last executing test programs: 4.958636346s ago: executing program 2 (id=689): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="40000400000040d11c5f"], 0x0, 0x0, 0x0, 0x0}) 3.813162744s ago: executing program 1 (id=698): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 3.715311875s ago: executing program 1 (id=700): set_mempolicy(0x2, 0x0, 0xf5) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) pread64(0xffffffffffffffff, 0x0, 0x0, 0xf27b) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x400480, 0x3, 0x14}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xeb489d8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}}], {0x14}}, 0xac}}, 0x0) socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') read$alg(r3, &(0x7f0000000e80)=""/4096, 0x1000) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2900}}, 0x1c}}, 0x8c0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0x9, 0x800000000000000, 0x4000}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7}}}}}]}}]}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x6, 0x0}) syz_usb_control_io(r4, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x20, 0x6, 0x2, {0x2, 0xd}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.646975666s ago: executing program 3 (id=701): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d61637365630000140002800500090012000000050008"], 0x4c}}, 0x0) 3.547988027s ago: executing program 0 (id=702): fanotify_init(0xf00, 0x2) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x800) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOGETCMAP(r4, 0x4604, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000ffdbdf256800000008000300", @ANYRES32=r7, @ANYBLOB="1800c7000c07bf070506070485010f0271a38a5c80499a29"], 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x20084004) mknod(&(0x7f0000000080)='./bus\x00', 0x10, 0x0) 3.547549418s ago: executing program 3 (id=703): dup(0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x8008af26, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 3.34471123s ago: executing program 0 (id=704): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x80, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa, 0x12, r0, 0x80000000) 3.217661072s ago: executing program 0 (id=705): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) membarrier(0x4, 0x0) 2.852057737s ago: executing program 0 (id=706): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[], 0x7c}}, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x88}}, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000a06010200000000000000000a000013050001"], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) symlink(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000850}, 0x20000040) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0x9f5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.67048153s ago: executing program 2 (id=708): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'netdevsim0\x00', 0x4000021}, 0x18) 2.629302131s ago: executing program 0 (id=709): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) dup(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x200004) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) 2.520037583s ago: executing program 2 (id=710): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) rmdir(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x400042c9, 0x10100, 0x4, 0x3aa}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) r6 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x10c}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) read$FUSE(r0, &(0x7f0000008180)={0x2020}, 0x2020) syz_io_uring_setup(0xd2, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) 1.879703742s ago: executing program 1 (id=711): socket$inet(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 1.607042066s ago: executing program 1 (id=713): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r2, 0x5}, 0x8) 1.544515757s ago: executing program 2 (id=715): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x40800) setsockopt$inet_int(r0, 0x0, 0x8, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.460133158s ago: executing program 3 (id=716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELTABLE={0x18, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x3c}}, 0x0) 1.36059646s ago: executing program 3 (id=717): r0 = socket$unix(0x1, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x10, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000009}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) pipe(&(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r4, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r5 = syz_io_uring_complete(0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000000c0)={'nicvf0\x00', @random="ddfc4121b0eb"}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 1.076054864s ago: executing program 2 (id=719): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[], 0x7c}}, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x88}}, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000a06010200000000000000000a000013050001"], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) symlink(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000850}, 0x20000040) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0x9f5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.031297785s ago: executing program 3 (id=721): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x3, 0x169, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) recvmsg$kcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) 821.346188ms ago: executing program 4 (id=722): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000080)=""/158) 564.185062ms ago: executing program 1 (id=723): syz_usb_connect(0x5, 0x2d, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f00000000c0)={0x0, 0xd69f, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 533.962202ms ago: executing program 2 (id=724): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES64=r1, @ANYRES16=0x0], 0x0) add_key(&(0x7f0000000080)='rxrpc\x00', 0x0, &(0x7f0000000280), 0x0, 0xfffffffffffffffe) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xebff5d0857818f7f}, 0x4000) syz_open_procfs(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') write$tcp_mem(r2, &(0x7f0000000180)={0x0, 0x20, 0x0, 0x20, 0x0, 0x2}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0xd0}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b0400000000000000000100000114007888776c5219adbbb850f66e760480100001800700010263740000040002800900010073"], 0x68}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000000c0)) r5 = socket$inet6(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000001502000000ac1414000000000000000000020001000000000000000002fffffffb03000500000000000200000000000000000000000000000065e950075a1cfa165062e5854665b605b5d4aa1bea567899388d71946c01b31a43fa266cdb0f0de3c5ea38a41d3cdf3c1525e4654ecb"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000140)=0x0) timer_settime(r6, 0x0, &(0x7f00000010c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) 533.771562ms ago: executing program 4 (id=725): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB='\n\x00A'], 0x64}}, 0x0) 465.143763ms ago: executing program 4 (id=726): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) shutdown(r2, 0x1) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 338.153785ms ago: executing program 4 (id=727): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0xffff, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, 'hsr0\x00'}}, 0x1e) r1 = dup(r0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x40047452, 0x0) 143.751728ms ago: executing program 4 (id=728): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x28801) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x807, 0x83, 0x6, 0xfffa}, 0x2000001d, [0x8000, 0xc95a, 0x12, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x4, 0x8, 0x2, 0x4, 0x3c5b, 0x90, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x2, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x1000, 0x71, 0x7, 0x7, 0x1, 0x7, 0x0, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x0, 0x8, 0x0, 0x5, 0x0, 0x5, 0x6, 0xb, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012d, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcd, 0x40c, 0x9, 0x2bf, 0x6c9, 0x8, 0xfffffffc, 0x3, 0x0, 0x7, 0xeb, 0x5573, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xda7a, 0x4, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x7, 0x4, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x0, 0x6, 0x7, 0x8000, 0x0, 0xfe000000, 0xffff, 0x2, 0x7f, 0x5, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x3, 0x0, 0x4, 0xfffffffe, 0x9, 0x8d2, 0x8, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x20004, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0xd, 0x4, 0x6d01, 0x5, 0x9, 0x800000, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x5, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x3, 0x6, 0x1c, 0x120000, 0x3, 0x3, 0xa2ed, 0x404, 0x25], [0x9, 0xbb31, 0x296, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x53f53814, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x207fff, 0xffff, 0x2, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x20100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x19b0, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x8000, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0x7]}, 0x45c) unshare(0x22020600) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 81.335879ms ago: executing program 0 (id=729): openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x42801, 0x0) 59.086679ms ago: executing program 4 (id=730): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x8004) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={&(0x7f0000000300), 0x0}) semget$private(0x0, 0x1, 0x205) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000440), &(0x7f0000002d40)=""/4115, 0x1013}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$igmp(0x2, 0x3, 0x2) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0xe) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r9, @ANYBLOB="0800c300741300000800c40001000000", @ANYRESOCT=r9], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x446041, 0x0) r11 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\xfd\x00\x00\x00@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x5) ftruncate(r11, 0xffff) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000106000000000000000a0300000000000000000001000009080000000028000000000a0300000000007242a800712de6a60900010073797a300000028cb1000006140000001000010000000000000000000000000a000000"], 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0x0, 0xf}, {0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c0}, 0x4008000) 58.293769ms ago: executing program 3 (id=731): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={0x34, r0, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4101}, 0x0) 0s ago: executing program 1 (id=732): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x8}}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000540)=""/127, &(0x7f00000000c0)=0x7f) prlimit64(0x0, 0xe, 0x0, 0x0) close(0xffffffffffffffff) execve(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x48) io_setup(0x7ffe, &(0x7f0000000300)) io_setup(0x83ab, &(0x7f00000004c0)) r2 = gettid() r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r3, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r3, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd5, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x9, 0x74, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) io_uring_setup(0x443, &(0x7f0000000080)={0x0, 0x9c5, 0x0, 0x3, 0x2d6}) mbind(&(0x7f0000bdc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000140)=0x3ff, 0x3, 0x0) kernel console output (not intermixed with test programs): 63.746540][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.753780][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.761658][ T4168] device bridge_slave_0 entered promiscuous mode [ 63.776849][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.783910][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.810273][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.823378][ T4174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.835202][ T4174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.848748][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.858587][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.866619][ T4168] device bridge_slave_1 entered promiscuous mode [ 63.883904][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.890870][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.917371][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.967429][ T4174] team0: Port device team_slave_0 added [ 63.975916][ T4174] team0: Port device team_slave_1 added [ 63.983459][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.028085][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.048284][ T4178] device hsr_slave_0 entered promiscuous mode [ 64.055580][ T4178] device hsr_slave_1 entered promiscuous mode [ 64.085544][ T4169] device hsr_slave_0 entered promiscuous mode [ 64.093036][ T4169] device hsr_slave_1 entered promiscuous mode [ 64.099639][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.107571][ T4169] Cannot create hsr debugfs directory [ 64.124900][ T4176] device hsr_slave_0 entered promiscuous mode [ 64.131620][ T4176] device hsr_slave_1 entered promiscuous mode [ 64.138555][ T4176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.146381][ T4176] Cannot create hsr debugfs directory [ 64.152359][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.159327][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.185862][ T4174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.218169][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.225219][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.251275][ T4174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.279266][ T4168] team0: Port device team_slave_0 added [ 64.289804][ T4168] team0: Port device team_slave_1 added [ 64.366380][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.373469][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.400147][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.414998][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.422008][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.448022][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.476555][ T4174] device hsr_slave_0 entered promiscuous mode [ 64.483503][ T4170] Bluetooth: hci1: command 0x0409 tx timeout [ 64.490028][ T4174] device hsr_slave_1 entered promiscuous mode [ 64.496419][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 64.502888][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 64.504835][ T4174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.508904][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 64.520290][ T4174] Cannot create hsr debugfs directory [ 64.523467][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 64.685296][ T4168] device hsr_slave_0 entered promiscuous mode [ 64.692836][ T4168] device hsr_slave_1 entered promiscuous mode [ 64.699406][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.707279][ T4168] Cannot create hsr debugfs directory [ 64.815220][ T4169] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.837646][ T4169] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.847204][ T4169] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.859025][ T4169] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.932440][ T4176] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.941752][ T4176] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.953751][ T4176] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.964883][ T4176] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.055581][ T4174] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.066572][ T4174] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.080294][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.094046][ T4174] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.105554][ T4174] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.138927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.148490][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.166569][ T4176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.180439][ T4178] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.190223][ T4178] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.199972][ T4178] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.211709][ T4178] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.244042][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.259557][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.267616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.295703][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.305314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.314847][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.322123][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.332474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.355969][ T4176] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.381107][ T4168] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.390887][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.401704][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.410520][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.417611][ T4212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.440588][ T4168] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.450070][ T4168] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.460173][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.470906][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.480007][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.489174][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.496340][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.505781][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.514931][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.531670][ T4174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.542757][ T4168] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.558074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.567371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.578170][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.598265][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.608337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.618983][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.626093][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.633961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.643216][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.651652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.659903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.670262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.679513][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.708189][ T4178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.728064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.739879][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.748330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.759440][ T4174] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.771713][ T4169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.783443][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.793737][ T4178] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.813272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.822816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.831148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.839782][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.850385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.859308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.868341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.877039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.885685][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.895084][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.902220][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.910004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.920689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.940139][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.949401][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.958624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.970095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.995649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.007771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.016982][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.024121][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.040676][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.073604][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.082444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.091688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.100638][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.107784][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.118742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.128500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.137189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.147007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.155769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.165102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.197715][ T4178] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.220197][ T4178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.244295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.253537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.262672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.271214][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.278336][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.288950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.297705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.306954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.315915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.324997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.334066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.347259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.359931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.370995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.385796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.412594][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.421487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.438763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.452162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.474684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.503479][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.532515][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.541416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.555364][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.564632][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.568699][ T4216] Bluetooth: hci0: command 0x041b tx timeout [ 66.573369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.578882][ T4216] Bluetooth: hci2: command 0x041b tx timeout [ 66.588124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.600585][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.618827][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.625597][ T4216] Bluetooth: hci3: command 0x041b tx timeout [ 66.636465][ T4216] Bluetooth: hci4: command 0x041b tx timeout [ 66.656760][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.657807][ T4216] Bluetooth: hci1: command 0x041b tx timeout [ 66.664541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.678106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.687495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.697736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.728958][ T4169] device veth0_vlan entered promiscuous mode [ 66.762162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.770867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.785099][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.792245][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.807651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.822676][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.831264][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.838400][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.846989][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.855685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.864608][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.872324][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.879769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.889317][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.900009][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.909818][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.919536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.928048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.936571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.945356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.964661][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.980741][ T4169] device veth1_vlan entered promiscuous mode [ 66.993362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.012892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.052250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.087557][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.097390][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.106570][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.144726][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.158453][ T4169] device veth0_macvtap entered promiscuous mode [ 67.173557][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.180720][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.191767][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.201447][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.215308][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.225776][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.235950][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.245520][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.266240][ T4169] device veth1_macvtap entered promiscuous mode [ 67.321044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.330111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.344542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.357284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.367152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.391152][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.402812][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.420282][ T4178] device veth0_vlan entered promiscuous mode [ 67.431207][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.441285][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.460448][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.489546][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.498943][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.509749][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.518251][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.528055][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.536615][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.558723][ T4178] device veth1_vlan entered promiscuous mode [ 67.566843][ T4174] device veth0_vlan entered promiscuous mode [ 67.574092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.583939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.592953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.601587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.611563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.619905][ T4176] device veth0_vlan entered promiscuous mode [ 67.633155][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.649575][ T4174] device veth1_vlan entered promiscuous mode [ 67.666203][ T4176] device veth1_vlan entered promiscuous mode [ 67.679376][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.690623][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.701888][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.709953][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.719404][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.728330][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.737552][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.745196][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.788338][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.798456][ T4169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.810564][ T4169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.819718][ T4169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.829510][ T4169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.840426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.850251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.859181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.870734][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.879606][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.892105][ T4178] device veth0_macvtap entered promiscuous mode [ 67.904950][ T4178] device veth1_macvtap entered promiscuous mode [ 67.930464][ T4174] device veth0_macvtap entered promiscuous mode [ 67.943698][ T4174] device veth1_macvtap entered promiscuous mode [ 67.951555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.960679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.969135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.977688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.996121][ T4176] device veth0_macvtap entered promiscuous mode [ 68.019784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.031016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.039941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.071185][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.085557][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.098304][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.108717][ T4176] device veth1_macvtap entered promiscuous mode [ 68.118749][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.129279][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.139896][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.150503][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.161757][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.191095][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.204185][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.213552][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.222454][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.231012][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.240221][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.250431][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.262768][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.273790][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.285551][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.315428][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.326807][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.337175][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.347901][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.360616][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.370159][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.379223][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.388396][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.398400][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.414806][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.425430][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.436042][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.446862][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.456989][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.468704][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.480195][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.491697][ T4174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.501139][ T4174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.510251][ T4174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.519256][ T4174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.534517][ T4178] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.544167][ T4178] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.553199][ T4178] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.566154][ T4178] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.576738][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.585347][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.594232][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.603139][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.613938][ T4168] device veth0_vlan entered promiscuous mode [ 68.620635][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.628600][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.638490][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.647154][ T4216] Bluetooth: hci3: command 0x040f tx timeout [ 68.650193][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.655867][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.672561][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.677333][ T4216] Bluetooth: hci2: command 0x040f tx timeout [ 68.689749][ T4216] Bluetooth: hci0: command 0x040f tx timeout [ 68.690817][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.700225][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.712248][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.722666][ T4216] Bluetooth: hci1: command 0x040f tx timeout [ 68.729752][ T4216] Bluetooth: hci4: command 0x040f tx timeout [ 68.736144][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.747372][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.774661][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.784344][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.793939][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.806812][ T4168] device veth1_vlan entered promiscuous mode [ 68.816976][ T4176] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.826282][ T4176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.835923][ T4176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.844761][ T4176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.929336][ T4168] device veth0_macvtap entered promiscuous mode [ 68.953942][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.963881][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.972349][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.980863][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.990534][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.004757][ T4168] device veth1_macvtap entered promiscuous mode [ 69.042171][ T4212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.050172][ T4212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.071085][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.083543][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.094663][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.105219][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.116038][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.128482][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.139934][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.150541][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.161582][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.177824][ T4212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.186311][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.192081][ T4212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.198815][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.210617][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.219516][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.229307][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.240401][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.250929][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.263275][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.273334][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.284056][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.294031][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.304754][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.315975][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.370536][ T4228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.372292][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.379507][ T4228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.400857][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.409941][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.424032][ T4168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.441947][ T4168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.450793][ T4168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.465771][ T4168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.493778][ T4228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.501771][ T4228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.562729][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.597936][ T4253] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 69.625970][ T4228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.668495][ T4253] qnx6: wrong signature (magic) in superblock #1. [ 69.679605][ T4228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.685430][ T4253] qnx6: unable to read the first superblock [ 69.704220][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.707620][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.724865][ T4256] loop3: detected capacity change from 0 to 64 [ 69.731630][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.751697][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.792674][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.820109][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.898128][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.906869][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.936029][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.949407][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.979033][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.295660][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.740670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.773000][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 70.779809][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 70.785995][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 70.820348][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 70.835090][ T4253] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 70.853014][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 70.937749][ T4253] bond1 (unregistering): Released all slaves [ 71.003977][ T4267] loop2: detected capacity change from 0 to 1024 [ 71.057469][ T4217] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.106096][ T4228] Bluetooth: (null): Too short H5 packet [ 71.125489][ T4228] Bluetooth: (null): Invalid header checksum [ 71.162188][ T4228] Bluetooth: (null): Invalid header checksum [ 71.215921][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.220789][ T154] Bluetooth: (null): Too short H5 packet [ 71.222712][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.232534][ T154] Bluetooth: (null): Invalid header checksum [ 71.341333][ T154] Bluetooth: (null): Invalid header checksum [ 71.353199][ T4217] usb 5-1: Using ep0 maxpacket: 16 [ 71.422772][ T4276] loop3: detected capacity change from 0 to 4096 [ 71.436748][ T4263] Bluetooth: (null): Invalid header checksum [ 71.460361][ T4276] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 71.492152][ T4217] usb 5-1: config 0 has no interfaces? [ 71.517624][ T4280] loop1: detected capacity change from 0 to 1024 [ 71.554763][ T154] Bluetooth: (null): Invalid header checksum [ 71.574968][ T4276] EXT4-fs (loop3): Test dummy encryption mode enabled [ 71.608429][ T4276] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 71.677400][ T4280] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.711192][ T4217] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 71.736071][ T4217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.795665][ T4217] usb 5-1: Product: syz [ 71.821543][ T4217] usb 5-1: Manufacturer: syz [ 71.845602][ T4217] usb 5-1: SerialNumber: syz [ 71.901528][ T4217] usb 5-1: config 0 descriptor?? [ 72.008488][ T155] hfsplus: b-tree write err: -5, ino 4 [ 72.303850][ T4280] hfsplus: xattr search failed [ 72.447404][ T4264] udc-core: couldn't find an available UDC or it's busy [ 72.497980][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 72.507241][ T4264] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 72.632407][ T4291] hub 9-0:1.0: USB hub found [ 72.640863][ T4291] hub 9-0:1.0: 1 port detected [ 73.053049][ T4264] process 'syz.4.5' launched './file0' with NULL argv: empty string added [ 73.109928][ T4159] usb 5-1: USB disconnect, device number 2 [ 73.223649][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 73.233208][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 73.288578][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 73.530230][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 73.539198][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 73.548143][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 73.586417][ T4301] loop2: detected capacity change from 0 to 128 [ 73.597270][ T4301] ======================================================= [ 73.597270][ T4301] WARNING: The mand mount option has been deprecated and [ 73.597270][ T4301] and is ignored by this kernel. Remove the mand [ 73.597270][ T4301] option from the mount to silence this warning. [ 73.597270][ T4301] ======================================================= [ 73.640188][ T4301] EXT4-fs (loop2): Test dummy encryption mode enabled [ 73.656818][ T4301] EXT4-fs (loop2): Test dummy encryption mode enabled [ 73.787045][ T4301] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 73.843402][ T4301] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.859980][ T4310] loop1: detected capacity change from 0 to 4096 [ 73.860571][ T4312] loop3: detected capacity change from 0 to 128 [ 74.091294][ T4312] EXT4-fs (loop3): Test dummy encryption mode enabled [ 74.151255][ T4312] EXT4-fs (loop3): Test dummy encryption mode enabled [ 75.009058][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 75.018098][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 75.027139][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 75.478051][ T4315] loop4: detected capacity change from 0 to 32768 [ 75.647385][ T4315] gfs2: fsid=meta: Trying to join cluster "lock_nolock", "meta" [ 75.655318][ T4315] gfs2: fsid=meta: Now mounting FS (format 1802)... [ 75.692101][ T4315] gfs2: fsid=meta.0: journal 0 mapped with 5 extents in 0ms [ 75.706248][ T1108] gfs2: fsid=meta.0: jid=0, already locked for use [ 75.771156][ T4312] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 75.812245][ T1108] gfs2: fsid=meta.0: jid=0: Looking at journal... [ 75.884382][ T4312] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.042665][ T1108] gfs2: fsid=meta.0: jid=0: Journal head lookup took 232ms [ 76.106484][ T1108] gfs2: fsid=meta.0: jid=0: Done [ 76.155449][ T4315] gfs2: fsid=meta.0: first mount done, others may mount [ 76.164394][ T4315] gfs2: fsid=meta.0: can't get resource index inode: -2 [ 76.794088][ T4314] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 76.818851][ T4320] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 77.018298][ T4321] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 77.030600][ T4354] hub 9-0:1.0: USB hub found [ 77.036042][ T4354] hub 9-0:1.0: 1 port detected [ 77.165014][ T4322] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 77.968432][ T4328] fscrypt (loop3): Error allocating 'cts(cbc(aes))' transform: -4 [ 78.069489][ T4329] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 78.225866][ T1324] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 78.238019][ T4372] hub 9-0:1.0: USB hub found [ 78.243230][ T4372] hub 9-0:1.0: 1 port detected [ 78.518521][ T4332] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 79.143705][ T4379] loop2: detected capacity change from 0 to 128 [ 79.223004][ T4379] EXT4-fs (loop2): Test dummy encryption mode enabled [ 79.231782][ T4379] EXT4-fs (loop2): Test dummy encryption mode enabled [ 79.269691][ T4379] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 79.296786][ T4381] loop0: detected capacity change from 0 to 8 [ 79.305413][ T4379] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.357425][ T1324] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 79.392917][ T4381] squashfs: Unknown parameter 'ì' [ 79.401107][ T1324] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.488406][ T4381] qnx6: unable to read the first superblock [ 79.502678][ T1324] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.509591][ T1324] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 79.518873][ T1324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.530317][ T1324] usb 5-1: config 0 descriptor?? [ 79.546629][ T4381] qnx6: wrong signature (magic) in superblock #1. [ 79.624273][ T4381] qnx6: unable to read the first superblock [ 79.660286][ T4387] loop1: detected capacity change from 0 to 4096 [ 79.764491][ T4385] mkiss: ax0: crc mode is auto. [ 79.774461][ T4388] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 79.813682][ T4387] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 79.821123][ T4387] EXT4-fs (loop1): Test dummy encryption mode enabled [ 79.915506][ T4387] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 80.089578][ T1324] logitech 0003:046D:C24F.0001: unbalanced collection at end of report description [ 80.122047][ T1324] logitech 0003:046D:C24F.0001: parse failed [ 80.152593][ T1324] logitech: probe of 0003:046D:C24F.0001 failed with error -22 [ 80.271323][ T4402] hub 9-0:1.0: USB hub found [ 80.277410][ T4402] hub 9-0:1.0: 1 port detected [ 82.435661][ T1324] usb 5-1: USB disconnect, device number 3 [ 84.098973][ T23] cfg80211: failed to load regulatory.db [ 85.743882][ T4411] loop4: detected capacity change from 0 to 32768 [ 86.271051][ T4411] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 86.323878][ T4411] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 86.549016][ T4411] syz.4.26 (4411) used greatest stack depth: 21136 bytes left [ 86.689183][ T4416] loop3: detected capacity change from 0 to 512 [ 86.854994][ T4416] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.29: casefold flag without casefold feature [ 86.934236][ T4416] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.29: couldn't read orphan inode 15 (err -117) [ 86.948009][ T4176] ocfs2: Unmounting device (7,4) on (node local) [ 87.043933][ T4416] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 87.069514][ T4423] loop1: detected capacity change from 0 to 1024 [ 87.647599][ T4423] hfsplus: xattr search failed [ 88.092970][ T4431] netlink: 24 bytes leftover after parsing attributes in process `syz.4.30'. [ 88.230654][ T4417] loop0: detected capacity change from 0 to 32768 [ 88.327390][ T4417] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 88.394674][ T3506] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 88.433230][ T4417] ocfs2: Unmounting device (7,0) on (node local) [ 88.639547][ T4448] loop0: detected capacity change from 0 to 128 [ 88.662999][ T26] audit: type=1326 audit(1748650196.434:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4446 comm="syz.4.38" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b2cec9969 code=0x0 [ 88.735364][ T4448] EXT4-fs (loop0): Test dummy encryption mode enabled [ 88.745435][ T4448] EXT4-fs (loop0): Test dummy encryption mode enabled [ 88.789457][ T4448] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 88.801624][ T3506] usb 4-1: not running at top speed; connect to a high speed hub [ 88.841548][ T4448] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.910828][ T3506] usb 4-1: config 1 interface 0 has no altsetting 0 [ 89.169153][ T3506] usb 4-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 89.185737][ T3506] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.212487][ T4440] loop2: detected capacity change from 0 to 32768 [ 89.254627][ T3506] usb 4-1: Product: à   [ 89.301174][ T3506] usb 4-1: Manufacturer: 洜ꚳ垂풘䓩络痧Ꜻὑࣻ瑩ᢡ╾î«è©¶æœà°„อ㒜í†êˆ•Ô­Ö¿î»­ì™å­Žä†å¨î‚´å²‚湨撲쎉ᘳ赶꺔꟤펕쮹よä€æ °ç®“艮ヴ爵ä—Ù꾵ꅸ곳ұ泌ᜤ挨跢竳ヂ鲣繋ꕫ莻㊟Ꙙⶠ퓷籱í†âž“ì¢ [ 89.327072][ T4440] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.34 (4440) [ 89.494571][ T4440] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 89.526309][ T4440] BTRFS info (device loop2): force clearing of disk cache [ 89.559611][ T4440] BTRFS info (device loop2): force zlib compression, level 3 [ 89.595584][ T4440] BTRFS info (device loop2): enabling auto defrag [ 89.616750][ T4440] BTRFS info (device loop2): max_inline at 0 [ 89.641399][ T4440] BTRFS info (device loop2): enabling disk space caching [ 89.665151][ T4440] BTRFS info (device loop2): disk space caching is enabled [ 89.691616][ T4440] BTRFS info (device loop2): has skinny extents [ 89.727285][ T4432] netlink: 32 bytes leftover after parsing attributes in process `syz.3.32'. [ 89.863464][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.962816][ T4440] BTRFS info (device loop2): enabling ssd optimizations [ 90.022946][ T4440] BTRFS info (device loop2): clearing free space tree [ 90.030553][ T4440] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 90.107609][ T4440] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 90.121756][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 90.246154][ T21] usb 2-1: config 0 has no interfaces? [ 90.409565][ T21] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 90.439211][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.467840][ T21] usb 2-1: Product: syz [ 90.479001][ T21] usb 2-1: Manufacturer: syz [ 90.494037][ T21] usb 2-1: SerialNumber: syz [ 90.521532][ T21] usb 2-1: config 0 descriptor?? [ 90.612295][ T4432] loop3: detected capacity change from 0 to 40427 [ 90.685431][ T4432] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(0) root(83886083) [ 90.722625][ T4432] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 90.755363][ T4432] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 90.782461][ T4458] udc-core: couldn't find an available UDC or it's busy [ 90.830039][ T4432] F2FS-fs (loop3): invalid crc value [ 90.838621][ T4458] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 90.866940][ T4432] F2FS-fs (loop3): Found nat_bits in checkpoint [ 91.090877][ T4260] usb 2-1: USB disconnect, device number 2 [ 91.440115][ T3506] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input5 [ 91.535283][ T3531] bcm5974 4-1:1.0: could not read from device [ 91.590268][ T4494] loop0: detected capacity change from 0 to 1764 [ 91.924969][ T3506] usb 4-1: USB disconnect, device number 2 [ 91.989169][ T3531] bcm5974 4-1:1.0: could not read from device [ 92.377075][ T4490] loop4: detected capacity change from 0 to 32768 [ 93.232051][ T4490] XFS (loop4): Mounting V5 Filesystem [ 93.273565][ T4507] loop3: detected capacity change from 0 to 32768 [ 93.345900][ T4520] loop2: detected capacity change from 0 to 4096 [ 93.406546][ T4520] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 93.449163][ T4520] EXT4-fs (loop2): Test dummy encryption mode enabled [ 93.474890][ T4490] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 93.609402][ T4490] XFS (loop4): Starting recovery (logdev: internal) [ 93.690841][ T4520] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 93.722440][ T4490] XFS (loop4): Ending recovery (logdev: internal) [ 93.990193][ T4176] XFS (loop4): Unmounting Filesystem [ 94.555361][ T4538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.51'. [ 94.906842][ T4549] netlink: 116 bytes leftover after parsing attributes in process `syz.0.55'. [ 95.095596][ T3506] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 95.153993][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 95.184396][ T4555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.244824][ T4555] syz.3.58 (4555) used greatest stack depth: 20576 bytes left [ 95.463366][ T3506] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.478118][ T3506] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.572607][ T3506] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 95.588221][ T4410] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.606065][ T3506] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 95.651067][ T3506] usb 5-1: SerialNumber: syz [ 95.871224][ T4569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'. [ 95.896643][ T4569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.64'. [ 95.937712][ T4569] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.945253][ T3506] usb 5-1: 0:2 : does not exist [ 95.947119][ T4569] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.959757][ T3506] usb 5-1: unit 11 not found! [ 95.961547][ T4569] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.974941][ T4569] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.028943][ T4410] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.051241][ T4410] usb 4-1: config 0 has no interfaces? [ 96.054482][ T3506] usb 5-1: USB disconnect, device number 4 [ 96.061366][ T4410] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.088604][ T4410] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.125737][ T4410] usb 4-1: config 0 descriptor?? [ 96.316679][ T26] audit: type=1400 audit(1748650204.150:3): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626204ED7F9129AEDE2BE21CCFDC4E9134F8684B3A4F354DA9A795E96334E207DFF70F1988037B2ED3AAF575C0B88D8F146684078416D59FDEE5325928974D12DAD99DAC44C3F pid=4571 comm="syz.2.65" [ 96.347379][ T4505] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.388254][ T1324] usb 4-1: USB disconnect, device number 3 [ 96.601722][ T4580] syz.4.69 uses obsolete (PF_INET,SOCK_PACKET) [ 96.615127][ T4505] usb 1-1: Using ep0 maxpacket: 8 [ 96.747294][ T4584] netlink: 16 bytes leftover after parsing attributes in process `syz.1.71'. [ 96.769914][ T4505] usb 1-1: config 0 has no interfaces? [ 96.943385][ T4505] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 96.952487][ T4505] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.992651][ T4505] usb 1-1: Product: syz [ 96.996870][ T4505] usb 1-1: Manufacturer: syz [ 97.001482][ T4505] usb 1-1: SerialNumber: syz [ 97.034030][ T4505] usb 1-1: config 0 descriptor?? [ 97.141580][ T3506] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 97.490261][ T3506] usb 5-1: not running at top speed; connect to a high speed hub [ 97.578949][ T3506] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 97.608725][ T3506] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 97.638205][ T3506] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.801169][ T4505] usb 1-1: USB disconnect, device number 2 [ 97.837364][ T3506] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.866651][ T3506] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.905129][ T3506] usb 5-1: Product: syz [ 97.909576][ T3506] usb 5-1: Manufacturer: syz [ 97.914207][ T3506] usb 5-1: SerialNumber: syz [ 98.353557][ T23] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 98.453005][ T3506] usb 5-1: 0:2 : does not exist [ 98.492903][ T3506] usb 5-1: USB disconnect, device number 5 [ 98.742571][ T4269] udevd[4269]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.821184][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.880011][ T23] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 98.933991][ T23] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 98.972255][ T4505] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 98.993920][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.044174][ T23] usb 1-1: config 0 descriptor?? [ 99.060526][ T4505] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 99.605897][ T4634] xt_hashlimit: max too large, truncated to 1048576 [ 100.337442][ C1] sd 0:0:1:0: tag#2316 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 100.347554][ C1] sd 0:0:1:0: tag#2316 CDB: Read(6) 08 00 9f d1 fe de [ 100.381076][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.758225][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.797535][ T23] usb 2-1: config 0 has no interfaces? [ 100.834719][ T23] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 100.933329][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.986908][ T23] usb 2-1: config 0 descriptor?? [ 101.249261][ T4650] udc-core: couldn't find an available UDC or it's busy [ 101.284704][ T4650] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 101.354827][ T4650] device bond_slave_0 entered promiscuous mode [ 101.361396][ T4650] device bond_slave_1 entered promiscuous mode [ 101.392716][ T4650] device macsec1 entered promiscuous mode [ 101.404119][ T4650] device bond0 entered promiscuous mode [ 101.423362][ T4650] device bond0 left promiscuous mode [ 101.442584][ T4650] device bond_slave_0 left promiscuous mode [ 101.448809][ T4650] device bond_slave_1 left promiscuous mode [ 101.574587][ T23] usb 2-1: USB disconnect, device number 3 [ 101.662198][ T4216] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 101.727443][ T3506] usb 1-1: USB disconnect, device number 3 [ 101.776942][ T26] audit: type=1326 audit(1748650209.645:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4680 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43b06c969 code=0x7ffc0000 [ 101.814368][ T26] audit: type=1326 audit(1748650209.645:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4680 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43b06c969 code=0x7ffc0000 [ 101.836885][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.030277][ T4216] usb 5-1: config 0 interface 0 altsetting 128 bulk endpoint 0xB has invalid maxpacket 1023 [ 102.047713][ T4216] usb 5-1: config 0 interface 0 has no altsetting 0 [ 102.062256][ T4216] usb 5-1: New USB device found, idVendor=0451, idProduct=f430, bcdDevice=42.7a [ 102.073851][ T4216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.156372][ T4216] usb 5-1: config 0 descriptor?? [ 102.209238][ T4679] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 102.241416][ T4216] ti_usb_3410_5052 5-1:0.0: TI USB 3410 1 port adapter converter detected [ 102.300196][ T4216] usb 5-1: Direct firmware load for ti_usb-v0451-pf430.fw failed with error -2 [ 102.375302][ T4216] usb 5-1: Falling back to sysfs fallback for: ti_usb-v0451-pf430.fw [ 102.608215][ T4505] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.884615][ T4505] usb 1-1: Using ep0 maxpacket: 8 [ 103.080224][ T4712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.111'. [ 103.100426][ T4714] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.109633][ T4714] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.119144][ T4714] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.127939][ T4714] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.172525][ T4714] device vxlan0 entered promiscuous mode [ 103.185727][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan0: link becomes ready [ 103.315325][ T4718] tipc: Started in network mode [ 103.360894][ T4718] tipc: Node identity ac14140f, cluster identity 4711 [ 103.389019][ T4718] tipc: New replicast peer: 255.255.255.255 [ 103.398054][ T4718] tipc: Enabled bearer , priority 10 [ 103.822464][ T4743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.124'. [ 103.836140][ T4743] bond0: option use_carrier: invalid value (8) [ 103.888638][ T4260] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 103.997351][ T4748] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 104.256505][ T4260] usb 2-1: config 0 has no interfaces? [ 104.506613][ T23] tipc: Node number set to 2886997007 [ 104.654045][ T4260] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 104.681858][ T4260] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.705763][ T4260] usb 2-1: Product: syz [ 104.724961][ T4260] usb 2-1: Manufacturer: syz [ 104.742893][ T4260] usb 2-1: SerialNumber: syz [ 104.775077][ T4260] usb 2-1: config 0 descriptor?? [ 105.005983][ T26] audit: type=1326 audit(1748650212.895:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4754 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2cec9969 code=0x7ffc0000 [ 105.131037][ T26] audit: type=1326 audit(1748650212.895:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4754 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2cec9969 code=0x7ffc0000 [ 105.248596][ T26] audit: type=1326 audit(1748650212.925:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4754 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b2cec956b code=0x7ffc0000 [ 105.317990][ T26] audit: type=1326 audit(1748650212.935:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4754 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2cec9969 code=0x7ffc0000 [ 105.382697][ T26] audit: type=1326 audit(1748650212.935:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4754 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2cec9969 code=0x7ffc0000 [ 105.396378][ T4730] udc-core: couldn't find an available UDC or it's busy [ 105.436393][ T26] audit: type=1326 audit(1748650212.935:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4754 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b2cec956b code=0x7ffc0000 [ 105.510532][ T26] audit: type=1326 audit(1748650212.935:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4754 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2cec9969 code=0x7ffc0000 [ 105.543427][ T26] audit: type=1326 audit(1748650212.935:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4754 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2cec9969 code=0x7ffc0000 [ 105.601885][ T4730] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 105.777388][ T4251] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.135893][ T4251] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 106.162870][ T4251] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 106.182992][ T4251] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 106.324392][ T4251] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 106.344087][ T4251] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 106.373709][ T4251] usb 3-1: Manufacturer: syz [ 106.427300][ T4251] usb 3-1: config 0 descriptor?? [ 106.474062][ T4251] smsusb:smsusb_probe: board id=9, interface number 0 [ 106.495394][ T4505] usb 1-1: unable to get BOS descriptor or descriptor too short [ 106.516244][ T4505] usb 1-1: no configurations [ 106.552848][ T4251] smsusb:smsusb_probe: Device initialized with return code -19 [ 106.556599][ T4505] usb 1-1: can't read configurations, error -22 [ 106.723887][ T4251] usb 3-1: USB disconnect, device number 2 [ 106.989640][ T1324] usb 2-1: USB disconnect, device number 4 [ 108.740645][ T4251] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.949110][ T4251] usb 3-1: device descriptor read/64, error -71 [ 109.000445][ T4503] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 109.028541][ C0] raw-gadget.1 gadget: ignoring, device is not running [ 109.187788][ T4503] usb 2-1: device descriptor read/64, error -32 [ 109.217643][ T4251] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.303102][ T4838] loop6: detected capacity change from 0 to 524287999 [ 109.330588][ C1] blk_update_request: I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 109.343709][ C0] blk_update_request: I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.355602][ C0] Buffer I/O error on dev loop6, logical block 65535968, async page read [ 109.456227][ T4503] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 109.476223][ T4251] usb 3-1: device descriptor read/64, error -71 [ 109.595723][ T4251] usb usb3-port1: attempt power cycle [ 109.724798][ T4503] usb 2-1: Using ep0 maxpacket: 8 [ 109.740799][ T4850] syz.4.161 sent an empty control message without MSG_MORE. [ 110.003328][ T4251] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 110.112757][ T4251] usb 3-1: device descriptor read/8, error -71 [ 110.411170][ T4251] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 110.510795][ T4251] usb 3-1: device descriptor read/8, error -71 [ 110.630055][ T4251] usb usb3-port1: unable to enumerate USB device [ 110.888500][ T4503] usb 2-1: unable to get BOS descriptor or descriptor too short [ 110.906517][ T4503] usb 2-1: no configurations [ 110.935496][ T4503] usb 2-1: can't read configurations, error -22 [ 110.958423][ T4503] usb usb2-port1: attempt power cycle [ 111.429497][ T4879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.170'. [ 111.743129][ T4889] loop8: detected capacity change from 0 to 7 [ 111.767099][ T4268] Dev loop8: unable to read RDB block 7 [ 111.773208][ T4268] loop8: unable to read partition table [ 111.790691][ T4268] loop8: partition table beyond EOD, truncated [ 111.808515][ T4889] Dev loop8: unable to read RDB block 7 [ 111.823445][ T4889] loop8: unable to read partition table [ 111.829281][ T4889] loop8: partition table beyond EOD, truncated [ 111.855971][ T4889] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 112.479932][ T4260] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 112.858040][ T4260] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.882360][ T4260] usb 1-1: config 0 has no interfaces? [ 112.908721][ T4260] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 112.949055][ T4260] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.011534][ T4260] usb 1-1: config 0 descriptor?? [ 113.092407][ T4929] netlink: 'syz.4.183': attribute type 10 has an invalid length. [ 113.165409][ T4929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.216281][ T4929] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 113.292905][ T4930] netlink: 'syz.4.183': attribute type 10 has an invalid length. [ 113.308235][ T4930] netlink: 40 bytes leftover after parsing attributes in process `syz.4.183'. [ 113.352188][ T4930] device batadv0 entered promiscuous mode [ 113.405574][ T4930] bond0: (slave batadv0): Releasing backup interface [ 113.474474][ T4930] bridge0: port 3(batadv0) entered blocking state [ 113.498079][ T4930] bridge0: port 3(batadv0) entered disabled state [ 113.524603][ T4908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.179'. [ 113.551926][ T1324] usb 1-1: USB disconnect, device number 6 [ 113.701618][ T4347] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 113.711555][ T4347] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 116.579120][ T4998] hub 9-0:1.0: USB hub found [ 116.584512][ T4998] hub 9-0:1.0: 1 port detected [ 117.464923][ T5007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.210'. [ 117.521740][ T5008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.210'. [ 117.711756][ T5014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.212'. [ 118.289694][ T4505] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 118.706925][ T4505] usb 3-1: unable to get BOS descriptor or descriptor too short [ 118.799952][ T4505] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 118.820804][ T4505] usb 3-1: config 1 has no interface number 1 [ 118.846135][ T4505] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 118.992468][ T5037] loop3: detected capacity change from 0 to 8192 [ 119.048054][ T5037] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 119.080200][ T5037] REISERFS (device loop3): using ordered data mode [ 119.099484][ T5037] reiserfs: using flush barriers [ 119.122063][ T5037] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 119.133644][ T4505] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 119.147397][ T4505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.155523][ T4505] usb 3-1: Product: syz [ 119.163302][ T4505] usb 3-1: Manufacturer: syz [ 119.167941][ T4505] usb 3-1: SerialNumber: syz [ 119.211793][ T5037] REISERFS (device loop3): checking transaction log (loop3) [ 119.496513][ T5037] REISERFS (device loop3): Using tea hash to sort names [ 119.530500][ T4505] usb 3-1: found format II with max.bitrate = 26774, frame size=2 [ 119.538968][ T5037] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 119.581729][ T4505] usb 3-1: found format II with max.bitrate = 26774, frame size=2 [ 119.848600][ T5037] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 119.850126][ T4505] usb 3-1: failed to enable PITCH for EP 0x82 [ 119.939493][ T5037] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 4) [ 120.152823][ T5037] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 4) [ 120.179759][ T4505] usb 3-1: USB disconnect, device number 7 [ 120.226530][ T5037] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 4) [ 120.664388][ T4505] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 120.830688][ T4260] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 121.001272][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 121.001286][ T26] audit: type=1326 audit(1748650228.984:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5068 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b619a1969 code=0x7ffc0000 [ 121.088584][ T4260] usb 4-1: Using ep0 maxpacket: 32 [ 121.151411][ T26] audit: type=1326 audit(1748650229.014:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5068 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b619a1969 code=0x7ffc0000 [ 121.227221][ T26] audit: type=1326 audit(1748650229.014:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5068 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f4b619a1969 code=0x7ffc0000 [ 121.252312][ T4260] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 121.256521][ T26] audit: type=1326 audit(1748650229.014:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5068 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b619a1969 code=0x7ffc0000 [ 121.266795][ T4260] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.282911][ T4505] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 121.302042][ T4505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.310105][ T4505] usb 3-1: Product: syz [ 121.314547][ T4505] usb 3-1: Manufacturer: syz [ 121.319418][ T26] audit: type=1326 audit(1748650229.014:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5068 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b619a1969 code=0x7ffc0000 [ 121.357452][ T4505] usb 3-1: SerialNumber: syz [ 121.367967][ T4505] usb 3-1: config 0 descriptor?? [ 121.370806][ T4260] usb 4-1: config 0 has no interface number 0 [ 121.407558][ T4505] ch341 3-1:0.0: ch341-uart converter detected [ 121.565320][ T4260] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 121.585124][ T4260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.593172][ T4260] usb 4-1: Product: syz [ 121.607977][ T4260] usb 4-1: Manufacturer: syz [ 121.635991][ T4260] usb 4-1: SerialNumber: syz [ 121.707043][ T4260] usb 4-1: config 0 descriptor?? [ 121.745260][ T4260] ums-jumpshot 4-1:0.16: USB Mass Storage device detected [ 121.775954][ T5073] loop1: detected capacity change from 0 to 32768 [ 121.798159][ T4260] ums-jumpshot 4-1:0.16: Quirks match for vid 05dc pid 0001: 2 [ 121.821312][ T5073] (syz.1.234,5073,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 121.836282][ T5073] (syz.1.234,5073,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 121.891258][ T5073] (syz.1.234,5073,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x3c8d1ba1, computed 0xa8860fd0. Applying ECC. [ 121.934340][ T5073] (syz.1.234,5073,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdde57c9f, computed 0xfabef142. Applying ECC. [ 122.003992][ T5073] (syz.1.234,5073,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdde57c9f, computed 0xeacc2a6a [ 122.057728][ T5073] (syz.1.234,5073,0):ocfs2_validate_inode_block:1379 ERROR: Checksum failed for dinode 25 [ 122.105801][ T4260] usb 4-1: USB disconnect, device number 4 [ 122.107046][ T5073] (syz.1.234,5073,0):ocfs2_read_locked_inode:521 ERROR: status = -5 [ 122.146112][ T5073] (syz.1.234,5073,1):_ocfs2_get_system_file_inode:144 ERROR: status = -5 [ 122.168229][ T5073] (syz.1.234,5073,1):ocfs2_init_global_system_inodes:462 ERROR: status = -22 [ 122.197929][ T5073] (syz.1.234,5073,1):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 6, possibly corrupt fs? [ 122.197968][ T5073] (syz.1.234,5073,1):ocfs2_init_global_system_inodes:473 ERROR: status = -22 [ 122.236419][ T5073] (syz.1.234,5073,0):ocfs2_initialize_super:2281 ERROR: status = -22 [ 122.259255][ T5073] (syz.1.234,5073,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 122.546513][ T5093] loop4: detected capacity change from 0 to 32768 [ 122.552532][ T5073] overlayfs: overlapping lowerdir path [ 122.625963][ T5093] JBD2: Ignoring recovery information on journal [ 122.669259][ T5093] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 122.725749][ T5093] (syz.4.241,5093,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=16, inode=7755761508285415489, rec_len=30044, name_len=0 [ 122.746213][ T5093] (syz.4.241,5093,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 122.755343][ T5093] (syz.4.241,5093,0):ocfs2_mknod:298 ERROR: status = -2 [ 122.762554][ T5093] (syz.4.241,5093,0):ocfs2_mknod:502 ERROR: status = -2 [ 122.773314][ T5093] (syz.4.241,5093,0):ocfs2_create:676 ERROR: status = -2 [ 122.836973][ T5093] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 122.912781][ T4505] usb 3-1: ch341-uart converter now attached to ttyUSB0 [ 123.093077][ T5112] netlink: 'syz.1.248': attribute type 10 has an invalid length. [ 123.166544][ T5112] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 123.181987][ T4176] ocfs2: Unmounting device (7,4) on (node local) [ 123.251273][ T4260] usb 3-1: USB disconnect, device number 8 [ 123.263641][ T5118] loop0: detected capacity change from 0 to 64 [ 123.330609][ T4260] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 123.375324][ T4260] ch341 3-1:0.0: device disconnected [ 123.536737][ T5126] netlink: 'syz.4.251': attribute type 3 has an invalid length. [ 123.689826][ T21] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 123.842290][ T5142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.256'. [ 123.982744][ T26] audit: type=1326 audit(1748650231.986:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5144 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd68fc969 code=0x7ffc0000 [ 123.987292][ T26] audit: type=1326 audit(1748650231.986:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5144 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1fd68fc969 code=0x7ffc0000 [ 124.063032][ T26] audit: type=1326 audit(1748650232.046:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5144 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd68fc969 code=0x7ffc0000 [ 124.107132][ T21] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 124.133938][ T21] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.174731][ T21] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 124.236152][ T4410] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 124.317749][ T4260] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 124.335558][ T21] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 124.355474][ T21] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=8 [ 124.363523][ T21] usb 1-1: Product: syz [ 124.372310][ T4260] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 124.382159][ T21] usb 1-1: Manufacturer: syz [ 124.386864][ T21] usb 1-1: SerialNumber: syz [ 124.650213][ T4410] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.661971][ T5120] udc-core: couldn't find an available UDC or it's busy [ 124.669075][ T5120] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 124.862009][ T4410] usb 2-1: New USB device found, idVendor=0525, idProduct=07a1, bcdDevice= 0.00 [ 124.883793][ T4410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.918791][ T4410] usb 2-1: Product: syz [ 124.937197][ T4410] usb 2-1: Manufacturer: syz [ 124.942793][ T4410] usb 2-1: SerialNumber: syz [ 125.643139][ T26] audit: type=1326 audit(1748650233.657:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5183 comm="syz.3.276" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb43b06c969 code=0x0 [ 126.093330][ T4410] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 126.101324][ T4410] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 126.117582][ T4410] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 126.218008][ T4260] usb 1-1: USB disconnect, device number 7 [ 126.500941][ T4410] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 126.561929][ T4410] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 126.658736][ T4410] usb 2-1: USB disconnect, device number 8 [ 126.673390][ T4410] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 129.284823][ T5232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.292'. [ 129.944913][ T5252] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (22) [ 130.613895][ T5254] netlink: 'syz.1.302': attribute type 12 has an invalid length. [ 131.020767][ T4260] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 131.448092][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 131.477947][ T4260] usb 3-1: config 0 has no interfaces? [ 131.656855][ T4260] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 131.706708][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 131.714953][ T4260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.773688][ T4260] usb 3-1: Product: syz [ 131.795613][ T4260] usb 3-1: Manufacturer: syz [ 131.815890][ T4260] usb 3-1: SerialNumber: syz [ 131.845758][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.866403][ T4260] usb 3-1: config 0 descriptor?? [ 131.876356][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.916731][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.999486][ T5279] syzkaller1: tun_chr_ioctl cmd 35111 [ 132.051978][ T23] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 132.147410][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.225843][ T23] usb 2-1: config 0 descriptor?? [ 132.265145][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.271613][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.285262][ T23] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 132.316997][ T3531] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 132.373618][ T3531] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 132.486083][ T1324] usb 2-1: USB disconnect, device number 9 [ 132.492885][ T3531] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 133.826788][ T1324] usb 3-1: USB disconnect, device number 9 [ 133.887659][ T5313] loop8: detected capacity change from 0 to 7 [ 133.908883][ T5047] Dev loop8: unable to read RDB block 7 [ 133.915931][ T5047] loop8: AHDI p1 p3 p4 [ 133.929270][ T5047] loop8: partition table partially beyond EOD, truncated [ 133.950088][ T5047] loop8: p1 start 975770946 is beyond EOD, truncated [ 133.996841][ T5047] loop8: p3 start 6514546 is beyond EOD, truncated [ 134.125122][ T5313] Dev loop8: unable to read RDB block 7 [ 134.145533][ T5313] loop8: AHDI p1 p3 p4 [ 134.172053][ T5313] loop8: partition table partially beyond EOD, truncated [ 134.205755][ T5313] loop8: p1 start 975770946 is beyond EOD, truncated [ 134.234973][ T5313] loop8: p3 start 6514546 is beyond EOD, truncated [ 134.688283][ T1324] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 134.738052][ T3506] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 134.956643][ T1324] usb 3-1: Using ep0 maxpacket: 32 [ 135.086063][ T1324] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 135.105934][ T3506] usb 4-1: config 0 has no interfaces? [ 135.142785][ T1324] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 135.264950][ T3506] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 135.293739][ T3506] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.314329][ T1324] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 135.353614][ T3506] usb 4-1: Product: syz [ 135.363733][ T3506] usb 4-1: Manufacturer: syz [ 135.393530][ T3506] usb 4-1: SerialNumber: syz [ 135.448088][ T3506] usb 4-1: config 0 descriptor?? [ 135.457756][ T1324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 135.662026][ T1324] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 135.753891][ T1324] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 135.770638][ T1324] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 135.785487][ T1324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.830333][ T1324] usb 3-1: config 0 descriptor?? [ 136.140153][ T1324] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 136.179521][ T4410] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 136.230370][ T1324] usb 3-1: USB disconnect, device number 10 [ 136.272891][ T1324] usblp0: removed [ 136.458071][ T4410] usb 2-1: Using ep0 maxpacket: 8 [ 136.542209][ T5354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.329'. [ 136.646879][ T4410] usb 2-1: unable to get BOS descriptor or descriptor too short [ 136.696534][ T4505] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 136.736550][ T4410] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 136.757595][ T4410] usb 2-1: can't read configurations, error -71 [ 136.785983][ T1324] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 137.054448][ T1324] usb 3-1: Using ep0 maxpacket: 32 [ 137.104293][ T4505] usb 1-1: config 0 has no interfaces? [ 137.174012][ T1324] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 137.194929][ T1324] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 137.225927][ T1324] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 137.288546][ T1324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 137.299411][ T4505] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 137.314203][ T4505] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.342855][ T1324] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 137.390628][ T4505] usb 1-1: Product: syz [ 137.412840][ T5367] netlink: 'syz.4.334': attribute type 10 has an invalid length. [ 137.419856][ T4505] usb 1-1: Manufacturer: syz [ 137.436885][ T1324] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 137.464211][ T4505] usb 1-1: SerialNumber: syz [ 137.464753][ T5367] netlink: 2 bytes leftover after parsing attributes in process `syz.4.334'. [ 137.498568][ T1324] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 137.522472][ T4505] usb 1-1: config 0 descriptor?? [ 137.532493][ T1324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.563446][ T1324] usb 3-1: config 0 descriptor?? [ 137.580000][ T5367] device team0 entered promiscuous mode [ 137.581700][ T1324] usb 3-1: can't set config #0, error -71 [ 137.619027][ T1324] usb 3-1: USB disconnect, device number 11 [ 137.676805][ T5367] device team_slave_0 entered promiscuous mode [ 137.704324][ T4505] usb 4-1: USB disconnect, device number 5 [ 137.743808][ T5367] device team_slave_1 entered promiscuous mode [ 137.790083][ T5367] bridge0: port 4(team0) entered blocking state [ 137.817387][ T5367] bridge0: port 4(team0) entered disabled state [ 137.848667][ T5367] bridge0: port 4(team0) entered blocking state [ 137.855320][ T5367] bridge0: port 4(team0) entered forwarding state [ 138.039388][ T1324] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 138.456708][ T1324] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 138.475316][ T1324] usb 3-1: config 8 has no interface number 0 [ 138.484184][ T5383] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 138.493360][ T5383] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 138.541748][ T1324] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 138.569907][ T5383] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 138.576372][ T5383] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 138.614386][ T1324] usb 3-1: config 8 interface 177 has no altsetting 0 [ 138.632399][ T5383] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 138.638883][ T5383] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 138.656196][ T1324] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 138.695466][ T5383] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 138.701924][ T5383] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 138.708107][ T1324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.742954][ T5383] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 138.749486][ T5383] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 138.805639][ T5371] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 139.142822][ T1324] usb 3-1: string descriptor 0 read error: -71 [ 139.192463][ C0] ir_toy 3-1:8.177: out urb status: -71 [ 139.482324][ T4505] usb 1-1: USB disconnect, device number 8 [ 139.616154][ T4504] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 139.671417][ T4504] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 139.682448][ T1324] ir_toy 3-1:8.177: could not write reset command: -110 [ 139.701092][ C0] ir_toy 3-1:8.177: failed to resubmit urb: -1 [ 139.707644][ T1324] ir_toy: probe of 3-1:8.177 failed with error -110 [ 139.745989][ T1324] usb 3-1: USB disconnect, device number 12 [ 140.566083][ T21] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 140.599887][ T5449] netlink: 48 bytes leftover after parsing attributes in process `syz.2.364'. [ 140.654402][ T4504] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 140.797482][ T5455] IPv6: NLM_F_REPLACE set, but no existing node found! [ 140.915057][ T5455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.367'. [ 140.952947][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.012018][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.048180][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 141.124951][ T21] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 141.156924][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.224717][ T21] usb 2-1: config 0 descriptor?? [ 141.251323][ T4504] usb 1-1: config 0 has no interfaces? [ 141.390406][ T1324] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 141.724433][ T21] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 141.758626][ T1324] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 141.811162][ T1324] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 141.848128][ T4504] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 141.881779][ T21] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 141.902293][ T4504] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.968668][ T1324] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 141.985662][ T4504] usb 1-1: Product: syz [ 142.006041][ T23] usb 2-1: USB disconnect, device number 12 [ 142.053013][ T4504] usb 1-1: Manufacturer: syz [ 142.080813][ T1324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.128768][ T4504] usb 1-1: SerialNumber: syz [ 142.206171][ T4504] usb 1-1: config 0 descriptor?? [ 142.246218][ T5469] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 142.306767][ T5486] fido_id[5486]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 142.493147][ T1324] usb 3-1: USB disconnect, device number 13 [ 142.531922][ T5487] udevd[5487]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.648937][ T21] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 142.717607][ T21] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 143.884815][ T5503] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 144.260932][ T1324] usb 1-1: USB disconnect, device number 9 [ 144.431836][ T5513] syzkaller1: tun_chr_ioctl cmd 35111 [ 144.583753][ T4504] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 144.887313][ T5501] netlink: 'syz.2.378': attribute type 12 has an invalid length. [ 144.952010][ T4504] usb 2-1: config 3 has an invalid interface number: 26 but max is 1 [ 145.002467][ T4504] usb 2-1: config 3 has an invalid interface number: 116 but max is 1 [ 145.118985][ T4504] usb 2-1: config 3 has no interface number 0 [ 145.154254][ T4504] usb 2-1: config 3 has no interface number 1 [ 145.194999][ T4504] usb 2-1: config 3 interface 26 has no altsetting 0 [ 145.240523][ T4504] usb 2-1: config 3 interface 116 has no altsetting 0 [ 145.509169][ T4504] usb 2-1: string descriptor 0 read error: -22 [ 145.519143][ T4504] usb 2-1: New USB device found, idVendor=1b3d, idProduct=930c, bcdDevice=bd.16 [ 145.598680][ T1324] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 145.606870][ T5537] loop6: detected capacity change from 0 to 7 [ 145.617172][ T4504] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.617187][ T5047] Dev loop6: unable to read RDB block 7 [ 145.642194][ T5047] loop6: AHDI p1 p2 p3 [ 145.646404][ T5047] loop6: partition table partially beyond EOD, truncated [ 145.663670][ T5047] loop6: p1 start 926365495 is beyond EOD, truncated [ 145.674723][ T5047] loop6: p2 size 116 extends beyond EOD, truncated [ 145.714765][ T5537] Dev loop6: unable to read RDB block 7 [ 145.728643][ T4504] ftdi_sio 2-1:3.26: FTDI USB Serial Device converter detected [ 145.764822][ T5537] loop6: AHDI p1 p2 p3 [ 145.777319][ T4504] usb 2-1: Detected FT2232C [ 145.783748][ T5537] loop6: partition table partially beyond EOD, truncated [ 145.814779][ T5537] loop6: p1 start 926365495 is beyond EOD, truncated [ 145.844479][ T5537] loop6: p2 size 116 extends beyond EOD, truncated [ 145.857328][ T1324] usb 1-1: Using ep0 maxpacket: 16 [ 146.003024][ T5047] udevd[5047]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 146.013265][ T1324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.059862][ T1324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.110285][ T1324] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.168444][ T5047] udevd[5047]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 146.178428][ T1324] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 146.234813][ T1324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.295652][ T1324] usb 1-1: config 0 descriptor?? [ 146.397791][ T1324] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 146.508158][ T3531] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 146.531216][ T3531] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 146.610594][ T3531] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 146.689306][ T3531] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 146.698795][ T23] usb 1-1: USB disconnect, device number 10 [ 146.731126][ T5530] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 147.535290][ T21] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 147.589125][ T21] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 149.987414][ T4410] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 150.172482][ T5601] netlink: 84 bytes leftover after parsing attributes in process `syz.3.405'. [ 150.241639][ T5601] netlink: 32 bytes leftover after parsing attributes in process `syz.3.405'. [ 150.534964][ T4410] usb 1-1: config 0 has no interfaces? [ 150.540677][ T4503] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 150.704144][ T4410] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 150.731410][ T4410] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.762009][ T4410] usb 1-1: Product: syz [ 150.782060][ T4410] usb 1-1: Manufacturer: syz [ 150.811595][ T4410] usb 1-1: SerialNumber: syz [ 150.816612][ T4504] ftdi_sio ttyUSB0: Unable to read latency timer: -110 [ 150.844165][ T4504] ftdi_sio ttyUSB0: Unable to write latency timer: -32 [ 150.860524][ T4410] usb 1-1: config 0 descriptor?? [ 150.875612][ T4504] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 150.907638][ T4504] ftdi_sio 2-1:3.116: FTDI USB Serial Device converter detected [ 150.943244][ T4504] usb 2-1: Detected FT2232C [ 150.972791][ T21] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 150.992843][ T4504] ftdi_sio ttyUSB1: Unable to read latency timer: -32 [ 151.016531][ T4503] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.027092][ T4504] ftdi_sio ttyUSB1: Unable to write latency timer: -32 [ 151.045212][ T4504] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 151.058174][ T4503] usb 3-1: config 0 has no interfaces? [ 151.077648][ T4503] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 151.119180][ T4503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.166737][ T4503] usb 3-1: config 0 descriptor?? [ 151.251541][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 151.371183][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.497792][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.612977][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.712824][ T21] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 151.754451][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.820349][ T21] usb 4-1: config 0 descriptor?? [ 151.916366][ T21] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 151.989073][ T3531] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 152.006512][ T3531] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 152.064685][ T3531] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 152.097346][ T4268] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 152.113643][ T3531] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 152.148231][ T3531] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 152.173858][ T21] usb 4-1: USB disconnect, device number 6 [ 152.189938][ T5605] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 152.256754][ T4410] usb 2-1: USB disconnect, device number 13 [ 152.342446][ T4410] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 152.358952][ T4410] ftdi_sio 2-1:3.26: device disconnected [ 152.397419][ T4410] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 152.412874][ T4410] ftdi_sio 2-1:3.116: device disconnected [ 153.408526][ T21] usb 1-1: USB disconnect, device number 11 [ 153.536455][ T3506] usb 3-1: USB disconnect, device number 14 [ 153.959538][ T3506] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 154.218295][ T3506] usb 3-1: Using ep0 maxpacket: 8 [ 154.327831][ T5639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.417'. [ 154.338059][ T3506] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 154.353567][ T3506] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.383808][ T3506] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.424227][ T3506] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 154.456504][ T3506] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.492778][ T3506] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 154.526309][ T3506] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.826088][ T3506] usb 3-1: usb_control_msg returned -32 [ 154.831710][ T3506] usbtmc 3-1:16.0: can't read capabilities [ 155.040159][ T5648] xt_ecn: cannot match TCP bits for non-tcp packets [ 155.563899][ T3506] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 155.642179][ T5654] usbtmc 3-1:16.0: usb_clear_halt returned -32 [ 155.824767][ T4503] usb 3-1: USB disconnect, device number 15 [ 155.840210][ T3506] usb 2-1: Using ep0 maxpacket: 8 [ 156.000800][ T3506] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 156.035655][ T3506] usb 2-1: config 0 has no interface number 0 [ 156.221033][ T3506] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 156.230458][ T3506] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.238471][ T3506] usb 2-1: Product: syz [ 156.243857][ T3506] usb 2-1: Manufacturer: syz [ 156.248578][ T3506] usb 2-1: SerialNumber: syz [ 156.264510][ T3506] usb 2-1: config 0 descriptor?? [ 156.523560][ T5653] udc-core: couldn't find an available UDC or it's busy [ 156.534159][ T5653] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 156.608916][ T3506] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 156.625240][ T3506] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized! [ 156.722371][ T3506] usb 2-1: USB disconnect, device number 14 [ 156.776722][ T5684] netlink: 24 bytes leftover after parsing attributes in process `syz.0.428'. [ 157.192869][ T5703] raw_sendmsg: syz.2.436 forgot to set AF_INET. Fix it! [ 157.823188][ T4503] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 158.201539][ T4503] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 158.214264][ T4503] usb 2-1: config 0 has no interface number 0 [ 158.235116][ T4503] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 158.278125][ T4503] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.320208][ T4503] usb 2-1: config 0 descriptor?? [ 158.385369][ T4503] usb 2-1: selecting invalid altsetting 1 [ 158.401830][ T4503] dvb_ttusb_budget: ttusb_init_controller: error [ 158.408585][ T4503] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 158.509223][ T4503] DVB: Unable to find symbol cx22700_attach() [ 158.557700][ T5736] netlink: 4344 bytes leftover after parsing attributes in process `syz.3.448'. [ 158.617386][ T5736] netlink: 104 bytes leftover after parsing attributes in process `syz.3.448'. [ 158.618794][ T4503] DVB: Unable to find symbol tda10046_attach() [ 158.659491][ T4503] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 158.718021][ T4503] usb 2-1: USB disconnect, device number 15 [ 160.034023][ T3506] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 160.402705][ T3506] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 160.420794][ T3506] usb 3-1: config 0 has no interface number 0 [ 160.443886][ T3506] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 160.481435][ T3506] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.551596][ T3506] usb 3-1: config 0 descriptor?? [ 160.658511][ T3506] usb 3-1: selecting invalid altsetting 1 [ 160.674885][ T3506] dvb_ttusb_budget: ttusb_init_controller: error [ 160.707445][ T3506] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 160.808417][ T3506] DVB: Unable to find symbol cx22700_attach() [ 160.909461][ T3506] DVB: Unable to find symbol tda10046_attach() [ 160.916468][ T3506] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 161.080205][ T5795] netlink: 88 bytes leftover after parsing attributes in process `syz.0.468'. [ 161.389056][ T3506] usb 3-1: USB disconnect, device number 16 [ 161.538065][ T1324] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 161.816979][ T1324] usb 4-1: Using ep0 maxpacket: 8 [ 161.957250][ T1324] usb 4-1: config 0 has no interfaces? [ 161.962748][ T1324] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 162.013939][ T1324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.057686][ T1324] usb 4-1: config 0 descriptor?? [ 162.312626][ T1324] usb 4-1: USB disconnect, device number 7 [ 162.835556][ T4216] usb 5-1: Direct firmware load for ti_3410.fw failed with error -2 [ 162.860943][ T4216] usb 5-1: Falling back to sysfs fallback for: ti_3410.fw [ 163.026640][ T5840] tipc: Enabled bearer , priority 10 [ 163.042377][ T23] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 163.067601][ T5841] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 163.133771][ T5843] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 163.244099][ T5843] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 163.254294][ T5843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.264336][ T5843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.280472][ T5843] device bridge_slave_0 left promiscuous mode [ 163.290112][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.291505][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 163.386044][ T5843] device bridge_slave_1 left promiscuous mode [ 163.393804][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.416410][ T5843] bond0: (slave bond_slave_0): Releasing backup interface [ 163.498293][ T5843] bond0: (slave bond_slave_1): Releasing backup interface [ 163.530755][ T21] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 163.594139][ T23] usb 2-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 163.639691][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.679834][ T23] usb 2-1: Product: syz [ 163.684351][ T23] usb 2-1: Manufacturer: syz [ 163.709544][ T23] usb 2-1: SerialNumber: syz [ 163.772440][ T23] usb 2-1: config 0 descriptor?? [ 163.790920][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 163.818593][ T23] empeg 2-1:0.0: empeg converter detected [ 163.839884][ T5843] team0: Port device team_slave_0 removed [ 163.857800][ T23] usb 2-1: active config #0 != 1 ?? [ 163.901463][ T5843] team0: Port device team_slave_1 removed [ 163.919331][ T21] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 163.940244][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.947667][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.955160][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.998061][ T21] usb 4-1: config 0 descriptor?? [ 164.053486][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.071831][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.102080][ T21] as10x_usb: device has been detected [ 164.135295][ T21] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 164.206434][ T21] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 164.452360][ T21] as10x_usb: error during firmware upload part1 [ 164.487403][ T21] Registered device nBox DVB-T Dongle [ 164.507024][ T21] usb 4-1: USB disconnect, device number 8 [ 164.603831][ T21] Unregistered device nBox DVB-T Dongle [ 164.626778][ T21] as10x_usb: device has been disconnected [ 165.494803][ T1324] usb 2-1: USB disconnect, device number 16 [ 166.908077][ T1324] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 167.157157][ T1324] usb 3-1: Using ep0 maxpacket: 8 [ 167.277033][ T1324] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.338922][ T1324] usb 3-1: config 0 has no interfaces? [ 167.466304][ T1324] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.515806][ T1324] usb 3-1: config 0 has no interfaces? [ 167.626109][ T1324] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.636644][ T1324] usb 3-1: config 0 has no interfaces? [ 167.725275][ T1324] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.792164][ T1324] usb 3-1: config 0 has no interfaces? [ 167.813984][ T1324] usb 3-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 167.848736][ T1324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.882399][ T1324] usb 3-1: config 0 descriptor?? [ 168.373528][ T5925] kvm: MWAIT instruction emulated as NOP! [ 170.616227][ T5955] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 170.623239][ T5955] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 170.740118][ T5955] vhci_hcd vhci_hcd.0: Device attached [ 170.752471][ T5956] vhci_hcd: connection closed [ 170.756146][ T4407] vhci_hcd: stop threads [ 170.772954][ T4407] vhci_hcd: release socket [ 170.778826][ T4407] vhci_hcd: disconnect device [ 170.849946][ T5961] fuse: Bad value for 'rootmode' [ 171.206924][ T3506] usb 3-1: USB disconnect, device number 17 [ 171.410107][ T26] audit: type=1326 audit(1748650279.651:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4b6193db39 code=0x7ffc0000 [ 171.500700][ T5981] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 171.522361][ T26] audit: type=1326 audit(1748650279.681:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4b6193db39 code=0x7ffc0000 [ 171.548722][ T26] audit: type=1326 audit(1748650279.681:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4b6193db39 code=0x7ffc0000 [ 171.644565][ T26] audit: type=1326 audit(1748650279.681:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b619a1969 code=0x7ffc0000 [ 171.707181][ T26] audit: type=1326 audit(1748650279.681:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4b6193db39 code=0x7ffc0000 [ 171.791959][ T26] audit: type=1326 audit(1748650279.681:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b619a1969 code=0x7ffc0000 [ 171.819248][ T26] audit: type=1326 audit(1748650279.681:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b619a1969 code=0x7ffc0000 [ 171.953125][ T26] audit: type=1326 audit(1748650279.681:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b619a1969 code=0x7ffc0000 [ 172.079016][ T26] audit: type=1326 audit(1748650279.681:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b619a1969 code=0x7ffc0000 [ 172.174564][ T5995] device syzkaller1 entered promiscuous mode [ 172.205339][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.528'. [ 172.253559][ T26] audit: type=1326 audit(1748650279.681:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b619a1969 code=0x7ffc0000 [ 172.626030][ T6002] fuse: Unknown parameter 'user_i00000000000000000000' [ 173.445850][ T6016] Zero length message leads to an empty skb [ 173.747930][ T6031] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 174.552319][ T4503] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 175.310000][ T4503] usb 2-1: config 0 has no interfaces? [ 175.539300][ T4503] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 175.568724][ T4503] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.608098][ T4503] usb 2-1: Product: syz [ 175.622823][ T4503] usb 2-1: Manufacturer: syz [ 175.627474][ T4503] usb 2-1: SerialNumber: syz [ 175.661310][ T4503] usb 2-1: config 0 descriptor?? [ 176.006931][ T6085] SET target dimension over the limit! [ 177.369888][ T6117] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 177.515172][ T21] usb 2-1: USB disconnect, device number 17 [ 177.826718][ T6134] usb usb8: usbfs: process 6134 (syz.2.577) did not claim interface 0 before use [ 178.579970][ T3506] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 178.725895][ T6161] netlink: 148 bytes leftover after parsing attributes in process `syz.0.588'. [ 178.819219][ T3506] usb 3-1: Using ep0 maxpacket: 8 [ 178.859287][ T3506] usb 3-1: no configurations [ 178.863990][ T3506] usb 3-1: can't read configurations, error -22 [ 179.048524][ T3506] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 179.327658][ T3506] usb 3-1: Using ep0 maxpacket: 8 [ 179.377791][ T3506] usb 3-1: no configurations [ 179.382446][ T3506] usb 3-1: can't read configurations, error -22 [ 179.434972][ T3506] usb usb3-port1: attempt power cycle [ 179.866147][ T3506] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 179.985884][ T3506] usb 3-1: Using ep0 maxpacket: 8 [ 180.065775][ T3506] usb 3-1: no configurations [ 180.082637][ T3506] usb 3-1: can't read configurations, error -22 [ 180.274931][ T3506] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 180.385091][ T3506] usb 3-1: Using ep0 maxpacket: 8 [ 180.444696][ T3506] usb 3-1: no configurations [ 180.449458][ T3506] usb 3-1: can't read configurations, error -22 [ 180.480000][ T3506] usb usb3-port1: unable to enumerate USB device [ 182.032902][ T6236] netlink: 'syz.3.616': attribute type 10 has an invalid length. [ 182.056843][ T6236] netlink: 40 bytes leftover after parsing attributes in process `syz.3.616'. [ 182.272671][ T6236] team0: Port device geneve0 added [ 182.392487][ T6250] netlink: 104 bytes leftover after parsing attributes in process `syz.0.620'. [ 182.563170][ T6264] netlink: 'syz.2.625': attribute type 29 has an invalid length. [ 182.615932][ T6264] netlink: 'syz.2.625': attribute type 29 has an invalid length. [ 182.715508][ T6268] netlink: 24 bytes leftover after parsing attributes in process `syz.4.626'. [ 182.733734][ T6266] netlink: 'syz.2.625': attribute type 29 has an invalid length. [ 185.320998][ T4410] Bluetooth: hci0: command 0x0406 tx timeout [ 185.321042][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 185.334404][ T4410] Bluetooth: hci3: command 0x0406 tx timeout [ 185.371415][ T4410] Bluetooth: hci4: command 0x0406 tx timeout [ 185.386470][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 185.430902][ T26] kauditd_printk_skb: 189 callbacks suppressed [ 185.430918][ T26] audit: type=1326 audit(1748650293.713:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd68fc969 code=0x7ffc0000 [ 185.665996][ T26] audit: type=1326 audit(1748650293.753:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f1fd68fc969 code=0x7ffc0000 [ 185.689919][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 185.809629][ T3506] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 185.894447][ T26] audit: type=1326 audit(1748650293.753:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd68fc969 code=0x7ffc0000 [ 186.001849][ T26] audit: type=1326 audit(1748650293.753:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f1fd68fc969 code=0x7ffc0000 [ 186.068822][ T3506] usb 3-1: Using ep0 maxpacket: 16 [ 186.089303][ T26] audit: type=1326 audit(1748650293.753:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd68fc969 code=0x7ffc0000 [ 186.118767][ T23] usb 4-1: config 0 has no interfaces? [ 186.173964][ T26] audit: type=1326 audit(1748650293.753:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fd68fc969 code=0x7ffc0000 [ 186.249440][ T26] audit: type=1326 audit(1748650293.753:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd68fc969 code=0x7ffc0000 [ 186.311875][ T23] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 186.332499][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.341565][ T26] audit: type=1326 audit(1748650293.753:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fd68fc969 code=0x7ffc0000 [ 186.376366][ T23] usb 4-1: Product: syz [ 186.397096][ T23] usb 4-1: Manufacturer: syz [ 186.419170][ T23] usb 4-1: SerialNumber: syz [ 186.481421][ T23] usb 4-1: config 0 descriptor?? [ 186.499142][ T26] audit: type=1326 audit(1748650293.753:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd68fc969 code=0x7ffc0000 [ 186.581462][ T26] audit: type=1326 audit(1748650293.753:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1fd68fc969 code=0x7ffc0000 [ 187.121430][ T6362] xt_CT: No such helper "syz0" [ 187.783619][ T6375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'. [ 188.048295][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.666'. [ 189.326605][ T23] usb 4-1: USB disconnect, device number 9 [ 189.390703][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.434179][ T6402] loop8: detected capacity change from 0 to 7 [ 189.462891][ T5047] Dev loop8: unable to read RDB block 7 [ 189.473173][ T5047] loop8: AHDI p1 p3 p4 [ 189.478611][ T6401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.506100][ T5047] loop8: partition table partially beyond EOD, truncated [ 189.506597][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.551405][ T5047] loop8: p1 start 975770946 is beyond EOD, truncated [ 189.576760][ T5047] loop8: p3 start 6514546 is beyond EOD, truncated [ 189.583805][ T6401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.660379][ T3506] usb 3-1: unable to get BOS descriptor or descriptor too short [ 189.670439][ T6402] Dev loop8: unable to read RDB block 7 [ 189.670464][ T6402] loop8: AHDI p1 p3 p4 [ 189.670480][ T6402] loop8: partition table partially beyond EOD, truncated [ 189.670610][ T6402] loop8: p1 start 975770946 is beyond EOD, truncated [ 189.670625][ T6402] loop8: p3 start 6514546 is beyond EOD, truncated [ 189.719745][ T3506] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 189.719793][ T3506] usb 3-1: can't read configurations, error -71 [ 190.427995][ T26] kauditd_printk_skb: 524 callbacks suppressed [ 190.428009][ T26] audit: type=1326 audit(1748650298.726:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.3.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb43b008b39 code=0x7ffc0000 [ 190.592512][ T26] audit: type=1326 audit(1748650298.756:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.3.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb43b008b39 code=0x7ffc0000 [ 190.614722][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.754588][ T26] audit: type=1326 audit(1748650298.756:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.3.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb43b008b39 code=0x7ffc0000 [ 190.865358][ T26] audit: type=1326 audit(1748650298.756:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.3.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb43b008b39 code=0x7ffc0000 [ 190.993881][ T26] audit: type=1326 audit(1748650298.756:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.3.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb43b008b39 code=0x7ffc0000 [ 191.016008][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.123989][ T26] audit: type=1326 audit(1748650298.756:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.3.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb43b008b39 code=0x7ffc0000 [ 191.146661][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.202331][ T26] audit: type=1326 audit(1748650298.756:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.3.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb43b008b39 code=0x7ffc0000 [ 191.283687][ T6437] netlink: 24 bytes leftover after parsing attributes in process `syz.4.683'. [ 191.354659][ T26] audit: type=1326 audit(1748650298.756:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.3.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb43b008b39 code=0x7ffc0000 [ 191.461654][ T26] audit: type=1326 audit(1748650298.756:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.3.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb43b008b39 code=0x7ffc0000 [ 191.657854][ T26] audit: type=1326 audit(1748650298.756:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.3.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb43b008b39 code=0x7ffc0000 [ 192.782003][ T4410] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 193.042881][ T4410] usb 3-1: Using ep0 maxpacket: 16 [ 193.066670][ T6468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.354753][ T4410] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 193.388969][ T4410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.427185][ T4410] usb 3-1: Product: syz [ 193.435599][ T4410] usb 3-1: Manufacturer: syz [ 193.440289][ T4410] usb 3-1: SerialNumber: syz [ 193.466517][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.472905][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.474397][ T4410] r8152-cfgselector 3-1: config 0 descriptor?? [ 193.593559][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.701'. [ 193.882880][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.703'. [ 194.049262][ T4410] r8152-cfgselector 3-1: Unknown version 0x0000 [ 194.059153][ T4410] r8152-cfgselector 3-1: bad CDC descriptors [ 194.102235][ T4410] r8152-cfgselector 3-1: Unknown version 0x0000 [ 194.161110][ T4410] r8152-cfgselector 3-1: USB disconnect, device number 24 [ 194.630217][ T6516] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 67108897, id = 0 [ 195.758440][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.716'. [ 195.787991][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.716'. [ 196.031980][ T6542] netlink: 20 bytes leftover after parsing attributes in process `syz.3.717'. [ 196.710327][ T6562] netlink: 56 bytes leftover after parsing attributes in process `syz.4.725'. [ 197.082253][ T4503] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 197.260030][ T6575] [ 197.262488][ T6575] ====================================================== [ 197.269684][ T6575] WARNING: possible circular locking dependency detected [ 197.276696][ T6575] 5.15.184-syzkaller #0 Not tainted [ 197.281891][ T6575] ------------------------------------------------------ [ 197.288976][ T6575] syz.1.732/6575 is trying to acquire lock: [ 197.294869][ T6575] ffff888074d28b98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 197.305305][ T6575] [ 197.305305][ T6575] but task is already holding lock: [ 197.312652][ T6575] ffff888074d28ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 197.321956][ T6575] [ 197.321956][ T6575] which lock already depends on the new lock. [ 197.321956][ T6575] [ 197.332343][ T6575] [ 197.332343][ T6575] the existing dependency chain (in reverse order) is: [ 197.341346][ T6575] [ 197.341346][ T6575] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 197.349002][ T6575] __mutex_lock_common+0x1eb/0x2390 [ 197.354717][ T6575] mutex_lock_nested+0x17/0x20 [ 197.359992][ T6575] hci_dev_do_close+0x5f/0x1030 [ 197.365349][ T6575] hci_rfkill_set_block+0x10a/0x190 [ 197.371054][ T6575] rfkill_set_block+0x1c6/0x420 [ 197.376420][ T6575] rfkill_fop_write+0x458/0x560 [ 197.381803][ T6575] vfs_write+0x300/0xd00 [ 197.386555][ T6575] ksys_write+0x14d/0x250 [ 197.391393][ T6575] do_syscall_64+0x4c/0xa0 [ 197.396330][ T6575] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 197.402738][ T6575] [ 197.402738][ T6575] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 197.410724][ T6575] __mutex_lock_common+0x1eb/0x2390 [ 197.416443][ T6575] mutex_lock_nested+0x17/0x20 [ 197.421728][ T6575] rfkill_register+0x33/0x8a0 [ 197.426922][ T6575] hci_register_dev+0x452/0x970 [ 197.432284][ T6575] vhci_create_device+0x32c/0x5c0 [ 197.437818][ T6575] vhci_write+0x391/0x450 [ 197.442661][ T6575] vfs_write+0x712/0xd00 [ 197.447416][ T6575] ksys_write+0x14d/0x250 [ 197.452258][ T6575] do_syscall_64+0x4c/0xa0 [ 197.457199][ T6575] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 197.463607][ T6575] [ 197.463607][ T6575] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 197.471436][ T6575] __mutex_lock_common+0x1eb/0x2390 [ 197.477153][ T6575] mutex_lock_nested+0x17/0x20 [ 197.482432][ T6575] vhci_send_frame+0x88/0x100 [ 197.487620][ T6575] hci_send_frame+0x1a9/0x2e0 [ 197.492811][ T6575] hci_tx_work+0x9f9/0x1710 [ 197.497833][ T6575] process_one_work+0x863/0x1000 [ 197.503283][ T6575] worker_thread+0xaa8/0x12a0 [ 197.508484][ T6575] kthread+0x436/0x520 [ 197.513056][ T6575] ret_from_fork+0x1f/0x30 [ 197.517981][ T6575] [ 197.517981][ T6575] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 197.527261][ T6575] __lock_acquire+0x2c33/0x7c60 [ 197.532628][ T6575] lock_acquire+0x197/0x3f0 [ 197.537647][ T6575] __flush_work+0xdd/0x1b0 [ 197.542657][ T6575] hci_dev_do_close+0x1e7/0x1030 [ 197.548119][ T6575] hci_rfkill_set_block+0x10a/0x190 [ 197.553832][ T6575] rfkill_set_block+0x1c6/0x420 [ 197.559213][ T6575] rfkill_fop_write+0x458/0x560 [ 197.564569][ T6575] vfs_write+0x300/0xd00 [ 197.569421][ T6575] ksys_write+0x14d/0x250 [ 197.574258][ T6575] do_syscall_64+0x4c/0xa0 [ 197.579180][ T6575] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 197.585582][ T6575] [ 197.585582][ T6575] other info that might help us debug this: [ 197.585582][ T6575] [ 197.595971][ T6575] Chain exists of: [ 197.595971][ T6575] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 197.595971][ T6575] [ 197.610918][ T6575] Possible unsafe locking scenario: [ 197.610918][ T6575] [ 197.618366][ T6575] CPU0 CPU1 [ 197.623712][ T6575] ---- ---- [ 197.629063][ T6575] lock(&hdev->req_lock); [ 197.633470][ T6575] lock(rfkill_global_mutex); [ 197.640741][ T6575] lock(&hdev->req_lock); [ 197.647661][ T6575] lock((work_completion)(&hdev->tx_work)); [ 197.653622][ T6575] [ 197.653622][ T6575] *** DEADLOCK *** [ 197.653622][ T6575] [ 197.661752][ T6575] 2 locks held by syz.1.732/6575: [ 197.666757][ T6575] #0: ffffffff8d4b2608 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 197.676838][ T6575] #1: ffff888074d28ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 197.686569][ T6575] [ 197.686569][ T6575] stack backtrace: [ 197.692448][ T6575] CPU: 1 PID: 6575 Comm: syz.1.732 Not tainted 5.15.184-syzkaller #0 [ 197.700512][ T6575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.710558][ T6575] Call Trace: [ 197.713822][ T6575] [ 197.716742][ T6575] dump_stack_lvl+0x168/0x230 [ 197.721407][ T6575] ? load_image+0x3b0/0x3b0 [ 197.725905][ T6575] ? show_regs_print_info+0x20/0x20 [ 197.731092][ T6575] ? print_circular_bug+0x12b/0x1a0 [ 197.736273][ T6575] check_noncircular+0x274/0x310 [ 197.741198][ T6575] ? add_chain_block+0x940/0x940 [ 197.746123][ T6575] ? lockdep_lock+0xdc/0x1e0 [ 197.750719][ T6575] ? mark_lock+0x94/0x320 [ 197.755034][ T6575] __lock_acquire+0x2c33/0x7c60 [ 197.759877][ T6575] ? lockdep_unlock+0x134/0x2d0 [ 197.764712][ T6575] ? lockdep_lock+0x1e0/0x1e0 [ 197.769378][ T6575] ? mark_lock+0x94/0x320 [ 197.773697][ T6575] ? verify_lock_unused+0x140/0x140 [ 197.778884][ T6575] ? __lock_acquire+0x12d9/0x7c60 [ 197.783906][ T6575] lock_acquire+0x197/0x3f0 [ 197.788397][ T6575] ? __flush_work+0xc1/0x1b0 [ 197.792978][ T6575] ? __mutex_trylock_common+0x14f/0x250 [ 197.798512][ T6575] ? read_lock_is_recursive+0x10/0x10 [ 197.803876][ T6575] ? lock_chain_count+0x20/0x20 [ 197.808713][ T6575] ? mark_lock+0x94/0x320 [ 197.813031][ T6575] __flush_work+0xdd/0x1b0 [ 197.817437][ T6575] ? __flush_work+0xc1/0x1b0 [ 197.822010][ T6575] ? flush_work+0x20/0x20 [ 197.826324][ T6575] ? hci_leds_update_powered+0x148/0x160 [ 197.831943][ T6575] ? rcu_lock_release+0x5/0x20 [ 197.836696][ T6575] ? __lock_acquire+0x7c60/0x7c60 [ 197.841731][ T6575] hci_dev_do_close+0x1e7/0x1030 [ 197.846687][ T6575] ? _raw_spin_unlock+0x40/0x40 [ 197.851555][ T6575] hci_rfkill_set_block+0x10a/0x190 [ 197.856743][ T6575] ? rcu_lock_release+0x20/0x20 [ 197.861585][ T6575] rfkill_set_block+0x1c6/0x420 [ 197.866440][ T6575] rfkill_fop_write+0x458/0x560 [ 197.871277][ T6575] ? rfkill_fop_read+0x4b0/0x4b0 [ 197.876198][ T6575] ? common_file_perm+0x110/0x1c0 [ 197.881209][ T6575] ? fsnotify_perm+0x5d/0x560 [ 197.885873][ T6575] ? security_file_permission+0x75/0xa0 [ 197.891403][ T6575] ? rfkill_fop_read+0x4b0/0x4b0 [ 197.896352][ T6575] vfs_write+0x300/0xd00 [ 197.900588][ T6575] ? file_end_write+0x250/0x250 [ 197.905427][ T6575] ? __fget_files+0x40f/0x480 [ 197.910091][ T6575] ? __fdget_pos+0x1e2/0x370 [ 197.914682][ T6575] ? ksys_write+0x71/0x250 [ 197.919088][ T6575] ksys_write+0x14d/0x250 [ 197.923408][ T6575] ? __ia32_sys_read+0x80/0x80 [ 197.928169][ T6575] ? lockdep_hardirqs_on+0x94/0x140 [ 197.933371][ T6575] do_syscall_64+0x4c/0xa0 [ 197.937790][ T6575] ? clear_bhb_loop+0x30/0x80 [ 197.942453][ T6575] ? clear_bhb_loop+0x30/0x80 [ 197.947115][ T6575] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 197.953010][ T6575] RIP: 0033:0x7f4b619a1969 [ 197.957414][ T6575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.977009][ T6575] RSP: 002b:00007f4b5f809038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 197.985411][ T6575] RAX: ffffffffffffffda RBX: 00007f4b61bc8fa0 RCX: 00007f4b619a1969 [ 197.993375][ T6575] RDX: 0000000000000008 RSI: 0000200000000300 RDI: 0000000000000009 [ 198.001331][ T6575] RBP: 00007f4b61a23ab1 R08: 0000000000000000 R09: 0000000000000000 [ 198.009288][ T6575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.017246][ T6575] R13: 0000000000000000 R14: 00007f4b61bc8fa0 R15: 00007ffeaa48ff28 [ 198.025214][ T6575] [ 198.092085][ T26] kauditd_printk_skb: 672 callbacks suppressed [ 198.092100][ T26] audit: type=1326 audit(1748650306.404:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.4.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2cec9969 code=0x7ffc0000 [ 198.161803][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.730'. [ 198.179871][ T4503] usb 3-1: config index 0 descriptor too short (expected 63524, got 36) [ 198.187296][ T26] audit: type=1326 audit(1748650306.444:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.4.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b2cecb887 code=0x7ffc0000 [ 198.210592][ T4260] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 198.220317][ T26] audit: type=1326 audit(1748650306.444:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.4.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2b2cecb7fc code=0x7ffc0000 [ 198.246463][ T4503] usb 3-1: config 227 has too many interfaces: 94, using maximum allowed: 32 [ 198.246866][ T26] audit: type=1326 audit(1748650306.444:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.4.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2b2cecb734 code=0x7ffc0000 [ 198.280197][ T26] audit: type=1326 audit(1748650306.444:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.4.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2b2cecb734 code=0x7ffc0000 [ 198.304653][ T4503] usb 3-1: config 227 has an invalid descriptor of length 37, skipping remainder of the config [ 198.315833][ T4503] usb 3-1: config 227 has 0 interfaces, different from the descriptor's value: 94 [ 198.326260][ T26] audit: type=1326 audit(1748650306.444:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.4.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2b2cec85ca code=0x7ffc0000 [ 198.326771][ T4503] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 198.348357][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.354452][ T26] audit: type=1326 audit(1748650306.444:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.4.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2cec9969 code=0x7ffc0000 [ 198.387623][ T26] audit: type=1326 audit(1748650306.444:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.4.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b2cec9969 code=0x7ffc0000 [ 198.410862][ T26] audit: type=1326 audit(1748650306.444:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.4.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2cec9969 code=0x7ffc0000 [ 198.433912][ T26] audit: type=1326 audit(1748650306.464:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.4.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b2cec9969 code=0x7ffc0000 [ 198.460479][ T4503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.500127][ T4260] usb 1-1: Using ep0 maxpacket: 16 [ 198.739743][ T6566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.724'. [ 198.798489][ T4260] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 198.807654][ T4260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.822073][ T4260] usb 1-1: Product: syz [ 198.828370][ T4260] usb 1-1: Manufacturer: syz [ 198.833115][ T4260] usb 1-1: SerialNumber: syz [ 198.841018][ T4260] usb 1-1: config 0 descriptor?? [ 198.848342][ T4503] usb 3-1: string descriptor 0 read error: -71 [ 198.862961][ T4503] usb 3-1: USB disconnect, device number 25 [ 198.882385][ T4260] as10x_usb: device has been detected [ 198.888470][ T4260] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 198.901935][ T4260] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 198.913095][ T4260] as10x_usb: error during firmware upload part1 [ 198.919774][ T4260] Registered device Sky IT Digital Key (green led) [ 199.081064][ T4503] usb 1-1: USB disconnect, device number 12 [ 199.101208][ T4503] Unregistered device Sky IT Digital Key (green led) [ 199.102826][ T4503] as10x_usb: device has been disconnected [ 202.117105][ T3546] udevd[3546]: worker [4269] /devices/platform/dummy_hcd.4/usb5/5-1 is taking a long time