last executing test programs: 3m34.798625561s ago: executing program 0 (id=515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x24, 0x0, "43cad7244bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) 3m32.887745696s ago: executing program 0 (id=521): unshare(0x2c020400) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xa, 0x0, &(0x7f0000000280)=0xfffffffffffffe70) 3m32.653400625s ago: executing program 0 (id=524): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000810, 0x0) 3m29.672110637s ago: executing program 0 (id=534): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000000)={0x40, 0xa, 0x4, "a0e25963"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000002c0)={0x40, 0x3, 0x4, "cf88ca87"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000400)={0x0, 0xf, 0x4, "82049998"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m26.514646235s ago: executing program 0 (id=540): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) writev(r0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) open(0x0, 0x0, 0x12d) stat(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000200)) 3m25.48110883s ago: executing program 0 (id=541): mount$fuse(0x0, 0x0, 0x0, 0x2000413, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)='C', 0x6e71e3461140eb5a}], 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback, 0x2b, 0x0, 0xce2c, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x8000000000203, {0x7, 0x29, 0xcf940281, 0x702000a1, 0x1, 0x1a76, 0x4, 0x1801, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070001040000000000040002000600030000000903000038000104ce0000000e"], 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f0000000280)='GPL\x00'}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000080)={@private, @multicast2, @loopback}, &(0x7f0000000240)=0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m10.307566379s ago: executing program 32 (id=541): mount$fuse(0x0, 0x0, 0x0, 0x2000413, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)='C', 0x6e71e3461140eb5a}], 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback, 0x2b, 0x0, 0xce2c, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x8000000000203, {0x7, 0x29, 0xcf940281, 0x702000a1, 0x1, 0x1a76, 0x4, 0x1801, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070001040000000000040002000600030000000903000038000104ce0000000e"], 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f0000000280)='GPL\x00'}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000080)={@private, @multicast2, @loopback}, &(0x7f0000000240)=0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26.453117795s ago: executing program 2 (id=1091): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200080000002, 0x7, 0x8, 0x3}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0xb5c, 0xffffffff, 0x9e4, 0x9e4, 0xec, 0xffffffff, 0xffffffff, 0xac8, 0xac8, 0xac8, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @dev, 0x0, 0x0, 'bridge_slave_1\x00', 'nr0\x00'}, 0x3127, 0xc8, 0xec, 0x1ba, {0x46010000}, [@common=@addrtype={{0x2c}}, @common=@addrtype={{0x2c}}]}, @REJECT={0x24}}, {{@uncond, 0x287, 0x898, 0x8f8, 0x0, {0x0, 0x4}, [@common=@unspec=@u32={{0x7e0}, {[{[{}, {0x1000000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}, {[{}, {}, {0x0, 0x2}], [{}, {0x0, 0x8}]}, {}, {}, {[{}, {}, {}, {}, {}, {0xfffffffe}], [{0x6}, {0x0, 0x3}], 0xfe}, {[{}, {}, {}, {}, {}, {}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {0x0, 0xfe40}]}, {[{0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}, {}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}, {[], [{}, {0x4}]}], 0x5}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@private=0xa010102, [0xff000000, 0xff, 0xff0000ff], 0x4e24, 0xc, 0x2, 0x4e24, 0x1, 0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1], 0x1, 0x1}, {0x0, [0x4, 0x0, 0x5, 0x1, 0x5, 0x4], 0x4, 0x3}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'lo\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xc0, 0xe4, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x1, 0x1}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0xbb8) dup2(0xffffffffffffffff, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000001c0)={0x6, 0x2fc, 0x0, &(0x7f0000000640)}) r3 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xf000, 0x2, 0x0, 0xeffffdff, 0x0, [{0x0, 0xec, 0xff}, {0x19, 0x5, 0xfe}, {0xfc, 0x1}, {0xfe, 0x0, 0x7f, '\x00', 0x6}, {0x8, 0x0, 0x9, '\x00', 0xb}, {}, {0x20, 0x81}, {0x0, 0xe}, {0x0, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0x81}, {}, {0x1, 0x50, 0x9}, {0x4, 0x7, 0x4, '\x00', 0x3}, {0x1, 0x4e}, {0x2, 0x3, 0x4, '\x00', 0xfe}, {}, {0x0, 0x0, 0x4, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x1, 0x5, 0x7, '\x00', 0x8}, {0x80, 0x4, 0x7f, '\x00', 0x40}, {0x0, 0x4, 0x8}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x1, 0x6}, {0xfc, 0x5, 0xe}]}}) 25.031275363s ago: executing program 2 (id=1095): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) 16.94728158s ago: executing program 3 (id=1114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$x25(0xffffffffffffffff, &(0x7f0000000a80), 0x12) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb20a000, 0x0, 0x3, 0x1, 0x0, 0x89d3}, &(0x7f00000000c0)=0x20) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f00000001c0)=0x2001) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f00000002c0)=[{0xff, 0x0, 0x0, 0x6, @time={0x9, 0x7}, {}, {}, @time=@time={0x5, 0x3}}, {0x0, 0x0, 0x80, 0x3, @time={0x7, 0x2}, {0x0, 0x32}, {}, @connect={{0x1, 0x2}, {0x9b, 0x9}}}], 0x38) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a6970"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbfs(&(0x7f0000000100), 0x1, 0x8200) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) 14.512374243s ago: executing program 2 (id=1120): r0 = socket(0x2b, 0x80801, 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r2 = getpid() r3 = syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x3, 0x8, 0x1, 0x0, 0x7f}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200), 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f00000000c0)={r7, 0x1, 0xdb5, 0x3}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0xe060400) memfd_create(0x0, 0x3) rt_sigqueueinfo(0x0, 0x21, 0x0) pread64(r3, &(0x7f0000000380)=""/140, 0x8c, 0x200000000000000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x1, 0x2, 0x4, r2, 0x0, 0x0, 'syz1\x00', 0x0}) 13.581284105s ago: executing program 3 (id=1122): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f00000001c0)=0x2001) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f00000002c0)=[{0xff, 0x0, 0x0, 0x6, @time={0x9, 0x7}, {}, {}, @time=@time={0x5, 0x3}}, {0x0, 0x0, 0x80, 0x3, @time={0x7, 0x2}, {0x0, 0x32}, {}, @connect={{0x1, 0x2}, {0x9b, 0x9}}}], 0x38) 8.445028331s ago: executing program 5 (id=1133): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f00000001c0)=0x2001) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f00000002c0)=[{0xff, 0x0, 0x0, 0x6, @time={0x9, 0x7}, {}, {}, @time=@time={0x5, 0x3}}, {0x0, 0x0, 0x80, 0x3, @time={0x7, 0x2}, {0x0, 0x32}, {}, @connect={{0x1, 0x2}, {0x9b, 0x9}}}], 0x38) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a6970"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbfs(&(0x7f0000000100), 0x1, 0x8200) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) 7.972728427s ago: executing program 4 (id=1134): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r4, &(0x7f0000000a80), 0x12) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, &(0x7f00000000c0)) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000880)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e26, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x3, @mcast1, 0x3}, r4, 0x7}}, 0x48) 7.057333928s ago: executing program 4 (id=1136): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x24, 0x0, "43cad7244bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) 6.621950273s ago: executing program 1 (id=1137): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb20a000, 0x0, 0x3, 0x1, 0x0, 0x89d3}, &(0x7f00000000c0)=0x20) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) 6.42038969s ago: executing program 4 (id=1139): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) unshare(0x22020600) listen(0xffffffffffffffff, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x0, 0xf06, 0x1, 0x94, 0xffbffffb, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r2, 0x1}}, 0x18) pipe(&(0x7f0000000040)) io_setup(0x3ff, 0x0) io_submit(0x0, 0x0, 0x0) syz_emit_ethernet(0x313, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x2dd, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0xffffff3b, 0xfa00, {0x0, 0x0, 0x13f, 0x5}}, 0xff37) 5.022594588s ago: executing program 1 (id=1140): setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x8000000000001de, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000380)='hpfs\x00', 0x2208004, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f00000002c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 5.022193658s ago: executing program 3 (id=1141): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000040)=0x5f181a17, 0x4) 4.822742475s ago: executing program 5 (id=1142): sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r3}, 0x38) 4.425446728s ago: executing program 3 (id=1143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fallocate(0xffffffffffffffff, 0x1, 0x100000000, 0x10000) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)) setpgid(0x0, 0x0) sched_getattr(0x0, &(0x7f00000000c0)={0x38}, 0x38, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x0, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) socket$kcm(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="0000fdffe2ffffdbdf250b000000f7ff0300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') 3.585475187s ago: executing program 5 (id=1144): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$x25(0xffffffffffffffff, &(0x7f0000000a80), 0x12) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb20a000, 0x0, 0x3, 0x1, 0x0, 0x89d3}, &(0x7f00000000c0)=0x20) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f00000001c0)=0x2001) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f00000002c0)=[{0xff, 0x0, 0x0, 0x6, @time={0x9, 0x7}, {}, {}, @time=@time={0x5, 0x3}}, {0x0, 0x0, 0x80, 0x3, @time={0x7, 0x2}, {0x0, 0x32}, {}, @connect={{0x1, 0x2}, {0x9b, 0x9}}}], 0x38) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a6970"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbfs(&(0x7f0000000100), 0x1, 0x8200) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) 2.825261153s ago: executing program 4 (id=1146): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r4, &(0x7f0000000a80), 0x12) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb20a000, 0x0, 0x3, 0x1, 0x0, 0x89d3}, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 2.663115588s ago: executing program 1 (id=1148): unshare(0x100) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x65, @empty, 0xffff}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 2.662464198s ago: executing program 2 (id=1149): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0xcdc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x158, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x8, [0x8]}}]}, 0x158}}, 0x24000058) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x3b, @rand_addr=0x64010101, 0x4e24, 0x3, 'lc\x00', 0x4, 0x3237, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xf]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2000, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000880)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e26, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x3, @mcast1, 0x3}, r4, 0x7}}, 0x48) 2.338745039s ago: executing program 2 (id=1150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r3, 0x40026f33, &(0x7f0000000100)=0x808c) 1.889468805s ago: executing program 1 (id=1151): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb20a000, 0x0, 0x3, 0x1, 0x0, 0x89d3}, &(0x7f00000000c0)=0x20) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) 752.389684ms ago: executing program 2 (id=1153): r0 = socket(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r5, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, 0x0, 0x0) connect$bt_rfcomm(r5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='nilfs2\x00', 0x410, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x2, @mcast1, 0x6}, 0x1c) 193.364723ms ago: executing program 1 (id=1154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 0s ago: executing program 4 (id=1155): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="a72d11a15c068c0a7d2eaebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787d", 0xd3}], 0x1}, 0x240009bd) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) kernel console output (not intermixed with test programs): mance. Setting the MTU to 1560 would solve the problem. [ 56.229865][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.270848][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.278097][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.304545][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.336368][ T4195] device hsr_slave_0 entered promiscuous mode [ 56.343927][ T4195] device hsr_slave_1 entered promiscuous mode [ 56.351167][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.358825][ T4195] Cannot create hsr debugfs directory [ 56.374678][ T4187] device hsr_slave_0 entered promiscuous mode [ 56.382073][ T4187] device hsr_slave_1 entered promiscuous mode [ 56.389163][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.396786][ T4187] Cannot create hsr debugfs directory [ 56.436941][ T4184] device hsr_slave_0 entered promiscuous mode [ 56.443677][ T4184] device hsr_slave_1 entered promiscuous mode [ 56.450436][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.458166][ T4184] Cannot create hsr debugfs directory [ 56.466565][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 56.475815][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 56.481291][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 56.482504][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 56.545738][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 56.765111][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.777121][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.788976][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.808320][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.848131][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.876879][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.891514][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.900489][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.937596][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.948952][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.959034][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.969922][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.043698][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.058190][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.071011][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.080268][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.167875][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.178053][ T4195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.199132][ T4195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.208152][ T4195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.220705][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.230812][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.245387][ T4195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.259138][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.271585][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.299800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.309398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.319411][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.326832][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.335916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.357924][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.367574][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.378538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.387151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.395058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.404748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.413847][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.421092][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.460581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.470478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.480696][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.487826][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.496666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.505220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.514066][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.521635][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.529952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.539006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.548073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.555875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.564006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.573119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.588759][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.607389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.618394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.629019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.638104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.647293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.656610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.672924][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.695995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.705408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.714438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.725221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.734079][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.741284][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.750566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.759156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.773359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.781640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.790566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.799695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.808816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.817408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.833207][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.847424][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.859656][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.872124][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.883704][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.896554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.905322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.918030][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.925212][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.935226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.949507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.960431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.969960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.979563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.988327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.997232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.005438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.034980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.044918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.054463][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.061599][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.074887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.083865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.093776][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.100914][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.111538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.120479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.130791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.156315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.178057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.188823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.199539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.208416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.217256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.225444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.235174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.248659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.261016][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.272897][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.280806][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.292919][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.303490][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.335230][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.358478][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.368822][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.385014][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.404237][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.425334][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.439609][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.456172][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.463469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.472744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.480585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.489688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.498452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.507171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.519403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.554739][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.563645][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 58.575210][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 58.583142][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 58.609657][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 58.615899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.624837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.633566][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 58.642028][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.649194][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.657938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.668404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.677381][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.684438][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.692789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.700417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.708416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.739121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.750987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.761486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.770715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.778796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.827990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.837254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.849420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.858278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.867270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.876713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.885211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.903594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.912359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.920223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.933710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.942866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.956780][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.970155][ T4192] device veth0_vlan entered promiscuous mode [ 58.983668][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.994104][ T4184] device veth0_vlan entered promiscuous mode [ 59.001012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.010984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.019858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.028992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.037438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.045843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.054127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.062558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.070842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.079394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.103661][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.121634][ T4184] device veth1_vlan entered promiscuous mode [ 59.143221][ T4192] device veth1_vlan entered promiscuous mode [ 59.185021][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.195389][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.204729][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.220506][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.230555][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.239580][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.248658][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.280433][ T4188] device veth0_vlan entered promiscuous mode [ 59.319065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.334907][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.343904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.354165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.363254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.372873][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.382083][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.390921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.399652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.410598][ T4184] device veth0_macvtap entered promiscuous mode [ 59.421047][ T4184] device veth1_macvtap entered promiscuous mode [ 59.436952][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.445086][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.454146][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.463441][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.472064][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.480280][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.495406][ T4192] device veth0_macvtap entered promiscuous mode [ 59.510980][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.528670][ T4188] device veth1_vlan entered promiscuous mode [ 59.536963][ T4187] device veth0_vlan entered promiscuous mode [ 59.544237][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.561094][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.570510][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.578642][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.589376][ T4192] device veth1_macvtap entered promiscuous mode [ 59.615093][ T4187] device veth1_vlan entered promiscuous mode [ 59.633232][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.652484][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.665010][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.681417][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.691440][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.704765][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.713103][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.722379][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.732191][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.741908][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.773638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.782819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.797172][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.807088][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.816046][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.824745][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.847647][ T4188] device veth0_macvtap entered promiscuous mode [ 59.877859][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.889615][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.902131][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.917898][ T4188] device veth1_macvtap entered promiscuous mode [ 59.930147][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.946415][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.962690][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.972387][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.981530][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.991967][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.003254][ T4187] device veth0_macvtap entered promiscuous mode [ 60.013215][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.023967][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.037457][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.063065][ T4187] device veth1_macvtap entered promiscuous mode [ 60.071449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.082717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.091881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.101283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.110025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.122364][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.131432][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.140460][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.155027][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.201188][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.212086][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.224620][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.235374][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.248466][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.259993][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.271426][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.282017][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.292480][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.303422][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.318146][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.327784][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.336845][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.345326][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.354360][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.362781][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.371598][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.381568][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.423742][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.438210][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.448847][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.460040][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.470561][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.481252][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.492941][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.503345][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.512839][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.523419][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.532478][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.565070][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.574181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.583672][ T4195] device veth0_vlan entered promiscuous mode [ 60.608713][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.620158][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.630433][ T4240] Bluetooth: hci1: command 0x040f tx timeout [ 60.636938][ T4240] Bluetooth: hci3: command 0x040f tx timeout [ 60.640981][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.643027][ T4240] Bluetooth: hci2: command 0x040f tx timeout [ 60.655272][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.659685][ T4240] Bluetooth: hci0: command 0x040f tx timeout [ 60.675044][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.686125][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.697608][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.708212][ T4240] Bluetooth: hci4: command 0x040f tx timeout [ 60.720332][ T4195] device veth1_vlan entered promiscuous mode [ 60.729365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.737796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.747769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.761342][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.773371][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.782440][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.795384][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.813111][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.822374][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.876014][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.884056][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.938989][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.950400][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.984099][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.993300][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.001855][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.013194][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.027312][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.032392][ T4195] device veth0_macvtap entered promiscuous mode [ 61.037223][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.047334][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.067472][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.078869][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.087140][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.096921][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.111579][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.128721][ T4195] device veth1_macvtap entered promiscuous mode [ 61.159543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.192724][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.205600][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.234588][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.247340][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.257755][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.270281][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.281248][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.291979][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.302232][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.312765][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.324654][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.332272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.340692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.351017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.379101][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.392754][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.404263][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.415992][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.427203][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.438154][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.444013][ T4265] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.450416][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.474982][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.487582][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.505211][ T4237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.513393][ T4237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.522034][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.547530][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.578387][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.589841][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.599237][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.612883][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.633328][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.647328][ T3074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.668853][ T3074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.712424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.852800][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.911549][ T4279] binder: 4273:4279 ioctl c0401289 200000000300 returned -22 [ 61.920014][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.959467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.991838][ T4237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.012627][ T4237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.230711][ T4286] binder: 4273:4286 ioctl 4008af04 200000000240 returned -22 [ 62.547221][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 62.626003][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.752253][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 62.775083][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 63.118463][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.130502][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 63.163241][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 63.169433][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 63.177349][ T2347] Bluetooth: hci4: command 0x0419 tx timeout [ 64.269196][ T4275] syz.2.3 (4275): drop_caches: 2 [ 64.466350][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 64.475385][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 64.484326][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 64.493409][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 64.502439][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 64.511512][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 64.520604][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 64.738331][ T26] audit: type=1326 audit(1775016780.324:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4296 comm="syz.1.11" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0186de819 code=0x0 [ 66.565931][ T4228] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 66.630939][ T4330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 66.668259][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 67.805996][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.817693][ T4228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 67.862965][ T4228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 67.873490][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.941880][ T13] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 67.981702][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.032828][ T13] usb 3-1: config 0 descriptor?? [ 68.095813][ T4228] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 68.136178][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.169252][ T4228] usb 2-1: Product: syz [ 68.225699][ T4228] usb 2-1: Manufacturer: syz [ 68.239745][ T4228] usb 2-1: SerialNumber: syz [ 68.275100][ T4228] usb 2-1: config 0 descriptor?? [ 68.295826][ T4311] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 68.355594][ C0] port100 2-1:0.0: NFC: The urb has been stopped (status -2) [ 68.364435][ T4228] port100 2-1:0.0: NFC: Could not get supported command types [ 68.385790][ T13] usbhid 3-1:0.0: can't add hid device: -71 [ 68.391983][ T13] usbhid: probe of 3-1:0.0 failed with error -71 [ 68.431814][ T1111] usb 2-1: USB disconnect, device number 2 [ 68.462266][ T13] usb 3-1: USB disconnect, device number 2 [ 68.610915][ T26] audit: type=1326 audit(1775016784.194:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4350 comm="syz.1.24" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0186de819 code=0x0 [ 68.711523][ T4359] ======================================================= [ 68.711523][ T4359] WARNING: The mand mount option has been deprecated and [ 68.711523][ T4359] and is ignored by this kernel. Remove the mand [ 68.711523][ T4359] option from the mount to silence this warning. [ 68.711523][ T4359] ======================================================= [ 68.824651][ T4359] erofs: (device loop1): erofs_read_superblock: cannot find valid erofs superblock [ 68.945716][ T13] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 69.152983][ T4375] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.315832][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 69.342059][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.362823][ T13] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 69.387183][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.420886][ T13] usb 3-1: config 0 descriptor?? [ 69.496200][ T13] hub 3-1:0.0: USB hub found [ 69.655711][ T13] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 69.775715][ T13] usbhid 3-1:0.0: can't add hid device: -71 [ 69.782331][ T13] usbhid: probe of 3-1:0.0 failed with error -71 [ 69.847202][ T13] usb 3-1: USB disconnect, device number 3 [ 70.523880][ T4388] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 70.532245][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.574664][ T4387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'. [ 70.595449][ T4388] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 70.788034][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 70.796041][ T4232] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 70.905900][ T13] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 70.922958][ T13] usb 4-1: config 0 interface 0 has no altsetting 0 [ 70.931928][ T13] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 70.942223][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.006947][ T13] usb 4-1: config 0 descriptor?? [ 71.116765][ T4403] Process accounting resumed [ 71.225892][ T4232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.259561][ T4232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.279400][ T4232] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 71.303477][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.349821][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.357815][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.368415][ T4232] usb 2-1: config 0 descriptor?? [ 71.965774][ T4292] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 72.107986][ T13] corsair-cpro 0003:1B1C:0C10.0001: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 72.235179][ T26] audit: type=1326 audit(1775016787.814:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4415 comm="syz.0.43" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc740a17819 code=0x0 [ 72.310724][ T4232] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 72.329965][ T4232] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 72.331406][ T4421] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 72.341191][ T4232] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 72.355213][ T4232] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 72.367430][ T4232] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 72.379668][ T4232] playstation 0003:054C:0DF2.0002: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 72.508816][ T13] corsair-cpro: probe of 0003:1B1C:0C10.0001 failed with error -110 [ 72.525812][ T4232] playstation 0003:054C:0DF2.0002: Invalid byte count transferred, expected 20 got 0 [ 72.541110][ T4232] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense pairing info: -22 [ 72.545020][ T13] usb 4-1: USB disconnect, device number 2 [ 72.560275][ T4232] playstation 0003:054C:0DF2.0002: Failed to get MAC address from DualSense [ 72.585829][ T4292] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 72.595052][ T4292] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 72.614231][ T4232] playstation 0003:054C:0DF2.0002: Failed to create dualsense. [ 72.629225][ T4292] usb 5-1: Product: syz [ 72.634378][ T4232] playstation: probe of 0003:054C:0DF2.0002 failed with error -22 [ 72.653155][ T4292] usb 5-1: Manufacturer: syz [ 72.662004][ T4292] usb 5-1: SerialNumber: syz [ 72.677876][ T4292] usb 5-1: config 0 descriptor?? [ 72.702136][ T4424] fido_id[4424]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 72.926584][ T4292] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 72.934984][ T4292] peak_usb 5-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 73.052571][ T4292] peak_usb: probe of 5-1:0.0 failed with error -71 [ 73.095687][ T4292] usb 5-1: USB disconnect, device number 2 [ 73.878237][ T4232] usb 2-1: USB disconnect, device number 3 [ 74.063974][ T4440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.49'. [ 75.355968][ T4227] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 75.371171][ T4458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.55'. [ 76.275722][ T4227] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 76.355709][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.363756][ T4227] usb 3-1: Product: syz [ 76.372714][ T4227] usb 3-1: Manufacturer: syz [ 76.379752][ T4227] usb 3-1: SerialNumber: syz [ 76.387515][ T4227] usb 3-1: config 0 descriptor?? [ 76.440378][ T26] audit: type=1326 audit(1775016792.024:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.1.60" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0186de819 code=0x0 [ 76.657740][ T2347] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 76.921670][ T4227] usb 3-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32 [ 76.941951][ T4227] usb 3-1: Firmware version (0.0) predates our first public release. [ 76.975580][ T4227] usb 3-1: Please update to version 0.2 or newer [ 77.026178][ T2347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.038281][ T2347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.048500][ T4227] usb 3-1: Firmware: build  [ 77.048586][ T2347] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 77.054197][ T4227] usb 3-1: atusb_probe: initialization failed, error = -32 [ 77.062520][ T2347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.076751][ T4227] atusb: probe of 3-1:0.0 failed with error -32 [ 77.095982][ T2347] usb 4-1: config 0 descriptor?? [ 77.793558][ T2347] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 77.803343][ T4490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'. [ 77.815818][ T2347] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 77.823507][ T2347] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 77.846886][ T2347] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 77.873203][ T2347] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 77.905934][ T2347] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 78.179866][ T2347] playstation 0003:054C:0DF2.0003: Invalid byte count transferred, expected 20 got 0 [ 78.189974][ T2347] playstation 0003:054C:0DF2.0003: Failed to retrieve DualSense pairing info: -22 [ 78.200126][ T2347] playstation 0003:054C:0DF2.0003: Failed to get MAC address from DualSense [ 78.212169][ T2347] playstation 0003:054C:0DF2.0003: Failed to create dualsense. [ 78.237899][ T2347] playstation: probe of 0003:054C:0DF2.0003 failed with error -22 [ 78.319323][ T2347] usb 3-1: USB disconnect, device number 4 [ 79.045649][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.525639][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 79.645743][ T13] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 79.683806][ T13] usb 1-1: config 0 has no interface number 0 [ 79.769457][ T2347] usb 4-1: USB disconnect, device number 3 [ 79.856246][ T13] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 79.881977][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.895621][ T13] usb 1-1: Product: syz [ 79.899860][ T13] usb 1-1: Manufacturer: syz [ 79.929680][ T13] usb 1-1: SerialNumber: syz [ 79.969696][ T13] usb 1-1: config 0 descriptor?? [ 80.026906][ T13] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 80.265024][ T13] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 80.318357][ T13] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 80.681453][ T13] usb 1-1: USB disconnect, device number 2 [ 80.695636][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 80.737634][ T13] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 80.794881][ T13] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 80.829242][ T13] quatech2 1-1:0.51: device disconnected [ 81.590956][ T7] cfg80211: failed to load regulatory.db [ 82.132956][ T4567] Zero length message leads to an empty skb [ 82.701673][ T4575] binder: 4574:4575 ioctl c0306201 200000000040 returned -14 [ 85.864264][ T4610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.105'. [ 85.883733][ T4610] netlink: 'syz.3.105': attribute type 25 has an invalid length. [ 85.895474][ T4610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.105'. [ 86.150820][ T4198] Bluetooth: unknown link type 100 [ 86.206133][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.636557][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.663851][ T21] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.416371][ T21] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 87.455015][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 87.482713][ T21] usb 5-1: SerialNumber: syz [ 88.139756][ T21] usb 5-1: invalid UAC_HEADER (v1) [ 88.174680][ T21] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 88.208600][ T21] usb 5-1: USB disconnect, device number 3 [ 88.225675][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 88.543365][ T4349] udevd[4349]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.717096][ T4662] IPv6: NLM_F_CREATE should be specified when creating new route [ 95.209216][ T4292] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 95.566556][ T1092] block nbd2: Attempted send on invalid socket [ 95.573549][ T1092] blk_update_request: I/O error, dev nbd2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.019405][ T4726] o2cb: This node has not been configured. [ 96.025437][ T4726] o2cb: Cluster check failed. Fix errors before retrying. [ 96.033375][ T4726] (syz.0.139,4726,1):user_dlm_register:675 ERROR: status = -22 [ 96.041074][ T4726] (syz.0.139,4726,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 96.152664][ T4720] qnx4: unable to read the superblock [ 96.555720][ T4292] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 96.564817][ T4292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.609200][ T4292] usb 5-1: Product: syz [ 96.613420][ T4292] usb 5-1: Manufacturer: syz [ 96.625554][ T4292] usb 5-1: SerialNumber: syz [ 97.876390][ T4763] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 97.876390][ T4763] The task syz.0.150 (4763) triggered the difference, watch for misbehavior. [ 98.821902][ T2347] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.005718][ T4227] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.091656][ T2347] usb 4-1: Using ep0 maxpacket: 32 [ 99.215924][ T2347] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 99.224167][ T2347] usb 4-1: config 0 has no interface number 0 [ 99.251164][ T2347] usb 4-1: config 0 interface 184 has no altsetting 0 [ 99.326452][ T4227] usb 1-1: Using ep0 maxpacket: 8 [ 99.432643][ T2347] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 99.455800][ T2347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.480296][ T4791] syz.4.161 uses obsolete (PF_INET,SOCK_PACKET) [ 99.487186][ T4227] usb 1-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 99.490862][ T2347] usb 4-1: Product: syz [ 99.506622][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.521318][ T2347] usb 4-1: Manufacturer: syz [ 99.537578][ T4227] usb 1-1: config 0 descriptor?? [ 99.545837][ T2347] usb 4-1: SerialNumber: syz [ 99.577780][ T2347] usb 4-1: config 0 descriptor?? [ 99.597507][ T4227] usblcd 1-1:0.0: USBLCD model not supported. [ 99.630375][ T2347] smsc75xx v1.0.0 [ 99.803818][ T4231] usb 1-1: USB disconnect, device number 3 [ 99.827689][ T4789] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 99.845166][ T4789] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 100.275665][ T4292] rtl8150 5-1:1.0: couldn't reset the device [ 100.282048][ T4292] rtl8150: probe of 5-1:1.0 failed with error -5 [ 100.315008][ T4292] usb 5-1: USB disconnect, device number 4 [ 100.318037][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 100.425686][ T2347] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 100.449532][ T2347] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 100.718109][ T7] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 100.734916][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.744256][ T2347] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 100.783188][ T2347] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 100.823243][ T7] usb 3-1: config 0 descriptor?? [ 100.868982][ T2347] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 100.919468][ T7] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 100.942756][ T2347] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 100.970885][ T2347] usb 4-1: USB disconnect, device number 4 [ 101.365928][ T7] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 101.795668][ T7] gspca_cpia1: usb_control_msg 02, error -71 [ 101.804625][ T7] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 101.915857][ T4833] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 102.650657][ T7] usb 3-1: USB disconnect, device number 5 [ 108.060209][ T4900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.191'. [ 108.795331][ T4897] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 108.868408][ T4897] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 109.385869][ T1111] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 109.695782][ T1111] usb 4-1: Using ep0 maxpacket: 32 [ 110.505747][ T1111] usb 4-1: config 3 has an invalid interface number: 249 but max is 0 [ 110.515576][ T1111] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 110.562139][ T1111] usb 4-1: config 3 has no interface number 0 [ 110.589127][ T1111] usb 4-1: config 3 interface 249 altsetting 6 has an invalid endpoint with address 0x4C, skipping [ 110.633090][ T1111] usb 4-1: config 3 interface 249 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.671909][ T1111] usb 4-1: config 3 interface 249 has no altsetting 0 [ 111.405702][ T1111] usb 4-1: New USB device found, idVendor=0cf3, idProduct=b003, bcdDevice=bf.24 [ 111.425408][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.453878][ T1111] usb 4-1: Product: syz [ 111.458572][ T1111] usb 4-1: Manufacturer: syz [ 111.463196][ T1111] usb 4-1: SerialNumber: syz [ 111.840390][ T1111] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 111.882064][ T1111] usb 4-1: USB disconnect, device number 5 [ 111.958398][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 112.205972][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 114.058953][ T7] usb 3-1: config 162 has an invalid interface number: 79 but max is 1 [ 114.091411][ T7] usb 3-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 114.120286][ T7] usb 3-1: config 162 has 1 interface, different from the descriptor's value: 2 [ 114.146342][ T7] usb 3-1: config 162 has no interface number 0 [ 114.213545][ T7] usb 3-1: config 162 interface 79 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.328378][ T7] usb 3-1: config 162 interface 79 has no altsetting 0 [ 114.640086][ T7] usb 3-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 114.886845][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.956024][ T7] usb 3-1: Product: syz [ 114.973388][ T7] usb 3-1: Manufacturer: syz [ 115.002252][ T7] usb 3-1: SerialNumber: syz [ 115.029234][ T7] usb 3-1: can't set config #162, error -71 [ 115.056255][ T7] usb 3-1: USB disconnect, device number 6 [ 119.200439][ T5050] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 120.184131][ T5058] bridge0: port 3(syz_tun) entered blocking state [ 120.225133][ T5058] bridge0: port 3(syz_tun) entered disabled state [ 120.321981][ T5058] device syz_tun entered promiscuous mode [ 120.352380][ T5058] bridge0: port 3(syz_tun) entered blocking state [ 120.359369][ T5058] bridge0: port 3(syz_tun) entered forwarding state [ 120.523011][ T5073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'. [ 122.227158][ T5116] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 122.275772][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 122.657388][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.742847][ T7] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 123.000372][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.049464][ T7] usb 2-1: config 0 descriptor?? [ 123.122483][ T7] pwc: Askey VC010 type 2 USB webcam detected. [ 123.525746][ T7] pwc: recv_control_msg error -32 req 02 val 2b00 [ 123.566996][ T7] pwc: recv_control_msg error -32 req 02 val 2700 [ 123.625730][ T7] pwc: recv_control_msg error -32 req 02 val 2c00 [ 123.724602][ T7] pwc: recv_control_msg error -32 req 04 val 1000 [ 124.635638][ T7] pwc: recv_control_msg error -32 req 04 val 1300 [ 124.675684][ T7] pwc: recv_control_msg error -32 req 04 val 1400 [ 124.735738][ T7] pwc: recv_control_msg error -32 req 02 val 2000 [ 124.816653][ T7] pwc: recv_control_msg error -71 req 02 val 2100 [ 124.855638][ T7] pwc: recv_control_msg error -71 req 04 val 1500 [ 124.880238][ T7] pwc: recv_control_msg error -71 req 02 val 2500 [ 124.925681][ T7] pwc: recv_control_msg error -71 req 02 val 2400 [ 124.964690][ T5152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.270'. [ 124.974021][ T7] pwc: recv_control_msg error -71 req 02 val 2600 [ 125.015686][ T7] pwc: recv_control_msg error -71 req 02 val 2900 [ 125.045847][ T7] pwc: recv_control_msg error -71 req 02 val 2800 [ 125.085866][ T7] pwc: recv_control_msg error -71 req 04 val 1100 [ 125.104119][ T5148] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 125.114161][ T7] pwc: recv_control_msg error -71 req 04 val 1200 [ 125.150220][ T5148] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 125.162049][ T7] pwc: Registered as video103. [ 125.202281][ T7] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 125.303342][ T7] usb 2-1: USB disconnect, device number 4 [ 128.262605][ T5216] program syz.0.290 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.461649][ T5210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.289'. [ 128.482720][ T5215] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 128.512138][ T5215] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 131.435502][ C0] sched: RT throttling activated [ 131.985716][ T2347] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 132.195764][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 132.788027][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.803183][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.385924][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 133.463136][ T5269] netlink: 7 bytes leftover after parsing attributes in process `syz.1.308'. [ 133.476036][ T2347] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 133.485129][ T2347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.493873][ T2347] usb 5-1: Product: syz [ 133.498263][ T2347] usb 5-1: Manufacturer: syz [ 133.507767][ T2347] usb 5-1: SerialNumber: syz [ 133.515813][ T7] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 133.523915][ T7] usb 1-1: config 0 has no interface number 0 [ 133.785840][ T7] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 133.794931][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.818088][ T7] usb 1-1: Product: syz [ 133.822309][ T7] usb 1-1: Manufacturer: syz [ 133.835531][ T7] usb 1-1: SerialNumber: syz [ 133.859912][ T7] usb 1-1: config 0 descriptor?? [ 133.895682][ T4231] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 133.927211][ T7] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 134.181181][ T2347] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 134.196359][ T7] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 134.231262][ T7] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 134.344320][ T4231] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 134.420812][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.665576][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 134.707232][ T4231] usb 3-1: config 0 descriptor?? [ 134.848856][ T4228] usb 1-1: USB disconnect, device number 4 [ 134.919866][ T4228] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 134.966676][ T4228] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 134.994401][ T4228] quatech2 1-1:0.51: device disconnected [ 135.172479][ T4231] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 135.191699][ T4231] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 135.255800][ T4231] [drm:udl_init] *ERROR* Selecting channel failed [ 135.313046][ T4231] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 135.335954][ T4231] [drm] Initialized udl on minor 2 [ 135.358769][ T4231] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 135.401379][ T4231] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 135.444884][ T4231] usb 3-1: USB disconnect, device number 7 [ 135.461210][ T7] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 135.484523][ T7] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 135.514603][ T7] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 135.586126][ T2347] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 135.635776][ T2347] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 135.705797][ T2347] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 135.775788][ T2347] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 135.825959][ T2347] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 135.895834][ T2347] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 135.956020][ T2347] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 136.005810][ T2347] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 136.036072][ T2347] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 136.085772][ T2347] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 136.146039][ T2347] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 136.196582][ T2347] lan78xx: probe of 5-1:1.0 failed with error -71 [ 136.285797][ T2347] usb 5-1: USB disconnect, device number 5 [ 137.954500][ T5322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.325'. [ 138.557980][ T5324] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 139.263167][ T5329] loop5: detected capacity change from 0 to 7 [ 139.503738][ T4808] Dev loop5: unable to read RDB block 7 [ 139.875574][ T4808] loop5: unable to read partition table [ 139.881415][ T4808] loop5: partition table beyond EOD, truncated [ 139.912474][ T5329] Dev loop5: unable to read RDB block 7 [ 139.919310][ T5329] loop5: unable to read partition table [ 139.925129][ T5329] loop5: partition table beyond EOD, truncated [ 140.005592][ T5329] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 141.397144][ T5360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.338'. [ 141.461295][ T5356] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 141.481369][ T5356] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 144.333076][ T5403] netlink: 24 bytes leftover after parsing attributes in process `syz.3.351'. [ 144.872834][ T5405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.352'. [ 145.046692][ T5409] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 145.065650][ T5409] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 145.285776][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 146.556020][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.581936][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.593333][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.612866][ T7] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.625633][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.672553][ T7] usb 2-1: config 0 descriptor?? [ 148.037814][ T7] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 148.075895][ T7] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 148.083533][ T7] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 148.104185][ T7] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 148.154202][ T7] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 148.211635][ T7] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 148.257029][ T7] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 148.289984][ T7] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 148.325545][ T7] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 148.341567][ T7] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 148.359057][ T7] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 148.383714][ T7] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 148.405948][ T7] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 148.414275][ T7] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 148.435708][ T7] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 148.456959][ T7] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 148.505039][ T7] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 148.542173][ T7] usb 2-1: USB disconnect, device number 5 [ 148.734767][ T5459] fido_id[5459]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 149.054572][ T5466] netlink: 28 bytes leftover after parsing attributes in process `syz.3.369'. [ 151.606237][ T4227] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 151.740946][ T5517] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 152.036406][ T4227] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 152.097327][ T4227] usb 4-1: config 0 has an invalid descriptor of length 238, skipping remainder of the config [ 152.382814][ T4227] usb 4-1: config 0 has no interface number 0 [ 152.435655][ T4227] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 3791, setting to 1024 [ 152.490195][ T4227] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024 [ 152.550062][ T4227] usb 4-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.781560][ T4227] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 152.814902][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.836986][ T4227] usb 4-1: Product: syz [ 152.842409][ T4227] usb 4-1: Manufacturer: syz [ 152.896620][ T5535] comedi comedi1: aio_aio12_8: I/O port conflict (0x1,32) [ 153.013583][ T4227] usb 4-1: SerialNumber: syz [ 153.029745][ T4227] usb 4-1: config 0 descriptor?? [ 153.055875][ T5502] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 153.090711][ T4227] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 154.217138][ T4227] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 154.300057][ T4227] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 155.006954][ T4227] usb 4-1: USB disconnect, device number 6 [ 155.041846][ T4227] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 155.282424][ T4227] cyberjack 4-1:0.69: device disconnected [ 156.728459][ T5561] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 160.057023][ T5618] program syz.3.416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.961649][ T5626] netlink: 20 bytes leftover after parsing attributes in process `syz.3.420'. [ 163.675686][ T2347] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 164.351388][ T5698] netlink: 20 bytes leftover after parsing attributes in process `syz.3.439'. [ 164.366268][ T5698] netlink: 20 bytes leftover after parsing attributes in process `syz.3.439'. [ 165.376086][ T2347] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.542635][ T5692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.442'. [ 165.605903][ T2347] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 165.615076][ T2347] usb 1-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 165.627415][ T5712] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 166.435601][ T2347] usb 1-1: Product: syz [ 166.439911][ T2347] usb 1-1: SerialNumber: syz [ 166.486477][ T2347] usb 1-1: config 0 descriptor?? [ 166.506149][ T2347] usb 1-1: can't set config #0, error -71 [ 166.539995][ T2347] usb 1-1: USB disconnect, device number 5 [ 169.456596][ T5754] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 171.138548][ T26] audit: type=1326 audit(1775016886.524:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5776 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa7236819 code=0x7ffc0000 [ 171.333686][ T26] audit: type=1326 audit(1775016886.524:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5776 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa7236819 code=0x7ffc0000 [ 171.443715][ T26] audit: type=1326 audit(1775016886.994:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5776 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa7236819 code=0x7ffc0000 [ 171.746030][ T26] audit: type=1326 audit(1775016886.994:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5776 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa7236819 code=0x7ffc0000 [ 171.855729][ T26] audit: type=1326 audit(1775016886.994:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5776 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1fa71f704e code=0x7ffc0000 [ 172.046796][ T26] audit: type=1326 audit(1775016887.014:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5776 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1fa71f704e code=0x7ffc0000 [ 172.075206][ T26] audit: type=1326 audit(1775016887.014:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5776 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa7236819 code=0x7ffc0000 [ 172.106580][ T26] audit: type=1326 audit(1775016887.064:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5776 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa7236819 code=0x7ffc0000 [ 172.218905][ T26] audit: type=1326 audit(1775016887.074:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5776 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa7236819 code=0x7ffc0000 [ 172.225595][ T1111] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 172.281191][ T26] audit: type=1326 audit(1775016887.074:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5776 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f1fa7236819 code=0x7ffc0000 [ 172.592824][ T5797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.470'. [ 173.645906][ T1111] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 173.656941][ T1111] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 173.715691][ T1111] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 173.741976][ T1111] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 173.781323][ T1111] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 173.935603][ T7] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 173.945862][ T1111] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 173.969653][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 174.030318][ T1111] usb 5-1: Product: syz [ 174.034650][ T1111] usb 5-1: Manufacturer: syz [ 174.177841][ T1111] cdc_wdm 5-1:1.0: skipping garbage [ 174.205615][ T1111] cdc_wdm 5-1:1.0: skipping garbage [ 174.256116][ T1111] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 174.266224][ T1111] cdc_wdm 5-1:1.0: Unknown control protocol [ 174.345799][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 174.449146][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.479866][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 174.907124][ T7] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 174.916610][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.939117][ T7] usb 4-1: config 0 descriptor?? [ 175.015617][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE [ 175.029088][ T4231] usb 5-1: USB disconnect, device number 6 [ 175.433659][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 175.463698][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 175.501764][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 175.564940][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 175.622326][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 175.671540][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 175.703684][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 175.883796][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 175.914451][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 175.951432][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 176.008967][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 176.025842][ T5848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.481'. [ 176.033065][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 176.070321][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 176.087372][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 176.103369][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 176.121573][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 176.138781][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 176.154496][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 176.179553][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 176.182467][ T5859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.485'. [ 176.204218][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 176.254360][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 176.305952][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 176.329314][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 176.347977][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 176.371270][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 176.379309][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 176.395602][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 176.403410][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 176.428899][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 176.460822][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 176.519041][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 176.564053][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 176.597779][ T5864] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 176.724421][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 176.731956][ T7] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 176.840930][ T7] hid-generic 0003:0457:07DA.0005: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 176.928893][ T7] usb 4-1: USB disconnect, device number 7 [ 180.568458][ T5897] fido_id[5897]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 180.691595][ T5918] bpf: Bad value for 'mode' [ 181.891636][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 181.900221][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 181.908664][ T5931] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 181.920429][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 181.995589][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 182.055579][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 183.205343][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 185.563071][ T7] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 185.585609][ T7] usb 2-1: can't read configurations, error -71 [ 189.117677][ T6030] device bridge1 entered promiscuous mode [ 189.965575][ T4292] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 190.065636][ T4227] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 190.865905][ T4227] usb 1-1: Using ep0 maxpacket: 32 [ 190.977909][ T4292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.007074][ T4292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.035884][ T4227] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 191.054569][ T4227] usb 1-1: config 0 has no interface number 0 [ 191.093830][ T4227] usb 1-1: config 0 interface 184 has no altsetting 0 [ 191.146765][ T4292] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 191.220542][ T4292] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 191.295966][ T4227] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 191.345728][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.354646][ T4292] usb 3-1: Manufacturer: syz [ 191.463853][ T4227] usb 1-1: Product: syz [ 191.506070][ T4292] usb 3-1: config 0 descriptor?? [ 191.582821][ T4227] usb 1-1: Manufacturer: syz [ 191.695559][ T4227] usb 1-1: SerialNumber: syz [ 191.709829][ T4227] usb 1-1: config 0 descriptor?? [ 191.803132][ T4227] smsc75xx v1.0.0 [ 191.915999][ T4227] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 191.955875][ T4227] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 191.966121][ T4292] usbhid 3-1:0.0: can't add hid device: -71 [ 191.972138][ T4292] usbhid: probe of 3-1:0.0 failed with error -71 [ 192.193917][ T4227] usb 1-1: USB disconnect, device number 6 [ 192.224128][ T4292] usb 3-1: USB disconnect, device number 8 [ 194.311438][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.323222][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.228807][ T6086] netlink: 20 bytes leftover after parsing attributes in process `syz.1.549'. [ 196.241108][ T6086] netlink: 20 bytes leftover after parsing attributes in process `syz.1.549'. [ 198.983532][ T6095] net_ratelimit: 1 callbacks suppressed [ 198.983550][ T6095] IPv6: addrconf: prefix option has invalid lifetime [ 201.709758][ T7] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 201.959220][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 202.195728][ T7] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 202.216622][ T7] usb 3-1: config 0 has no interface number 0 [ 202.245367][ T7] usb 3-1: config 0 interface 12 has no altsetting 0 [ 202.426926][ T7] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 202.446473][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.483637][ T7] usb 3-1: Product: syz [ 202.502479][ T7] usb 3-1: Manufacturer: syz [ 202.521669][ T7] usb 3-1: SerialNumber: syz [ 202.566895][ T7] usb 3-1: config 0 descriptor?? [ 203.706498][ T6139] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 203.721682][ T6139] IPv6: addrconf: prefix option has invalid lifetime [ 203.732628][ C0] IPv6: addrconf: prefix option has invalid lifetime [ 203.741592][ C0] IPv6: addrconf: prefix option has invalid lifetime [ 204.587429][ T6139] syz.1.566 (6139) used greatest stack depth: 19984 bytes left [ 204.750478][ T6155] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 205.236004][ T7] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 0 failed: -71 [ 205.262513][ T7] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 205.371952][ T7] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 205.461791][ T7] f81534: probe of 3-1:0.12 failed with error -71 [ 205.803474][ T7] usb 3-1: USB disconnect, device number 9 [ 208.669130][ T1108] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 209.066544][ T1108] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.261420][ T1108] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 209.312335][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.376067][ T1108] usb 5-1: config 0 descriptor?? [ 209.728365][ T6202] chnl_net:caif_netlink_parms(): no params data found [ 210.688273][ T1108] ath6kl: Unsupported hardware version: 0x0 [ 210.706261][ T1108] ath6kl: Failed to init ath6kl core: -22 [ 210.758685][ T6202] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.786053][ T6202] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.804623][ T6202] device bridge_slave_0 entered promiscuous mode [ 210.937291][ T1108] ath6kl_usb: probe of 5-1:0.0 failed with error -22 [ 210.945301][ T6202] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.948966][ T1108] usb 5-1: USB disconnect, device number 7 [ 210.989729][ T6202] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.036313][ T6202] device bridge_slave_1 entered promiscuous mode [ 211.132726][ T6202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.176939][ T6202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.302285][ T6202] team0: Port device team_slave_0 added [ 211.337572][ T6202] team0: Port device team_slave_1 added [ 211.410866][ T6202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.425556][ T5970] Bluetooth: hci0: command 0x0409 tx timeout [ 211.433783][ T6202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.528692][ T6202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.722444][ T6202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.765575][ T6202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.198750][ T1108] Bluetooth: hci0: command 0x041b tx timeout [ 214.285933][ T6202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.875665][ T4292] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 215.434918][ T4292] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.583186][ T6202] device hsr_slave_0 entered promiscuous mode [ 215.610424][ T6202] device hsr_slave_1 entered promiscuous mode [ 215.642195][ T6202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.669840][ T6202] Cannot create hsr debugfs directory [ 215.733511][ T6262] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 215.745871][ T4292] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 215.755152][ T4292] usb 3-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 215.792439][ T4292] usb 3-1: Product: syz [ 215.803562][ T4292] usb 3-1: SerialNumber: syz [ 215.832524][ T4292] usb 3-1: config 0 descriptor?? [ 215.898020][ T4292] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 215.930236][ T4292] usb 3-1: Detected SIO [ 215.957825][ T4292] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 216.063713][ T6202] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 216.127523][ T6202] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 216.224325][ T6202] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 216.229763][ T4227] usb 3-1: USB disconnect, device number 10 [ 216.231575][ T5970] Bluetooth: hci0: command 0x040f tx timeout [ 216.266477][ T6202] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 216.267590][ T4227] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 216.409234][ T4227] ftdi_sio 3-1:0.0: device disconnected [ 219.477473][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 219.608622][ T6202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.631216][ T6202] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.648694][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.835723][ T21] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 219.844450][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.256300][ T21] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 220.291553][ T21] usb 3-1: config 0 has no interface number 0 [ 220.376176][ T21] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 220.554618][ T21] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 220.575313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.596952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.606807][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.613904][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.674285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.695921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.725886][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.732982][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.761925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.788722][ T21] usb 3-1: config 0 interface 255 has no altsetting 0 [ 220.797638][ T21] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 220.808765][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.816991][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.825093][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.880098][ T21] usb 3-1: config 0 descriptor?? [ 220.946284][ T21] ums-realtek 3-1:0.255: USB Mass Storage device detected [ 221.041670][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.301924][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.430046][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.576303][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.613908][ T6202] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 221.645538][ T6202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.680619][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.722555][ T21] usb 3-1: USB disconnect, device number 11 [ 221.729639][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.803781][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 222.002170][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 222.825970][ T4231] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 222.995099][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.216723][ T4231] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.935666][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.069973][ T4231] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 224.105993][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 224.195838][ T4231] usb 2-1: Product: syz [ 224.248976][ T4231] usb 2-1: SerialNumber: syz [ 224.361927][ T4231] usb 2-1: config 0 descriptor?? [ 224.586947][ T4231] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 225.525003][ T4231] usb 2-1: Detected SIO [ 225.566181][ T4231] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 225.918821][ T4231] usb 2-1: USB disconnect, device number 8 [ 225.927548][ T4231] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 225.937388][ T4231] ftdi_sio 2-1:0.0: device disconnected [ 226.874252][ T6360] loop6: detected capacity change from 0 to 7 [ 226.936079][ T6360] Dev loop6: unable to read RDB block 7 [ 226.984032][ T6360] loop6: unable to read partition table [ 227.013900][ T6360] loop6: partition table beyond EOD, truncated [ 227.085805][ T6360] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑච) failed (rc=-5) [ 227.107998][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 227.118970][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 227.160496][ T6202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.376495][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 229.406259][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 229.519856][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 229.539240][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.592023][ T6202] device veth0_vlan entered promiscuous mode [ 229.616970][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 229.656502][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 229.671149][ T6202] device veth1_vlan entered promiscuous mode [ 230.191482][ T6405] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 230.274083][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 230.293742][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 230.326354][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 230.376542][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 230.495189][ T6202] device veth0_macvtap entered promiscuous mode [ 230.564427][ T6202] device veth1_macvtap entered promiscuous mode [ 230.618395][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 230.646649][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 230.945398][ T6202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.143571][ T6202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.294914][ T6202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.384895][ T6202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.436277][ T6202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.535596][ T6202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.578978][ T6202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.612831][ T6202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.639998][ T6202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.651840][ T6202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.663803][ T6202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.677464][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 232.367443][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 233.128421][ T6202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.145640][ T6202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.165489][ T6202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.200635][ T6202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.220796][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 233.220812][ T26] audit: type=1326 audit(1775017204.801:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9477539819 code=0x7ffc0000 [ 233.227632][ T6202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.391012][ T26] audit: type=1326 audit(1775017204.811:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9477539819 code=0x7ffc0000 [ 233.502508][ T6202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.546693][ T26] audit: type=1326 audit(1775017204.811:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9477539819 code=0x7ffc0000 [ 233.582301][ T6458] IPv6: addrconf: prefix option has invalid lifetime [ 233.591878][ T6202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.631212][ T6202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.692610][ T26] audit: type=1326 audit(1775017204.811:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9477539819 code=0x7ffc0000 [ 233.736187][ T6202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.811299][ T26] audit: type=1326 audit(1775017204.811:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9477539819 code=0x7ffc0000 [ 233.851432][ T6202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.896049][ T6202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.009316][ T6202] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.057114][ T6202] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.083642][ T26] audit: type=1326 audit(1775017204.831:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f9477539819 code=0x7ffc0000 [ 234.117789][ T6202] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.136954][ T26] audit: type=1326 audit(1775017204.831:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9477539819 code=0x7ffc0000 [ 234.785117][ T6202] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.829752][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 234.838651][ T26] audit: type=1326 audit(1775017204.831:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9477539819 code=0x7ffc0000 [ 234.911748][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 234.922225][ T26] audit: type=1326 audit(1775017204.861:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9477539819 code=0x7ffc0000 [ 234.981146][ T26] audit: type=1326 audit(1775017204.861:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9477539819 code=0x7ffc0000 [ 236.238400][ T6488] netlink: 16 bytes leftover after parsing attributes in process `syz.3.659'. [ 236.975578][ T21] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 237.396273][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.453393][ T21] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.636653][ T21] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 237.767439][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 237.793629][ T21] usb 5-1: SerialNumber: syz [ 237.909877][ T6502] ODEBUG: Out of memory. ODEBUG disabled [ 238.188366][ T21] usb 5-1: 0:2 : does not exist [ 238.389254][ T21] usb 5-1: USB disconnect, device number 8 [ 238.524383][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.533105][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.817201][ T4808] udevd[4808]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.976070][ T6487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.018897][ T6487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.391399][ T6487] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.400940][ T6487] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.410144][ T6487] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.419974][ T6487] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.537102][ T6487] syz.3.659 (6487) used greatest stack depth: 19952 bytes left [ 242.562455][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 242.676784][ T3074] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.726059][ T4585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.733912][ T4585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.771466][ T6342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.781712][ T6342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.818907][ T3074] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.925685][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 243.010480][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 243.443375][ T3074] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.752289][ T13] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 244.062053][ T6566] netlink: 20 bytes leftover after parsing attributes in process `syz.5.581'. [ 244.074275][ T6566] netlink: 20 bytes leftover after parsing attributes in process `syz.5.581'. [ 244.709132][ T3074] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.721791][ T6571] netlink: 'syz.2.686': attribute type 29 has an invalid length. [ 245.797271][ T6571] netlink: 'syz.2.686': attribute type 29 has an invalid length. [ 245.951498][ T13] usb 4-1: device descriptor read/all, error -71 [ 247.986296][ T13] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 248.355785][ T13] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.496028][ T13] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 248.516016][ T13] usb 6-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 248.524269][ T13] usb 6-1: Product: syz [ 248.549414][ T13] usb 6-1: SerialNumber: syz [ 248.561483][ T13] usb 6-1: config 0 descriptor?? [ 248.746266][ T3074] device hsr_slave_0 left promiscuous mode [ 248.773169][ T13] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 248.782379][ T13] usb 6-1: Detected SIO [ 248.788583][ T13] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 248.825676][ T3074] device hsr_slave_1 left promiscuous mode [ 249.040177][ T3074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.263708][ T3074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.575209][ T3074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.596521][ T6616] binder_alloc: 6615: binder_alloc_buf, no vma [ 249.634876][ T3074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.654285][ T13] usb 6-1: USB disconnect, device number 2 [ 249.700676][ T13] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 249.754034][ T3074] device bridge_slave_1 left promiscuous mode [ 249.776010][ T13] ftdi_sio 6-1:0.0: device disconnected [ 249.781565][ T3074] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.801599][ T3074] device bridge_slave_0 left promiscuous mode [ 249.828236][ T3074] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.896162][ T3074] device veth1_macvtap left promiscuous mode [ 249.923293][ T3074] device veth0_macvtap left promiscuous mode [ 249.943680][ T3074] device veth1_vlan left promiscuous mode [ 249.963872][ T3074] device veth0_vlan left promiscuous mode [ 249.973693][ T6649] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 251.827028][ T3074] team0 (unregistering): Port device team_slave_1 removed [ 251.893649][ T3074] team0 (unregistering): Port device team_slave_0 removed [ 251.922068][ T3074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.613258][ T3074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.729585][ T3074] bond0 (unregistering): Released all slaves [ 255.706032][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.712470][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.823492][ T6820] ptrace attach of "./syz-executor exec"[6821] was attempted by "./syz-executor exec"[6820] [ 266.056085][ T6859] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 266.645536][ T4228] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 267.255789][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.763'. [ 267.585651][ T4228] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.652917][ T21] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 267.855942][ T4228] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 268.165208][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 269.029941][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 269.207475][ T21] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 269.249145][ T21] usb 2-1: config 0 interface 0 has no altsetting 0 [ 269.261136][ T4228] usb 5-1: Product: syz [ 269.265676][ T4228] usb 5-1: SerialNumber: syz [ 269.295121][ T4228] usb 5-1: config 0 descriptor?? [ 269.302874][ T21] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 269.401276][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.680417][ T4228] usb 5-1: can't set config #0, error -71 [ 269.789678][ T21] usb 2-1: config 0 descriptor?? [ 270.294176][ T4228] usb 5-1: USB disconnect, device number 9 [ 270.401694][ T21] usb 2-1: can't set config #0, error -71 [ 270.435689][ T21] usb 2-1: USB disconnect, device number 9 [ 273.186167][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.780'. [ 274.647018][ T6995] netlink: 20 bytes leftover after parsing attributes in process `syz.2.783'. [ 274.657570][ T6995] netlink: 20 bytes leftover after parsing attributes in process `syz.2.783'. [ 277.016074][ T2347] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 277.275685][ T2347] usb 4-1: Using ep0 maxpacket: 8 [ 277.395816][ T2347] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 277.426005][ T2347] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 277.455530][ T2347] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 277.500463][ T2347] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 277.544320][ T2347] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 277.580959][ T2347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.875620][ T2347] usb 4-1: GET_CAPABILITIES returned 0 [ 277.881408][ T2347] usbtmc 4-1:16.0: can't read capabilities [ 278.081605][ T21] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 278.115200][ T7035] usbtmc 4-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 278.156627][ T6304] usb 4-1: USB disconnect, device number 10 [ 278.351548][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 278.495894][ T21] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 278.786655][ T21] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 278.877426][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.029377][ T21] usb 3-1: Product: syz [ 279.065763][ T21] usb 3-1: Manufacturer: syz [ 279.070442][ T21] usb 3-1: SerialNumber: syz [ 279.266200][ T21] usb 3-1: config 0 descriptor?? [ 281.564768][ T13] usb 3-1: USB disconnect, device number 12 [ 286.482426][ T7156] netlink: 20 bytes leftover after parsing attributes in process `syz.1.811'. [ 289.220588][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.819'. [ 293.774463][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.832'. [ 293.895663][ T21] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 294.165842][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 294.315869][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.511764][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.522457][ T21] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 294.536207][ T21] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 294.545318][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.559097][ T21] usb 3-1: config 0 descriptor?? [ 295.106072][ T21] microsoft 0003:045E:07DA.0006: unknown main item tag 0x2 [ 295.434540][ T21] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 295.442255][ T21] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 295.449758][ T21] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 295.457256][ T21] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 295.465663][ T21] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 295.472907][ T21] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 295.484999][ T21] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 295.496363][ T21] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 295.509626][ T21] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0006/input/input8 [ 295.770509][ T21] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 295.800554][ T21] usb 3-1: USB disconnect, device number 13 [ 296.586284][ T7302] fido_id[7302]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 297.163439][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.845'. [ 299.402797][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.860'. [ 302.541648][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 303.695755][ T13] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 304.478513][ T13] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.765625][ T13] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 304.774721][ T13] usb 6-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 305.429082][ T13] usb 6-1: Product: syz [ 305.433301][ T13] usb 6-1: SerialNumber: syz [ 305.720343][ T13] usb 6-1: config 0 descriptor?? [ 305.787174][ T13] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 305.839798][ T13] usb 6-1: Detected SIO [ 305.866104][ T7510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.884'. [ 305.933207][ T13] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 306.059615][ T13] usb 6-1: USB disconnect, device number 3 [ 306.081664][ T13] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 306.109950][ T13] ftdi_sio 6-1:0.0: device disconnected [ 310.486815][ T7567] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 312.224099][ T4228] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 312.903364][ T4228] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.455755][ T4228] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 313.474794][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 313.528669][ T4228] usb 2-1: Product: syz [ 313.541008][ T4228] usb 2-1: SerialNumber: syz [ 313.569900][ T4228] usb 2-1: config 0 descriptor?? [ 313.612466][ T4228] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 313.694150][ T4228] usb 2-1: Detected SIO [ 313.711564][ T4228] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 314.169887][ T4228] usb 2-1: USB disconnect, device number 10 [ 314.204477][ T4228] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 314.215288][ T4228] ftdi_sio 2-1:0.0: device disconnected [ 314.655957][ T4240] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 315.025891][ T4240] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.150585][ T4240] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 315.299065][ T4240] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 315.453841][ T4240] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 315.675692][ T4240] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 315.724443][ T4240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 315.741205][ T4240] usb 3-1: SerialNumber: syz [ 316.038420][ T4240] usb 3-1: 0:2 : does not exist [ 316.043416][ T4240] usb 3-1: unit 5 not found! [ 317.136296][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.142673][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.454041][ T4240] usb 3-1: USB disconnect, device number 14 [ 318.235736][ T21] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 318.993053][ T4808] udevd[4808]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.015595][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 319.165752][ T21] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 32 [ 319.193445][ T21] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 319.373341][ T21] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 319.566665][ T21] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 319.615740][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.625542][ T13] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 319.721133][ T21] usb 2-1: Product: syz [ 319.725353][ T21] usb 2-1: Manufacturer: syz [ 319.735585][ T21] usb 2-1: SerialNumber: syz [ 319.765825][ T7669] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 319.779074][ T7669] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 319.786621][ T7669] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 319.895527][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 320.024028][ T13] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 320.044156][ T13] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 320.074970][ T13] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 320.191226][ T13] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 320.218399][ T13] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 320.262216][ T13] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 320.355660][ T21] usb 2-1: MIDIStreaming interface descriptor not found [ 320.395720][ T13] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 320.403744][ T13] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 320.437326][ T21] usb 2-1: USB disconnect, device number 11 [ 320.453082][ T13] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 320.745742][ T13] usb 4-1: string descriptor 0 read error: -22 [ 320.752084][ T13] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 320.781260][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.798109][ T4341] udevd[4341]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 320.864112][ T13] adutux 4-1:168.0: interrupt endpoints not found [ 321.087261][ T13] usb 4-1: USB disconnect, device number 11 [ 324.236216][ T26] audit: type=1326 audit(1775018063.819:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9477539819 code=0x7ffc0000 [ 324.345502][ T26] audit: type=1326 audit(1775018063.849:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9477539819 code=0x7ffc0000 [ 324.498184][ T26] audit: type=1326 audit(1775018063.849:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9477539819 code=0x7ffc0000 [ 324.535222][ T26] audit: type=1326 audit(1775018063.889:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9477539819 code=0x7ffc0000 [ 324.725689][ T26] audit: type=1326 audit(1775018063.889:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f94774fa04e code=0x7ffc0000 [ 324.748689][ T26] audit: type=1326 audit(1775018063.889:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f947753ab17 code=0x7ffc0000 [ 324.820363][ T26] audit: type=1326 audit(1775018063.889:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9477539819 code=0x7ffc0000 [ 324.894770][ T26] audit: type=1326 audit(1775018063.889:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f947753ab17 code=0x7ffc0000 [ 324.931012][ T26] audit: type=1326 audit(1775018063.889:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f94774fa04e code=0x7ffc0000 [ 325.026663][ C0] vkms_vblank_simulate: vblank timer overrun [ 326.682020][ T26] audit: type=1326 audit(1775018063.889:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9477539819 code=0x7ffc0000 [ 333.523174][ T7838] capability: warning: `syz.1.972' uses deprecated v2 capabilities in a way that may be insecure [ 336.170662][ T7869] netlink: 20 bytes leftover after parsing attributes in process `syz.2.979'. [ 336.183457][ T7869] netlink: 20 bytes leftover after parsing attributes in process `syz.2.979'. [ 341.228572][ T7965] netlink: 20 bytes leftover after parsing attributes in process `syz.2.994'. [ 341.240799][ T7965] netlink: 20 bytes leftover after parsing attributes in process `syz.2.994'. [ 344.933224][ T8002] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 344.962751][ T8002] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 345.018177][ T8002] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 345.041449][ T8002] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 345.065109][ T8002] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 345.131650][ T8002] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 345.174157][ T8002] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 345.195588][ T8002] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 345.225281][ T8002] device geneve2 entered promiscuous mode [ 345.651974][ T8008] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 346.493032][ T8017] mkiss: ax0: crc mode is auto. [ 346.579146][ T8018] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1008'. [ 346.591533][ T8018] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1008'. [ 349.039169][ T8039] loop2: detected capacity change from 0 to 64 [ 350.555561][ T8053] mkiss: ax0: crc mode is auto. [ 350.922616][ T8049] loop4: detected capacity change from 0 to 32768 [ 351.468628][ T8064] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 357.134560][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1041'. [ 358.076766][ T8137] loop3: detected capacity change from 0 to 512 [ 358.160637][ T8137] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 358.174494][ T8137] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.214521][ T8149] loop1: detected capacity change from 0 to 256 [ 359.483602][ T8149] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 359.570132][ T8149] attempt to access beyond end of device [ 359.570132][ T8149] loop1: rw=524288, want=34359738496, limit=256 [ 359.597863][ T8149] attempt to access beyond end of device [ 359.597863][ T8149] loop1: rw=0, want=34359738496, limit=256 [ 359.628356][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 359.628373][ T26] audit: type=1800 audit(1775018099.209:45): pid=8149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1049" name="file1" dev="loop1" ino=1048594 res=0 errno=0 [ 360.275505][ T2347] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 360.641602][ T2347] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 360.681540][ T2347] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 360.727777][ T2347] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 360.765485][ T2347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.805743][ T8169] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 361.065568][ T2347] usb 2-1: string descriptor 0 read error: -71 [ 361.074177][ T2347] hub 2-1:32.0: USB hub found [ 361.135527][ T2347] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 361.228537][ T2347] usb 2-1: USB disconnect, device number 12 [ 361.236704][ T8176] loop4: detected capacity change from 0 to 32768 [ 361.340732][ T8176] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1057 (8176) [ 361.603411][ T8176] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 361.635100][ T8176] BTRFS info (device loop4): setting nodatasum [ 361.705529][ T8176] BTRFS info (device loop4): force zlib compression, level 3 [ 361.762392][ T8176] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 361.826319][ T8176] BTRFS info (device loop4): use lzo compression, level 0 [ 361.878822][ T8176] BTRFS info (device loop4): turning on flush-on-commit [ 361.885883][ T8176] BTRFS info (device loop4): enabling auto defrag [ 361.892360][ T8176] BTRFS info (device loop4): max_inline at 4096 [ 361.899255][ T8176] BTRFS info (device loop4): using free space tree [ 361.906175][ T8176] BTRFS info (device loop4): has skinny extents [ 363.095021][ T8222] ax25_connect(): syz.1.1065 uses autobind, please contact jreuter@yaina.de [ 363.395510][ T8176] BTRFS info (device loop4): enabling ssd optimizations [ 364.904033][ T4808] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop4 scanned by udevd (4808) [ 366.576785][ T8268] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 367.909801][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1076'. [ 367.932654][ T8277] loop3: detected capacity change from 0 to 4096 [ 368.028533][ T8277] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 368.822086][ T8291] loop1: detected capacity change from 0 to 4096 [ 369.472130][ T8303] loop3: detected capacity change from 0 to 1024 [ 369.877250][ T7939] hfsplus: b-tree write err: -5, ino 25 [ 369.883552][ T7939] hfsplus: b-tree write err: -5, ino 4 [ 369.917431][ T7939] hfsplus: b-tree write err: -5, ino 2 [ 372.076745][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1089'. [ 373.629693][ T8350] loop1: detected capacity change from 0 to 256 [ 373.745571][ T4263] Bluetooth: hci4: command 0x0405 tx timeout [ 373.933088][ T8350] FAT-fs (loop1): Directory bread(block 64) failed [ 373.940430][ T8350] FAT-fs (loop1): Directory bread(block 65) failed [ 373.948326][ T8350] FAT-fs (loop1): Directory bread(block 66) failed [ 373.955148][ T8350] FAT-fs (loop1): Directory bread(block 67) failed [ 373.962234][ T8350] FAT-fs (loop1): Directory bread(block 68) failed [ 373.969374][ T8350] FAT-fs (loop1): Directory bread(block 69) failed [ 373.985179][ T8350] FAT-fs (loop1): Directory bread(block 70) failed [ 373.993626][ T8350] FAT-fs (loop1): Directory bread(block 71) failed [ 374.001950][ T8350] FAT-fs (loop1): Directory bread(block 72) failed [ 374.009039][ T8350] FAT-fs (loop1): Directory bread(block 73) failed [ 378.598533][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.604871][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.217956][ T8429] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1118'. [ 384.892164][ T8414] Set syz1 is full, maxelem 65536 reached [ 390.814553][ T8484] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1133'. [ 390.826982][ T8484] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1133'. [ 396.856225][ T8549] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 399.918398][ T8571] syz.1.1154 (8571): drop_caches: 2 [ 400.089715][ C0] ================================================================== [ 400.098187][ C0] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 400.105698][ C0] Read of size 2 at addr ffff88806097402a by task ksoftirqd/0/14 [ 400.113615][ C0] [ 400.115965][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 400.123367][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 400.133454][ C0] Call Trace: [ 400.136764][ C0] [ 400.139722][ C0] dump_stack_lvl+0x188/0x250 [ 400.144451][ C0] ? show_regs_print_info+0x20/0x20 [ 400.149677][ C0] ? _printk+0xda/0x130 [ 400.154005][ C0] ? rose_timer_expiry+0x470/0x490 [ 400.159171][ C0] ? load_image+0x400/0x400 [ 400.163929][ C0] print_address_description+0x60/0x2d0 [ 400.169510][ C0] ? rose_timer_expiry+0x470/0x490 [ 400.174666][ C0] kasan_report+0xdf/0x130 [ 400.179122][ C0] ? rose_timer_expiry+0x470/0x490 [ 400.184355][ C0] rose_timer_expiry+0x470/0x490 [ 400.189316][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 400.194366][ C0] call_timer_fn+0x17b/0x540 [ 400.199019][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 400.204072][ C0] ? __run_timers+0x800/0x800 [ 400.208780][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 400.214093][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 400.219490][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 400.224649][ C0] __run_timers+0x53e/0x800 [ 400.229284][ C0] ? detach_timer+0x2b0/0x2b0 [ 400.233987][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 400.240019][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 400.244981][ C0] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 400.250997][ C0] run_timer_softirq+0x63/0xf0 [ 400.255876][ C0] handle_softirqs+0x339/0x830 [ 400.260670][ C0] ? run_ksoftirqd+0xa4/0x100 [ 400.265377][ C0] ? do_softirq+0x210/0x210 [ 400.269914][ C0] ? run_ksoftirqd+0x81/0x100 [ 400.274618][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 400.279881][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 400.285202][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 400.290441][ C0] run_ksoftirqd+0xa4/0x100 [ 400.294979][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 400.300203][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 400.305614][ C0] ? smpboot_thread_fn+0x5bc/0x970 [ 400.311027][ C0] smpboot_thread_fn+0x4f6/0x970 [ 400.316108][ C0] kthread+0x436/0x520 [ 400.320207][ C0] ? cpu_report_death+0x180/0x180 [ 400.325518][ C0] ? kthread_blkcg+0xd0/0xd0 [ 400.330143][ C0] ret_from_fork+0x1f/0x30 [ 400.334606][ C0] [ 400.337642][ C0] [ 400.339982][ C0] Allocated by task 6262: [ 400.344324][ C0] __kasan_kmalloc+0xb5/0xf0 [ 400.349029][ C0] rose_add_node+0x227/0xdb0 [ 400.353650][ C0] rose_rt_ioctl+0xa2b/0xe70 [ 400.358365][ C0] rose_ioctl+0x2a7/0x7d0 [ 400.362919][ C0] sock_do_ioctl+0xfb/0x320 [ 400.367446][ C0] sock_ioctl+0x4d2/0x710 [ 400.371801][ C0] __se_sys_ioctl+0xfa/0x170 [ 400.376425][ C0] do_syscall_64+0x4c/0xa0 [ 400.380868][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 400.386884][ C0] [ 400.389226][ C0] The buggy address belongs to the object at ffff888060974000 [ 400.389226][ C0] which belongs to the cache kmalloc-512 of size 512 [ 400.403301][ C0] The buggy address is located 42 bytes inside of [ 400.403301][ C0] 512-byte region [ffff888060974000, ffff888060974200) [ 400.416609][ C0] The buggy address belongs to the page: [ 400.422263][ C0] page:ffffea0001825d00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888060975400 pfn:0x60974 [ 400.433743][ C0] head:ffffea0001825d00 order:2 compound_mapcount:0 compound_pincount:0 [ 400.442096][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 400.450128][ C0] raw: 00fff00000010200 ffffea0000880c08 ffffea0000aefc08 ffff888016c41c80 [ 400.458734][ C0] raw: ffff888060975400 0000000000100007 00000001ffffffff 0000000000000000 [ 400.467331][ C0] page dumped because: kasan: bad access detected [ 400.473762][ C0] page_owner tracks the page as allocated [ 400.479494][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4192, ts 56797777707, free_ts 17183012262 [ 400.498717][ C0] get_page_from_freelist+0x1bbd/0x1ca0 [ 400.504300][ C0] __alloc_pages+0x1ee/0x480 [ 400.508917][ C0] new_slab+0xc0/0x4b0 [ 400.513005][ C0] ___slab_alloc+0x80a/0xdd0 [ 400.517616][ C0] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 400.523785][ C0] __alloc_skb+0x22c/0x750 [ 400.528225][ C0] mpls_netconf_notify_devconf+0x46/0xf0 [ 400.533880][ C0] mpls_dev_notify+0x658/0x780 [ 400.538663][ C0] raw_notifier_call_chain+0xcb/0x160 [ 400.544055][ C0] dev_change_name+0x695/0xbf0 [ 400.548846][ C0] do_setlink+0xa4e/0x3d60 [ 400.553279][ C0] rtnl_newlink+0x1658/0x1a50 [ 400.557968][ C0] rtnetlink_rcv_msg+0x844/0xf30 [ 400.562923][ C0] netlink_rcv_skb+0x1f5/0x440 [ 400.567703][ C0] netlink_unicast+0x774/0x920 [ 400.572506][ C0] netlink_sendmsg+0x8ba/0xbe0 [ 400.577291][ C0] page last free stack trace: [ 400.581974][ C0] free_unref_page_prepare+0x637/0x6c0 [ 400.587454][ C0] free_unref_page+0x8f/0x2a0 [ 400.592153][ C0] free_contig_range+0x96/0xf0 [ 400.596935][ C0] destroy_args+0xf0/0xa00 [ 400.601370][ C0] debug_vm_pgtable+0x321/0x380 [ 400.606248][ C0] do_one_initcall+0x272/0x730 [ 400.611150][ C0] do_initcall_level+0x137/0x1f0 [ 400.616100][ C0] do_initcalls+0x4b/0x90 [ 400.620459][ C0] kernel_init_freeable+0x3e9/0x570 [ 400.625678][ C0] kernel_init+0x19/0x1b0 [ 400.630123][ C0] ret_from_fork+0x1f/0x30 [ 400.634561][ C0] [ 400.636900][ C0] Memory state around the buggy address: [ 400.642549][ C0] ffff888060973f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 400.650624][ C0] ffff888060973f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 400.658698][ C0] >ffff888060974000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 400.666773][ C0] ^ [ 400.672160][ C0] ffff888060974080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 400.680243][ C0] ffff888060974100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 400.688315][ C0] ================================================================== [ 400.696391][ C0] Disabling lock debugging due to kernel taint [ 400.703116][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 400.710323][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G B syzkaller #0 [ 400.719014][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 400.729275][ C0] Call Trace: [ 400.732582][ C0] [ 400.735527][ C0] dump_stack_lvl+0x188/0x250 [ 400.740230][ C0] ? show_regs_print_info+0x20/0x20 [ 400.745452][ C0] ? load_image+0x400/0x400 [ 400.749977][ C0] panic+0x2e5/0x810 [ 400.753896][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 400.758428][ C0] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 400.764343][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 400.770254][ C0] ? _raw_spin_unlock+0x40/0x40 [ 400.775122][ C0] ? print_memory_metadata+0x314/0x400 [ 400.780599][ C0] ? rose_timer_expiry+0x470/0x490 [ 400.785726][ C0] check_panic_on_warn+0x80/0xa0 [ 400.791123][ C0] ? rose_timer_expiry+0x470/0x490 [ 400.796264][ C0] end_report+0x6d/0xf0 [ 400.800444][ C0] kasan_report+0x102/0x130 [ 400.804997][ C0] ? rose_timer_expiry+0x470/0x490 [ 400.810131][ C0] rose_timer_expiry+0x470/0x490 [ 400.815176][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 400.820311][ C0] call_timer_fn+0x17b/0x540 [ 400.824920][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 400.829965][ C0] ? __run_timers+0x800/0x800 [ 400.834661][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 400.839964][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 400.845183][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 400.850220][ C0] __run_timers+0x53e/0x800 [ 400.854753][ C0] ? detach_timer+0x2b0/0x2b0 [ 400.859530][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 400.865617][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 400.870568][ C0] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 400.876565][ C0] run_timer_softirq+0x63/0xf0 [ 400.881344][ C0] handle_softirqs+0x339/0x830 [ 400.886130][ C0] ? run_ksoftirqd+0xa4/0x100 [ 400.890938][ C0] ? do_softirq+0x210/0x210 [ 400.895462][ C0] ? run_ksoftirqd+0x81/0x100 [ 400.900154][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 400.905642][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 400.911044][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 400.916258][ C0] run_ksoftirqd+0xa4/0x100 [ 400.920773][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 400.926001][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 400.931566][ C0] ? smpboot_thread_fn+0x5bc/0x970 [ 400.936692][ C0] smpboot_thread_fn+0x4f6/0x970 [ 400.941749][ C0] kthread+0x436/0x520 [ 400.946358][ C0] ? cpu_report_death+0x180/0x180 [ 400.951403][ C0] ? kthread_blkcg+0xd0/0xd0 [ 400.956005][ C0] ret_from_fork+0x1f/0x30 [ 400.960443][ C0] [ 400.963809][ C0] Kernel Offset: disabled [ 400.968137][ C0] Rebooting in 86400 seconds..