T5284] usb 4-1: not running at top speed; connect to a high speed hub [ 518.644354][ T5284] usb 4-1: config 3 has an invalid interface number: 1 but max is 0 [ 518.663709][ T5284] usb 4-1: config 3 has no interface number 0 [ 518.669922][ T5284] usb 4-1: config 3 interface 1 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 518.767136][ T5284] usb 4-1: config 3 interface 1 has no altsetting 0 [ 518.827390][ T5284] usb 4-1: New USB device found, idVendor=d483, idProduct=d7be, bcdDevice=22.3d [ 518.883716][ T5284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.891766][ T5284] usb 4-1: Product: syz [ 518.891795][ T5284] usb 4-1: Manufacturer: syz [ 518.891812][ T5284] usb 4-1: SerialNumber: syz [ 519.009011][ T5236] usb 5-1: USB disconnect, device number 85 [ 519.132021][T13680] netlink: zone id is out of range [ 519.152138][T13680] netlink: zone id is out of range [ 519.157691][T13680] netlink: zone id is out of range [ 519.208141][T13680] netlink: zone id is out of range [ 519.235676][T13680] netlink: zone id is out of range [ 519.252646][T13680] netlink: zone id is out of range [ 519.284408][T13680] netlink: zone id is out of range [ 519.304242][T13680] netlink: zone id is out of range [ 519.335012][T13680] netlink: zone id is out of range [ 519.389292][T13680] netlink: zone id is out of range [ 519.594492][ T54] Bluetooth: hci4: command tx timeout [ 520.093797][ T5310] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 520.251129][ T5310] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 520.288675][ T5310] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 520.356060][ T5310] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 520.370301][ T5310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.388509][T13702] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 520.399401][ T5310] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 520.483471][ T12] team0 (unregistering): Port device team_slave_1 removed [ 520.644291][ T5284] usb 4-1: bad CDC descriptors [ 520.647864][ T12] team0 (unregistering): Port device team_slave_0 removed [ 520.651898][ T5284] usb 4-1: USB disconnect, device number 55 [ 520.692907][ T5310] usb 5-1: USB disconnect, device number 86 [ 521.639495][T13640] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.672362][T13640] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.680181][ T54] Bluetooth: hci4: command tx timeout [ 521.707884][T13640] bridge_slave_0: entered allmulticast mode [ 521.713952][ T5241] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 521.746883][T13640] bridge_slave_0: entered promiscuous mode [ 521.852192][T13640] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.893825][T13640] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.911365][T13640] bridge_slave_1: entered allmulticast mode [ 521.943021][ T5241] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 521.955960][ T5241] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 521.956251][T13640] bridge_slave_1: entered promiscuous mode [ 521.977911][ T5241] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 521.999543][ T5241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.032614][T13729] netlink: 'syz.1.1505': attribute type 15 has an invalid length. [ 522.079565][T13715] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 522.110085][T13717] ebt_among: dst integrity fail: 101 [ 522.121843][ T5241] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 522.181178][T13640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.227214][T13640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.293754][ T5236] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 522.420112][T13640] team0: Port device team_slave_0 added [ 522.464998][ T5236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.498584][T13640] team0: Port device team_slave_1 added [ 522.540844][ T5236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.593803][ T5236] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 522.603340][ T5236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.622770][ T5236] usb 4-1: config 0 descriptor?? [ 522.701426][T13640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.739208][T13640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.824449][T13640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.927448][T13640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.940968][T13640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.978610][T13640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.215512][T13640] hsr_slave_0: entered promiscuous mode [ 523.232860][T13640] hsr_slave_1: entered promiscuous mode [ 523.241810][ T5236] hid-led 0003:27B8:01ED.0020: probe with driver hid-led failed with error -71 [ 523.281183][ T5236] usb 4-1: USB disconnect, device number 56 [ 523.634451][ T5234] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 523.741140][ T5236] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 523.754728][ T54] Bluetooth: hci4: command tx timeout [ 523.840828][ T5234] usb 1-1: Using ep0 maxpacket: 16 [ 523.865591][ T5234] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.893284][ T5234] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 523.929631][ T5234] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice= 6.8a [ 523.943710][ T5236] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 523.963713][ T5234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.975105][ T5236] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.998535][ T5234] usb 1-1: Product: syz [ 524.006212][ T5236] usb 2-1: config 0 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 524.020730][ T5234] usb 1-1: Manufacturer: syz [ 524.036609][ T5234] usb 1-1: SerialNumber: syz [ 524.058694][ T5234] usb 1-1: config 0 descriptor?? [ 524.067572][ T5236] usb 2-1: config 0 interface 0 has no altsetting 0 [ 524.093735][ T5236] usb 2-1: New USB device found, idVendor=04da, idProduct=1044, bcdDevice= 0.00 [ 524.118330][ T5236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.148487][ T5236] usb 2-1: config 0 descriptor?? [ 524.290922][ T46] usb 1-1: USB disconnect, device number 84 [ 524.410631][ T8] usb 5-1: USB disconnect, device number 87 [ 524.587237][ T5236] hid-generic 0003:04DA:1044.0021: hidraw0: USB HID v0.00 Device [HID 04da:1044] on usb-dummy_hcd.1-1/input0 [ 524.623134][T13640] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 524.652941][T13640] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 524.672629][T13640] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 524.693228][T13640] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 524.851583][T13640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.884893][T13640] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.916904][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.924103][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.950610][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.957841][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.053226][T13640] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 525.068771][T13640] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 525.120024][T13640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.172279][ C1] net_ratelimit: 6 callbacks suppressed [ 525.172301][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 525.200903][T13640] veth0_vlan: entered promiscuous mode [ 525.239156][T13640] veth1_vlan: entered promiscuous mode [ 525.365440][T13640] veth0_macvtap: entered promiscuous mode [ 525.392035][T13640] veth1_macvtap: entered promiscuous mode [ 525.405415][ T8] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 525.446292][T13640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.487107][T13640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.501395][T13640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.518343][T13640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.529958][T13640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.551138][T13640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.566698][T13640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.571076][ T8] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 525.583054][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.587057][T13640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.604160][ T5241] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 525.612865][T13640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.617336][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 525.636596][T13640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.648634][T13640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.650294][ T8] usb 5-1: config 1 has no interface number 0 [ 525.672381][ T8] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 525.679237][T13640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.699240][ T8] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 525.704211][T13640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.723497][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 525.725099][T13640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.749154][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.752149][T13640] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.757417][ T8] usb 5-1: Product: syz [ 525.757438][ T8] usb 5-1: Manufacturer: syz [ 525.757455][ T8] usb 5-1: SerialNumber: syz [ 525.787367][T13640] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.796235][T13640] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.805059][T13640] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.852370][ T5241] usb 1-1: Using ep0 maxpacket: 16 [ 525.917094][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.925197][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.934958][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.942829][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.965795][ T5241] usb 1-1: config 0 has no interfaces? [ 525.980250][ T5241] usb 1-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 525.981533][T13806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.990555][ T5241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.016272][T13806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.072798][ T5241] usb 1-1: config 0 descriptor?? [ 526.337724][ T8] usb 5-1: USB disconnect, device number 88 [ 526.381226][T13817] netlink: 'syz.0.1519': attribute type 4 has an invalid length. [ 526.414084][T13817] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1519'. [ 526.453849][T13817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1519'. [ 526.496916][T13817] loop2: detected capacity change from 0 to 7 [ 526.514951][ T5310] usb 2-1: USB disconnect, device number 110 [ 526.525855][T13817] Dev loop2: unable to read RDB block 7 [ 526.551284][T13817] loop2: AHDI p1 p2 p3 [ 526.573271][T13817] loop2: partition table partially beyond EOD, truncated [ 526.603864][T13817] loop2: p1 size 513 extends beyond EOD, truncated [ 526.669563][T10878] udevd[10878]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 526.686979][ T5241] usb 1-1: string descriptor 0 read error: -71 [ 526.703854][ T46] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 526.716987][ T5241] usb 1-1: USB disconnect, device number 85 [ 526.867193][ C0] [ 526.869574][ C0] ======================================================== [ 526.876789][ C0] WARNING: possible irq lock inversion dependency detected [ 526.880531][T13858] loop0: detected capacity change from 0 to 7 [ 526.884072][ C0] 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 Not tainted [ 526.884090][ C0] -------------------------------------------------------- [ 526.884098][ C0] ksoftirqd/0/16 just changed the state of lock: [ 526.884108][ C0] ffff88805a44ca48 (&pch->upl){++.-}-{2:2}, at: ppp_input_error+0x60/0x1b0 [ 526.891020][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 526.897329][ C0] but this lock took another, SOFTIRQ-unsafe lock in the past: [ 526.897349][ C0] (&pch->downl){+.+.}-{2:2} [ 526.897369][ C0] [ 526.897369][ C0] [ 526.897369][ C0] and interrupts could create inverse lock ordering between them. [ 526.897369][ C0] [ 526.897378][ C0] [ 526.897378][ C0] other info that might help us debug this: [ 526.897385][ C0] Chain exists of: [ 526.897385][ C0] &pch->upl --> &ppp->wlock --> &pch->downl [ 526.897385][ C0] [ 526.897413][ C0] Possible interrupt unsafe locking scenario: [ 526.897413][ C0] [ 526.897421][ C0] CPU0 CPU1 [ 526.897429][ C0] ---- ---- [ 526.897436][ C0] lock(&pch->downl); [ 526.897452][ C0] local_irq_disable(); [ 526.897460][ C0] lock(&pch->upl); [ 526.897477][ C0] lock(&ppp->wlock); [ 526.897494][ C0] [ 526.897500][ C0] lock(&pch->upl); [ 526.897515][ C0] [ 526.897515][ C0] *** DEADLOCK *** [ 526.897515][ C0] [ 526.897522][ C0] no locks held by ksoftirqd/0/16. [ 526.897533][ C0] [ 526.897533][ C0] the shortest dependencies between 2nd lock and 1st lock: [ 526.897558][ C0] -> (&pch->downl){+.+.}-{2:2} { [ 526.897590][ C0] HARDIRQ-ON-W at: [ 526.897604][ C0] lock_acquire+0x1ed/0x550 [ 526.897637][ C0] _raw_spin_lock+0x2e/0x40 [ 526.916728][ T46] usb 4-1: config 132 has an invalid interface number: 4 but max is 0 [ 526.919733][ C0] ppp_input+0x18b/0xa10 [ 526.963702][T13858] Dev loop0: unable to read RDB block 7 [ 526.971174][ C0] pppoe_rcv_core+0x117/0x310 [ 526.971214][ C0] __release_sock+0x243/0x350 [ 527.011945][ T46] usb 4-1: config 132 has no interface number 0 [ 527.014136][ C0] release_sock+0x61/0x1f0 [ 527.014171][ C0] pppoe_sendmsg+0xd5/0x750 [ 527.014194][ C0] __sock_sendmsg+0x221/0x270 [ 527.014214][ C0] ____sys_sendmsg+0x52a/0x7e0 [ 527.014231][ C0] __sys_sendmmsg+0x3ab/0x730 [ 527.014249][ C0] __x64_sys_sendmmsg+0xa0/0xb0 [ 527.014269][ C0] do_syscall_64+0xf3/0x230 [ 527.014289][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.014321][ C0] SOFTIRQ-ON-W at: [ 527.014337][ C0] lock_acquire+0x1ed/0x550 [ 527.014366][ C0] _raw_spin_lock+0x2e/0x40 [ 527.014393][ C0] ppp_input+0x18b/0xa10 [ 527.014417][ C0] pppoe_rcv_core+0x117/0x310 [ 527.014439][ C0] __release_sock+0x243/0x350 [ 527.014462][ C0] release_sock+0x61/0x1f0 [ 527.014489][ C0] pppoe_sendmsg+0xd5/0x750 [ 527.014512][ C0] __sock_sendmsg+0x221/0x270 [ 527.014532][ C0] ____sys_sendmsg+0x52a/0x7e0 [ 527.014552][ C0] __sys_sendmmsg+0x3ab/0x730 [ 527.028301][ T46] usb 4-1: config 132 interface 4 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1023 [ 527.030366][ C0] __x64_sys_sendmmsg+0xa0/0xb0 [ 527.064085][ T46] usb 4-1: config 132 interface 4 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 431 [ 527.067599][ C0] do_syscall_64+0xf3/0x230 [ 527.113855][T13858] loop0: unable to read partition table [ 527.114224][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.121017][T13858] loop0: partition table beyond EOD, [ 527.127720][ C0] INITIAL USE at: [ 527.127742][ C0] lock_acquire+0x1ed/0x550 [ 527.127770][ C0] _raw_spin_lock+0x2e/0x40 [ 527.127793][ C0] ppp_input+0x18b/0xa10 [ 527.127814][ C0] pppoe_rcv_core+0x117/0x310 [ 527.127836][ C0] __release_sock+0x243/0x350 [ 527.127856][ C0] release_sock+0x61/0x1f0 [ 527.127880][ C0] pppoe_sendmsg+0xd5/0x750 [ 527.127904][ C0] __sock_sendmsg+0x221/0x270 [ 527.127928][ C0] ____sys_sendmsg+0x52a/0x7e0 [ 527.127946][ C0] __sys_sendmmsg+0x3ab/0x730 [ 527.127966][ C0] __x64_sys_sendmmsg+0xa0/0xb0 [ 527.127986][ C0] do_syscall_64+0xf3/0x230 [ 527.128004][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.163086][ T46] usb 4-1: config 132 interface 4 altsetting 0 endpoint 0xF has an invalid bInterval 241, changing to 11 [ 527.163530][ C0] } [ 527.184695][ T46] usb 4-1: New USB device found, idVendor=34ef, idProduct=202b, bcdDevice=36.09 [ 527.187482][ C0] ... key at: [] ppp_register_net_channel.__key.1+0x0/0x20 [ 527.230950][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.235246][ C0] ... acquired at: [ 527.235263][ C0] lock_acquire+0x1ed/0x550 [ 527.235295][ C0] _raw_spin_lock_bh+0x35/0x50 [ 527.235316][ C0] ppp_connect_channel+0x194/0x650 [ 527.235339][ C0] ppp_ioctl+0xdd4/0x1cd0 [ 527.235360][ C0] __se_sys_ioctl+0xf9/0x170 [ 527.235385][ C0] do_syscall_64+0xf3/0x230 [ 527.282761][T13858] truncated [ 527.282777][T13858] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 527.282777][T13858] ) failed (rc=-5) [ 527.303632][ T46] usb 4-1: Product: syz [ 527.305532][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.332406][ T46] usb 4-1: Manufacturer: syz [ 527.338455][ C0] [ 527.338464][ C0] -> (&ppp->rlock){+...}-{2:2} { [ 527.338498][ C0] HARDIRQ-ON-W at: [ 527.338510][ C0] lock_acquire+0x1ed/0x550 [ 527.338539][ C0] _raw_spin_lock_bh+0x35/0x50 [ 527.338565][ C0] ppp_get_stats64+0x33/0x290 [ 527.338590][ C0] dev_get_stats+0xad/0xa00 [ 527.338610][ C0] rtnl_fill_stats+0x47/0x880 [ 527.392241][ T46] usb 4-1: SerialNumber: syz [ 527.394424][ C0] rtnl_fill_ifinfo+0x18da/0x2270 [ 527.394451][ C0] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 527.394470][ C0] rtmsg_ifinfo+0x91/0x1b0 [ 527.394487][ C0] register_netdevice+0x1774/0x1b00 [ 527.394504][ C0] ppp_dev_configure+0x883/0xb10 [ 527.394533][ C0] ppp_ioctl+0x797/0x1cd0 [ 527.496935][T13843] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 527.503197][ C0] __se_sys_ioctl+0xf9/0x170 [ 527.559306][T13843] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 527.562490][ C0] do_syscall_64+0xf3/0x230 [ 527.603412][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.611435][ C0] INITIAL USE at: [ 527.615524][ C0] lock_acquire+0x1ed/0x550 [ 527.621977][ C0] _raw_spin_lock_bh+0x35/0x50 [ 527.628684][ C0] ppp_get_stats64+0x33/0x290 [ 527.635307][ C0] dev_get_stats+0xad/0xa00 [ 527.641783][ C0] rtnl_fill_stats+0x47/0x880 [ 527.648438][ C0] rtnl_fill_ifinfo+0x18da/0x2270 [ 527.655398][ C0] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 527.662704][ C0] rtmsg_ifinfo+0x91/0x1b0 [ 527.669047][ C0] register_netdevice+0x1774/0x1b00 [ 527.676181][ C0] ppp_dev_configure+0x883/0xb10 [ 527.683058][ C0] ppp_ioctl+0x797/0x1cd0 [ 527.689322][ C0] __se_sys_ioctl+0xf9/0x170 [ 527.695859][ C0] do_syscall_64+0xf3/0x230 [ 527.702288][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.710129][ C0] } [ 527.712820][ C0] ... key at: [] ppp_dev_configure.__key+0x0/0x20 [ 527.721548][ C0] ... acquired at: [ 527.726436][ C0] lock_acquire+0x1ed/0x550 [ 527.731151][ C0] _raw_spin_lock_bh+0x35/0x50 [ 527.736124][ C0] ppp_dev_uninit+0x6c/0x1a0 [ 527.740919][ C0] unregister_netdevice_many_notify+0x1735/0x1da0 [ 527.747535][ C0] unregister_netdevice_queue+0x303/0x370 [ 527.753450][ C0] ppp_release+0xed/0x1f0 [ 527.757988][ C0] __fput+0x23f/0x880 [ 527.762222][ C0] task_work_run+0x24f/0x310 [ 527.767005][ C0] syscall_exit_to_user_mode+0x168/0x370 [ 527.772844][ C0] do_syscall_64+0x100/0x230 [ 527.777627][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.783814][ C0] [ 527.786153][ C0] -> (&ppp->wlock){+...}-{2:2} { [ 527.791222][ C0] HARDIRQ-ON-W at: [ 527.795305][ C0] lock_acquire+0x1ed/0x550 [ 527.801667][ C0] _raw_spin_lock_bh+0x35/0x50 [ 527.808279][ C0] ppp_get_stats64+0xc3/0x290 [ 527.814817][ C0] dev_get_stats+0xad/0xa00 [ 527.821217][ C0] rtnl_fill_stats+0x47/0x880 [ 527.827755][ C0] rtnl_fill_ifinfo+0x18da/0x2270 [ 527.834645][ C0] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 527.841870][ C0] rtmsg_ifinfo+0x91/0x1b0 [ 527.848138][ C0] register_netdevice+0x1774/0x1b00 [ 527.855191][ C0] ppp_dev_configure+0x883/0xb10 [ 527.862027][ C0] ppp_ioctl+0x797/0x1cd0 [ 527.868307][ C0] __se_sys_ioctl+0xf9/0x170 [ 527.874857][ C0] do_syscall_64+0xf3/0x230 [ 527.881251][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.889008][ C0] INITIAL USE at: [ 527.893014][ C0] lock_acquire+0x1ed/0x550 [ 527.899386][ C0] _raw_spin_lock_bh+0x35/0x50 [ 527.905937][ C0] ppp_get_stats64+0xc3/0x290 [ 527.912396][ C0] dev_get_stats+0xad/0xa00 [ 527.918748][ C0] rtnl_fill_stats+0x47/0x880 [ 527.918997][ T46] usb 4-1: USB disconnect, device number 57 [ 527.925210][ C0] rtnl_fill_ifinfo+0x18da/0x2270 [ 527.925246][ C0] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 527.925262][ C0] rtmsg_ifinfo+0x91/0x1b0 [ 527.925278][ C0] register_netdevice+0x1774/0x1b00 [ 527.925294][ C0] ppp_dev_configure+0x883/0xb10 [ 527.925318][ C0] ppp_ioctl+0x797/0x1cd0 [ 527.925343][ C0] __se_sys_ioctl+0xf9/0x170 [ 527.925367][ C0] do_syscall_64+0xf3/0x230 [ 527.983681][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.991365][ C0] } [ 527.993972][ C0] ... key at: [] ppp_dev_configure.__key.67+0x0/0x20 [ 528.002905][ C0] ... acquired at: [ 528.006901][ C0] lock_acquire+0x1ed/0x550 [ 528.011664][ C0] _raw_spin_lock_bh+0x35/0x50 [ 528.016649][ C0] ppp_connect_channel+0x174/0x650 [ 528.021970][ C0] ppp_ioctl+0xdd4/0x1cd0 [ 528.026504][ C0] __se_sys_ioctl+0xf9/0x170 [ 528.031297][ C0] do_syscall_64+0xf3/0x230 [ 528.036018][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.042116][ C0] [ 528.044537][ C0] -> (&pch->upl){++.-}-{2:2} { [ 528.049379][ C0] HARDIRQ-ON-W at: [ 528.053376][ C0] lock_acquire+0x1ed/0x550 [ 528.059561][ C0] _raw_write_lock_bh+0x35/0x50 [ 528.066095][ C0] ppp_bridge_channels+0x32/0x4c0 [ 528.072839][ C0] ppp_ioctl+0xe8f/0x1cd0 [ 528.078852][ C0] __se_sys_ioctl+0xf9/0x170 [ 528.085209][ C0] do_syscall_64+0xf3/0x230 [ 528.091386][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.098970][ C0] HARDIRQ-ON-R at: [ 528.102964][ C0] lock_acquire+0x1ed/0x550 [ 528.109146][ C0] _raw_read_lock_bh+0x3d/0x50 [ 528.115586][ C0] ppp_input+0x3dc/0xa10 [ 528.121510][ C0] pppoe_rcv_core+0x117/0x310 [ 528.127874][ C0] __release_sock+0x243/0x350 [ 528.134234][ C0] release_sock+0x61/0x1f0 [ 528.140361][ C0] pppoe_sendmsg+0xd5/0x750 [ 528.146542][ C0] __sock_sendmsg+0x221/0x270 [ 528.152895][ C0] ____sys_sendmsg+0x52a/0x7e0 [ 528.159338][ C0] __sys_sendmmsg+0x3ab/0x730 [ 528.165694][ C0] __x64_sys_sendmmsg+0xa0/0xb0 [ 528.172248][ C0] do_syscall_64+0xf3/0x230 [ 528.178426][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.186014][ C0] IN-SOFTIRQ-R at: [ 528.190014][ C0] lock_acquire+0x1ed/0x550 [ 528.196203][ C0] _raw_read_lock_bh+0x3d/0x50 [ 528.202655][ C0] ppp_input_error+0x60/0x1b0 [ 528.209012][ C0] ppp_sync_process+0x82/0x160 [ 528.215574][ C0] tasklet_action_common+0x321/0x4d0 [ 528.222551][ C0] handle_softirqs+0x2c5/0x980 [ 528.229002][ C0] run_ksoftirqd+0xca/0x130 [ 528.235545][ C0] smpboot_thread_fn+0x544/0xa30 [ 528.242346][ C0] kthread+0x2f0/0x390 [ 528.248096][ C0] ret_from_fork+0x4b/0x80 [ 528.254193][ C0] ret_from_fork_asm+0x1a/0x30 [ 528.260725][ C0] INITIAL USE at: [ 528.264636][ C0] lock_acquire+0x1ed/0x550 [ 528.270840][ C0] _raw_write_lock_bh+0x35/0x50 [ 528.277289][ C0] ppp_bridge_channels+0x32/0x4c0 [ 528.283916][ C0] ppp_ioctl+0xe8f/0x1cd0 [ 528.289858][ C0] __se_sys_ioctl+0xf9/0x170 [ 528.296054][ C0] do_syscall_64+0xf3/0x230 [ 528.302158][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.309665][ C0] INITIAL READ USE at: [ 528.314032][ C0] lock_acquire+0x1ed/0x550 [ 528.320657][ C0] _raw_read_lock_bh+0x3d/0x50 [ 528.327494][ C0] ppp_input+0x3dc/0xa10 [ 528.333779][ C0] pppoe_rcv_core+0x117/0x310 [ 528.340523][ C0] __release_sock+0x243/0x350 [ 528.347226][ C0] release_sock+0x61/0x1f0 [ 528.353682][ C0] pppoe_sendmsg+0xd5/0x750 [ 528.360227][ C0] __sock_sendmsg+0x221/0x270 [ 528.366945][ C0] ____sys_sendmsg+0x52a/0x7e0 [ 528.373744][ C0] __sys_sendmmsg+0x3ab/0x730 [ 528.380464][ C0] __x64_sys_sendmmsg+0xa0/0xb0 [ 528.387352][ C0] do_syscall_64+0xf3/0x230 [ 528.393888][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.402826][ C0] } [ 528.405347][ C0] ... key at: [] ppp_register_net_channel.__key.3+0x0/0x20 [ 528.414672][ C0] ... acquired at: [ 528.418499][ C0] mark_lock+0x223/0x360 [ 528.422942][ C0] __lock_acquire+0xbf9/0x2050 [ 528.427918][ C0] lock_acquire+0x1ed/0x550 [ 528.432643][ C0] _raw_read_lock_bh+0x3d/0x50 [ 528.437626][ C0] ppp_input_error+0x60/0x1b0 [ 528.442513][ C0] ppp_sync_process+0x82/0x160 [ 528.447482][ C0] tasklet_action_common+0x321/0x4d0 [ 528.452980][ C0] handle_softirqs+0x2c5/0x980 [ 528.457968][ C0] run_ksoftirqd+0xca/0x130 [ 528.462741][ C0] smpboot_thread_fn+0x544/0xa30 [ 528.467908][ C0] kthread+0x2f0/0x390 [ 528.472224][ C0] ret_from_fork+0x4b/0x80 [ 528.476863][ C0] ret_from_fork_asm+0x1a/0x30 [ 528.481935][ C0] [ 528.484282][ C0] [ 528.484282][ C0] stack backtrace: [ 528.490282][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 528.500935][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 528.511142][ C0] Call Trace: [ 528.514447][ C0] [ 528.517393][ C0] dump_stack_lvl+0x241/0x360 [ 528.522141][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 528.527371][ C0] ? __pfx__printk+0x10/0x10 [ 528.532007][ C0] ? print_shortest_lock_dependencies+0xf2/0x160 [ 528.538376][ C0] print_irq_inversion_bug+0x33d/0x390 [ 528.543871][ C0] mark_lock_irq+0x80c/0xc20 [ 528.548497][ C0] ? __pfx_mark_lock_irq+0x10/0x10 [ 528.553648][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 528.559061][ C0] ? lockdep_unlock+0x16a/0x300 [ 528.563948][ C0] ? lockdep_lock+0x123/0x2b0 [ 528.568753][ C0] ? save_trace+0x5a/0xb50 [ 528.573206][ C0] ? mark_lock+0x9a/0x360 [ 528.577568][ C0] mark_lock+0x223/0x360 [ 528.581872][ C0] __lock_acquire+0xbf9/0x2050 [ 528.589063][ C0] lock_acquire+0x1ed/0x550 [ 528.593612][ C0] ? ppp_input_error+0x60/0x1b0 [ 528.598495][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 528.603569][ C0] ? ppp_input_error+0x60/0x1b0 [ 528.608462][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 528.614310][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 528.620248][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 528.626624][ C0] ? ppp_input_error+0x60/0x1b0 [ 528.631614][ C0] _raw_read_lock_bh+0x3d/0x50 [ 528.636422][ C0] ? ppp_input_error+0x60/0x1b0 [ 528.641312][ C0] ppp_input_error+0x60/0x1b0 [ 528.646027][ C0] ppp_sync_process+0x82/0x160 [ 528.650828][ C0] tasklet_action_common+0x321/0x4d0 [ 528.656165][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 528.662015][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 528.668388][ C0] ? __schedule+0x189d/0x4b30 [ 528.673109][ C0] ? workqueue_softirq_action+0xce/0x140 [ 528.678878][ C0] handle_softirqs+0x2c5/0x980 [ 528.683668][ C0] ? run_ksoftirqd+0xca/0x130 [ 528.688377][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 528.693690][ C0] run_ksoftirqd+0xca/0x130 [ 528.698233][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 528.703379][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 528.709135][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 528.714288][ C0] smpboot_thread_fn+0x544/0xa30 [ 528.719259][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 528.724327][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 528.730172][ C0] kthread+0x2f0/0x390 [ 528.734279][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 528.739771][ C0] ? __pfx_kthread+0x10/0x10 [ 528.744430][ C0] ret_from_fork+0x4b/0x80 [ 528.748878][ C0] ? __pfx_kthread+0x10/0x10 [ 528.753504][ C0] ret_from_fork_asm+0x1a/0x30 [ 528.758312][ C0] [ 529.006744][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.049424][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.122922][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.168579][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.232830][ T35] bridge_slave_1: left allmulticast mode [ 529.238656][ T35] bridge_slave_1: left promiscuous mode [ 529.245389][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.253460][ T35] bridge_slave_0: left allmulticast mode [ 529.259608][ T35] bridge_slave_0: left promiscuous mode [ 529.266685][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.377538][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.389100][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.406514][ T35] bond0 (unregistering): Released all slaves [ 529.611830][ T35] hsr_slave_0: left promiscuous mode [ 529.618231][ T35] hsr_slave_1: left promiscuous mode [ 529.628132][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.637204][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.646849][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.658290][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.667964][ T35] veth1_macvtap: left promiscuous mode [ 529.673469][ T35] veth0_macvtap: left promiscuous mode [ 529.679127][ T35] veth1_vlan: left promiscuous mode [ 529.685546][ T35] veth0_vlan: left promiscuous mode [ 529.829031][ T35] team0 (unregistering): Port device team_slave_1 removed [ 529.842159][ T35] team0 (unregistering): Port device team_slave_0 removed