last executing test programs: 4.088905751s ago: executing program 2 (id=395): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000140)={0x1d}) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008050000010b"], 0x88) 3.875123396s ago: executing program 2 (id=397): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) readv(r2, &(0x7f0000000180), 0x0) read(r2, &(0x7f00000004c0)=""/85, 0x55) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$snddsp(r2, &(0x7f0000000340)="87ecc00c05dbb58b776f34f9b779d998d21e0e3353174bb169f81d1590532836dee3667c58e173cdd67b", 0x2a) openat$kvm(0xffffffffffffff9c, 0x0, 0x8ab43, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) 3.651581431s ago: executing program 0 (id=401): semtimedop(0x0, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}], 0x1, 0x0) 3.516031834s ago: executing program 0 (id=402): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0xff, 0x0) msgrcv(r0, &(0x7f00000005c0)={0x0, ""/252}, 0x104, 0x1, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000480)=""/177) 3.397407767s ago: executing program 2 (id=404): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000280)={[{@noblock_validity}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRESOCT=r0], 0x20) 3.342862649s ago: executing program 0 (id=405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$ethtool(0x0, r1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000810}, 0x24040041) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="dbbbb308"], 0x0) r6 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r6, &(0x7f0000002200)=ANY=[], 0xfffffcd9) 2.695107094s ago: executing program 3 (id=410): setns(0xc9, 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNADDRESOURCE(r0, 0x89ee, &(0x7f0000000040)=0x1) ioctl$SIOCPNADDRESOURCE(r0, 0x89ee, &(0x7f0000000200)=0x1) 2.645554516s ago: executing program 2 (id=411): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00000004000000080000000200"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x4800, 0x3}, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380)={[], [{@subj_type={'subj_type', 0x3d, '#\xa1 '}}, {@uid_lt}]}, 0xff, 0x55c, &(0x7f0000000440)="$eJzs3c9rHFUcAPDvbDb9rU2hFPQgwR6s1G6axB8VPNSjaLGg97ok01Cy6ZbspjSxYHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzUx+7ubntkndzwdm+97O27757pv3+mbelA2gZw1mL6WIVyLi2yTi+Ip95ch3Di6Wm396eyzbklhY+OyvJJL8vaJ8kv95tMiUI377OuJsaVWVA9lLY3ZuslqrpdP5m0PNqRtDjdm5c9emqhPpRHp9ZHT0wjujI++/9+7aQ07u7DDWNy//88OnDz+68M3p+e9/eXzifhIX41i+b2Ucu7Dq0AZjMP9O+uPimoLDXahsP0n2+gDYkb68n/dHNgYcj7681wP/f19FxALQoxL9H3pUMQ8oru27dB38wnjy4eIF0Pr4y4v3RuJQ69royHyy6sooKW5k7FJWx69/PrifbdG9+xAAm7pzNyLOl8vrx78kH/927vwWyqytw/gHz8/DbP7zVrv5T2lp/hNt5j9H2/Tdndi8/5ced6GajrL53wdt57/5otVADPTluZda2f7k6rVamo1tL0fEmeg/mOU3Ws+5MP9oodO+lfO/bMvqL+aC+XE8Lh9c/ZnxarO6u6iXPbkb8Wrb+W+y1P5Jm/bPvo/LW6zjVPrgtU77No//2Vr4OeKNtu2/vKKVbLw+OdQ6H4aKs2K9v++d+r1T/Xsdf9b+RzaOfyBZuV7b2H4dPx36N+20r2P8B4oS7c//A8nnrXRR7Fa12ZwejjiQfLL+/ZHlzxb5onwW/5nTG49/7c7/wxHxxRbjv3fyXseiu2r/Liy6ZvGPb6v9t5949PGXP24//kv53Yms/d9ulT2Tf2Yr499WD3D33yAAAAAAAADsH6WIOBZJqbKULpUqlcXnO07GkVKt3mievVp/PVr7Ws8/lIqV7uMrnocYzp+HLfIja/KjEXEiIr7rO9zKV8bqtfG9Dh4AAAAAAAAAAAAAAAAAAAD2iaMd/v9/5o++vT464Jnzk9/Quzbt/934pSdgX/LvP/Qu/R96l/4PvUv/h96l/0Pv0v+hd+n/0Lv0fwAAAAAAAAAAAAAAAAAAAAAAAAAAAOiqy5cuZdvC/NPbY1l+/ObszGT95rnxtDFZmZoZq4zVp29UJur1iVpaGatPbfb31er1G8MjMXNrqJk2mkON2bkrU/WZ680r16aqE+mVtP+5RAUAAAAAAAAAAAAAAAAAAAAvlsbs3GS1VkunJSR2lCjvj8OQ6HJir0cmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFj2XwAAAP//4Uw7cA==") ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r2, 0x0, 0x7aef, 0x3}) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x659f, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r5], 0x14}, 0x1, 0x800e0000, 0x0, 0x80}, 0x40006) socket$kcm(0x1e, 0x1, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000580)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "10103a", 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0xc2, 0x0, 0x0, 0x8, {[@md5sig={0x13, 0x12, "345f8cf949a01b515682f44cecac91ba"}, @md5sig={0x1d, 0x12, "d2b653e0c9d32072c19dd6ca814b7d7b"}]}}}}}}}}, 0x0) write$binfmt_script(r3, &(0x7f00000000c0), 0x28) recvmmsg(r3, &(0x7f000000e080)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002000, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000004, 0x5d032, 0xffffffffffffffff, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0xe, &(0x7f0000000040)=0x10, 0x4) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, &(0x7f0000000080)) 2.48487397s ago: executing program 3 (id=413): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x1) unlinkat(r2, &(0x7f0000000700)='./file0\x00', 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0xeeee0002, 0xdddd1000, 0xa, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x6000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0xb2, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0xe2, 0x0, 0x0, 0xff, 0x0, 0xbe, 0x0, 0x4}, {0xdddd0000, 0x10000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x8000000, 0x0, 0x6, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x4, 0x0, 0x1]}) close(0x5) close(0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.61905254s ago: executing program 2 (id=418): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) listen(r0, 0xa01) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x800, 0x0) 1.316817378s ago: executing program 4 (id=420): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x9}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x2, "e30265b9f8cc9b189deac112d8ad627a"}}}, @TCA_RATE={0x6, 0x5, {0x3c, 0xfb}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) 1.160925712s ago: executing program 1 (id=421): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x9, 0xffff, 0x0, 0xfffffffffffffffd, 0x8800, 0x6, 0xc9, 0x3, 0x2, 0x33, 0x7, 0x4000000003, 0x3, 0xea, 0x5, 0x1], 0x8000000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.160666712s ago: executing program 0 (id=422): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}}, 0x0) 1.062046154s ago: executing program 4 (id=423): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0xfffffffffffffffc, &(0x7f0000000480)="18607651149d7b10b4024fbbdc08899b8f589df2db8ebcd920a2b5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b250a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7") ptrace$getregset(0x4204, r1, 0x200, &(0x7f0000000280)={&(0x7f0000000200)=""/80, 0x50}) syz_open_procfs(r1, &(0x7f0000000180)='coredump_filter\x00') r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mremap(&(0x7f0000812000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r3 = syz_open_dev$admmidi(&(0x7f00000001c0), 0x20, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) clock_gettime(0x0, &(0x7f0000000540)) ppoll(&(0x7f0000000440)=[{r2, 0x4040}, {0xffffffffffffffff, 0x9080}, {r4, 0x1008}, {r3, 0x80}, {0xffffffffffffffff, 0x1}], 0x5, 0x0, &(0x7f00000005c0)={[0x1]}, 0x8) read$midi(r3, &(0x7f00000002c0)=""/91, 0x5b) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 997.808216ms ago: executing program 0 (id=424): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000c80)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008}, 0x40) 864.852279ms ago: executing program 1 (id=425): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x7}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0x8e}]}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x100002}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xd, 0x1, 0x6, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) 801.05702ms ago: executing program 0 (id=426): lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) pread64(r1, &(0x7f0000000700)=""/115, 0x73, 0x5) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x8}) close(r1) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0xf1, 0x64, 0x96, 0x40, 0x7c0, 0x158b, 0xd9d2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x40, 0x4, 0xe0, 0x1, "", [{{0x9, 0x4, 0x2c, 0x7, 0x1, 0xa7, 0x3a, 0x30, 0x6, [], [{{0x9, 0x5, 0x83, 0x3, 0x200, 0x39, 0x7, 0x9}}]}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) r5 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES8=r4, @ANYRES32, @ANYRES32=0x0, @ANYRES32=r1, @ANYRES64=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12015002de10bc350701dab80102030109021200017f0450000904d00b00ffffff00000016b99b708a731b0d39a22363ff3fb5823dff2e601bc7a31e654019272037c831470195f02bd44f4fbab10de1a4d7969368fac3ba407d6448214da9d8be1bd7c267b4effc11aa31c62a35134e1eb93dc041b87227feecc5e12704042c66e268df23c4d981903a151b1888da69b001ecb9becb071a3d6f49a1f1bdd8e8e797799621d2a9c227d7896834ad84f8811d3e385059c57ba831483dee6280c8bb6bb922d86518108ce820ca6ef9ed34e4dd891e5ca8adc7"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x1b}, @const={0x739, {0xff, 0x805, 0x2, 0x6}}}) r7 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) ioctl$EVIOCSCLOCKID(r7, 0x40084503, &(0x7f0000ffcffc)) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) syz_open_dev$media(&(0x7f0000000080), 0xfffffffffffffffe, 0x40) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x180001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) close(r0) 789.76213ms ago: executing program 1 (id=427): r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, &(0x7f0000000200)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x24) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)='h', 0x1}], 0x1, &(0x7f0000000800)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0) 656.780124ms ago: executing program 2 (id=428): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) read(r1, &(0x7f00000004c0)=""/85, 0x55) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$snddsp(r1, &(0x7f0000000340)="87ecc00c05dbb58b776f34f9b779d998d21e0e3353174bb169f81d1590532836dee3667c58e173cdd67b", 0x2a) openat$kvm(0xffffffffffffff9c, 0x0, 0x8ab43, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) r2 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) sendmsg$kcm(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000980)="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", 0x4fa}], 0x1}, 0x40) 614.777355ms ago: executing program 1 (id=429): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 565.944656ms ago: executing program 1 (id=430): socket$inet6(0xa, 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x80002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000140)=0x8, 0x4) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="02043c00ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066", 0x2a, 0x800, 0x0, 0x0) 450.621609ms ago: executing program 1 (id=431): semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000800)=ANY=[@ANYBLOB="001102"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semop(0x0, &(0x7f00000000c0)=[{0x2}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0xfffffffe) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x8, 0xfb6, 0x0, 0xffffffffffffff03, 0x34, 0x4, 0x9, 0x10, 0x7, 0x8000000000000000, 0x8, 0x1, 0xabb, 0x7, 0x1, 0x403], 0x1, 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_usb_connect(0x3, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000590760205f0501d0928c000000010902120001100000000904"], 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000540)={0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="132b9ad4dfd38de4fc97c8f371613ba47af74fa2e71ae46ec3b7875ada8a95387ae0c04e5fc97cda9e868d0000000000000000383e32527c3a6ecc14f46354e3c18377f849581f5ba40317d413ad168008b2fd94f47f389a1149b905c7c9eb6069ec4bd8fd336a30f688a243f25fcb"], 0x0, 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xb, 0xb}, {0xa}}, [@TCA_RATE={0x6, 0x5, {0x4, 0xd}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5c061}, 0x400c840) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x41814) io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) socket$nl_netfilter(0x10, 0x3, 0xc) 450.262639ms ago: executing program 4 (id=432): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 284.865183ms ago: executing program 3 (id=433): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='bic', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 284.548183ms ago: executing program 4 (id=434): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f00000001c0)={[{@shortname_mixed}, {@numtail}, {@shortname_mixed}, {@shortname_lower}, {@numtail}, {@utf8}, {@numtail}, {@fat=@umask={'umask', 0x3d, 0xb4}}, {@fat=@flush}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@shortname_lower}, {@shortname_winnt}, {@utf8no}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@utf8no}]}, 0x3, 0x28e, &(0x7f0000000640)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 266.140413ms ago: executing program 3 (id=435): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xd, 0xc}, {0x0, 0xfff1}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4049080) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)='P', 0x1}], 0x1, 0xb62, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x8070bd28, 0xfffffffa, {0x2, 0x18, 0x16b, 0x0, r7}, [@IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x28}}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010100}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x8001, 0x0, 0xffffffff, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9400978042a8bfe1406584ae7df4af14e1df82d00", [0x7a, 0xd]}) 206.041605ms ago: executing program 4 (id=436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PARMS={0x28, 0x1, {{0x16, 0x0, 0x2, 0x3ff, 0x8, 0x2}, {0x7, 0x2, 0x5ec, 0x1, 0xad, 0x200}, 0x8, 0x8000, 0xb9f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9e57194a6724d2b5}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000300)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200", 0x4}], 0x1}, 0x0) 96.292887ms ago: executing program 3 (id=437): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000200aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 60.114228ms ago: executing program 3 (id=438): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x14, 0x0, &(0x7f0000000300)) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b03000000000001090222000101008032090400000103000000092111010001221700070581034000"], 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000400), 0xc0000, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xc0, 0x4, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xfb, 0x88, 0x14}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x4, 0x8, 0x6}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0xf3, 0x9, 0x49, 0x40, 0x2}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x1, [{0x6d, &(0x7f0000000140)=@string={0x6d, 0x3, "109fc9fe1e0f21ac2cd6e720f66ee7664bc79412c13a875a30003e8a1813c2171897091d47c6483412be8bb53c2f66dd383d91cdb0708ba8f9208239f9f6984d84af1d3c24ececcbbdd31a1270ab86081a1b184f0e6bec3acf3f435750f8f4359f406b79a792b33a393c8d"}}]}) syz_usb_ep_write(r1, 0x81, 0x4, &(0x7f0000000000)="02c08120") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) close(r2) 0s ago: executing program 4 (id=439): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r1}, &(0x7f00000007c0)=ANY=[@ANYBLOB='enc=pkcs1 hash=sha224'], 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.33' (ED25519) to the list of known hosts. [ 50.938015][ T4172] cgroup: Unknown subsys name 'net' [ 51.064564][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.229727][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.465551][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 53.548978][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 53.630704][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 53.644327][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 53.661650][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.669249][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.677299][ T4194] device bridge_slave_0 entered promiscuous mode [ 53.688724][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.695863][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.703851][ T4194] device bridge_slave_1 entered promiscuous mode [ 53.760992][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.770150][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 53.798521][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.811796][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.818872][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.826931][ T4198] device bridge_slave_0 entered promiscuous mode [ 53.864905][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.872091][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.879621][ T4198] device bridge_slave_1 entered promiscuous mode [ 53.899055][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.906248][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.913929][ T4186] device bridge_slave_0 entered promiscuous mode [ 53.923789][ T4194] team0: Port device team_slave_0 added [ 53.929745][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.937068][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.944679][ T4186] device bridge_slave_1 entered promiscuous mode [ 53.967743][ T4194] team0: Port device team_slave_1 added [ 53.986628][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.993795][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.002009][ T4185] device bridge_slave_0 entered promiscuous mode [ 54.010628][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.037405][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.044650][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.052749][ T4185] device bridge_slave_1 entered promiscuous mode [ 54.060978][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.070763][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.077702][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.103648][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.122724][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.143144][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.150288][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.176303][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.199075][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.220382][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.229502][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.236747][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.244352][ T4196] device bridge_slave_0 entered promiscuous mode [ 54.266438][ T4198] team0: Port device team_slave_0 added [ 54.273775][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.282949][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.290180][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.297711][ T4196] device bridge_slave_1 entered promiscuous mode [ 54.320566][ T4194] device hsr_slave_0 entered promiscuous mode [ 54.327347][ T4194] device hsr_slave_1 entered promiscuous mode [ 54.343298][ T4198] team0: Port device team_slave_1 added [ 54.364878][ T4186] team0: Port device team_slave_0 added [ 54.398907][ T4186] team0: Port device team_slave_1 added [ 54.411507][ T4185] team0: Port device team_slave_0 added [ 54.422015][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.436056][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.443384][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.469334][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.482176][ T4185] team0: Port device team_slave_1 added [ 54.488335][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.495309][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.521648][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.538253][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.561624][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.568567][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.594621][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.629749][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.636959][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.667685][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.688127][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.695379][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.721654][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.734592][ T4196] team0: Port device team_slave_0 added [ 54.742391][ T4196] team0: Port device team_slave_1 added [ 54.766334][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.773499][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.799645][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.854637][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.861855][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.887762][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.902585][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.909525][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.935521][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.948611][ T4186] device hsr_slave_0 entered promiscuous mode [ 54.955960][ T4186] device hsr_slave_1 entered promiscuous mode [ 54.962834][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.970641][ T4186] Cannot create hsr debugfs directory [ 54.983572][ T4198] device hsr_slave_0 entered promiscuous mode [ 54.990581][ T4198] device hsr_slave_1 entered promiscuous mode [ 54.997041][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.004608][ T4198] Cannot create hsr debugfs directory [ 55.069340][ T4185] device hsr_slave_0 entered promiscuous mode [ 55.076010][ T4185] device hsr_slave_1 entered promiscuous mode [ 55.082941][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.090547][ T4185] Cannot create hsr debugfs directory [ 55.108415][ T4196] device hsr_slave_0 entered promiscuous mode [ 55.115213][ T4196] device hsr_slave_1 entered promiscuous mode [ 55.122120][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.129670][ T4196] Cannot create hsr debugfs directory [ 55.200837][ T24] Bluetooth: hci1: command 0x0409 tx timeout [ 55.210350][ T2239] Bluetooth: hci0: command 0x0409 tx timeout [ 55.265738][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.280121][ T24] Bluetooth: hci2: command 0x0409 tx timeout [ 55.287056][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 55.297900][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 55.311530][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.320793][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.348588][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.439584][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.449287][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.463570][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.474703][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.521724][ T4198] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.545336][ T4198] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.557125][ T4198] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.575747][ T4198] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.596028][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.624096][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.634365][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.646481][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.655608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.675400][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.683752][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.693823][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.728121][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.736995][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.746319][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.753495][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.763783][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.772942][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.782598][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.789633][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.797356][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.826834][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.836355][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.868151][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.877855][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.888059][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.902893][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.919399][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.930176][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.947742][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.958926][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.972127][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.980204][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.987900][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.996670][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.005012][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.014041][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.023112][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.032129][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.040751][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.049320][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.057688][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.065948][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.093802][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.101533][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.110357][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.118608][ T1509] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.125666][ T1509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.134126][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.143045][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.151754][ T1509] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.158787][ T1509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.166812][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.205232][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.217061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.226998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.236086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.244846][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.253132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.262278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.271351][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.282258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.291308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.315076][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.326529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.335317][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.342410][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.358800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.367627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.376552][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.383616][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.392342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.408986][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.420888][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.436072][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.444371][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.453965][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.463671][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.472780][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.493837][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.502759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.525016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.537802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.547848][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.565832][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.586700][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.594790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.603388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.613229][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.622579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.634077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.643237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.652223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.660972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.669082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.680860][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.696147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.705420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.716661][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.727733][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.737395][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.744474][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.764218][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.776111][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.785267][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.795029][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.804110][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.811186][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.819356][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.827120][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.843205][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.856287][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.869362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.877562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.893333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.906092][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.938673][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.948312][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.956878][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.965971][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.976209][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.993731][ T4194] device veth0_vlan entered promiscuous mode [ 57.019090][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.027988][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.042666][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.053469][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.062339][ T1509] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.069364][ T1509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.078579][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.087212][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.096105][ T1509] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.103179][ T1509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.111513][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.121389][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.129805][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.138667][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.147140][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.155879][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.164196][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.172087][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.179648][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.205317][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.216362][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.235815][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.248541][ T4194] device veth1_vlan entered promiscuous mode [ 57.256665][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.265393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.274340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.283169][ T4226] Bluetooth: hci0: command 0x041b tx timeout [ 57.289507][ T4226] Bluetooth: hci1: command 0x041b tx timeout [ 57.289809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.306191][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.314836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.323809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.332421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.340788][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.348870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.357506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.366678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.370405][ T4226] Bluetooth: hci3: command 0x041b tx timeout [ 57.374226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.384917][ T4226] Bluetooth: hci4: command 0x041b tx timeout [ 57.388494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.400706][ T4226] Bluetooth: hci2: command 0x041b tx timeout [ 57.405918][ T4186] device veth0_vlan entered promiscuous mode [ 57.416992][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.428878][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.447832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.457143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.472342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.481069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.489339][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.497555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.543325][ T4186] device veth1_vlan entered promiscuous mode [ 57.590978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.599049][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.609405][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.618366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.627597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.636249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.646658][ T4194] device veth0_macvtap entered promiscuous mode [ 57.685811][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.698109][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.707647][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.722936][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.731207][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.739211][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.747770][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.756336][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.773029][ T4194] device veth1_macvtap entered promiscuous mode [ 57.783558][ T4198] device veth0_vlan entered promiscuous mode [ 57.795145][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.808041][ T4186] device veth0_macvtap entered promiscuous mode [ 57.822123][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.832303][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.841818][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.855732][ T4198] device veth1_vlan entered promiscuous mode [ 57.864506][ T4186] device veth1_macvtap entered promiscuous mode [ 57.877119][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.892105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.901177][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.909582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.918383][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.927110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.938072][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.946854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.956585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.976890][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.988571][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.999893][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.018264][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.029335][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.039782][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.049051][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.058402][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.079869][ T4198] device veth0_macvtap entered promiscuous mode [ 58.090783][ T4198] device veth1_macvtap entered promiscuous mode [ 58.097659][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.108507][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.117397][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.125785][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.134304][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.143975][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.154711][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.166562][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.205869][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.215159][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.228746][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.238151][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.247436][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.268406][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.277606][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.287028][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.295938][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.319202][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.331529][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.341661][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.352279][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.364060][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.397355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.408050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.417873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.427102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.435578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.444214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.455777][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.466235][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.476151][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.487680][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.498870][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.509111][ T4198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.518157][ T4198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.527086][ T4198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.535993][ T4198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.562664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.572312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.581313][ T4196] device veth0_vlan entered promiscuous mode [ 58.622371][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.632621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.653993][ T4196] device veth1_vlan entered promiscuous mode [ 58.690991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.699392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.707634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.716665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.726664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.735046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.747859][ T4185] device veth0_vlan entered promiscuous mode [ 58.771500][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.784976][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.797553][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.798308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.816233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.825519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.831164][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.837425][ T4185] device veth1_vlan entered promiscuous mode [ 58.850549][ T4196] device veth0_macvtap entered promiscuous mode [ 58.867514][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.877922][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.895220][ T4196] device veth1_macvtap entered promiscuous mode [ 58.915519][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.929022][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.949115][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.961149][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.971283][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.982803][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.992813][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.003433][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.014370][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.022712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.030865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.038482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.047835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.056619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.066418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.075749][ T4185] device veth0_macvtap entered promiscuous mode [ 59.086428][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.096336][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.100182][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.112519][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.124328][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.136220][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.146889][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.157521][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.168375][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.180632][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.189324][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.199007][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.208135][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.227922][ T4185] device veth1_macvtap entered promiscuous mode [ 59.245192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.254276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.263185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.271458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.279827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.316094][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.333378][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.352082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.360581][ T2239] Bluetooth: hci1: command 0x040f tx timeout [ 59.368060][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.380791][ T2239] Bluetooth: hci0: command 0x040f tx timeout [ 59.386412][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.396932][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.407579][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.417627][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.428953][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.438998][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.450539][ T2239] Bluetooth: hci2: command 0x040f tx timeout [ 59.450848][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.457018][ T2239] Bluetooth: hci4: command 0x040f tx timeout [ 59.473133][ T2239] Bluetooth: hci3: command 0x040f tx timeout [ 59.475795][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.493664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.494024][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.517217][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.532286][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.546957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.621451][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.643871][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.658784][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.670439][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.682071][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.693162][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.703543][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.714543][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.727080][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.740260][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.748112][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.784207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.805050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.821172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.832872][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.842790][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.851948][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.860970][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.900420][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.910348][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.942181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.045839][ T4249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.070068][ T4228] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 60.072941][ T4249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.114047][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.147706][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.161977][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.187375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.390024][ T4227] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 60.418158][ T4277] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.455715][ T4228] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x7 has invalid maxpacket 46011, setting to 64 [ 60.467689][ T4228] usb 3-1: config 0 interface 0 has no altsetting 0 [ 60.580364][ T4230] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 60.595292][ T4283] tmpfs: Unknown parameter 'r%Ҵ\wӠR(4;a; [ 60.595292][ T4283] MUg6&x@2<5ʍ2TZ5wVU]TmPZ<M;xY9]gŞn;Oۧӌu [ 60.595292][ T4283] ^>Ƥr&Dq.;쀯<2AU' [ 60.640593][ T4228] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 60.656557][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 60.675226][ T4228] usb 3-1: Product: syz [ 60.689731][ T4228] usb 3-1: Manufacturer: syz [ 60.694889][ T4228] usb 3-1: SerialNumber: syz [ 60.722898][ T4228] usb 3-1: config 0 descriptor?? [ 60.740619][ T4265] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 60.766216][ T4228] usb 3-1: selecting invalid altsetting 0 [ 60.790359][ T4227] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 60.852488][ T4227] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 60.865102][ T4227] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 60.884919][ T4227] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 60.896950][ T4227] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 61.020236][ T4227] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 61.029332][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 61.052436][ T4261] usb 3-1: selecting invalid altsetting 0 [ 61.068597][ T4227] usb 4-1: Product: syz [ 61.070289][ T4261] usb 3-1: 0:0: usb_set_interface failed (-22) [ 61.089077][ T4227] usb 4-1: Manufacturer: syz [ 61.130110][ T4261] usb 3-1: selecting invalid altsetting 0 [ 61.135881][ T4261] usb 3-1: 0:0: usb_set_interface failed (-22) [ 61.142663][ T4227] cdc_wdm 4-1:1.0: skipping garbage [ 61.147840][ T4261] usb 3-1: selecting invalid altsetting 0 [ 61.147979][ T4227] cdc_wdm 4-1:1.0: skipping garbage [ 61.153837][ T4261] usb 3-1: 0:0: usb_set_interface failed (-22) [ 61.170035][ T4230] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 61.183236][ T4227] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 61.189137][ T4227] cdc_wdm 4-1:1.0: Unknown control protocol [ 61.201870][ T4228] usb 3-1: USB disconnect, device number 2 [ 61.221787][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.233021][ T4230] usb 2-1: Product: syz [ 61.238560][ T4261] usb 3-1: 0:0: usb_set_interface failed (-19) [ 61.240141][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 61.253538][ T4230] usb 2-1: Manufacturer: syz [ 61.334126][ T4230] usb 2-1: SerialNumber: syz [ 61.346005][ T4230] usb 2-1: config 0 descriptor?? [ 61.392402][ T4230] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 61.440670][ T4225] Bluetooth: hci0: command 0x0419 tx timeout [ 61.449811][ T4225] Bluetooth: hci1: command 0x0419 tx timeout [ 61.500084][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 61.531513][ T4225] Bluetooth: hci3: command 0x0419 tx timeout [ 61.539107][ T4225] Bluetooth: hci4: command 0x0419 tx timeout [ 61.545753][ T4225] Bluetooth: hci2: command 0x0419 tx timeout [ 61.620315][ T24] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 61.629635][ T24] usb 5-1: config 0 has no interface number 0 [ 61.639731][ T24] usb 5-1: config 0 interface 12 has no altsetting 0 [ 61.649546][ T4230] usb 4-1: USB disconnect, device number 2 [ 61.659987][ C1] cdc_wdm 4-1:1.0: Unexpected error -71 [ 61.807385][ T1107] usb 2-1: USB disconnect, device number 2 [ 61.813823][ T24] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 61.830976][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.846320][ T24] usb 5-1: Product: syz [ 61.850754][ T24] usb 5-1: Manufacturer: syz [ 61.855565][ T24] usb 5-1: SerialNumber: syz [ 61.878387][ T24] usb 5-1: config 0 descriptor?? [ 61.953507][ T4294] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 62.108609][ T4300] sctp: [Deprecated]: syz.0.15 (pid 4300) Use of int in max_burst socket option. [ 62.108609][ T4300] Use struct sctp_assoc_value instead [ 62.212029][ T4306] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18'. [ 62.227625][ T4306] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18'. [ 62.237074][ T4306] Zero length message leads to an empty skb [ 62.397477][ T4313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.21'. [ 62.416401][ T4313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.21'. [ 62.433950][ T4313] device gretap0 entered promiscuous mode [ 62.457542][ T4313] device gretap0 left promiscuous mode [ 62.476249][ T4315] process 'syz.3.21' launched './file0' with NULL argv: empty string added [ 62.658481][ T4326] netem: change failed [ 62.668263][ T4326] device syzkaller0 entered promiscuous mode [ 62.698930][ T4326] tipc: Started in network mode [ 62.729805][ T4326] tipc: Node identity 266cf51c884d, cluster identity 4711 [ 62.756436][ T4326] tipc: Enabled bearer , priority 0 [ 62.776478][ T4325] tipc: Resetting bearer [ 62.806128][ T4325] tipc: Disabling bearer [ 62.931361][ T4340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'. [ 62.991544][ T4340] netlink: 64 bytes leftover after parsing attributes in process `syz.1.27'. [ 63.033658][ T4340] device geneve2 entered promiscuous mode [ 63.270082][ T24] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 63.292969][ T24] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 63.351106][ T24] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 63.370738][ T24] f81534: probe of 5-1:0.12 failed with error -71 [ 63.406259][ T24] usb 5-1: USB disconnect, device number 2 [ 63.849947][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 63.859957][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 63.939946][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 63.959939][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 63.969939][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 64.639944][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 64.659941][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 64.669938][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 64.679938][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 64.689937][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 64.863217][ T4363] capability: warning: `syz.0.32' uses deprecated v2 capabilities in a way that may be insecure [ 64.873902][ T4229] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 65.256734][ T4372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.320250][ T4229] usb 5-1: unable to get BOS descriptor or descriptor too short [ 65.350960][ T4372] bridge0: port 3(bond1) entered blocking state [ 65.399821][ T4372] bridge0: port 3(bond1) entered disabled state [ 65.421759][ T4372] device bond1 entered promiscuous mode [ 65.440781][ T4372] bridge0: port 3(bond1) entered blocking state [ 65.446109][ T4229] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.447305][ T4372] bridge0: port 3(bond1) entered forwarding state [ 65.477656][ T4229] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 65.505093][ T4229] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 65.556385][ T4229] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 65.596234][ T4229] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 65.637686][ T4229] usb 5-1: config 1 interface 1 has no altsetting 0 [ 65.666680][ T1134] bridge0: port 3(bond1) entered disabled state [ 65.940173][ T4229] usb 5-1: string descriptor 0 read error: -22 [ 65.966151][ T4229] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 66.170115][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.910373][ T4229] usb 5-1: can't set config #1, error -71 [ 67.011226][ T4229] usb 5-1: USB disconnect, device number 3 [ 67.045352][ T4395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.43'. [ 67.092443][ T4395] loop7: detected capacity change from 0 to 5 [ 67.120732][ T4401] tc_dump_action: action bad kind [ 68.070429][ T4412] netlink: 'syz.4.51': attribute type 1 has an invalid length. [ 68.228604][ T4417] device wlan1 entered promiscuous mode [ 68.238546][ T4423] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 69.355105][ T4452] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 69.361845][ T4452] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 69.375746][ T4449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'. [ 69.395457][ T4452] vhci_hcd vhci_hcd.0: Device attached [ 69.549734][ T4466] device syzkaller0 entered promiscuous mode [ 69.573763][ T4468] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 69.589621][ T4466] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 69.590134][ T24] vhci_hcd: vhci_device speed not set [ 69.682960][ T24] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 69.690489][ T4233] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 69.776756][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 69.800876][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.809069][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.821558][ T4472] device bridge_slave_0 left promiscuous mode [ 69.828579][ T4472] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.875936][ T4472] device bridge_slave_1 left promiscuous mode [ 69.890776][ T4472] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.928158][ T4472] bond0: (slave bond_slave_0): Releasing backup interface [ 69.967515][ T4472] bond0: (slave bond_slave_1): Releasing backup interface [ 70.050203][ T4233] usb 4-1: config 0 has no interfaces? [ 70.055897][ T4233] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 70.091158][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.101175][ T4472] team0: Port device team_slave_0 removed [ 70.138857][ T4472] team0: Port device team_slave_1 removed [ 70.169010][ T4233] usb 4-1: config 0 descriptor?? [ 70.208845][ T4472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.294125][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.336536][ T4472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.344673][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.365490][ T4479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.70'. [ 70.428694][ T4453] usbip_core: unknown command [ 70.436710][ T4453] vhci_hcd: unknown pdu 4095 [ 70.443969][ T4269] usb 4-1: USB disconnect, device number 3 [ 70.452793][ T4453] usbip_core: unknown command [ 70.471916][ T154] vhci_hcd: stop threads [ 70.477095][ T154] vhci_hcd: release socket [ 70.489424][ T154] vhci_hcd: disconnect device [ 70.510221][ T24] vhci_hcd: vhci_device speed not set [ 71.202640][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.250344][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.284311][ T4472] syz.1.68 (4472) used greatest stack depth: 20816 bytes left [ 71.649817][ T4494] tipc: Started in network mode [ 71.654855][ T4494] tipc: Node identity 7f000001, cluster identity 4711 [ 71.662794][ T4494] tipc: Enabling of bearer rejected, failed to enable media [ 71.687356][ T4497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'. [ 71.709730][ T4494] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 71.718951][ T4494] tipc: Enabled bearer , priority 10 [ 71.811272][ T4501] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 71.851661][ T4225] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 71.892034][ T4505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.80'. [ 72.123525][ T4225] usb 3-1: Using ep0 maxpacket: 32 [ 72.912685][ T4229] tipc: Node number set to 2130706433 [ 73.030081][ T4225] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 73.110074][ T4225] usb 3-1: config 0 has no interface number 0 [ 73.127278][ T4225] usb 3-1: config 0 interface 12 has no altsetting 0 [ 73.970347][ T4225] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 73.986537][ T4225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.006768][ T4225] usb 3-1: Product: syz [ 74.012703][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 74.021582][ T4225] usb 3-1: Manufacturer: syz [ 74.022001][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.026183][ T4225] usb 3-1: SerialNumber: syz [ 74.045621][ T4225] usb 3-1: config 0 descriptor?? [ 74.053475][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.097027][ T4526] device bridge_slave_0 left promiscuous mode [ 74.192579][ T4526] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.220108][ T4269] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.269612][ T4536] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 74.285260][ T4526] device bridge_slave_1 left promiscuous mode [ 74.317174][ T4526] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.411091][ T4526] bond0: (slave bond_slave_0): Releasing backup interface [ 74.429257][ T4526] bond0: (slave bond_slave_1): Releasing backup interface [ 74.465708][ T4526] team0: Port device team_slave_0 removed [ 74.484399][ T4526] team0: Port device team_slave_1 removed [ 74.491184][ T4526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.498988][ T4526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.509866][ T4526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.524863][ T4526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.544426][ T4526] device bond1 left promiscuous mode [ 74.552446][ T4526] bridge0: port 3(bond1) entered disabled state [ 74.631088][ T4269] usb 1-1: unable to get BOS descriptor or descriptor too short [ 74.720407][ T4269] usb 1-1: config 64 has an invalid interface number: 44 but max is 0 [ 74.729452][ T4269] usb 1-1: config 64 has no interface number 0 [ 74.742091][ T4269] usb 1-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 74.756107][ T4269] usb 1-1: config 64 interface 44 has no altsetting 0 [ 74.977034][ T4548] device syzkaller0 entered promiscuous mode [ 75.006526][ T4548] tipc: Enabling of bearer rejected, failed to enable media [ 75.020328][ T4269] usb 1-1: string descriptor 0 read error: -22 [ 75.026517][ T4269] usb 1-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 75.036238][ T4269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.091786][ T4269] iowarrior 1-1:64.44: no interrupt-out endpoint found [ 75.247384][ T4552] device syzkaller0 entered promiscuous mode [ 75.276002][ T4552] tipc: Enabled bearer , priority 0 [ 75.298146][ T4517] udc-core: couldn't find an available UDC or it's busy [ 75.316959][ T4552] tipc: Resetting bearer [ 75.326815][ T4517] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 75.346791][ T4551] tipc: Resetting bearer [ 75.372745][ T4269] usb 1-1: USB disconnect, device number 2 [ 75.394481][ T4551] tipc: Disabling bearer [ 75.463876][ T4225] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 75.477376][ T4225] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 75.498180][ T4225] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 75.539173][ T4225] f81534: probe of 3-1:0.12 failed with error -71 [ 75.564714][ T4225] usb 3-1: USB disconnect, device number 3 [ 76.627072][ T4574] device syzkaller0 entered promiscuous mode [ 76.857863][ T4585] device syzkaller0 entered promiscuous mode [ 76.940125][ T4594] loop5: detected capacity change from 0 to 1455 [ 76.991238][ T4597] loop5: detected capacity change from 1455 to 2047 [ 77.199411][ T4606] tipc: Started in network mode [ 77.210171][ T4606] tipc: Node identity 7f000001, cluster identity 4711 [ 77.228211][ T4606] tipc: Enabling of bearer rejected, failed to enable media [ 77.252967][ T4606] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 77.268933][ T4606] tipc: Enabled bearer , priority 10 [ 77.287402][ T4609] device syzkaller0 entered promiscuous mode [ 77.390044][ T4228] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 77.458698][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 77.736836][ T4623] device syzkaller0 entered promiscuous mode [ 77.842260][ T4618] sctp: failed to load transform for md5: -2 [ 77.925859][ T4228] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 77.960506][ T4228] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 77.970629][ T4228] usb 3-1: Product: syz [ 77.974806][ T4228] usb 3-1: Manufacturer: syz [ 77.979407][ T4228] usb 3-1: SerialNumber: syz [ 78.054621][ T4228] usb 3-1: config 0 descriptor?? [ 78.091468][ T4228] ch341 3-1:0.0: ch341-uart converter detected [ 78.143114][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.162525][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.177349][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.300180][ T4228] usb 3-1: short control message received (0 < 2) [ 78.310072][ T4228] usb 3-1: failed to receive control message: -5 [ 78.339144][ T4228] ch341-uart: probe of ttyUSB0 failed with error -5 [ 78.385542][ T4647] tipc: Started in network mode [ 78.408894][ T4647] tipc: Node identity 7f000001, cluster identity 4711 [ 78.424552][ T4647] tipc: Enabling of bearer rejected, failed to enable media [ 78.445440][ T4228] tipc: Node number set to 2130706433 [ 78.466897][ T4647] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 78.479614][ T4647] tipc: Enabled bearer , priority 10 [ 79.206082][ T4666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.109'. [ 79.235735][ T4666] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 79.409350][ T4669] netlink: 16 bytes leftover after parsing attributes in process `syz.3.131'. [ 79.489648][ T4671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.132'. [ 79.496555][ T4669] netlink: 24 bytes leftover after parsing attributes in process `syz.3.131'. [ 79.531783][ T4228] usb 3-1: USB disconnect, device number 4 [ 79.566742][ T4228] ch341 3-1:0.0: device disconnected [ 79.573604][ T4669] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 79.620442][ T4233] tipc: Node number set to 2130706433 [ 79.815855][ T4681] tipc: Started in network mode [ 79.831193][ T4681] tipc: Node identity 7f000001, cluster identity 4711 [ 79.854131][ T4681] tipc: Enabling of bearer rejected, failed to enable media [ 79.905185][ T4681] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 79.941790][ T4681] tipc: Enabled bearer , priority 10 [ 80.010149][ T4233] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 80.266295][ T4695] usb usb7: usbfs: process 4695 (syz.2.140) did not claim interface 0 before use [ 80.370237][ T4233] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x7 has invalid maxpacket 46011, setting to 64 [ 80.386753][ T4233] usb 1-1: config 0 interface 0 has no altsetting 0 [ 80.562299][ T4233] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 80.573262][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 80.597745][ T4233] usb 1-1: Product: syz [ 80.608394][ T4233] usb 1-1: Manufacturer: syz [ 80.620020][ T4233] usb 1-1: SerialNumber: syz [ 80.640368][ T13] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 80.653056][ T4233] usb 1-1: config 0 descriptor?? [ 80.680253][ T4675] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 80.706539][ T4233] usb 1-1: selecting invalid altsetting 0 [ 80.905066][ T4675] usb 1-1: selecting invalid altsetting 0 [ 80.915069][ T4675] usb 1-1: 0:0: usb_set_interface failed (-22) [ 80.921529][ T4675] usb 1-1: selecting invalid altsetting 0 [ 80.921539][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 80.932522][ T4675] usb 1-1: 0:0: usb_set_interface failed (-22) [ 80.939250][ T4674] usb 1-1: selecting invalid altsetting 0 [ 80.945013][ T4674] usb 1-1: 0:0: usb_set_interface failed (-22) [ 80.954514][ T4674] usb 1-1: selecting invalid altsetting 0 [ 80.961737][ T7] tipc: Node number set to 2130706433 [ 80.967839][ T4674] usb 1-1: 0:0: usb_set_interface failed (-22) [ 80.974880][ T4674] usb 1-1: selecting invalid altsetting 0 [ 80.981655][ T4674] usb 1-1: 0:0: usb_set_interface failed (-22) [ 80.988613][ T7] usb 1-1: USB disconnect, device number 3 [ 81.040229][ T4229] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.061442][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 81.260151][ T13] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 81.269631][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.277764][ T13] usb 3-1: Product: syz [ 81.282168][ T13] usb 3-1: Manufacturer: syz [ 81.286778][ T13] usb 3-1: SerialNumber: syz [ 81.291446][ T4229] usb 2-1: Using ep0 maxpacket: 8 [ 81.298284][ T13] usb 3-1: config 0 descriptor?? [ 81.342819][ T13] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 81.352160][ T13] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 81.362640][ T21] cfg80211: failed to load regulatory.db [ 81.449988][ T4225] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 81.460358][ T4229] usb 2-1: unable to get BOS descriptor or descriptor too short [ 81.550636][ T4229] usb 2-1: config 4 interface 0 has no altsetting 0 [ 81.690170][ T4225] usb 5-1: Using ep0 maxpacket: 8 [ 81.820116][ T4229] usb 2-1: string descriptor 0 read error: -22 [ 81.826451][ T4229] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 81.835722][ T4229] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 81.860102][ T4230] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 81.890129][ T4225] usb 5-1: unable to get BOS descriptor or descriptor too short [ 81.900335][ T4229] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 81.912049][ T4229] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 81.922564][ T4229] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 81.929837][ T4229] usb 2-1: media controller created [ 81.943148][ T4229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 81.980174][ T4225] usb 5-1: config 4 interface 0 has no altsetting 0 [ 82.011328][ T4697] udc-core: couldn't find an available UDC or it's busy [ 82.018281][ T4697] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 82.060176][ T13] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 82.240118][ T4225] usb 5-1: string descriptor 0 read error: -22 [ 82.246474][ T13] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 82.254857][ T4225] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 82.264243][ T13] em28xx 3-1:0.0: board has no eeprom [ 82.270564][ T4225] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 82.300487][ T4230] usb 1-1: unable to get BOS descriptor or descriptor too short [ 82.323296][ T4225] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 82.332325][ T4225] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 82.343086][ T4225] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 82.350297][ T4225] usb 5-1: media controller created [ 82.363192][ T4225] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 82.390097][ T4230] usb 1-1: config 64 has an invalid interface number: 44 but max is 0 [ 82.398618][ T4230] usb 1-1: config 64 has no interface number 0 [ 82.405136][ T13] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 82.413027][ T13] em28xx 3-1:0.0: dvb set to bulk mode. [ 82.419829][ T4230] usb 1-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 82.433944][ T13] usb 3-1: USB disconnect, device number 5 [ 82.444199][ T4230] usb 1-1: config 64 interface 44 has no altsetting 0 [ 82.451861][ T13] em28xx 3-1:0.0: Disconnecting em28xx [ 82.459533][ T4226] em28xx 3-1:0.0: Binding DVB extension [ 82.488159][ T4226] em28xx 3-1:0.0: Registering input extension [ 82.495137][ T13] em28xx 3-1:0.0: Closing input extension [ 82.510460][ T13] em28xx 3-1:0.0: Freeing device [ 82.530419][ T4225] zl10353_read_register: readreg error (reg=127, ret==0) [ 82.572651][ T4225] usb 5-1: USB disconnect, device number 4 [ 82.670225][ T4230] usb 1-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 82.679306][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.704526][ T4230] usb 1-1: Product: syz [ 82.708720][ T4230] usb 1-1: Manufacturer: syz [ 82.713550][ T4230] usb 1-1: SerialNumber: syz [ 82.981806][ T4728] udc-core: couldn't find an available UDC or it's busy [ 82.988803][ T4728] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 83.099024][ T4230] iowarrior 1-1:64.44: no interrupt-out endpoint found [ 83.111074][ T4230] usb 1-1: USB disconnect, device number 4 [ 83.242905][ T4229] usb 2-1: USB disconnect, device number 3 [ 83.417706][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 83.427651][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 83.449790][ T4760] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 83.647356][ T4770] tipc: Enabled bearer , priority 0 [ 83.786116][ T4762] device syzkaller0 entered promiscuous mode [ 83.800783][ T4772] batman_adv: batadv0: Adding interface: veth0 [ 83.806955][ T4772] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.891941][ T4772] batman_adv: batadv0: Interface activated: veth0 [ 83.953768][ T4782] tipc: Enabling of bearer rejected, failed to enable media [ 83.988552][ T4782] tipc: Enabling of bearer rejected, already enabled [ 84.001009][ T4774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.164'. [ 84.015114][ T4774] batman_adv: batadv0: Interface deactivated: veth0 [ 84.022115][ T4774] batman_adv: batadv0: Removing interface: veth0 [ 84.034567][ T4774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.042058][ T4774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.064704][ T4774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.072518][ T4774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.200036][ T4225] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 84.495310][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.500066][ T21] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 84.535563][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.544687][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.571218][ T4808] device bridge_slave_0 left promiscuous mode [ 84.577571][ T4808] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.591390][ T4808] device bridge_slave_1 left promiscuous mode [ 84.597706][ T4808] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.614417][ T4808] bond0: (slave bond_slave_0): Releasing backup interface [ 84.630273][ T4225] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 84.646324][ T4808] bond0: (slave bond_slave_1): Releasing backup interface [ 84.646765][ T4225] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.714383][ T4808] team0: Port device team_slave_0 removed [ 84.780312][ T4808] team0: Port device team_slave_1 removed [ 84.816747][ T4808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.830247][ T4808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.850262][ T4808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.869467][ T4808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.884412][ T4225] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 84.895251][ T4225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.913279][ T4225] usb 2-1: Product: syz [ 84.920272][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 84.937854][ T4225] usb 2-1: Manufacturer: syz [ 84.959972][ T4225] usb 2-1: SerialNumber: syz [ 84.971954][ T4225] usb 2-1: config 0 descriptor?? [ 85.010364][ T21] usb 3-1: config 64 has an invalid interface number: 44 but max is 0 [ 85.021756][ T4225] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 85.033674][ T21] usb 3-1: config 64 has no interface number 0 [ 85.044739][ T21] usb 3-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 85.059699][ T21] usb 3-1: config 64 interface 44 has no altsetting 0 [ 85.220118][ T21] usb 3-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 85.238983][ T7] usb 2-1: USB disconnect, device number 4 [ 85.266970][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.303347][ T21] usb 3-1: Product: syz [ 85.320888][ T21] usb 3-1: Manufacturer: syz [ 85.336168][ T21] usb 3-1: SerialNumber: syz [ 85.582134][ T4791] udc-core: couldn't find an available UDC or it's busy [ 85.599340][ T4791] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 85.701098][ T21] iowarrior 3-1:64.44: no interrupt-out endpoint found [ 85.809781][ T21] usb 3-1: USB disconnect, device number 6 [ 86.503295][ T4840] device syzkaller0 left promiscuous mode [ 86.532595][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 86.815505][ T4848] tipc: Enabling of bearer rejected, failed to enable media [ 86.845115][ T4848] tipc: Enabling of bearer rejected, already enabled [ 87.570757][ T4225] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 87.981993][ T4886] tipc: Enabled bearer , priority 0 [ 87.990098][ T4225] usb 3-1: unable to get BOS descriptor or descriptor too short [ 87.999573][ T4886] device syzkaller0 entered promiscuous mode [ 88.028919][ T4886] tipc: Resetting bearer [ 88.042922][ T4885] tipc: Resetting bearer [ 88.063348][ T4885] tipc: Disabling bearer [ 88.080520][ T4225] usb 3-1: config 64 has an invalid interface number: 44 but max is 0 [ 88.104825][ T4225] usb 3-1: config 64 has no interface number 0 [ 88.125543][ T4225] usb 3-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 88.205059][ T4225] usb 3-1: config 64 interface 44 has no altsetting 0 [ 88.404148][ T4225] usb 3-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 88.425922][ T4225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.446670][ T4225] usb 3-1: Product: syz [ 88.455408][ T4225] usb 3-1: Manufacturer: syz [ 88.475772][ T4891] crypto_alloc_aead failed rc=-4 [ 88.485542][ T4225] usb 3-1: SerialNumber: syz [ 88.756232][ T4866] udc-core: couldn't find an available UDC or it's busy [ 88.779545][ T4866] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 88.950740][ T4225] iowarrior 3-1:64.44: no interrupt-out endpoint found [ 88.989825][ T4225] usb 3-1: USB disconnect, device number 7 [ 89.132069][ T4916] syz.4.210 uses obsolete (PF_INET,SOCK_PACKET) [ 89.521796][ T4926] netlink: 'syz.4.214': attribute type 1 has an invalid length. [ 89.930647][ T4225] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 90.300165][ T4225] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 91.150080][ T4225] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 91.178377][ T4225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.191862][ T4225] usb 3-1: Product: syz [ 91.196129][ T4225] usb 3-1: Manufacturer: syz [ 91.201565][ T4225] usb 3-1: SerialNumber: syz [ 91.202875][ T4970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 91.207912][ T4225] usb 3-1: config 0 descriptor?? [ 91.240205][ T4936] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 91.261623][ T4225] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 91.369998][ T4230] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 91.387497][ T4965] kvm [4964]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 91.418122][ T4980] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 91.800401][ T4230] usb 1-1: unable to get BOS descriptor or descriptor too short [ 91.900399][ T4230] usb 1-1: config 64 has an invalid interface number: 44 but max is 0 [ 91.935776][ T4230] usb 1-1: config 64 has no interface number 0 [ 92.009050][ T4230] usb 1-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 92.139225][ T4230] usb 1-1: config 64 interface 44 has no altsetting 0 [ 92.440563][ T4230] usb 1-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 92.510058][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.538801][ T4230] usb 1-1: Product: syz [ 92.568080][ T4230] usb 1-1: Manufacturer: syz [ 92.594591][ T4230] usb 1-1: SerialNumber: syz [ 92.981761][ T4956] udc-core: couldn't find an available UDC or it's busy [ 93.001283][ T4956] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 93.181072][ T4230] iowarrior 1-1:64.44: no interrupt-out endpoint found [ 93.189116][ T5011] netem: change failed [ 93.201963][ T4230] usb 1-1: USB disconnect, device number 5 [ 93.247123][ T7] usb 3-1: USB disconnect, device number 8 [ 93.325981][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.343404][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.395846][ T5022] device syzkaller0 entered promiscuous mode [ 93.419529][ T5022] TC_ACT_REPEAT abuse ? [ 93.742896][ T7] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 94.130175][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.145688][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 94.154929][ T7] usb 3-1: config 0 has no interface number 0 [ 94.164640][ T7] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 94.174495][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.190519][ T7] usb 3-1: config 0 descriptor?? [ 94.324447][ T5039] sctp: [Deprecated]: syz.3.253 (pid 5039) Use of int in max_burst socket option deprecated. [ 94.324447][ T5039] Use struct sctp_assoc_value instead [ 94.451523][ T7] usb 3-1: USB disconnect, device number 9 [ 94.645894][ T5056] block2mtd: illegal erase size [ 94.890068][ T4230] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 95.186346][ T5079] device syzkaller0 entered promiscuous mode [ 95.350286][ T4230] usb 4-1: unable to get BOS descriptor or descriptor too short [ 95.441555][ T4230] usb 4-1: config 64 has an invalid interface number: 44 but max is 0 [ 95.452883][ T4230] usb 4-1: config 64 has no interface number 0 [ 95.466968][ T4230] usb 4-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 95.485667][ T4230] usb 4-1: config 64 interface 44 has no altsetting 0 [ 95.729482][ T4225] hid-generic 0005:04F3:5505.0001: item fetching failed at offset 0/2 [ 95.738908][ T4225] hid-generic: probe of 0005:04F3:5505.0001 failed with error -22 [ 95.776667][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 95.786574][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 95.797438][ T5111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.850207][ T4230] usb 4-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 95.859390][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.867540][ T4230] usb 4-1: Product: syz [ 95.872139][ T4230] usb 4-1: Manufacturer: syz [ 95.876742][ T4230] usb 4-1: SerialNumber: syz [ 96.132425][ T5051] udc-core: couldn't find an available UDC or it's busy [ 96.139480][ T5051] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 96.221269][ T4230] iowarrior 4-1:64.44: no interrupt-out endpoint found [ 96.250037][ T4225] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 96.266115][ T4230] usb 4-1: USB disconnect, device number 4 [ 96.337094][ T5123] tipc: Enabled bearer , priority 0 [ 96.476754][ T5129] loop0: detected capacity change from 0 to 1024 [ 96.885767][ T4225] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 96.896492][ T5147] tipc: Enabling of bearer rejected, already enabled [ 96.905430][ T4225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.922809][ T4225] usb 5-1: Product: syz [ 96.930553][ T5147] tipc: Resetting bearer [ 96.936679][ T4225] usb 5-1: Manufacturer: syz [ 96.942576][ T4225] usb 5-1: SerialNumber: syz [ 96.954893][ T4225] usb 5-1: config 0 descriptor?? [ 97.119997][ T2239] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 97.226048][ T4225] usb 5-1: USB disconnect, device number 5 [ 97.275341][ T5150] loop0: detected capacity change from 0 to 8192 [ 97.430064][ T2239] usb 4-1: Using ep0 maxpacket: 8 [ 97.513373][ T5158] device syzkaller0 entered promiscuous mode [ 97.528046][ T5158] tipc: Enabling of bearer rejected, already enabled [ 97.764024][ T2239] usb 4-1: unable to get BOS descriptor or descriptor too short [ 98.467994][ T2239] usb 4-1: config 4 interface 0 has no altsetting 0 [ 98.540524][ T5182] tipc: Enabling of bearer rejected, already enabled [ 98.817016][ T2239] usb 4-1: string descriptor 0 read error: -22 [ 98.825383][ T2239] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 98.839560][ T2239] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 99.045162][ T2239] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 99.437509][ T2239] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 99.526299][ T2239] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 99.539953][ T2239] usb 4-1: media controller created [ 99.587486][ T2239] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.639347][ T5201] tipc: Enabling of bearer rejected, already enabled [ 99.690523][ T2239] zl10353_read_register: readreg error (reg=127, ret==0) [ 99.789781][ T2239] usb 4-1: USB disconnect, device number 5 [ 99.924329][ T5212] tipc: Enabled bearer , priority 0 [ 99.977747][ T5211] tipc: Disabling bearer [ 100.183965][ T5222] loop1: detected capacity change from 0 to 512 [ 100.796364][ T5222] EXT4-fs (loop1): Mount option "journal_dev=0x00000000040000ff" incompatible with ext2 [ 101.321077][ T5260] loop0: detected capacity change from 0 to 256 [ 101.402760][ T5260] FAT-fs (loop0): "posix" option is obsolete, not supported now [ 102.401464][ T4225] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 102.572989][ T5283] loop4: detected capacity change from 0 to 4096 [ 102.639224][ T5283] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.777871][ T5294] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.337: corrupted inode contents [ 102.788408][ T5289] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.801381][ T5289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.809431][ T5289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.820278][ T4225] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x7 has invalid maxpacket 46011, setting to 64 [ 102.827306][ T5294] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #15: comm syz.4.337: mark_inode_dirty error [ 102.832920][ T5289] device bridge_slave_0 left promiscuous mode [ 102.864861][ T4225] usb 2-1: config 0 interface 0 has no altsetting 0 [ 102.891210][ T5289] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.911314][ T5294] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.337: corrupted inode contents [ 102.925893][ T5289] device bridge_slave_1 left promiscuous mode [ 102.932754][ T5294] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #15: comm syz.4.337: mark_inode_dirty error [ 102.956806][ T5289] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.965521][ T5294] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.337: corrupted inode contents [ 103.005287][ T5294] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #15: comm syz.4.337: mark_inode_dirty error [ 103.017561][ T5294] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.337: corrupted inode contents [ 103.037306][ T5294] EXT4-fs error (device loop4): ext4_truncate:4286: inode #15: comm syz.4.337: mark_inode_dirty error [ 103.048892][ T4225] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 103.070377][ T5294] EXT4-fs error (device loop4) in ext4_setattr:5645: Corrupt filesystem [ 103.080420][ T4225] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 103.088598][ T4225] usb 2-1: Product: syz [ 103.093705][ T5289] bond0: (slave bond_slave_0): Releasing backup interface [ 103.105026][ T4225] usb 2-1: Manufacturer: syz [ 103.129853][ T4225] usb 2-1: SerialNumber: syz [ 103.149661][ T4225] usb 2-1: config 0 descriptor?? [ 103.180658][ T5265] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 103.221497][ T4225] usb 2-1: selecting invalid altsetting 0 [ 103.233312][ T5289] bond0: (slave bond_slave_1): Releasing backup interface [ 103.397244][ T5289] team0: Port device team_slave_0 removed [ 103.426415][ T5263] usb 2-1: selecting invalid altsetting 0 [ 103.444059][ T5289] team0: Port device team_slave_1 removed [ 103.449351][ T5263] usb 2-1: 0:0: usb_set_interface failed (-22) [ 103.456832][ T5263] usb 2-1: selecting invalid altsetting 0 [ 103.472944][ T5263] usb 2-1: 0:0: usb_set_interface failed (-22) [ 103.484312][ T5262] usb 2-1: selecting invalid altsetting 0 [ 103.495209][ T5289] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 103.506798][ T5262] usb 2-1: 0:0: usb_set_interface failed (-22) [ 103.560044][ T5262] usb 2-1: selecting invalid altsetting 0 [ 103.566170][ T5262] usb 2-1: 0:0: usb_set_interface failed (-22) [ 103.596267][ T5262] usb 2-1: selecting invalid altsetting 0 [ 103.610738][ T5262] usb 2-1: 0:0: usb_set_interface failed (-22) [ 103.640770][ T4230] usb 2-1: USB disconnect, device number 5 [ 103.688184][ T5329] tipc: Enabling of bearer rejected, already enabled [ 103.711847][ T5329] tipc: Resetting bearer [ 103.905707][ T5337] netdevsim netdevsim100 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.105610][ T5347] ODEBUG: Out of memory. ODEBUG disabled [ 104.532323][ T5358] device syzkaller0 entered promiscuous mode [ 104.541848][ T5358] tipc: Enabled bearer , priority 0 [ 104.566899][ T5357] tipc: Resetting bearer [ 104.595450][ T5357] tipc: Disabling bearer [ 104.635190][ T5365] tipc: Enabling of bearer rejected, already enabled [ 106.830033][ T4233] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 106.976914][ T5407] tipc: Enabled bearer , priority 0 [ 106.989732][ T5407] device syzkaller0 entered promiscuous mode [ 106.999687][ T5407] tipc: Resetting bearer [ 108.030136][ T4233] usb 3-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 108.040945][ T4233] usb 3-1: config 0 interface 0 has no altsetting 0 [ 108.047681][ T21] tipc: Node number set to 2921461020 [ 108.230342][ T4233] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 108.252486][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 108.270112][ T4233] usb 3-1: Product: syz [ 108.279659][ T4233] usb 3-1: Manufacturer: syz [ 108.289827][ T4233] usb 3-1: SerialNumber: syz [ 108.310974][ T4233] usb 3-1: config 0 descriptor?? [ 108.350200][ T5390] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 108.386872][ T4233] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 108.486495][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.590178][ T4233] usb 3-1: USB disconnect, device number 10 [ 108.686278][ T5446] tipc: Enabling of bearer rejected, already enabled [ 108.887888][ T5450] loop1: detected capacity change from 0 to 1024 [ 109.972205][ T5450] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.760839][ T5490] tipc: Enabled bearer , priority 0 [ 110.790966][ T5490] device syzkaller0 entered promiscuous mode [ 110.816359][ T5492] loop2: detected capacity change from 0 to 1024 [ 110.858704][ T5490] tipc: Resetting bearer [ 110.889576][ T5489] tipc: Resetting bearer [ 110.920808][ T5489] tipc: Disabling bearer [ 110.970625][ T5492] ======================================================= [ 110.970625][ T5492] WARNING: The mand mount option has been deprecated and [ 110.970625][ T5492] and is ignored by this kernel. Remove the mand [ 110.970625][ T5492] option from the mount to silence this warning. [ 110.970625][ T5492] ======================================================= [ 111.107753][ T5513] netlink: 20 bytes leftover after parsing attributes in process `syz.4.407'. [ 111.109958][ T4233] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 111.175860][ T5511] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 111.186605][ T5492] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none. [ 111.203145][ T5492] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.214127][ T5511] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 111.227611][ T5513] device vlan2 entered promiscuous mode [ 111.270251][ T5513] device veth1_to_bond entered promiscuous mode [ 111.481333][ T4233] usb 1-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 111.527356][ T4233] usb 1-1: config 0 interface 0 has no altsetting 0 [ 111.570048][ T5531] loop2: detected capacity change from 0 to 1024 [ 111.665040][ T5531] EXT4-fs (loop2): Unrecognized mount option "subj_type=# " or missing value [ 111.704705][ T4233] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 111.725525][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 111.755831][ T4233] usb 1-1: Product: syz [ 111.776044][ T4233] usb 1-1: Manufacturer: syz [ 111.796252][ T4233] usb 1-1: SerialNumber: syz [ 111.826578][ T4233] usb 1-1: config 0 descriptor?? [ 111.870325][ T5493] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 112.101967][ T4233] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 112.474533][ T4233] usb 1-1: USB disconnect, device number 6 [ 112.680864][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.855784][ T5571] netlink: 20 bytes leftover after parsing attributes in process `syz.4.420'. [ 113.740148][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 113.832548][ T5623] loop4: detected capacity change from 0 to 256 [ 113.960182][ T21] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 113.976035][ T5627] device syzkaller0 entered promiscuous mode [ 114.122977][ T5633] ------------[ cut here ]------------ [ 114.128767][ T5633] kernel BUG at include/linux/scatterlist.h:143! [ 114.137652][ T5633] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 114.143736][ T5633] CPU: 1 PID: 5633 Comm: syz.4.439 Not tainted syzkaller #0 [ 114.151000][ T5633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.161041][ T5633] RIP: 0010:sg_init_one+0x14a/0x160 [ 114.166227][ T5633] Code: 80 c1 03 38 c1 7c cf e8 f4 4d d8 fd eb c8 44 89 f1 80 e1 07 80 c1 03 38 c1 7c d2 4c 89 f7 e8 dd 4d d8 fd eb c8 e8 b6 2a 93 fd <0f> 0b e8 af 2a 93 fd 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 114.185813][ T5633] RSP: 0018:ffffc90003447928 EFLAGS: 00010283 [ 114.191868][ T5633] RAX: ffffffff83e5d1fa RBX: ffffc90003447c40 RCX: 0000000000080000 [ 114.199846][ T5633] RDX: ffffc90006a01000 RSI: 000000000000121b RDI: 000000000000121c [ 114.207803][ T5633] RBP: 0000000000000000 R08: ffffc90003447a9f R09: ffffc90003447a88 [ 114.215768][ T5633] R10: dffffc0000000000 R11: fffff52000688f54 R12: 1ffff92000688f50 [ 114.223739][ T5633] R13: dffffc0000000000 R14: ffffc90003447a80 R15: 0000000000000010 [ 114.231707][ T5633] FS: 00007f22757016c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 114.240622][ T5633] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.247320][ T5633] CR2: 00007f2917f35240 CR3: 00000000555de000 CR4: 00000000003506e0 [ 114.255293][ T5633] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 114.263248][ T5633] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 114.271204][ T5633] Call Trace: [ 114.274465][ T5633] [ 114.277380][ T5633] software_key_eds_op+0x4f6/0xb30 [ 114.282480][ T5633] ? stack_depot_save+0x41b/0x460 [ 114.287489][ T5633] ? software_key_query+0x830/0x830 [ 114.292690][ T5633] ? asymmetric_key_eds_op+0xe9/0x130 [ 114.298045][ T5633] keyctl_pkey_e_d_s+0x208/0x300 [ 114.302965][ T5633] ? keyctl_pkey_params_get+0x4c0/0x4c0 [ 114.308491][ T5633] ? do_futex+0xd83/0x12b0 [ 114.312892][ T5633] __se_sys_keyctl+0x6c6/0xa20 [ 114.317650][ T5633] ? __x64_sys_keyctl+0xc0/0xc0 [ 114.322484][ T5633] ? __context_tracking_exit+0x4c/0x80 [ 114.327930][ T5633] ? __lock_acquire+0x7b50/0x7b50 [ 114.332935][ T5633] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 114.338900][ T5633] ? lock_chain_count+0x20/0x20 [ 114.343735][ T5633] ? lockdep_hardirqs_on+0x94/0x140 [ 114.348916][ T5633] ? __x64_sys_keyctl+0x1c/0xc0 [ 114.353748][ T5633] do_syscall_64+0x4c/0xa0 [ 114.358147][ T5633] ? clear_bhb_loop+0x30/0x80 [ 114.362803][ T5633] ? clear_bhb_loop+0x30/0x80 [ 114.367464][ T5633] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.373374][ T5633] RIP: 0033:0x7f22774a90d9 [ 114.377770][ T5633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.397355][ T5633] RSP: 002b:00007f2275701028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 114.405748][ T5633] RAX: ffffffffffffffda RBX: 00007f2277730fa0 RCX: 00007f22774a90d9 [ 114.413703][ T5633] RDX: 00002000000007c0 RSI: 0000200000000780 RDI: 0000000000000019 [ 114.421655][ T5633] RBP: 00007f2277540024 R08: 0000000000000000 R09: 0000000000000000 [ 114.429606][ T5633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.437555][ T5633] R13: 00007f2277731038 R14: 00007f2277730fa0 R15: 00007fff6e990c38 [ 114.445518][ T5633] [ 114.448527][ T5633] Modules linked in: [ 114.453970][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 114.454228][ T5633] ---[ end trace 1b93fdf0a011ab7c ]--- [ 114.468543][ T5633] RIP: 0010:sg_init_one+0x14a/0x160 [ 114.475996][ T5633] Code: 80 c1 03 38 c1 7c cf e8 f4 4d d8 fd eb c8 44 89 f1 80 e1 07 80 c1 03 38 c1 7c d2 4c 89 f7 e8 dd 4d d8 fd eb c8 e8 b6 2a 93 fd <0f> 0b e8 af 2a 93 fd 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 114.495821][ T5633] RSP: 0018:ffffc90003447928 EFLAGS: 00010283 [ 114.502064][ T5633] RAX: ffffffff83e5d1fa RBX: ffffc90003447c40 RCX: 0000000000080000 [ 114.510201][ T5633] RDX: ffffc90006a01000 RSI: 000000000000121b RDI: 000000000000121c [ 114.518202][ T5633] RBP: 0000000000000000 R08: ffffc90003447a9f R09: ffffc90003447a88 [ 114.526349][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 114.526361][ T5633] R10: dffffc0000000000 R11: fffff52000688f54 R12: 1ffff92000688f50 [ 114.539573][ T5633] R13: dffffc0000000000 R14: ffffc90003447a80 R15: 0000000000000010 [ 114.547945][ T5633] FS: 00007f22757016c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 114.557190][ T24] usb 1-1: config 64 has an invalid interface number: 44 but max is 0 [ 114.558402][ T5633] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.565731][ T24] usb 1-1: config 64 has no interface number 0 [ 114.573703][ T5633] CR2: 00007f64c9f6f2f8 CR3: 00000000555de000 CR4: 00000000003506e0 [ 114.578439][ T24] usb 1-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 114.586729][ T5633] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 114.597564][ T24] usb 1-1: config 64 interface 44 has no altsetting 0 [ 114.607025][ T5633] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 114.620886][ T5633] Kernel panic - not syncing: Fatal exception [ 114.627142][ T5633] Kernel Offset: disabled [ 114.631454][ T5633] Rebooting in 86400 seconds..