last executing test programs: 9.124138989s ago: executing program 0 (id=518): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mlockall(0x2) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = syz_io_uring_setup(0x151, &(0x7f0000000140)={0x0, 0x8206, 0x400, 0x43, 0x26}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r2, 0x3516, 0xf00, 0x0, 0x0, 0xfffffdcf) 8.477385636s ago: executing program 4 (id=519): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x8000}, &(0x7f0000000240), &(0x7f0000000200)) io_uring_enter(r0, 0x13c2, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @random, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080)) 7.543436269s ago: executing program 2 (id=523): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x6a0, 0x4) write$binfmt_script(r0, &(0x7f00000000c0), 0x28) prlimit64(0x0, 0xe, &(0x7f0000000b40)={0xa, 0x8b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f0000000a00)=0x2, 0x5, 0x2, 0x0, &(0x7f0000000ac0)=0x1, 0x616e9570) r5 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x8}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)={@cgroup, r6, 0x7, 0x3000}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map=r7, 0x26, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000500)) epoll_create1(0x0) fanotify_mark(0xffffffffffffffff, 0x22, 0x4000003b, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r5) 6.387043292s ago: executing program 2 (id=525): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000180)=0x5, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000240)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1b, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) syz_emit_vhci(0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) connect$unix(0xffffffffffffffff, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 5.692509654s ago: executing program 0 (id=528): sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) write$tun(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="ff6f79deefc8bd95368e66016f0800010000000000020000004500003c52663e8b17e4fd00000000008490783fffffffac14c9f1fbfd536c24dc5446561b2e14aa00000000663bd5832af581598862d3555a84fcc242644599bad0f3d8dd26fc6d3774ff7d91cb401e8ee836f8d571f7607ece9a89d4030937e7d328a244e3a663c6e1aa2643f3a1b95ee3dd7c7048542e605e3769a017e26142c786", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="aa00070090780014050a00000000000000000008d58838068b91"], 0x4a) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.51819648s ago: executing program 3 (id=529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c880) 5.356221234s ago: executing program 3 (id=530): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='task\x00') fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000254c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820}}, {{&(0x7f0000001580)=@file={0x1, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40042}}], 0x2, 0x40) 5.28890892s ago: executing program 0 (id=531): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x2b86a7a3, 0x119000) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000140)=""/160) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1000000002) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r7) ioctl$SIOCPNADDRESOURCE(r6, 0x89e0, &(0x7f0000000240)=0x1) r8 = syz_io_uring_setup(0xbe7, &(0x7f0000000400)={0x0, 0xe7a8, 0x80, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r11 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000300)=r11, 0x1) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r8, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r8, 0x3d0e, 0x760c, 0x43, 0x0, 0x0) io_uring_enter(r8, 0x5, 0xffffbffc, 0x39, 0x0, 0x0) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r12, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 5.232115175s ago: executing program 3 (id=532): r0 = syz_io_uring_setup(0x275c, &(0x7f00000000c0)={0x0, 0x5bce, 0x10, 0xffffffff, 0x111}, &(0x7f0000001140), &(0x7f0000001180)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002300)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 4.963949039s ago: executing program 0 (id=533): r0 = socket(0x0, 0xa, 0x8) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x200, 0x10}, 0x18) mount_setattr(r1, &(0x7f0000000080)='./file0\x00', 0xc800, &(0x7f00000000c0)={0x180001, 0x8, 0x180000}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x404000, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000140)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x434, 0x4) preadv(r1, 0x0, 0x0, 0x6, 0x4) sendfile(r0, r1, &(0x7f0000001200)=0x101, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000001240)={{0xa, 0x4e22, 0xddd, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0x4e23, 0x4, @private0, 0x9d07}, 0xffffffffffffffff, {[0x12, 0x3ff, 0x9, 0x80000001, 0x6, 0x200, 0x4, 0x3]}}, 0x5c) connect$pppl2tp(r0, &(0x7f00000012c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x2, 0x1, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x16}, 0x8}}}, 0x32) r3 = syz_open_dev$media(&(0x7f0000001300), 0x700000000000000, 0x20000) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000001840)={0x0, 0x1, 0x0, &(0x7f0000001340)=[{}], 0x6, 0x0, &(0x7f00000013c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000001680)=[{0x0, 0x80000000}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000001740)=[{}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000001cc0)={0x0, 0x2, 0x0, &(0x7f00000018c0)=[{}, {}], 0x3, 0x0, &(0x7f0000001980)=[{}, {}, {}], 0x5, 0x0, &(0x7f0000001b00)=[{}, {}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {}], 0x6, 0x0, &(0x7f0000001bc0)=[{}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000002640)={0x0, 0x1, 0x0, &(0x7f0000002280)=[{}], 0x2, 0x0, &(0x7f0000002300)=[{}, {}], 0x2, 0x0, &(0x7f0000002400)=[{0x0, 0x80000000, 0x0, {0x0}}, {}], 0xa, 0x0, &(0x7f0000002480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f00000026c0)={{r4, r5, 0x0, [0x9, 0xffffffff]}, {0x80000000, r6, 0x2, [0x8, 0xe4]}, 0x2, [0x200, 0x401]}) clock_gettime(0x6, &(0x7f0000002700)) sendto(r0, &(0x7f0000002740)="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", 0x1000, 0x20044810, &(0x7f0000003740)=@in={0x2, 0x4e21, @private=0xa010102}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, &(0x7f00000037c0)) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000003800), 0x100, 0x0) ioctl$SNDCTL_DSP_RESET(r7, 0x5000, 0x0) r8 = userfaultfd(0x80800) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000003840)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x5}) read(r3, &(0x7f0000003880)=""/92, 0x5c) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r7, 0x40049366, &(0x7f0000003900)=0x5) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) sendfile(r0, r9, &(0x7f00000039c0)=0x4, 0xbe) syz_genetlink_get_family_id$batadv(&(0x7f0000003a40), r0) 4.963768189s ago: executing program 4 (id=534): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 4.879790226s ago: executing program 4 (id=535): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.310857367s ago: executing program 3 (id=537): memfd_secret(0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.310085057s ago: executing program 0 (id=547): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) 3.857320097s ago: executing program 4 (id=538): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000, 0x0, 0x4000000}, 0x0) socket$rds(0x15, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$peek(0x2, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000340)=0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 3.82044162s ago: executing program 2 (id=539): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@bridge_setlink={0x38, 0x13, 0xa2f, 0x70bd2b, 0x25cfdbfd, {0x7, 0x0, 0x68, r1, 0x16318, 0x40020}, [@IFLA_LINKINFO={0x18, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x4, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}]}}}]}, 0x38}}, 0x8004) 3.748263727s ago: executing program 0 (id=540): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4040) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "15938f49"}]}}, 0x0}, 0x0) 3.748041297s ago: executing program 1 (id=541): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000280)=0x55, 0x4) 3.26055885s ago: executing program 2 (id=542): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100), 0x0, 0x33}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) 3.2595143s ago: executing program 1 (id=543): socketpair$unix(0x1, 0x4, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="26000000040000000100000022bf000006000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000a6"], 0x50) io_uring_enter(r0, 0x6214, 0x7721, 0x13, 0x0, 0x38) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) 3.216013624s ago: executing program 3 (id=544): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x51) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.092141365s ago: executing program 1 (id=545): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000fedbdf252a00000008002f000000000005003600000000000c0005000202aaaaaaaaaaaa050037000300000008000200", @ANYRES32=r3], 0x40}, 0x4, 0x700000000000000, 0x0, 0x2000c0c0}, 0x40) 3.091994065s ago: executing program 2 (id=546): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000540)='0', 0x1}], 0x1) syz_clone(0x4907011, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.017190692s ago: executing program 1 (id=548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r1, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000080) 2.937280159s ago: executing program 1 (id=549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 2.752194085s ago: executing program 4 (id=550): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) read$msr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0xfe, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65", 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r5, 0x1020}], 0x1, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x42, 0x0) open$dir(0x0, 0x4101, 0x190) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 1.541236253s ago: executing program 4 (id=551): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000020, 0x0, 0x7}]}) 432.963461ms ago: executing program 3 (id=552): r0 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f00000006c0)={0x20, 0xb, 0x7, "7e25d8183f00c1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 445.62µs ago: executing program 2 (id=553): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f00000000c0)={0x34, 0x0, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xffff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd}]}, 0x34}}, 0x4000) bind$ax25(r0, &(0x7f0000000280)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @default, @null]}, 0x48) 0s ago: executing program 1 (id=554): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109021200"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000023c0), r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@remote, 0x0, 0x33}, @in=@broadcast, {0x0, 0x7}, {}, {0x4}, 0x0, 0x0, 0x2, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, 0x0, 0x4048043) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e24, 0x90, @loopback, 0x8}}, 0x101, 0xf, 0x8, 0x17fa, 0x4}, &(0x7f0000000100)=0x98) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fedbdf2505000000080004000100000008000100", @ANYBLOB="b8020f3b5aa0855f36c99b7e022361d6f36bf95924f603227da8938414b3ae3fffbdc6370c6963b2e2de32a5121792c09125eab7b5003f49bcdbee8eb9"], 0x24}, 0x1, 0x0, 0x0, 0x20040002}, 0x40d0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x4000) r5 = syz_open_dev$usbfs(0x0, 0xfffffffffffffff7, 0x521000) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000380)=0x6) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x209040, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.208' (ED25519) to the list of known hosts. [ 50.663277][ T4170] cgroup: Unknown subsys name 'net' [ 50.796231][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.073115][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.493074][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 53.588187][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 53.632653][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 53.654623][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 53.666952][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.675381][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.683670][ T4187] device bridge_slave_0 entered promiscuous mode [ 53.695211][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.702506][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.710155][ T4187] device bridge_slave_1 entered promiscuous mode [ 53.738082][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 53.781598][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.788699][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.796640][ T4182] device bridge_slave_0 entered promiscuous mode [ 53.812960][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.838487][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.845729][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.854124][ T4182] device bridge_slave_1 entered promiscuous mode [ 53.866322][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.932063][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.939200][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.947076][ T4181] device bridge_slave_0 entered promiscuous mode [ 53.959215][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.978676][ T4187] team0: Port device team_slave_0 added [ 53.984826][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.992094][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.000425][ T4181] device bridge_slave_1 entered promiscuous mode [ 54.016359][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.032198][ T4187] team0: Port device team_slave_1 added [ 54.038055][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.045179][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.053148][ T4183] device bridge_slave_0 entered promiscuous mode [ 54.086837][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.093988][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.102359][ T4183] device bridge_slave_1 entered promiscuous mode [ 54.114560][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.121728][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.129316][ T4184] device bridge_slave_0 entered promiscuous mode [ 54.158556][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.174665][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.182402][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.190084][ T4184] device bridge_slave_1 entered promiscuous mode [ 54.199876][ T4182] team0: Port device team_slave_0 added [ 54.206605][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.214126][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.240427][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.254062][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.264977][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.282012][ T4182] team0: Port device team_slave_1 added [ 54.296662][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.303660][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.329570][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.346552][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.357396][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.389959][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.407365][ T4181] team0: Port device team_slave_0 added [ 54.436681][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.443963][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.469977][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.482243][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.489184][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.515102][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.528352][ T4181] team0: Port device team_slave_1 added [ 54.536188][ T4183] team0: Port device team_slave_0 added [ 54.551672][ T4184] team0: Port device team_slave_0 added [ 54.573025][ T4183] team0: Port device team_slave_1 added [ 54.586926][ T4184] team0: Port device team_slave_1 added [ 54.609360][ T4187] device hsr_slave_0 entered promiscuous mode [ 54.615996][ T4187] device hsr_slave_1 entered promiscuous mode [ 54.638390][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.646115][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.672146][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.684754][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.691753][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.717941][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.736741][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.743742][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.769649][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.786821][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.794087][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.820376][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.833001][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.839948][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.866179][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.880990][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.887926][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.913928][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.962283][ T4182] device hsr_slave_0 entered promiscuous mode [ 54.968838][ T4182] device hsr_slave_1 entered promiscuous mode [ 54.976358][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.984154][ T4182] Cannot create hsr debugfs directory [ 55.049749][ T4183] device hsr_slave_0 entered promiscuous mode [ 55.056873][ T4183] device hsr_slave_1 entered promiscuous mode [ 55.063919][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.071774][ T4183] Cannot create hsr debugfs directory [ 55.080052][ T4181] device hsr_slave_0 entered promiscuous mode [ 55.086925][ T4181] device hsr_slave_1 entered promiscuous mode [ 55.093665][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.101275][ T4181] Cannot create hsr debugfs directory [ 55.133886][ T4184] device hsr_slave_0 entered promiscuous mode [ 55.140957][ T4184] device hsr_slave_1 entered promiscuous mode [ 55.147407][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.154996][ T4184] Cannot create hsr debugfs directory [ 55.191605][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 55.201057][ T4190] Bluetooth: hci1: command 0x0409 tx timeout [ 55.209364][ T4190] Bluetooth: hci3: command 0x0409 tx timeout [ 55.219077][ T4190] Bluetooth: hci2: command 0x0409 tx timeout [ 55.281104][ T4190] Bluetooth: hci4: command 0x0409 tx timeout [ 55.416658][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.433162][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.443183][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.455577][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.502739][ T4182] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.513911][ T4182] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.528803][ T4182] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.541672][ T4182] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.596720][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.612596][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.649185][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.662175][ T4181] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.672535][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.687856][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.697857][ T4181] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.716666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.727057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.735632][ T4181] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.745458][ T4181] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.774065][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.819684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.829955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.839077][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.846293][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.863347][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.885756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.894162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.904008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.914726][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.921823][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.929580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.940546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.949240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.958297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.966851][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.976910][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.987958][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.005911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.014785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.024596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.047047][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.085964][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.095028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.119723][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.132165][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.140518][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.149560][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.161823][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.169373][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.178848][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.188499][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.195600][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.207581][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.224130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.233274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.242612][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.249650][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.258805][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.270170][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.279877][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.293662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.328053][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.357635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.367296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.376815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.386020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.396004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.404676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.413802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.422758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.430358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.438169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.446793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.455317][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.462376][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.470026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.478937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.487645][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.494758][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.505209][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.528314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.537569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.548606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.563168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.574049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.582967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.592948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.601732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.610006][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.617068][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.625633][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.649954][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.676166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.687220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.696371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.705469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.719402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.728187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.736750][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.743829][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.751945][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.760388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.769299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.778682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.787512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.798523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.807181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.815805][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.824363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.832739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.844344][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.869415][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.887274][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.906265][ T4181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.931685][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.948728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.957734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.965976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.976282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.985516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.993619][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.001290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.009513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.018939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.027807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.036825][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.062396][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.083590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.114862][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.140316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.162198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.187068][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.194337][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.221309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.234661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.245595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.260269][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.267373][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.275293][ T4226] Bluetooth: hci2: command 0x041b tx timeout [ 57.287250][ T4226] Bluetooth: hci3: command 0x041b tx timeout [ 57.293662][ T4226] Bluetooth: hci1: command 0x041b tx timeout [ 57.299732][ T4226] Bluetooth: hci0: command 0x041b tx timeout [ 57.326709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.338257][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.347132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.355127][ T4226] Bluetooth: hci4: command 0x041b tx timeout [ 57.369538][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.378641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.388756][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.398478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.414832][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.441525][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.458874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.466875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.475781][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.484715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.494150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.502672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.518626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.527275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.545351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.554241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.576297][ T4187] device veth0_vlan entered promiscuous mode [ 57.588240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.597466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.605802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.614608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.623641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.632499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.640880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.649067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.659211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.667438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.688782][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.700598][ T4187] device veth1_vlan entered promiscuous mode [ 57.711390][ T4182] device veth0_vlan entered promiscuous mode [ 57.719027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.727704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.738336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.747301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.797496][ T4182] device veth1_vlan entered promiscuous mode [ 57.811880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.824923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.838583][ T4183] device veth0_vlan entered promiscuous mode [ 57.856426][ T4181] device veth0_vlan entered promiscuous mode [ 57.873139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.885522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.894102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.902545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.912511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.921260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.929462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.938076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.947840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.955824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.966883][ T4187] device veth0_macvtap entered promiscuous mode [ 57.979809][ T4181] device veth1_vlan entered promiscuous mode [ 58.001055][ T4183] device veth1_vlan entered promiscuous mode [ 58.008447][ T4187] device veth1_macvtap entered promiscuous mode [ 58.031083][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.040481][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.048950][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.058394][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.066556][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.075648][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.084135][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.093506][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.102655][ T4182] device veth0_macvtap entered promiscuous mode [ 58.112180][ T4182] device veth1_macvtap entered promiscuous mode [ 58.136687][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.153891][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.169021][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.177845][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.186149][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.194993][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.204415][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.213358][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.227508][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.236681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.247479][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.258787][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.273313][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.285479][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.295158][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.304236][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.313783][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.344995][ T4181] device veth0_macvtap entered promiscuous mode [ 58.353609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.364190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.373163][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.382149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.389569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.402154][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.409424][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.420002][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.431538][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.439412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.448224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.465706][ T4181] device veth1_macvtap entered promiscuous mode [ 58.482657][ T4182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.492484][ T4182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.501880][ T4182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.510583][ T4182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.527732][ T4183] device veth0_macvtap entered promiscuous mode [ 58.558019][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.578338][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.588277][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.598714][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.609888][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.619034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.627536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.639122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.647833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.656445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.667078][ T4183] device veth1_macvtap entered promiscuous mode [ 58.698589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.706791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.720024][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.729078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.741487][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.753480][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.763638][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.774348][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.785815][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.806366][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.815803][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.824592][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.833512][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.864876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.874667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.885321][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.896727][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.906724][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.917393][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.927461][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.938132][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.949608][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.973467][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.985827][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.996370][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.999647][ T4184] device veth0_vlan entered promiscuous mode [ 59.005402][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.024588][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.035949][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.046119][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.056819][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.066874][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.077534][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.088884][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.103248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.115733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.123955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.132347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.140981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.154938][ T4184] device veth1_vlan entered promiscuous mode [ 59.171292][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.180009][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.192536][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.201575][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.214320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.222196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.229822][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.281806][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.299510][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.305059][ T4184] device veth0_macvtap entered promiscuous mode [ 59.327716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.336126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.344305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.352882][ T4254] Bluetooth: hci0: command 0x040f tx timeout [ 59.357892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.359281][ T4254] Bluetooth: hci1: command 0x040f tx timeout [ 59.380796][ T4254] Bluetooth: hci3: command 0x040f tx timeout [ 59.385752][ T4184] device veth1_macvtap entered promiscuous mode [ 59.386884][ T4254] Bluetooth: hci2: command 0x040f tx timeout [ 59.410445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.412531][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.427713][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.430172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.441452][ T4226] Bluetooth: hci4: command 0x040f tx timeout [ 59.449586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.488013][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.500469][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.507747][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.519809][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.530876][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.541992][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.552074][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.562769][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.572783][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.583847][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.596075][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.614132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.622645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.631947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.646988][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.660029][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.672843][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.681393][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.690517][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.694256][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.709483][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.720181][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.730771][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.741429][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.752606][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.763071][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.773871][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.784642][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.793657][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.802602][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.811608][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.833257][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.833591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.867516][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.875810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.888179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.898529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.909181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.952368][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.971651][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.994122][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.048551][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.077951][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.128162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.154243][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.168830][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.206854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.231100][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 60.241200][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 60.250181][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 60.259175][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 60.268187][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 60.392499][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 60.699669][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 60.802021][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 61.270879][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.280661][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 61.645893][ T4318] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6'. [ 62.439911][ T4226] Bluetooth: hci2: command 0x0419 tx timeout [ 62.446585][ T4226] Bluetooth: hci3: command 0x0419 tx timeout [ 62.460709][ T4226] Bluetooth: hci1: command 0x0419 tx timeout [ 62.474099][ T4226] Bluetooth: hci0: command 0x0419 tx timeout [ 62.500095][ T4226] Bluetooth: hci4: command 0x0419 tx timeout [ 62.652215][ T4327] vivid-000: disconnect [ 62.821566][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 63.070739][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 63.093471][ T4323] vivid-000: reconnect [ 63.234951][ T4333] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 63.264511][ T21] usb 1-1: unable to read config index 0 descriptor/all [ 63.293905][ T21] usb 1-1: can't read configurations, error -71 [ 65.417039][ T4362] input: syz0 as /devices/virtual/input/input5 [ 65.910715][ T4254] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.120775][ T4254] usb 5-1: device descriptor read/64, error -71 [ 66.400711][ T4254] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 66.538486][ T4382] netlink: 'syz.3.24': attribute type 3 has an invalid length. [ 66.547405][ T4382] netlink: 56 bytes leftover after parsing attributes in process `syz.3.24'. [ 66.660856][ T4254] usb 5-1: device descriptor read/64, error -71 [ 66.802285][ T4254] usb usb5-port1: attempt power cycle [ 67.230790][ T4254] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 67.369332][ T4254] usb 5-1: device descriptor read/8, error -71 [ 67.650762][ T4254] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 67.800922][ T4254] usb 5-1: device descriptor read/8, error -71 [ 67.844068][ T4398] netlink: 'syz.0.30': attribute type 12 has an invalid length. [ 67.851877][ T4398] netlink: 'syz.0.30': attribute type 29 has an invalid length. [ 67.859651][ T4398] netlink: 148 bytes leftover after parsing attributes in process `syz.0.30'. [ 67.870136][ T4398] netlink: 'syz.0.30': attribute type 1 has an invalid length. [ 67.877876][ T4398] netlink: 'syz.0.30': attribute type 2 has an invalid length. [ 67.885565][ T4398] netlink: 31 bytes leftover after parsing attributes in process `syz.0.30'. [ 67.927248][ T4254] usb usb5-port1: unable to enumerate USB device [ 69.004718][ T4417] tmpfs: Unknown parameter '!' [ 69.524204][ T4424] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 69.550273][ T4424] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 71.066539][ T4442] device syzkaller0 entered promiscuous mode [ 71.073536][ T4436] kvm [4432]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0 [ 71.208701][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.215392][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.392306][ T4436] kvm [4432]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 71.474710][ T4436] kvm [4432]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x69 [ 72.025312][ T4456] capability: warning: `syz.4.46' uses deprecated v2 capabilities in a way that may be insecure [ 72.795189][ T4298] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.887436][ T4473] tmpfs: Unknown parameter '!' [ 73.040878][ T4298] usb 3-1: Using ep0 maxpacket: 32 [ 73.228797][ T4485] Zero length message leads to an empty skb [ 73.241781][ T4298] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 74.847314][ T4298] usb 3-1: New USB device strings: Mfr=115, Product=0, SerialNumber=0 [ 74.928342][ T4298] usb 3-1: Manufacturer: syz [ 74.966054][ T4298] usb 3-1: config 0 descriptor?? [ 75.741406][ T4298] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 75.794025][ T4298] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 75.840894][ T4298] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 76.779991][ T1107] cfg80211: failed to load regulatory.db [ 76.885953][ T4504] netlink: 16 bytes leftover after parsing attributes in process `syz.0.62'. [ 76.894925][ T4504] netlink: get zone limit has 8 unknown bytes [ 77.035978][ T4528] tmpfs: Unknown parameter '!' [ 78.044742][ T4533] ODEBUG: Out of memory. ODEBUG disabled [ 78.285509][ T4533] syz.1.72 (4533): drop_caches: 2 [ 78.860782][ T4254] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.181159][ T4254] usb 2-1: device descriptor read/64, error -71 [ 79.470687][ T4254] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.690697][ T4254] usb 2-1: device descriptor read/64, error -71 [ 79.821435][ T4254] usb usb2-port1: attempt power cycle [ 80.174277][ T4241] hid-generic 0005:16C1:5505.0001: item fetching failed at offset 0/2 [ 80.192027][ T4241] hid-generic: probe of 0005:16C1:5505.0001 failed with error -22 [ 80.230821][ T4254] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 80.250823][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.380858][ T4254] usb 2-1: device descriptor read/8, error -71 [ 80.580814][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 81.760914][ T13] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 81.771451][ T13] usb 4-1: config 0 has no interface number 0 [ 81.794423][ T13] usb 4-1: config 0 interface 184 has no altsetting 0 [ 81.970916][ T13] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 81.987034][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.026182][ T13] usb 4-1: Product: syz [ 82.048842][ T13] usb 4-1: Manufacturer: syz [ 82.056515][ T13] usb 4-1: SerialNumber: syz [ 82.067500][ T13] usb 4-1: config 0 descriptor?? [ 82.122664][ T13] smsc75xx v1.0.0 [ 82.147306][ T4607] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 83.250766][ T13] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 84.016390][ T13] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 84.160706][ T4629] serio: Serial port ttyS3 [ 84.310845][ T13] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 84.321904][ T13] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 84.331671][ T13] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 84.335025][ T4632] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 84.342200][ T13] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 84.372959][ T13] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 84.386090][ T13] usb 4-1: USB disconnect, device number 2 [ 84.527273][ T4638] smc: net device bond0 applied user defined pnetid SYZ2 [ 87.254740][ T4675] netlink: 'syz.3.111': attribute type 2 has an invalid length. [ 87.267847][ T4675] comedi comedi3: mpc624: I/O port conflict (0x1,16) [ 88.286615][ T4686] bridge0: port 3(syz_tun) entered blocking state [ 88.496546][ T4686] bridge0: port 3(syz_tun) entered disabled state [ 88.635996][ T4686] device syz_tun entered promiscuous mode [ 88.931387][ T4686] bridge0: port 3(syz_tun) entered blocking state [ 88.938094][ T4686] bridge0: port 3(syz_tun) entered forwarding state [ 89.091293][ T4695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.118'. [ 89.119095][ T4695] bridge0: port 3(syz_tun) entered disabled state [ 89.200052][ T4695] device syz_tun left promiscuous mode [ 89.221817][ T4695] bridge0: port 3(syz_tun) entered disabled state [ 89.586583][ T4715] kernel profiling enabled (shift: 63) [ 89.624156][ T4715] profiling shift: 63 too large [ 89.767017][ T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.213515][ T13] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 90.240190][ T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.276263][ T13] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 90.306361][ T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.590864][ T13] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 90.619099][ T13] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 90.655236][ T13] usb 4-1: Product: syz [ 90.671873][ T13] usb 4-1: Manufacturer: syz [ 90.752531][ T13] cdc_wdm 4-1:1.0: skipping garbage [ 90.757762][ T13] cdc_wdm 4-1:1.0: skipping garbage [ 90.783979][ T13] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 90.789999][ T13] cdc_wdm 4-1:1.0: Unknown control protocol [ 91.012864][ T4678] usb 4-1: USB disconnect, device number 3 [ 91.255956][ T4757] sp0: Synchronizing with TNC [ 91.277792][ T4757] [U] ` [ 93.010732][ T4241] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 94.213749][ T4241] usb 2-1: Using ep0 maxpacket: 32 [ 94.300747][ T4241] usb 2-1: device descriptor read/all, error -71 [ 94.358773][ T4767] tmpfs: Unknown parameter '!' [ 95.144756][ T4794] syz.4.148 (4794) used greatest stack depth: 20864 bytes left [ 95.209795][ T4801] block nbd3: shutting down sockets [ 95.260989][ T4798] process 'syz.3.143' launched './file0' with NULL argv: empty string added [ 95.918388][ T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.320735][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 96.543824][ T4812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.011467][ T13] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 97.034636][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.084496][ T13] usb 1-1: Product: syz [ 97.108648][ T13] usb 1-1: Manufacturer: syz [ 97.134567][ T13] usb 1-1: SerialNumber: syz [ 97.276597][ T13] usb 1-1: config 0 descriptor?? [ 97.538462][ T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 97.561474][ T13] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71 [ 97.569462][ T13] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 97.724529][ T13] usb 1-1: USB disconnect, device number 4 [ 98.790767][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 98.801809][ T4842] tmpfs: Unknown parameter '!' [ 98.855852][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 98.920959][ T21] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 99.123642][ T21] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 99.135335][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.144612][ T21] usb 5-1: Product: syz [ 99.148887][ T21] usb 5-1: Manufacturer: syz [ 99.153748][ T21] usb 5-1: SerialNumber: syz [ 99.231954][ T21] usb 5-1: config 0 descriptor?? [ 99.972137][ T25] audit: type=1326 audit(34380210.053:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4862 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801a0b7749 code=0x7fc00000 [ 100.015260][ T1325] usb 5-1: USB disconnect, device number 6 [ 100.299745][ T4885] netlink: 16 bytes leftover after parsing attributes in process `syz.4.177'. [ 100.440693][ T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.252477][ T4902] tmpfs: Unknown parameter '!' [ 101.360829][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 101.480856][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.532865][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.575005][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 101.638750][ T21] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 101.652079][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.665346][ T21] usb 4-1: config 0 descriptor?? [ 101.799624][ T4919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.186'. [ 101.872689][ T4919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.186'. [ 101.900160][ T4919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.186'. [ 101.929927][ T4919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.186'. [ 101.939147][ T4919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.186'. [ 102.144469][ T21] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 102.158461][ T21] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 102.174370][ T1325] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 102.185094][ T21] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 102.200210][ T21] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 102.217555][ T21] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 102.258705][ T21] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input6 [ 102.381705][ T21] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 102.420258][ T21] usb 4-1: USB disconnect, device number 4 [ 102.433433][ T1325] usb 2-1: Using ep0 maxpacket: 32 [ 102.560815][ T1325] usb 2-1: config index 0 descriptor too short (expected 60946, got 18) [ 102.569355][ T4929] syz.0.190 (4929): /proc/4926/oom_adj is deprecated, please use /proc/4926/oom_score_adj instead. [ 103.002436][ T1325] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 103.034934][ T1325] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 103.088557][ T1325] usb 2-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 103.102865][ T4928] fido_id[4928]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 103.118460][ T1325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.145575][ T1325] usb 2-1: config 0 descriptor?? [ 103.196947][ T1325] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 103.251236][ T4933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'. [ 103.763492][ T4954] comedi comedi3: mpc624: I/O port conflict (0x1,16) [ 103.918404][ T1325] gspca_sunplus: reg_w_riv err -71 [ 103.944922][ T1325] sunplus: probe of 2-1:0.0 failed with error -71 [ 103.999156][ T1325] usb 2-1: USB disconnect, device number 8 [ 106.290749][ T21] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 107.470778][ T21] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.492274][ T4994] tmpfs: Unknown parameter '!' [ 107.583125][ T21] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 107.594861][ T21] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 107.606644][ T21] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 107.620728][ T21] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.315496][ T5012] syz.0.216 uses obsolete (PF_INET,SOCK_PACKET) [ 109.320759][ T21] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.350942][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.411420][ T21] usb 2-1: can't set config #1, error -71 [ 109.433636][ T21] usb 2-1: USB disconnect, device number 9 [ 109.660673][ T5019] erofs: (device nbd2): erofs_read_superblock: cannot find valid erofs superblock [ 109.690335][ T5019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'. [ 110.590924][ T21] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 112.787249][ T5044] mkiss: ax0: crc mode is auto. [ 114.364319][ T4447] tipc: Subscription rejected, illegal request [ 114.617919][ T5079] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1908810531 (122163873984 ns) > initial count (42142760512 ns). Using initial count to start timer. [ 116.291266][ T1091] block nbd4: Attempted send on invalid socket [ 116.321390][ T1091] blk_update_request: I/O error, dev nbd4, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 116.370716][ T1091] gfs2: error 10 reading superblock [ 116.997809][ T5109] tmpfs: Unknown parameter '!' [ 117.057090][ T5112] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.152535][ T5112] FAT-fs (loop9): unable to read boot sector [ 117.381337][ T4172] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 118.901608][ T5124] netlink: 24 bytes leftover after parsing attributes in process `syz.0.251'. [ 119.010884][ T4172] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 119.025646][ T4172] usb 5-1: can't read configurations, error -61 [ 120.343501][ T4172] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 120.520675][ T4678] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 120.760748][ T4678] usb 1-1: Using ep0 maxpacket: 8 [ 120.900824][ T4678] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 120.909952][ T4678] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.043080][ T4678] pvrusb2: Hardware description: Terratec Grabster AV400 [ 121.067303][ T4678] pvrusb2: ********** [ 121.083101][ T4678] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 121.136493][ T4678] pvrusb2: Important functionality might not be entirely working. [ 121.160709][ T4678] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 121.209919][ T4678] pvrusb2: ********** [ 121.272505][ T2421] pvrusb2: Invalid write control endpoint [ 121.474362][ T21] usb 1-1: USB disconnect, device number 5 [ 121.497146][ T2421] pvrusb2: Invalid write control endpoint [ 121.507140][ T2421] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 121.568729][ T2421] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 121.622329][ T2421] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 121.689428][ T2421] pvrusb2: Device being rendered inoperable [ 121.728579][ T2421] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 121.739429][ T2421] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 121.905900][ T2421] pvrusb2: Attached sub-driver cx25840 [ 122.647890][ T2421] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 122.787573][ T2421] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 124.435392][ T5151] sched: RT throttling activated [ 126.224276][ T5159] Invalid option length (1048500) for dns_resolver key [ 127.965751][ T5190] usb usb7: usbfs: process 5190 (syz.3.272) did not claim interface 0 before use [ 128.329001][ T5204] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 128.354698][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 128.832285][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.906838][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.062613][ T5220] tmpfs: Unknown parameter '!' [ 132.633459][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.648246][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.110665][ T21] Bluetooth: hci5: command 0x1003 tx timeout [ 133.118343][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 134.212614][ T5234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'. [ 135.511582][ T5242] netlink: 36 bytes leftover after parsing attributes in process `syz.3.281'. [ 136.051750][ T21] Bluetooth: hci5: command 0x1001 tx timeout [ 136.071977][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 137.111572][ T21] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 137.120100][ T21] Bluetooth: hci3: Injecting HCI hardware error event [ 137.184303][ T146] Bluetooth: hci3: hardware error 0x00 [ 138.077171][ T4298] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 138.358381][ T4298] dvb_usb_az6027: probe of 3-1:0.0 failed with error -110 [ 138.383289][ T4298] usb 3-1: USB disconnect, device number 2 [ 138.407677][ T4233] Bluetooth: hci5: command 0x1009 tx timeout [ 138.677323][ T5267] usb usb7: usbfs: process 5267 (syz.2.290) did not claim interface 0 before use [ 138.738620][ T5267] usb usb7: usbfs: process 5267 (syz.2.290) did not claim interface 0 before use [ 138.778043][ T5269] bridge0: port 3(veth0_to_bridge) entered blocking state [ 138.801552][ T5269] bridge0: port 3(veth0_to_bridge) entered disabled state [ 138.859779][ T5269] device veth0_to_bridge entered promiscuous mode [ 138.878561][ T5269] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 139.126768][ T5269] bridge0: port 3(veth0_to_bridge) entered blocking state [ 139.134085][ T5269] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 142.117338][ T5342] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 142.124859][ T5342] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 142.161978][ T5342] vhci_hcd vhci_hcd.0: Device attached [ 142.430684][ T5265] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 142.446571][ T5360] tmpfs: Bad value for 'mpol' [ 144.594411][ T5345] vhci_hcd: connection reset by peer [ 144.629379][ T4447] vhci_hcd: stop threads [ 144.635348][ T4447] vhci_hcd: release socket [ 144.653357][ T4447] vhci_hcd: disconnect device [ 145.228037][ T5397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.190830][ T26] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 146.590730][ T26] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 146.617078][ T26] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 146.668590][ T26] usb 2-1: config 0 interface 0 has no altsetting 0 [ 146.961146][ T26] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 146.997027][ T26] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 147.021106][ T26] usb 2-1: Product: syz [ 147.026316][ T26] usb 2-1: Manufacturer: syz [ 147.026335][ T26] usb 2-1: SerialNumber: syz [ 147.036283][ T26] usb 2-1: config 0 descriptor?? [ 147.081903][ T26] hub 2-1:0.0: bad descriptor, ignoring hub [ 147.081930][ T26] hub: probe of 2-1:0.0 failed with error -5 [ 147.095026][ T26] usb 2-1: selecting invalid altsetting 0 [ 147.610687][ T5265] vhci_hcd: vhci_device speed not set [ 147.763974][ T7] usb 2-1: USB disconnect, device number 11 [ 147.990635][ T7] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 148.280845][ T4241] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 148.350798][ T7] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 148.350839][ T7] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 148.350861][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 148.510792][ T7] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 148.529640][ T7] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 148.549170][ T7] usb 2-1: Product: syz [ 148.584194][ T7] usb 2-1: Manufacturer: syz [ 148.603902][ T7] usb 2-1: SerialNumber: syz [ 148.642113][ T7] usb 2-1: config 0 descriptor?? [ 148.661586][ T4241] usb 4-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 148.690408][ T7] hub 2-1:0.0: bad descriptor, ignoring hub [ 148.701141][ T4241] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 148.711739][ T7] hub: probe of 2-1:0.0 failed with error -5 [ 148.727827][ T7] usb 2-1: selecting invalid altsetting 0 [ 148.734701][ T4241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.800900][ T5434] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 148.899468][ T4241] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 149.001951][ T7] usb 2-1: USB disconnect, device number 12 [ 149.229659][ T5454] NILFS (nullb0): couldn't find nilfs on the device [ 151.078891][ T5480] ubi31: attaching mtd0 [ 151.084948][ T5480] ubi31: scanning is finished [ 151.090119][ T5480] ubi31: empty MTD device detected [ 151.120269][ T26] usb 4-1: USB disconnect, device number 5 [ 151.178053][ T5480] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 151.186539][ T5480] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 151.194658][ T5480] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 151.202393][ T5480] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 151.210639][ T5480] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 151.218164][ T5480] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 151.227359][ T5480] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2533828690 [ 151.238424][ T5480] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 151.251374][ T5484] ubi31: background thread "ubi_bgt31d" started, PID 5484 [ 151.330667][ T4241] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 151.680449][ T5474] tmpfs: Unknown parameter '!' [ 151.708230][ T4241] usb 5-1: Using ep0 maxpacket: 32 [ 151.950818][ T4241] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.050809][ T4241] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.087235][ T4241] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 152.116608][ T4241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.148578][ T4241] usb 5-1: config 0 descriptor?? [ 152.165565][ T5505] device syzkaller0 entered promiscuous mode [ 152.166166][ T5485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.241448][ T4241] hub 5-1:0.0: USB hub found [ 153.424788][ T5502] sctp: failed to load transform for md5: -2 [ 153.501070][ T4241] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 153.965991][ T4241] hid-generic 0003:046D:C31C.0003: unknown main item tag 0x0 [ 154.370120][ T4241] hid-generic 0003:046D:C31C.0003: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 154.658776][ T4241] usb 5-1: USB disconnect, device number 9 [ 155.250752][ T5531] device wg1 entered promiscuous mode [ 155.600267][ T5535] fido_id[5535]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 156.498397][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.645722][ T5563] tmpfs: Unknown parameter '!' [ 157.346366][ T21] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 157.671092][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.580543][ T4254] Bluetooth: hci5: command 0x1003 tx timeout [ 158.590407][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 158.671874][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 158.820829][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 158.855936][ T21] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 158.861843][ T4315] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 158.889104][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.907662][ T21] usb 4-1: config 0 descriptor?? [ 158.989322][ T25] audit: type=1326 audit(34380269.063:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5579 comm="syz.1.388" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4f9bb49749 code=0x0 [ 159.180650][ T4315] usb 1-1: Using ep0 maxpacket: 32 [ 159.437803][ T21] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 160.114638][ T4315] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 160.280884][ T4315] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 160.304684][ T4315] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 160.337015][ T4315] usb 1-1: Product: syz [ 160.362933][ T4315] usb 1-1: Manufacturer: syz [ 160.368204][ T4315] usb 1-1: SerialNumber: syz [ 160.406928][ T4315] usb 1-1: config 0 descriptor?? [ 160.460805][ T4190] usb 4-1: USB disconnect, device number 6 [ 160.489164][ T4315] usb 1-1: can't set config #0, error -71 [ 160.520792][ T4254] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 160.610784][ T4315] usb 1-1: USB disconnect, device number 6 [ 160.669108][ T7] Bluetooth: hci5: command 0x1001 tx timeout [ 160.685351][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 160.816080][ T5605] QAT: failed to copy from user cfg_data. [ 162.050848][ T4254] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 162.070748][ T4254] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 162.090680][ T4254] usb 5-1: config 0 interface 0 has no altsetting 0 [ 162.116466][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.260890][ T4254] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 162.278247][ T4254] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 162.308665][ T4254] usb 5-1: Product: syz [ 162.325782][ T4254] usb 5-1: Manufacturer: syz [ 162.353044][ T5623] fuse: Bad value for 'rootmode' [ 162.364171][ T4254] usb 5-1: SerialNumber: syz [ 162.473798][ T4254] usb 5-1: config 0 descriptor?? [ 162.541344][ T4254] hub 5-1:0.0: bad descriptor, ignoring hub [ 162.547867][ T4254] hub: probe of 5-1:0.0 failed with error -5 [ 163.238011][ T4254] usb 5-1: selecting invalid altsetting 0 [ 163.344823][ T4190] Bluetooth: hci5: command 0x1009 tx timeout [ 163.370262][ T5628] tipc: Started in network mode [ 163.371939][ T4254] usb 5-1: USB disconnect, device number 10 [ 163.400949][ T5628] tipc: Node identity 0a0000000000000002, cluster identity 4711 [ 163.953318][ T5634] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.049411][ T5634] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.187300][ T5634] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.579337][ T5634] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.841739][ T5634] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.856324][ T5634] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.871714][ T5634] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.886423][ T5634] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.651804][ T5662] serio: Serial port ttyS3 [ 167.186959][ T5655] tmpfs: Unknown parameter '!' [ 168.770831][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 169.100817][ T4233] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 169.502020][ T4190] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 169.580904][ T21] usb 3-1: too many configurations: 172, using maximum allowed: 8 [ 169.920868][ T4233] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 169.939842][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.949226][ T4233] usb 2-1: Product: syz [ 169.954748][ T4233] usb 2-1: Manufacturer: syz [ 169.960102][ T4233] usb 2-1: SerialNumber: syz [ 170.012138][ T4233] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 170.160784][ T4190] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 170.176513][ T4190] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 170.188718][ T4190] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 170.204125][ T4190] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 170.310762][ T4254] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 170.400831][ T4190] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.419814][ T4190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.429151][ T4190] usb 5-1: Product: syz [ 170.434538][ T4190] usb 5-1: Manufacturer: syz [ 170.439813][ T4190] usb 5-1: SerialNumber: syz [ 170.481804][ T5683] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 170.511465][ T4190] cdc_mbim 5-1:1.0: skipping garbage [ 170.590697][ T4254] usb 1-1: Using ep0 maxpacket: 16 [ 170.590722][ T21] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 170.606420][ T4233] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 170.623724][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.632849][ T21] usb 3-1: Product: syz [ 170.637490][ T21] usb 3-1: Manufacturer: syz [ 170.642709][ T21] usb 3-1: SerialNumber: syz [ 170.714528][ T5683] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 170.722581][ T5683] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 170.731271][ T4254] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.743450][ T4254] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.754463][ T4254] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 170.764430][ T4254] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.775551][ T4254] usb 1-1: config 0 descriptor?? [ 170.970708][ T1107] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 171.130856][ T21] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 171.262322][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.269991][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.277596][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.285289][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.293438][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.301103][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.308649][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.316265][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.323879][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.330878][ T1107] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 171.331521][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.344409][ T1107] usb 4-1: config 0 has no interface number 0 [ 171.347821][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.356473][ T1107] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 171.362194][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.379568][ T1107] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 64 [ 171.382079][ T5683] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 171.399693][ T1107] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 171.401189][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.402092][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.417124][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.418321][ T5683] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 171.442194][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.447028][ T1107] usb 4-1: config 0 descriptor?? [ 171.449741][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.463211][ T4190] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 171.471495][ T4190] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 171.477879][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.481047][ T5711] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 171.485851][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.501408][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.506531][ T1107] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 171.508963][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.527975][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.535677][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.547875][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.555481][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.563310][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.570926][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.578495][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.586103][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.593671][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.602246][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.609793][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.617382][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.624988][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.632563][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.640120][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.647683][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.655256][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.662833][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.670510][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.670732][ T4233] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 171.678239][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.692825][ T4233] ath9k_htc: Failed to initialize the device [ 171.693350][ T4190] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 171.706642][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.714802][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.723715][ T4190] cdc_mbim 5-1:1.0: cdc-wdm1: USB WDM device [ 171.730744][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.738327][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.756161][ T4190] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 46:e0:84:e2:22:be [ 171.767747][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.775317][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.784978][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.792682][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.800359][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.812357][ T4190] usb 5-1: USB disconnect, device number 11 [ 171.819443][ T4190] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 171.822705][ T1107] usb 4-1: USB disconnect, device number 7 [ 171.829152][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.844423][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.852060][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.859609][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.867222][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.874949][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.882533][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.890098][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.897689][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.905254][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.914164][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.921788][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.929323][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.936900][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.944468][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.952047][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.959589][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.967158][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.974913][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.982885][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 171.990464][ T4254] apple 0003:05AC:024B.0004: unknown main item tag 0x0 [ 172.021241][ T4254] apple 0003:05AC:024B.0004: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.0-1/input0 [ 172.039097][ T4254] usb 1-1: USB disconnect, device number 7 [ 172.126994][ T26] usb 2-1: USB disconnect, device number 13 [ 172.140178][ T26] usb 2-1: ath9k_htc: USB layer deinitialized [ 172.187936][ T5716] fido_id[5716]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 173.014440][ T5731] tmpfs: Unknown parameter '!' [ 173.130807][ T21] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 173.163300][ T5734] usb usb8: usbfs: process 5734 (syz.3.434) did not claim interface 0 before use [ 173.190840][ T21] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 173.240801][ T21] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 173.342863][ T21] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 174.238021][ T21] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 174.271706][ T21] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 174.321081][ T21] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 174.395358][ T21] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 174.431456][ T21] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 174.454620][ T21] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 174.572258][ T21] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 174.594752][ T21] lan78xx: probe of 3-1:1.0 failed with error -71 [ 174.653921][ T21] usb 3-1: USB disconnect, device number 3 [ 175.319231][ T5767] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 177.087659][ T4226] Bluetooth: hci1: command 0x0406 tx timeout [ 177.126837][ T4226] Bluetooth: hci4: command 0x0406 tx timeout [ 177.127654][ T5796] ieee802154 phy0 wpan0: encryption failed: -22 [ 177.172858][ T4190] Bluetooth: hci0: command 0x0406 tx timeout [ 178.610752][ T4226] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 178.880652][ T4226] usb 3-1: Using ep0 maxpacket: 16 [ 179.047997][ T5817] tmpfs: Unknown parameter '!' [ 179.130845][ T4226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 179.370746][ T4226] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 179.401103][ T4226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.439689][ T4226] usb 3-1: Product: syz [ 179.458500][ T4226] usb 3-1: Manufacturer: syz [ 179.470012][ T4226] usb 3-1: SerialNumber: syz [ 179.509503][ T4226] usb 3-1: config 0 descriptor?? [ 179.572374][ T4226] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 179.596766][ T4226] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 179.861252][ T4297] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 180.150730][ T4297] usb 2-1: Using ep0 maxpacket: 16 [ 180.220775][ T4226] em28xx 3-1:0.0: chip ID is em2765 [ 180.258881][ T5846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 180.450863][ T4297] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 180.464456][ T4297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.490026][ T4297] usb 2-1: Product: syz [ 180.498330][ T4297] usb 2-1: Manufacturer: syz [ 180.510830][ T4297] usb 2-1: SerialNumber: syz [ 180.525556][ T4297] usb 2-1: config 0 descriptor?? [ 180.913742][ T4226] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 180.927911][ T4226] em28xx 3-1:0.0: board has no eeprom [ 181.020880][ T4297] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 181.051973][ T5853] ======================================================= [ 181.051973][ T5853] WARNING: The mand mount option has been deprecated and [ 181.051973][ T5853] and is ignored by this kernel. Remove the mand [ 181.051973][ T5853] option from the mount to silence this warning. [ 181.051973][ T5853] ======================================================= [ 181.096581][ T4297] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 181.141252][ T4297] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 181.155937][ T4297] usb 2-1: media controller created [ 181.196431][ T4297] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.281339][ T4297] zl10353_read_register: readreg error (reg=127, ret==0) [ 181.289338][ T4297] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 181.299890][ T4297] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 181.317847][ T4297] usb 2-1: USB disconnect, device number 14 [ 181.575452][ T4297] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 181.893514][ T4226] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 181.905530][ T4226] em28xx 3-1:0.0: dvb set to bulk mode. [ 181.913369][ T4254] em28xx 3-1:0.0: Binding DVB extension [ 183.079528][ T7] usb 3-1: USB disconnect, device number 4 [ 183.093825][ T7] em28xx 3-1:0.0: Disconnecting em28xx [ 183.137146][ T4254] em28xx 3-1:0.0: Registering input extension [ 183.151857][ T7] em28xx 3-1:0.0: Closing input extension [ 183.218271][ T7] em28xx 3-1:0.0: Freeing device [ 183.428805][ T5877] tmpfs: Unknown parameter '!' [ 183.601047][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 184.940801][ T7] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 184.953706][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.093260][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 185.113912][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.010816][ T7] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 186.612970][ T7] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 186.660668][ T7] usb 3-1: Product: syz [ 186.687461][ T7] usb 3-1: Manufacturer: syz [ 186.740955][ T7] usb 3-1: can't set config #1, error -71 [ 186.763245][ T7] usb 3-1: USB disconnect, device number 5 [ 186.979552][ T25] audit: type=1326 audit(34380297.053:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04f5b91749 code=0x7fc00000 [ 187.321689][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 187.624120][ T5936] futex_wake_op: syz.4.496 tries to shift op by -1; fix this program [ 187.780793][ T1107] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 187.833847][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 188.210820][ T1107] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 188.228678][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.271468][ T7] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 188.320881][ T1107] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 188.338618][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.338621][ T1107] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 188.338644][ T1107] usb 2-1: Manufacturer: syz [ 188.399854][ T1107] usb 2-1: config 0 descriptor?? [ 188.481189][ T7] pvrusb2: Hardware description: Terratec Grabster AV400 [ 188.488946][ T7] pvrusb2: ********** [ 188.520619][ T7] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 188.540742][ T21] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 188.542817][ T7] pvrusb2: Important functionality might not be entirely working. [ 188.567997][ T7] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 188.580631][ T1107] rc_core: IR keymap rc-hauppauge not found [ 188.587701][ T1107] Registered IR keymap rc-empty [ 188.588915][ T7] pvrusb2: ********** [ 188.621592][ T1107] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 188.633824][ T1107] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 188.691333][ T2421] pvrusb2: Invalid write control endpoint [ 188.783007][ T2421] pvrusb2: Invalid write control endpoint [ 188.790734][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 188.798606][ T2421] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 188.832384][ T2421] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 188.844885][ T2421] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 188.857576][ T2421] pvrusb2: Device being rendered inoperable [ 188.867289][ T2421] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 188.877932][ T2421] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 188.916290][ T4315] usb 3-1: USB disconnect, device number 6 [ 188.920981][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.926297][ T2421] pvrusb2: Attached sub-driver cx25840 [ 188.944384][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.963035][ T21] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 188.973458][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.987588][ T21] usb 1-1: config 0 descriptor?? [ 188.993306][ T2421] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 189.011821][ T2421] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 190.205891][ T21] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 190.255542][ T21] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 190.273601][ T21] ft260 0003:0403:6030.0005: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 190.273642][ T7] usb 2-1: USB disconnect, device number 15 [ 190.368311][ T5966] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 190.421735][ T21] ft260 0003:0403:6030.0005: chip code: 6424 8183 [ 190.780741][ T21] ft260 0003:0403:6030.0005: failed to retrieve system status [ 190.833852][ T21] ft260: probe of 0003:0403:6030.0005 failed with error -71 [ 190.873862][ T21] usb 1-1: USB disconnect, device number 8 [ 190.911679][ T5971] fido_id[5971]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 190.941019][ T4315] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 191.030722][ T4297] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 191.140639][ T4226] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 191.275921][ T4297] usb 3-1: Using ep0 maxpacket: 32 [ 191.340802][ T4315] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 191.358654][ T4315] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 191.386213][ T4315] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 191.396428][ T4315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.410693][ T4226] usb 4-1: Using ep0 maxpacket: 16 [ 191.450997][ T5965] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 191.560725][ T4226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 191.601110][ T4297] usb 3-1: config 4 has an invalid interface number: 225 but max is 1 [ 191.610255][ T4297] usb 3-1: config 4 has an invalid interface number: 196 but max is 1 [ 191.633119][ T4297] usb 3-1: config 4 has no interface number 0 [ 191.639971][ T4297] usb 3-1: config 4 has no interface number 1 [ 191.769924][ T4297] usb 3-1: config 4 interface 225 altsetting 9 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 191.964913][ T4297] usb 3-1: config 4 interface 225 altsetting 9 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 192.183904][ T4297] usb 3-1: config 4 interface 225 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 192.192557][ T5965] IPVS: set_ctl: invalid protocol: 135 172.30.0.5:19964 [ 192.240683][ T4297] usb 3-1: config 4 interface 225 has no altsetting 0 [ 192.257146][ T4297] usb 3-1: config 4 interface 196 has no altsetting 0 [ 192.270397][ T1107] usb 5-1: USB disconnect, device number 12 [ 192.380806][ T4226] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 192.393860][ T4226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.429026][ T4226] usb 4-1: Product: syz [ 192.430923][ T4297] usb 3-1: New USB device found, idVendor=1199, idProduct=683c, bcdDevice=fb.51 [ 192.436024][ T4226] usb 4-1: Manufacturer: syz [ 192.449252][ T4226] usb 4-1: SerialNumber: syz [ 192.459507][ T4297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.473983][ T4297] usb 3-1: Product: 䀕 [ 192.479127][ T4297] usb 3-1: Manufacturer: чꅢﶎ걄胰澸爄陿嫑㯤鹼뱚備즐䠢綞㹷⍞࠸⩉掺똥쨋譅翿膙炘搓ꉄ룳焢簊ᰘ䫓⥣䳐Ი팦銏⁽糨㆚誜ѩ咽囋譒녠鮹⺼Ꮣ⬮ᜈ鮟ળ拺騢ꍪ톜䉟蠤⤣㏦꾾ෂ骿絀♨ꔻ䗗붾齱녁䴠肼琠䱶靱컜ㆯ䙥т䜯綿㐘旖纪瓃왕斃秙ᴍ稥瘭鉸雉踁 [ 192.482901][ T4226] usb 4-1: config 0 descriptor?? [ 192.513430][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.605905][ T4226] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 192.963987][ T4297] sierra 3-1:4.225: Sierra USB modem converter detected [ 193.105302][ T4297] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 193.233843][ T4226] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 193.235250][ T4297] sierra 3-1:4.196: Sierra USB modem converter detected [ 193.263162][ T4297] usb 3-1: Sierra USB modem converter now attached to ttyUSB1 [ 193.929001][ T4297] usb 3-1: USB disconnect, device number 7 [ 193.951219][ T4297] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 193.983363][ T4297] sierra 3-1:4.225: device disconnected [ 194.009201][ T5995] syz.1.516 (5995): drop_caches: 2 [ 194.020371][ T4297] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 194.060058][ T4297] sierra 3-1:4.196: device disconnected [ 194.077272][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.084238][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.143202][ T4226] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 195.487202][ T4226] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 195.505267][ T4226] em28xx 4-1:0.0: board has no eeprom [ 195.698803][ T4226] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 195.707479][ T4226] em28xx 4-1:0.0: dvb set to bulk mode. [ 195.755040][ T4254] em28xx 4-1:0.0: Binding DVB extension [ 195.778565][ T4226] usb 4-1: USB disconnect, device number 8 [ 195.794650][ T4226] em28xx 4-1:0.0: Disconnecting em28xx [ 195.938588][ T4254] em28xx 4-1:0.0: Registering input extension [ 195.965686][ T4226] em28xx 4-1:0.0: Closing input extension [ 195.988077][ T6021] program syz.3.527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.033251][ T4226] em28xx 4-1:0.0: Freeing device [ 196.266025][ T6013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.573209][ T6036] fuse: Bad value for 'fd' [ 196.808667][ T25] audit: type=1326 audit(34380306.883:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.2.525" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba15fed749 code=0x0 [ 196.900190][ T6049] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 198.612160][ T6080] tipc: Started in network mode [ 198.643359][ T6080] tipc: Node identity 8eda307b79fc, cluster identity 4711 [ 198.681308][ T6080] tipc: Enabled bearer , priority 0 [ 198.689105][ T6085] device syzkaller0 entered promiscuous mode [ 198.727385][ T6080] tipc: Resetting bearer [ 198.753720][ T1107] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 198.769377][ T6078] tipc: Resetting bearer [ 198.801154][ T6078] tipc: Disabling bearer [ 198.878566][ T6090] device syzkaller0 entered promiscuous mode [ 198.980777][ T4297] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 199.010706][ T1107] usb 1-1: Using ep0 maxpacket: 32 [ 199.192143][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:14:74:40:d4:b0, vlan:0) [ 199.206037][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:14:74:40:d4:b0, vlan:0) [ 199.219554][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:14:74:40:d4:b0, vlan:0) [ 199.233062][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:14:74:40:d4:b0, vlan:0) [ 199.246584][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:14:74:40:d4:b0, vlan:0) [ 199.260066][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:14:74:40:d4:b0, vlan:0) [ 199.273552][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:14:74:40:d4:b0, vlan:0) [ 199.287020][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:14:74:40:d4:b0, vlan:0) [ 199.300491][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:14:74:40:d4:b0, vlan:0) [ 199.313995][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d2:14:74:40:d4:b0, vlan:0) [ 200.262097][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.298115][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.313788][ T1107] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 200.339543][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.386053][ T1107] usb 1-1: config 0 descriptor?? [ 200.428741][ T4297] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 200.538597][ T4297] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.555631][ T4297] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.582293][ T4297] usb 3-1: config 0 interface 0 has no altsetting 0 [ 200.699916][ T4297] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.709836][ T4297] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.736735][ T4297] usb 3-1: config 0 interface 0 has no altsetting 0 [ 200.864548][ T4297] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.894058][ T4297] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.930083][ T1107] kone 0003:1E7D:2CED.0006: collection stack underflow [ 200.938116][ T4297] usb 3-1: config 0 interface 0 has no altsetting 0 [ 200.945758][ T1107] kone 0003:1E7D:2CED.0006: item 0 4 0 12 parsing failed [ 200.967152][ T1107] kone 0003:1E7D:2CED.0006: parse failed [ 200.980858][ T1107] kone: probe of 0003:1E7D:2CED.0006 failed with error -22 [ 201.085652][ T4297] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.269524][ T4226] usb 1-1: USB disconnect, device number 9 [ 201.269762][ T4297] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 201.334065][ T4297] usb 3-1: config 0 interface 0 has no altsetting 0 [ 201.460876][ T4297] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.470783][ T4297] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 201.512267][ T4297] usb 3-1: config 0 interface 0 has no altsetting 0 [ 201.712692][ T4190] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 201.746728][ T6105] ================================================================== [ 201.756073][ T6105] BUG: KASAN: use-after-free in ax25_fillin_cb+0x459/0x640 [ 201.764022][ T6105] Read of size 4 at addr ffff888023cc5138 by task syz.2.553/6105 [ 201.772510][ T6105] [ 201.775069][ T6105] CPU: 1 PID: 6105 Comm: syz.2.553 Not tainted syzkaller #0 [ 201.783084][ T6105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.794163][ T6105] Call Trace: [ 201.797764][ T6105] [ 201.800983][ T6105] dump_stack_lvl+0x168/0x230 [ 201.806139][ T6105] ? show_regs_print_info+0x20/0x20 [ 201.811851][ T6105] ? _printk+0xcc/0x110 [ 201.816420][ T6105] ? ax25_fillin_cb+0x459/0x640 [ 201.821764][ T6105] ? load_image+0x3b0/0x3b0 [ 201.826722][ T6105] print_address_description+0x60/0x2d0 [ 201.832827][ T6105] ? ax25_fillin_cb+0x459/0x640 [ 201.838162][ T6105] kasan_report+0xdf/0x130 [ 201.843023][ T6105] ? ax25_fillin_cb+0x459/0x640 [ 201.848363][ T6105] ax25_fillin_cb+0x459/0x640 [ 201.853511][ T6105] ax25_setsockopt+0x8a2/0xa40 [ 201.858758][ T6105] ? ax25_shutdown+0x10/0x10 [ 201.863813][ T6105] ? aa_sock_opt_perm+0x74/0x100 [ 201.869246][ T6105] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 201.875345][ T6105] ? security_socket_setsockopt+0x7a/0xa0 [ 201.881632][ T6105] ? ax25_shutdown+0x10/0x10 [ 201.886685][ T6105] __sys_setsockopt+0x2bf/0x3d0 [ 201.892025][ T6105] __x64_sys_setsockopt+0xb1/0xc0 [ 201.897551][ T6105] do_syscall_64+0x4c/0xa0 [ 201.902411][ T6105] ? clear_bhb_loop+0x30/0x80 [ 201.907557][ T6105] ? clear_bhb_loop+0x30/0x80 [ 201.912707][ T6105] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 201.919198][ T6105] RIP: 0033:0x7fba15fed749 [ 201.924049][ T6105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.945653][ T6105] RSP: 002b:00007fba14254038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 201.954909][ T6105] RAX: ffffffffffffffda RBX: 00007fba16243fa0 RCX: 00007fba15fed749 [ 201.963677][ T6105] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000004 [ 201.972444][ T6105] RBP: 00007fba16071f91 R08: 0000000000000010 R09: 0000000000000000 [ 201.981208][ T6105] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 201.989974][ T6105] R13: 00007fba16244038 R14: 00007fba16243fa0 R15: 00007ffe8b817be8 [ 201.998759][ T6105] [ 202.002071][ T6105] [ 202.004618][ T6105] Allocated by task 6078: [ 202.009369][ T6105] __kasan_kmalloc+0xb5/0xf0 [ 202.014416][ T6105] netdevice_event+0x324/0x900 [ 202.019656][ T6105] raw_notifier_call_chain+0xcb/0x160 [ 202.025563][ T6105] unregister_netdevice_many+0xf57/0x18f0 [ 202.031847][ T6105] unregister_netdevice_queue+0x31c/0x360 [ 202.038143][ T6105] __tun_detach+0xd4a/0x1500 [ 202.043190][ T6105] tun_chr_close+0x109/0x1b0 [ 202.048246][ T6105] __fput+0x234/0x930 [ 202.052622][ T6105] task_work_run+0x125/0x1a0 [ 202.057672][ T6105] exit_to_user_mode_loop+0x10f/0x130 [ 202.063582][ T6105] exit_to_user_mode_prepare+0xee/0x180 [ 202.069688][ T6105] syscall_exit_to_user_mode+0x16/0x40 [ 202.075700][ T6105] do_syscall_64+0x58/0xa0 [ 202.080555][ T6105] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.087031][ T6105] [ 202.089580][ T6105] Freed by task 144: [ 202.093847][ T6105] kasan_set_track+0x4b/0x70 [ 202.098892][ T6105] kasan_set_free_info+0x1f/0x40 [ 202.104320][ T6105] ____kasan_slab_free+0xd5/0x110 [ 202.109840][ T6105] slab_free_freelist_hook+0xea/0x170 [ 202.115748][ T6105] kfree+0xef/0x2a0 [ 202.119929][ T6105] process_one_work+0x863/0x1000 [ 202.125362][ T6105] worker_thread+0xaa8/0x12a0 [ 202.130512][ T6105] kthread+0x436/0x520 [ 202.134986][ T6105] ret_from_fork+0x1f/0x30 [ 202.139842][ T6105] [ 202.142386][ T6105] Last potentially related work creation: [ 202.148656][ T6105] kasan_save_stack+0x35/0x60 [ 202.153799][ T6105] kasan_record_aux_stack+0xb8/0x100 [ 202.159610][ T6105] insert_work+0x54/0x3d0 [ 202.164369][ T6105] __queue_work+0x9c5/0xd50 [ 202.169315][ T6105] queue_work_on+0x11d/0x1d0 [ 202.174361][ T6105] netdevice_event+0x803/0x900 [ 202.179601][ T6105] raw_notifier_call_chain+0xcb/0x160 [ 202.185510][ T6105] unregister_netdevice_many+0xf57/0x18f0 [ 202.191801][ T6105] unregister_netdevice_queue+0x31c/0x360 [ 202.198101][ T6105] __tun_detach+0xd4a/0x1500 [ 202.203146][ T6105] tun_chr_close+0x109/0x1b0 [ 202.208193][ T6105] __fput+0x234/0x930 [ 202.212568][ T6105] task_work_run+0x125/0x1a0 [ 202.217612][ T6105] exit_to_user_mode_loop+0x10f/0x130 [ 202.223519][ T6105] exit_to_user_mode_prepare+0xee/0x180 [ 202.229613][ T6105] syscall_exit_to_user_mode+0x16/0x40 [ 202.235612][ T6105] do_syscall_64+0x58/0xa0 [ 202.240464][ T6105] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.246942][ T6105] [ 202.249485][ T6105] Second to last potentially related work creation: [ 202.256710][ T6105] kasan_save_stack+0x35/0x60 [ 202.261855][ T6105] kasan_record_aux_stack+0xb8/0x100 [ 202.267662][ T6105] insert_work+0x54/0x3d0 [ 202.272418][ T6105] __queue_work+0x9c5/0xd50 [ 202.277361][ T6105] queue_work_on+0x11d/0x1d0 [ 202.279712][ T4190] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 202.282399][ T6105] netdevice_event+0x803/0x900 [ 202.299667][ T6105] raw_notifier_call_chain+0xcb/0x160 [ 202.305574][ T6105] __netdev_upper_dev_link+0x3c0/0x580 [ 202.311586][ T6105] netdev_upper_dev_link+0x9a/0xe0 [ 202.312970][ T4190] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 202.317208][ T6105] virt_wifi_newlink+0x42d/0x820 [ 202.334428][ T6105] rtnl_newlink+0x114c/0x17d0 [ 202.339568][ T6105] rtnetlink_rcv_msg+0x7ff/0xe90 [ 202.344992][ T6105] netlink_rcv_skb+0x1e0/0x430 [ 202.350228][ T6105] netlink_unicast+0x774/0x920 [ 202.355459][ T6105] netlink_sendmsg+0x8ab/0xbc0 [ 202.360690][ T6105] __sys_sendto+0x423/0x580 [ 202.365637][ T6105] __x64_sys_sendto+0xda/0xf0 [ 202.370773][ T6105] do_syscall_64+0x4c/0xa0 [ 202.375630][ T6105] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.380607][ T4190] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 202.382108][ T6105] [ 202.382115][ T6105] The buggy address belongs to the object at ffff888023cc5100 [ 202.382115][ T6105] which belongs to the cache kmalloc-192 of size 192 [ 202.411988][ T6105] The buggy address is located 56 bytes inside of [ 202.411988][ T6105] 192-byte region [ffff888023cc5100, ffff888023cc51c0) [ 202.426492][ T6105] The buggy address belongs to the page: [ 202.432672][ T6105] page:ffffea00008f3140 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23cc5 [ 202.443833][ T6105] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 202.451528][ T4190] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 202.452141][ T6105] raw: 00fff00000000200 ffffea00008e2800 0000000800000008 ffff888016841a00 [ 202.473275][ T6105] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 202.482707][ T6105] page dumped because: kasan: bad access detected [ 202.489759][ T6105] page_owner tracks the page as allocated [ 202.496033][ T6105] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 9, ts 6993339989, free_ts 6991576721 [ 202.513026][ T6105] get_page_from_freelist+0x1b77/0x1c60 [ 202.519131][ T6105] __alloc_pages+0x1e1/0x470 [ 202.524175][ T6105] new_slab+0xc0/0x4b0 [ 202.528646][ T6105] ___slab_alloc+0x81e/0xdf0 [ 202.533691][ T6105] __kmalloc+0x1cd/0x330 [ 202.538350][ T6105] bio_kmalloc+0x48/0x1e0 [ 202.543111][ T6105] blk_rq_map_kern+0x1d6/0x7b0 [ 202.548349][ T6105] __scsi_execute+0xe3/0x580 [ 202.553390][ T6105] scsi_report_opcode+0x193/0x350 [ 202.558915][ T6105] sd_revalidate_disk+0x3e5e/0x6c60 [ 202.564630][ T6105] sd_probe+0x91e/0x1050 [ 202.569295][ T6105] really_probe+0x284/0xc80 [ 202.574249][ T6105] __driver_probe_device+0x18c/0x330 [ 202.580056][ T6105] driver_probe_device+0x4f/0x420 [ 202.585574][ T6105] __device_attach_driver+0x2b0/0x500 [ 202.591474][ T6105] bus_for_each_drv+0x175/0x200 [ 202.596804][ T6105] page last free stack trace: [ 202.601931][ T6105] free_unref_page_prepare+0x637/0x6c0 [ 202.607938][ T6105] free_unref_page+0x94/0x280 [ 202.613080][ T6105] __mmdrop+0xaa/0x3e0 [ 202.617548][ T6105] free_bprm+0x141/0x300 [ 202.622203][ T6105] kernel_execve+0x380/0x900 [ 202.627244][ T6105] call_usermodehelper_exec_async+0x207/0x350 [ 202.633911][ T6105] ret_from_fork+0x1f/0x30 [ 202.638769][ T6105] [ 202.641318][ T6105] Memory state around the buggy address: [ 202.647496][ T6105] ffff888023cc5000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 202.656355][ T6105] ffff888023cc5080: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 202.665227][ T6105] >ffff888023cc5100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 202.674082][ T6105] ^ [ 202.680551][ T6105] ffff888023cc5180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 202.689407][ T6105] ffff888023cc5200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 202.698263][ T6105] ================================================================== [ 202.707119][ T6105] Disabling lock debugging due to kernel taint [ 202.739069][ T4190] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 202.770579][ T4190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.785927][ T4297] usb 3-1: unable to read config index 5 descriptor/all [ 202.813644][ T4190] usb 4-1: Product: syz [ 202.813665][ T4297] usb 3-1: can't read configurations, error -71 [ 202.828095][ T6105] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 202.836014][ T6105] CPU: 0 PID: 6105 Comm: syz.2.553 Tainted: G B syzkaller #0 [ 202.845548][ T6105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.856596][ T6105] Call Trace: [ 202.860189][ T6105] [ 202.863406][ T6105] dump_stack_lvl+0x168/0x230 [ 202.868548][ T6105] ? show_regs_print_info+0x20/0x20 [ 202.874257][ T6105] ? load_image+0x3b0/0x3b0 [ 202.879203][ T6105] panic+0x2c9/0x7f0 [ 202.883479][ T6105] ? bpf_jit_dump+0xd0/0xd0 [ 202.888424][ T6105] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 202.894899][ T6105] ? _raw_spin_unlock+0x40/0x40 [ 202.900227][ T6105] ? print_memory_metadata+0x314/0x400 [ 202.906225][ T6105] ? ax25_fillin_cb+0x459/0x640 [ 202.911552][ T6105] check_panic_on_warn+0x80/0xa0 [ 202.916976][ T6105] ? ax25_fillin_cb+0x459/0x640 [ 202.922309][ T6105] end_report+0x6d/0xf0 [ 202.926874][ T6105] kasan_report+0x102/0x130 [ 202.931821][ T6105] ? ax25_fillin_cb+0x459/0x640 [ 202.937149][ T6105] ax25_fillin_cb+0x459/0x640 [ 202.942294][ T6105] ax25_setsockopt+0x8a2/0xa40 [ 202.947535][ T6105] ? ax25_shutdown+0x10/0x10 [ 202.952590][ T6105] ? aa_sock_opt_perm+0x74/0x100 [ 202.958015][ T6105] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 202.964111][ T6105] ? security_socket_setsockopt+0x7a/0xa0 [ 202.970392][ T6105] ? ax25_shutdown+0x10/0x10 [ 202.975433][ T6105] __sys_setsockopt+0x2bf/0x3d0 [ 202.980760][ T6105] __x64_sys_setsockopt+0xb1/0xc0 [ 202.986276][ T6105] do_syscall_64+0x4c/0xa0 [ 202.991131][ T6105] ? clear_bhb_loop+0x30/0x80 [ 202.996269][ T6105] ? clear_bhb_loop+0x30/0x80 [ 203.001408][ T6105] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 203.007879][ T6105] RIP: 0033:0x7fba15fed749 [ 203.012724][ T6105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.034285][ T6105] RSP: 002b:00007fba14254038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 203.043552][ T6105] RAX: ffffffffffffffda RBX: 00007fba16243fa0 RCX: 00007fba15fed749 [ 203.052312][ T6105] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000004 [ 203.061069][ T6105] RBP: 00007fba16071f91 R08: 0000000000000010 R09: 0000000000000000 [ 203.069826][ T6105] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 203.078581][ T6105] R13: 00007fba16244038 R14: 00007fba16243fa0 R15: 00007ffe8b817be8 [ 203.087335][ T6105] [ 203.090913][ T6105] Kernel Offset: disabled [ 203.095650][ T6105] Rebooting in 86400 seconds..