last executing test programs: 14.815419965s ago: executing program 0 (id=2234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x19e6}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x205}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.44059057s ago: executing program 0 (id=2235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000004c0)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.002489428s ago: executing program 0 (id=2241): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000ffffffff00000000000000000000000000000000000000000000000002000000000000008000000002"], 0xc4}, 0x1, 0x0, 0x0, 0x2001}, 0x0) 13.683426904s ago: executing program 0 (id=2245): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) r5 = memfd_create(&(0x7f0000001d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81\x01\x00\x00\x00\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea%\xc0\xe9\x9d,K\x97\xe1m|g', 0xd) r6 = fcntl$dupfd(r5, 0x0, r5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffff1f, 0x12, r6, 0x0) read$FUSE(r6, &(0x7f0000005180)={0x2020}, 0x2020) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000bc0)=ANY=[@ANYBLOB="01"]) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="3b00000000010000400100"/20]) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x40000239, 0x0, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x71, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x2a4}, 0x1}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) write$P9_RLOCK(r10, &(0x7f00000000c0)={0x8, 0x35, 0x1}, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r12]) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x0) openat(r7, &(0x7f0000000080)='./file0\x00', 0x30000, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) 12.232423275s ago: executing program 0 (id=2251): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000004c0)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.048741335s ago: executing program 4 (id=2255): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x1265) 11.971715299s ago: executing program 4 (id=2258): r0 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x2, 0x7, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x7}, 0x1c) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0xfda6) 11.789719367s ago: executing program 4 (id=2260): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0], 0x20) 11.726518397s ago: executing program 0 (id=2261): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043d0eaaaaaaaaaa10bc205c7f30b257b9b56077dac5989b6963cb480ea7646257012a612c62a8a28b2c0e523427815b13ac93285f3cb016c18f150d2f0a89713e22745d7c30db48e9a979b684fdb54c5a5a1ff99485badc28"], 0x11) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xf) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rpcgss_oid_to_mech\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffa}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r3, 0x0, 0x107, &(0x7f0000000440)='c\xb3zOIU\x8at\xa9\xe90\x16M\xdegroup\x00\x19\fr4E\xff\x85\xe9\xc2\xfd\t\xd1\xd3\xee\xfa\xd3\x9fZ\x9c\xd0\x7f\xeczZ0s9sD\x8e\x80\xb7~\x8e\x86\xf5v#\xd6R;LF\xb992\x18\x87iS\xd5\xc2\x86-\xe8\xabm\x83\x1dV\xa3\x85\x03^(-\xa1xg$O\xdf\x91\xe3k\xd0)\xbd4\xc2;-\b\xd4\xab\x958\xb0\x14n.T\xdd\x0e?\xd0!\x13~*\xd4\bu|\x1c&\xfc\xd8a\x1c\x81P\xbc@\x11\x91\xb9\xffW\xdf+\xdf>c\xa6\xdb\xa1\xd9\x9ab\x99\xbd\xe8P\xbf\x8c\xf0B\x8c\x06\x102\xab\x8dr\xbf\xbb\xe2\xec\xf4\xd8\xabw\x9a\x18\xd0\xfd\xa2|J\x19\x03\xcb\x99\x8a\xc1\xa3\'\xccN{\x81\xb1R`ub\xd3\x93:\x1a}_W0\x9fA\xb2\xb4\xb2\xf6\fnnX_\x90\x82\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9d\x18\xed\xbdT\x93\xdf\x87\xbbT[\x0f\xc4\t\x14\xed\fP\x82\rS\xe4\nK\xcd\xb8h\xbd2\xf8d\xe5Y\x04\x87'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r4, 0xffffffffffffffff, 0x2, 0x0, 0x4000, @void, @value}, 0x10) sendto(r1, &(0x7f0000000340)="045a86e7464c167ff4aa15c72deae39b66f982aed1325cea79c0a35933e0be56f19f3d500410ebcf1688138876d85f98332334350fc1f83a4ab1fd50128e9a14a49b73a4bbda0ee2ef625ff4b44ff4ccd5b7f04a5efb8d3afe53bc3e52d98ac45001e1a498a36fcd4dc4e0abed87e61d21dfa3defc9c97db43023213058ecf02e70470df3498782371712802bf6b262ab4fe4f7af1ce0ef88ccf56d98ae2998bc2279ab5bb85d5f1f84892", 0xab, 0x1, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x2, @empty}}, 0x80) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000000100), 0x8ffffff8) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r7, 0x40086607, &(0x7f0000001140)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4844}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000000203010100000000000000000900000808000440000000060800054000000012"], 0x24}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 11.351289053s ago: executing program 4 (id=2263): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) r5 = memfd_create(&(0x7f0000001d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81\x01\x00\x00\x00\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea%\xc0\xe9\x9d,K\x97\xe1m|g', 0xd) r6 = fcntl$dupfd(r5, 0x0, r5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffff1f, 0x12, r6, 0x0) read$FUSE(r6, &(0x7f0000005180)={0x2020}, 0x2020) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000bc0)=ANY=[@ANYBLOB="01"]) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="3b00000000010000400100"/20]) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x40000239, 0x0, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x71, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x2a4}, 0x1}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) write$P9_RLOCK(r10, &(0x7f00000000c0)={0x8, 0x35, 0x1}, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r12]) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x0) openat(r7, &(0x7f0000000080)='./file0\x00', 0x30000, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) 11.27176677s ago: executing program 2 (id=2264): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x260c0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) open$dir(&(0x7f0000000000)='./file0\x00', 0x490a80, 0x0) ppoll(&(0x7f00000000c0)=[{r3, 0x856d}, {r4, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0xb, &(0x7f0000000040), 0x4) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="fd", 0x1}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r5, 0x0, 0x0) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000040)) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='timers\x00') read$FUSE(r9, &(0x7f0000000540)={0x2020}, 0x2020) lseek(r9, 0x3, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 9.941269982s ago: executing program 4 (id=2265): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 8.898586947s ago: executing program 2 (id=2267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x1a, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}}, 0x0) 8.611316168s ago: executing program 2 (id=2269): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7b0ac4ff0000000071103e000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x0, 0x0, @dev, 0x9}]}, &(0x7f00000000c0)=0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="d0b4163e96457321d877d01a892f", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r6}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x3800}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='net/dev\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r10 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x8, 0x0, r9, 0x0, 0x0, 0x0, 0x2141, 0x0, {0x2}}) io_uring_enter(r10, 0x8aa, 0x0, 0x0, 0x0, 0x0) lseek(r8, 0x1, 0x0) read$FUSE(r8, &(0x7f0000000680)={0x2020}, 0x2020) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000040)={0x7, 0x8}, 0x10) 8.607946027s ago: executing program 1 (id=2270): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x4f, &(0x7f0000000d00)=ANY=[], 0x0) 8.030024064s ago: executing program 4 (id=2273): socket$rds(0x15, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x6, 0x0) openat$vnet(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) socket$inet6(0xa, 0x3, 0xff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) 7.698963558s ago: executing program 2 (id=2276): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) r5 = memfd_create(&(0x7f0000001d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81\x01\x00\x00\x00\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea%\xc0\xe9\x9d,K\x97\xe1m|g', 0xd) r6 = fcntl$dupfd(r5, 0x0, r5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffff1f, 0x12, r6, 0x0) read$FUSE(r6, &(0x7f0000005180)={0x2020}, 0x2020) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000bc0)=ANY=[@ANYBLOB="01"]) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="3b00000000010000400100"/20]) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x40000239, 0x0, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x71, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x2a4}, 0x1}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) write$P9_RLOCK(r10, &(0x7f00000000c0)={0x8, 0x35, 0x1}, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r12]) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x0) openat(r7, &(0x7f0000000080)='./file0\x00', 0x30000, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) 4.85392727s ago: executing program 3 (id=2279): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpgid(0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 4.853079878s ago: executing program 1 (id=2287): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000840)={0x20, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x8, 0xd, 0x0, 0x1, [@typed={0x4, 0x3, 0x0, 0x0, @binary}]}]}, 0x20}], 0x1}, 0x0) 4.852614526s ago: executing program 2 (id=2280): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) migrate_pages(0x0, 0x9, &(0x7f0000000080)=0x10000, &(0x7f0000000140)=0xffffffffffffffff) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) syz_open_pts(r0, 0x801) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x8a, 0x3}, 0x18, 0x0) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f00000000c0), 0x103002, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) write$sequencer(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="0296bc"], 0x9) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x42041, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/94, 0x5e, 0x0, &(0x7f0000000200)=""/128, 0x80}, &(0x7f0000000280)=0x40) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505331, &(0x7f0000000540)={{}, {0x18}}) write$sequencer(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0400"], 0x8) syz_usb_connect(0x0, 0x24, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000100)={0x40, r2}, 0x0) pipe2(&(0x7f0000000080), 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0xb}]}}, 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r8, 0x4004480f, &(0x7f00000000c0)=0xe32e1e722c60b15f) r9 = openat$udambuf(0xffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r9, 0x40087543, &(0x7f0000000080)=ANY=[]) socket$tipc(0x1e, 0x2, 0x0) 4.804919981s ago: executing program 2 (id=2281): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x3, @broadcast, 'vlan1\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}) 4.393618037s ago: executing program 1 (id=2283): socket$rds(0x15, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x6, 0x0) openat$vnet(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) socket$inet6(0xa, 0x3, 0xff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) 4.023680209s ago: executing program 1 (id=2284): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x1011, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, 0x3, 0x8, 0x0, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x18}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x78}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r5, 0x400000001ffffffd) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') lseek(r7, 0x3ff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r9, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000900)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff00f500280600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0c20000907800"/28], 0x0) 2.83866182s ago: executing program 3 (id=2285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0xc, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}}, 0x26044010) 2.781039896s ago: executing program 3 (id=2286): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, r1) 2.578194639s ago: executing program 3 (id=2288): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 2.156100085s ago: executing program 1 (id=2289): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x260c0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) open$dir(&(0x7f0000000000)='./file0\x00', 0x490a80, 0x0) ppoll(&(0x7f00000000c0)=[{r3, 0x856d}, {r4, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0xb, &(0x7f0000000040), 0x4) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="fd", 0x1}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r5, 0x0, 0x0) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000040)) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='timers\x00') read$FUSE(r9, &(0x7f0000000540)={0x2020}, 0x2020) lseek(r9, 0x3, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 2.155987072s ago: executing program 3 (id=2290): unshare(0x22020600) r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 2.073556839s ago: executing program 3 (id=2291): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)="1a5c", 0x2}], 0x1) 0s ago: executing program 1 (id=2292): socket$rds(0x15, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x6, 0x0) openat$vnet(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) socket$inet6(0xa, 0x3, 0xff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.438072][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.443793][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 538.449614][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.455483][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.461179][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 538.466952][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.473146][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.479023][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.484707][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 538.490584][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.496449][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.502378][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.509717][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.515676][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.521556][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.527419][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.533386][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.539233][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.545066][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.550918][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.556782][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.562691][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.568529][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.574770][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.580666][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.586520][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.595205][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.601082][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.606956][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.612833][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.618794][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.624653][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.630523][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.636412][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.642287][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.648144][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.654001][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.659885][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.665745][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.671733][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.677897][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.683784][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.689713][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.695598][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.701336][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 538.707556][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.713421][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.719424][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.725123][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 538.731118][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.736781][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 538.742557][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 538.748284][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 538.764647][ T25] usb 1-1: USB disconnect, device number 50 [ 538.799513][ T5234] Bluetooth: hci3: command tx timeout [ 538.886397][T13734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.895565][T13734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.922525][T13734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.057178][T13734] hsr_slave_0: entered promiscuous mode [ 539.075996][T13734] hsr_slave_1: entered promiscuous mode [ 539.094358][T13734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 539.102372][T13734] Cannot create hsr debugfs directory [ 539.271226][T13544] veth0_macvtap: entered promiscuous mode [ 539.319623][ T5273] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 539.477158][T13632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.492269][ T5273] usb 2-1: device descriptor read/64, error -71 [ 539.500109][T13544] veth1_macvtap: entered promiscuous mode [ 539.555572][T13632] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.625120][T13544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.641180][T13544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.652797][T13544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.663584][T13544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.688002][T13544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.715027][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.722224][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.733650][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.740833][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.759794][ T5273] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 539.796427][T13544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.812472][T13544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.833373][T13544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.849487][T13544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.860752][T13544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.890118][ T5273] usb 2-1: device descriptor read/64, error -71 [ 539.906037][T13544] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.918366][T13544] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.927981][T13544] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.937973][T13544] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.000692][ T5273] usb usb2-port1: attempt power cycle [ 540.193473][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.193935][T13632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.222722][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.272952][T13734] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 540.286794][T13734] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 540.308596][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.313542][T13734] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 540.326996][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.359576][ T5273] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 540.376761][T13734] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 540.405838][ T5273] usb 2-1: device descriptor read/8, error -71 [ 540.442886][T13632] veth0_vlan: entered promiscuous mode [ 540.473908][T13632] veth1_vlan: entered promiscuous mode [ 540.591531][T13828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.630336][T13632] veth0_macvtap: entered promiscuous mode [ 540.651597][T13734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.675394][T13632] veth1_macvtap: entered promiscuous mode [ 540.689768][ T5273] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 540.696296][T13734] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.712270][ T5273] usb 2-1: device descriptor read/8, error -71 [ 540.728622][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.735813][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.754857][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.762019][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.828573][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.840071][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.852651][ T5273] usb usb2-port1: unable to enumerate USB device [ 540.860281][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.875592][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.879512][ T5234] Bluetooth: hci3: command tx timeout [ 540.894691][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.905869][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.917538][T13632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.951496][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.967224][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.981573][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.992209][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.003070][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.014050][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.025553][T13632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.038350][T13632] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.054878][T13632] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.067176][T13632] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.081070][T13632] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.161039][T13734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.341823][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.349847][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.373276][T13734] veth0_vlan: entered promiscuous mode [ 541.426363][T13734] veth1_vlan: entered promiscuous mode [ 541.462494][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.478060][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.524184][T13734] veth0_macvtap: entered promiscuous mode [ 541.581962][T13734] veth1_macvtap: entered promiscuous mode [ 541.642690][T13734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.663192][T13734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.686485][T13734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.712287][T13734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.763983][T13734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.786074][T13734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.806047][T13734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.831682][T13734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.851205][T13877] fuse: Unknown parameter '' [ 541.891955][T13734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.960248][T13734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.989073][T13734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.029435][T13734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.062695][T13734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.088592][T13734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.117236][T13734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.171391][T13734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.223362][ T25] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 542.226903][T13734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.253152][T13734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.312819][T13734] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.327000][T13734] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.339748][T13734] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.348861][T13734] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.390125][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 542.447784][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 542.512980][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.535383][ T25] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8 [ 542.544642][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.572539][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.609834][ T25] usb 4-1: Product: syz [ 542.614066][ T25] usb 4-1: Manufacturer: syz [ 542.617452][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.618663][ T25] usb 4-1: SerialNumber: syz [ 542.681565][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.691337][T13896] netlink: 'syz.2.1760': attribute type 10 has an invalid length. [ 542.700169][ T25] usb 4-1: config 0 descriptor?? [ 542.776876][T13896] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 542.789568][T13896] team0: Failed to send options change via netlink (err -105) [ 542.815059][T13896] team0: Port device netdevsim0 added [ 542.841334][ T12] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 542.960623][ T5234] Bluetooth: hci3: command tx timeout [ 542.990085][ T5272] usb 4-1: USB disconnect, device number 63 [ 543.001882][T13906] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1741'. [ 543.081027][ T9] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 543.240058][ T9] usb 2-1: device descriptor read/64, error -71 [ 543.360304][ T940] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 543.499845][ T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 543.529675][ T940] usb 5-1: Using ep0 maxpacket: 8 [ 543.538184][ T940] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 543.572366][ T940] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 543.587308][ T940] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 543.619653][ T940] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 543.633449][ T940] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 543.646953][ T940] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 543.659418][ T9] usb 2-1: device descriptor read/64, error -71 [ 543.718132][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.841558][ T9] usb usb2-port1: attempt power cycle [ 543.994185][ T940] usb 5-1: usb_control_msg returned -32 [ 544.022176][ T940] usbtmc 5-1:16.0: can't read capabilities [ 544.219477][ T9] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 544.263486][ T9] usb 2-1: device descriptor read/8, error -71 [ 544.509357][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 544.551438][ T9] usb 2-1: device descriptor read/8, error -71 [ 544.591612][T13909] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 544.591963][ T25] usb 5-1: USB disconnect, device number 57 [ 544.679590][ T9] usb usb2-port1: unable to enumerate USB device [ 546.166226][T13932] delete_channel: no stack [ 546.347739][T13950] netlink: 'syz.4.1771': attribute type 10 has an invalid length. [ 546.424947][T13950] bridge0: port 3(netdevsim0) entered blocking state [ 546.446344][T13950] bridge0: port 3(netdevsim0) entered disabled state [ 546.486711][T13950] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 546.497867][T13950] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 546.511242][T13953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1774'. [ 546.523553][T13950] bridge0: port 3(netdevsim0) entered blocking state [ 546.530343][T13950] bridge0: port 3(netdevsim0) entered forwarding state [ 546.633162][T13957] fuse: Unknown parameter '0x0000000000000008' [ 546.972890][T13962] Option '[y$ [ 546.972890][T13962] >ڎTkS@SVfhJ' to dns_resolver key: bad/missing value [ 546.988702][T13962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1775'. [ 547.001507][T13962] fuse: Unknown parameter '0x000000000000000b' [ 547.590148][ T5234] Bluetooth: hci4: ACL packet for unknown connection handle 457 [ 547.769441][T13976] program syz.2.1779 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 547.808462][T13981] usb usb8: check_ctrlrecip: process 13981 (syz.0.1780) requesting ep 01 but needs 81 [ 548.109461][ T5273] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 548.139500][T13511] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 548.271205][ T5273] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 548.292854][ T5273] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 548.323162][ T5273] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 548.342627][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 548.352660][ T5273] usb 1-1: SerialNumber: syz [ 548.374184][T13511] usb 5-1: config 0 has no interfaces? [ 548.390476][T13511] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 548.421177][T13511] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.444435][T13511] usb 5-1: Product: syz [ 548.456232][T13511] usb 5-1: Manufacturer: syz [ 548.469528][T13511] usb 5-1: SerialNumber: syz [ 548.496492][T13511] usb 5-1: config 0 descriptor?? [ 548.574450][ T5273] usb 1-1: 0:2 : does not exist [ 548.595678][ T5273] usb 1-1: unit 49 not found! [ 548.622515][ T5273] usb 1-1: USB disconnect, device number 51 [ 548.674625][T11694] udevd[11694]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 548.746717][T14000] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1786'. [ 548.782873][T14000] batman_adv: batadv0: Adding interface: vlan2 [ 548.794721][T14000] batman_adv: batadv0: The MTU of interface vlan2 is too small (1420) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.840481][T14000] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 548.889465][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 549.045327][ T9] usb 2-1: config 0 has no interfaces? [ 549.053577][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 549.060902][T14001] netlink: 'syz.3.1786': attribute type 4 has an invalid length. [ 549.063841][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.081969][ T9] usb 2-1: config 0 descriptor?? [ 549.508908][ T25] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 549.739455][ T25] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 549.750340][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.762087][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.772231][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 549.785430][ T25] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 549.794715][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.825582][ T25] usb 3-1: config 0 descriptor?? [ 550.106469][T14021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1792'. [ 550.173069][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 550.173089][ T29] audit: type=1326 audit(1728957114.184:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 550.201520][ C1] vkms_vblank_simulate: vblank timer overrun [ 550.217582][ T29] audit: type=1326 audit(1728957114.184:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 550.239582][ C1] vkms_vblank_simulate: vblank timer overrun [ 550.256772][ T29] audit: type=1326 audit(1728957114.224:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=231 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 550.287878][ T29] audit: type=1326 audit(1728957114.224:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 550.316270][ T29] audit: type=1326 audit(1728957114.224:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 550.389360][ T29] audit: type=1326 audit(1728957114.224:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 550.475127][ T29] audit: type=1326 audit(1728957114.224:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 550.524645][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 550.537446][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 550.545526][ T29] audit: type=1326 audit(1728957114.224:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 550.576153][ T29] audit: type=1326 audit(1728957114.224:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 550.589602][ T25] usb 3-1: USB disconnect, device number 40 [ 550.647827][ T29] audit: type=1326 audit(1728957114.224:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 550.860587][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 551.042084][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 551.063413][ T9] usb 1-1: config 227 has an invalid descriptor of length 0, skipping remainder of the config [ 551.091076][ T9] usb 1-1: config 227 has 0 interfaces, different from the descriptor's value: 1 [ 551.103875][ T9] usb 1-1: New USB device found, idVendor=0c76, idProduct=0013, bcdDevice=ba.be [ 551.113317][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.121596][ T9] usb 1-1: Product: syz [ 551.125908][ T9] usb 1-1: Manufacturer: syz [ 551.152616][ T9] usb 1-1: SerialNumber: syz [ 551.162707][ T9] usb 5-1: USB disconnect, device number 58 [ 551.415105][T14029] sctp: [Deprecated]: syz.4.1795 (pid 14029) Use of struct sctp_assoc_value in delayed_ack socket option. [ 551.415105][T14029] Use struct sctp_sack_info instead [ 551.516452][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.641465][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.722202][ T9] usb 2-1: USB disconnect, device number 62 [ 551.783093][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.885499][ T4623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 551.888027][ T35] team0: Port device netdevsim0 removed [ 551.899147][ T4623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 551.909769][ T4623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 551.912202][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.933381][ T4623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 551.944570][ T4623] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 551.953019][ T4623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 552.113164][ T35] bridge_slave_1: left allmulticast mode [ 552.138431][ T35] bridge_slave_1: left promiscuous mode [ 552.167797][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.196411][ T35] bridge_slave_0: left allmulticast mode [ 552.219529][ T35] bridge_slave_0: left promiscuous mode [ 552.225848][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.639700][ T5273] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 552.829369][ T5273] usb 5-1: Using ep0 maxpacket: 32 [ 552.843055][ T5273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 552.874924][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 552.886715][ T5234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 552.895730][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 552.905795][ T5273] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 552.917165][ T5273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.926420][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 552.933693][ T5273] usb 5-1: Product: syz [ 552.939614][ T5273] usb 5-1: Manufacturer: syz [ 552.944248][ T5273] usb 5-1: SerialNumber: syz [ 552.952318][ T5273] usb 5-1: config 0 descriptor?? [ 552.957355][ T5234] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 552.968560][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 552.990351][ T5273] as10x_usb: device has been detected [ 552.996201][ T5273] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 553.028014][ T5273] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 553.039093][ T5273] as10x_usb: error during firmware upload part1 [ 553.049202][ T5273] Registered device Abilis Systems DVB-Titan [ 553.414915][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.436847][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.457852][ T940] usb 1-1: USB disconnect, device number 52 [ 553.459665][ T35] bond0 (unregistering): Released all slaves [ 553.856050][T14080] vlan2: entered promiscuous mode [ 553.863531][T14080] vlan2: entered allmulticast mode [ 553.869040][T14080] xfrm0: entered allmulticast mode [ 553.879484][T14080] xfrm0: entered promiscuous mode [ 553.892092][T14080] team0: Port device vlan2 added [ 553.911947][T14064] chnl_net:caif_netlink_parms(): no params data found [ 553.999724][ T5234] Bluetooth: hci4: command tx timeout [ 554.110815][T14035] chnl_net:caif_netlink_parms(): no params data found [ 554.151201][T14092] pim6reg: entered allmulticast mode [ 554.399438][ T5234] Bluetooth: hci3: command tx timeout [ 554.503328][T14064] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.528451][T14064] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.549551][T14064] bridge_slave_0: entered allmulticast mode [ 554.564898][T14064] bridge_slave_0: entered promiscuous mode [ 554.649741][ T9] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 554.665118][ T35] hsr_slave_0: left promiscuous mode [ 554.676305][ T35] hsr_slave_1: left promiscuous mode [ 554.688720][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.696835][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.705294][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.713565][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.742745][ T35] veth1_macvtap: left promiscuous mode [ 554.748909][ T35] veth0_macvtap: left promiscuous mode [ 554.755355][ T35] veth1_vlan: left promiscuous mode [ 554.761042][ T35] veth0_vlan: left promiscuous mode [ 554.893901][ T9] usb 1-1: config 0 has no interfaces? [ 554.957358][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 555.012392][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.038723][ T9] usb 1-1: Product: syz [ 555.044853][ T5234] Bluetooth: hci2: command tx timeout [ 555.053117][ T9] usb 1-1: Manufacturer: syz [ 555.058920][ T9] usb 1-1: SerialNumber: syz [ 555.071755][ T9] usb 1-1: config 0 descriptor?? [ 555.290299][ T940] usb 5-1: USB disconnect, device number 59 [ 555.327997][ T940] Unregistered device Abilis Systems DVB-Titan [ 555.341566][ T940] as10x_usb: device has been disconnected [ 555.946002][ T35] team0 (unregistering): Port device team_slave_1 removed [ 556.040395][ T35] team0 (unregistering): Port device team_slave_0 removed [ 556.079864][ T5234] Bluetooth: hci4: command tx timeout [ 556.501339][ T9] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 556.700199][ T9] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=1b.bf [ 556.710290][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.729010][ T9] usb 5-1: Product: syz [ 556.733810][ T9] usb 5-1: Manufacturer: syz [ 556.738547][ T9] usb 5-1: SerialNumber: syz [ 556.756674][ T9] usb 5-1: config 0 descriptor?? [ 556.791440][ T9] ums-realtek 5-1:0.0: USB Mass Storage device detected [ 557.022111][T14088] pim6reg: left allmulticast mode [ 557.065618][T14064] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.079929][T14064] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.087225][T14064] bridge_slave_1: entered allmulticast mode [ 557.096930][T14064] bridge_slave_1: entered promiscuous mode [ 557.131468][ T5234] Bluetooth: hci2: command tx timeout [ 557.207665][T14118] netlink: 'syz.4.1810': attribute type 4 has an invalid length. [ 557.321078][T14035] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.340734][T14035] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.365506][T14035] bridge_slave_0: entered allmulticast mode [ 557.388576][T14035] bridge_slave_0: entered promiscuous mode [ 557.442715][T14064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.467468][T14035] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.496774][T14035] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.511556][T14136] vivid-002: disconnect [ 557.511583][T14035] bridge_slave_1: entered allmulticast mode [ 557.520520][T14035] bridge_slave_1: entered promiscuous mode [ 557.636191][T14064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.688383][T14140] bond0: (slave team0): Error: Device can not be enslaved while up [ 557.774708][T14035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.808161][T14064] team0: Port device team_slave_0 added [ 557.829316][T14035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.857118][T14064] team0: Port device team_slave_1 added [ 557.964468][T14035] team0: Port device team_slave_0 added [ 557.983050][T14035] team0: Port device team_slave_1 added [ 557.990289][T14064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.011243][T14064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.097063][T14064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.146575][T14064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.156453][T14064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.195991][ T5308] usb 1-1: USB disconnect, device number 53 [ 558.203579][ T5234] Bluetooth: hci4: command tx timeout [ 558.211264][T14133] vivid-002: reconnect [ 558.211985][T14064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.366145][T14035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.385705][T14035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.415895][T14035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.481163][T14035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.495360][T14035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.546547][T14035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.573924][T14064] hsr_slave_0: entered promiscuous mode [ 558.586121][T14064] hsr_slave_1: entered promiscuous mode [ 558.664817][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.737168][T14035] hsr_slave_0: entered promiscuous mode [ 558.745668][T14035] hsr_slave_1: entered promiscuous mode [ 558.752167][T14035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 558.760550][T14035] Cannot create hsr debugfs directory [ 558.785791][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.891675][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.900584][ T9] usb 5-1: USB disconnect, device number 60 [ 558.984754][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.168702][ T35] bridge_slave_1: left allmulticast mode [ 559.183394][ T35] bridge_slave_1: left promiscuous mode [ 559.189176][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.199680][ T5234] Bluetooth: hci2: command tx timeout [ 559.217863][ T35] bridge_slave_0: left allmulticast mode [ 559.229215][ T35] bridge_slave_0: left promiscuous mode [ 559.236675][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.747633][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.758941][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.773285][ T35] bond0 (unregistering): Released all slaves [ 560.163858][ T35] hsr_slave_0: left promiscuous mode [ 560.184251][ T35] hsr_slave_1: left promiscuous mode [ 560.202757][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.214341][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.234214][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.239728][ T5234] Bluetooth: hci4: command tx timeout [ 560.245494][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.279673][ T35] veth1_macvtap: left promiscuous mode [ 560.286377][ T35] veth0_macvtap: left promiscuous mode [ 560.292544][ T35] veth1_vlan: left promiscuous mode [ 560.297861][ T35] veth0_vlan: left promiscuous mode [ 560.831022][ T35] team0 (unregistering): Port device team_slave_1 removed [ 560.877909][ T35] team0 (unregistering): Port device team_slave_0 removed [ 561.285774][ T5234] Bluetooth: hci2: command tx timeout [ 561.743656][T14064] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 561.770185][T14064] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 561.785246][T14064] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 561.796310][T14064] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 561.820998][ T35] IPVS: stop unused estimator thread 0... [ 561.927312][T14035] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 561.944597][T14035] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 561.961451][T14035] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 561.977856][T14035] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 562.008602][T14064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.060540][T14064] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.080383][ T2996] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.087498][ T2996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.113662][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.120839][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.243021][T14035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.262277][T14064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.286470][T14035] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.343657][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.350826][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.379302][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.386440][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.426138][T14064] veth0_vlan: entered promiscuous mode [ 562.478050][T14064] veth1_vlan: entered promiscuous mode [ 562.506814][T14035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.537375][T14064] veth0_macvtap: entered promiscuous mode [ 562.558763][T14064] veth1_macvtap: entered promiscuous mode [ 562.615032][T14064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.626912][T14064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.651222][T14064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.662786][T14064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.673029][T14064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.683935][T14064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.695795][T14064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.708958][T14035] veth0_vlan: entered promiscuous mode [ 562.728792][T14064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.740995][T14064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.753001][T14064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.771638][T14064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.785478][T14064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.799151][T14064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.825341][T14064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.843683][T14035] veth1_vlan: entered promiscuous mode [ 562.858639][T14064] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.868143][T14064] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.880704][T14064] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.890312][T14064] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.944027][T14035] veth0_macvtap: entered promiscuous mode [ 563.006887][T14035] veth1_macvtap: entered promiscuous mode [ 563.018830][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.040849][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.058314][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.075177][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.085472][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.096773][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.106765][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.118038][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.128797][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.139803][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.151861][T14035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.179011][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.194616][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.214908][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.225354][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.234673][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.245418][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.256479][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.267942][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.278169][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.289587][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.301051][T14035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.318130][T14035] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.318720][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.332114][T14035] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.348863][T14035] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.358479][T14035] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.375985][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.764151][T14247] net_ratelimit: 90 callbacks suppressed [ 563.764203][T14247] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 563.776505][T14247] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 563.788061][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.796247][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.818346][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.829538][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.869523][ T940] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 564.033420][ T940] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 564.092089][ T940] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 564.116053][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.148828][ T940] usb 5-1: config 0 descriptor?? [ 564.182649][T14266] vlan1: entered promiscuous mode [ 564.198596][ T940] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 564.208230][T14265] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 564.449138][T14264] vlan1: left promiscuous mode [ 564.523423][ T5273] usb 5-1: USB disconnect, device number 61 [ 565.527993][T14322] batman_adv: batadv0: Adding interface: macvtap1 [ 565.548334][T14322] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.635298][T14322] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 566.215051][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1828'. [ 566.362256][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1828'. [ 566.969469][ T25] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 567.136766][ T25] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3 [ 567.154459][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.163954][ T25] usb 4-1: Product: syz [ 567.177198][ T25] usb 4-1: Manufacturer: syz [ 567.234448][ T25] usb 4-1: SerialNumber: syz [ 567.255688][ T25] usb 4-1: config 0 descriptor?? [ 567.323036][ T25] comedi comedi0: Wrong number of endpoints [ 567.370866][ T25] dt9812 4-1:0.0: driver 'dt9812' failed to auto-configure device. [ 567.450821][T14379] fuse: Unknown parameter 'group_i00000000000000000000 q / 7' [ 567.608415][T14388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1838'. [ 567.855544][ T25] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 568.069335][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 568.132384][ T25] usb 5-1: New USB device found, idVendor=0d46, idProduct=2001, bcdDevice=82.08 [ 568.141733][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.154042][ T25] usb 5-1: Product: syz [ 568.167572][ T25] usb 5-1: Manufacturer: syz [ 568.179367][ T25] usb 5-1: SerialNumber: syz [ 568.200339][ T25] usb 5-1: config 0 descriptor?? [ 568.435845][ T25] usb 5-1: USB disconnect, device number 62 [ 569.166782][ T25] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 569.382875][ T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 569.393054][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.416279][ T25] usb 3-1: config 0 descriptor?? [ 569.458091][ T25] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input43 [ 569.597790][ T25] usb 4-1: USB disconnect, device number 64 [ 569.691625][T14419] netlink: 'syz.2.1841': attribute type 1 has an invalid length. [ 569.726144][T14419] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1841'. [ 569.923942][T14450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1843'. [ 570.025160][T14447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1843'. [ 570.030787][T14456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.044053][T14447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1843'. [ 570.058496][T14447] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1843'. [ 570.077378][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 570.077396][ T29] audit: type=1326 audit(1728957134.084:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14446 comm="syz.3.1843" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x0 [ 570.130937][T14456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1845'. [ 570.143417][T14456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.208721][T14459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.275697][T14456] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1845'. [ 570.285098][T14456] unsupported nla_type 32768 [ 570.381251][ T6004] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.419469][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 570.479174][ T6004] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.538590][T13511] usb 3-1: USB disconnect, device number 41 [ 570.600665][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 570.621961][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 570.625328][ T6004] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.653010][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.684863][ T9] usb 2-1: config 0 descriptor?? [ 570.713537][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 570.723159][ T6004] bridge0: port 3(netdevsim0) entered disabled state [ 570.811874][ T6004] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 570.828433][ T6004] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 570.877485][ T6004] bridge0: port 3(netdevsim0) entered disabled state [ 570.942168][ T4623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 570.995162][ T4623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 570.998576][ T6004] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.003939][ T4623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 571.024267][ T4623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 571.035910][ T4623] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 571.066447][ T4623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 571.306122][ T6004] bridge_slave_1: left allmulticast mode [ 571.334374][ T6004] bridge_slave_1: left promiscuous mode [ 571.379797][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.430561][ T6004] bridge_slave_0: left allmulticast mode [ 571.436348][ T6004] bridge_slave_0: left promiscuous mode [ 571.444709][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.756903][T14488] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1854'. [ 572.539423][ T25] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 572.613478][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.632853][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.645341][ T6004] bond0 (unregistering): Released all slaves [ 572.661705][ T6004] bond1 (unregistering): Released all slaves [ 572.701908][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 572.774763][ T25] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 572.785106][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.793443][ T25] usb 1-1: Product: syz [ 572.797840][ T25] usb 1-1: Manufacturer: syz [ 572.803690][ T25] usb 1-1: SerialNumber: syz [ 572.810629][ T25] usb 1-1: config 0 descriptor?? [ 573.037140][ T25] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 573.206498][ T4623] Bluetooth: hci3: command tx timeout [ 573.357845][T14475] chnl_net:caif_netlink_parms(): no params data found [ 573.817422][ T6004] hsr_slave_0: left promiscuous mode [ 573.837581][ T9] gspca_sonixj: reg_w1 err -71 [ 573.843682][ T9] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 573.854087][ T6004] hsr_slave_1: left promiscuous mode [ 573.863453][ T6004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.885316][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.886535][ T9] usb 2-1: USB disconnect, device number 63 [ 573.957554][ T6004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.985655][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.016799][ T6004] veth1_macvtap: left promiscuous mode [ 574.027893][ T6004] veth0_macvtap: left promiscuous mode [ 574.034433][ T6004] veth1_vlan: left promiscuous mode [ 574.045143][ T6004] veth0_vlan: left promiscuous mode [ 574.899131][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 575.001787][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 575.286143][ T4623] Bluetooth: hci3: command tx timeout [ 575.779162][T14475] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.815737][T14475] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.848495][T14475] bridge_slave_0: entered allmulticast mode [ 575.868572][T14475] bridge_slave_0: entered promiscuous mode [ 575.908783][T14475] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.969737][T14475] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.989710][T14475] bridge_slave_1: entered allmulticast mode [ 575.996393][T14475] bridge_slave_1: entered promiscuous mode [ 576.086834][T14475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.126856][T14475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.147257][T14528] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1860'. [ 576.268839][T14475] team0: Port device team_slave_0 added [ 576.285296][T14475] team0: Port device team_slave_1 added [ 576.322456][ T25] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 576.359129][ T25] usb 1-1: USB disconnect, device number 54 [ 576.421598][T14475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.448297][T14475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.502794][T14475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.590633][T14475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.607328][T14475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.638525][T14475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.783079][T14475] hsr_slave_0: entered promiscuous mode [ 576.816436][T14475] hsr_slave_1: entered promiscuous mode [ 576.884208][ T29] audit: type=1326 audit(1728957140.884:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14545 comm="syz.3.1864" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x0 [ 576.973064][T14475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 577.024134][T14475] Cannot create hsr debugfs directory [ 577.359417][ T4623] Bluetooth: hci3: command tx timeout [ 577.458225][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.897233][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 577.911494][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.935433][ T5234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 577.955434][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 577.967593][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 577.985038][ T5234] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 578.006068][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 578.167426][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.207890][T14576] block device autoloading is deprecated and will be removed. [ 578.278569][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.955869][T14577] chnl_net:caif_netlink_parms(): no params data found [ 579.084373][ T11] bridge_slave_1: left allmulticast mode [ 579.093132][ T11] bridge_slave_1: left promiscuous mode [ 579.098897][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.124655][ T11] bridge_slave_0: left allmulticast mode [ 579.130668][ T11] bridge_slave_0: left promiscuous mode [ 579.136617][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.439566][ T5234] Bluetooth: hci3: command tx timeout [ 579.596251][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.607975][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.619862][ T11] bond0 (unregistering): Released all slaves [ 579.796755][T14577] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.807758][T14577] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.815502][T14577] bridge_slave_0: entered allmulticast mode [ 579.825040][T14577] bridge_slave_0: entered promiscuous mode [ 579.833468][T14577] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.842440][T14577] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.850285][T14577] bridge_slave_1: entered allmulticast mode [ 579.857198][T14577] bridge_slave_1: entered promiscuous mode [ 579.965888][T14577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.997405][T14577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.033224][ T11] hsr_slave_0: left promiscuous mode [ 580.039806][ T11] hsr_slave_1: left promiscuous mode [ 580.046436][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.054236][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.073031][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.080794][ T5234] Bluetooth: hci2: command tx timeout [ 580.087607][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.112696][ T11] veth1_macvtap: left promiscuous mode [ 580.118279][ T11] veth0_macvtap: left promiscuous mode [ 580.132728][ T11] veth1_vlan: left promiscuous mode [ 580.138095][ T11] veth0_vlan: left promiscuous mode [ 580.706685][ T11] team0 (unregistering): Port device team_slave_1 removed [ 580.769001][ T11] team0 (unregistering): Port device team_slave_0 removed [ 581.278474][T14475] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 581.307788][T14577] team0: Port device team_slave_0 added [ 581.314117][T14475] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 581.324994][T14577] team0: Port device team_slave_1 added [ 581.333637][T14475] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 581.378380][T14475] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 581.414374][T14577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.426942][T14577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.454571][T14577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.473251][T14577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.481979][T14577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.515593][T14577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.628050][T14577] hsr_slave_0: entered promiscuous mode [ 581.636180][T14577] hsr_slave_1: entered promiscuous mode [ 581.745972][T14475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.807685][T14475] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.860892][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.868047][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.880224][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.887379][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.043295][T14475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.100574][T14475] veth0_vlan: entered promiscuous mode [ 582.159443][ T5234] Bluetooth: hci2: command tx timeout [ 582.222001][T14475] veth1_vlan: entered promiscuous mode [ 582.265451][T14475] veth0_macvtap: entered promiscuous mode [ 582.324165][T14475] veth1_macvtap: entered promiscuous mode [ 582.379588][T14475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.391563][T14475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.403126][T14475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.415113][T14475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.425758][T14475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.436783][T14475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.448349][T14475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 582.466987][T14577] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 582.480327][T14475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.491707][T14475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.511196][T14475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.524919][T14475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.543969][T14475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.554793][T14475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.567792][T14475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.575606][T14577] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 582.591117][T14577] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 582.607500][T14475] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.618665][T14475] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.634153][T14475] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.644461][T14475] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.661083][T14577] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 582.807832][ T6004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.827631][ T6004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.876768][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.886435][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.893048][T14577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.961807][T14577] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.030272][ T6004] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.037464][ T6004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.080856][ T6004] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.088006][ T6004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.275762][T14577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.388158][T14577] veth0_vlan: entered promiscuous mode [ 583.400501][T14577] veth1_vlan: entered promiscuous mode [ 583.418245][T14677] fuse: Bad value for 'group_id' [ 583.424868][T14577] veth0_macvtap: entered promiscuous mode [ 583.434123][T14577] veth1_macvtap: entered promiscuous mode [ 583.446166][T14677] fuse: Bad value for 'group_id' [ 583.467112][T14577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.477744][T14577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.487878][T14577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.498433][T14577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.508412][T14577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.519683][T14577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.530536][T14577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.549384][T14577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.590526][T14577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.650369][T14577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.697635][T14577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.717839][T14577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.734049][T14577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.748505][T14577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.777709][T14577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.801613][T14577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.809331][ T5274] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 583.827094][T14577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.864003][T14577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.916506][T14577] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.944338][T14577] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.959446][ T5274] usb 1-1: device descriptor read/64, error -71 [ 583.967622][T14577] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.063292][T14577] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.182109][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.239454][ T5234] Bluetooth: hci2: command tx timeout [ 584.247625][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.259507][ T5274] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 584.331823][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.366600][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.419543][ T5274] usb 1-1: device descriptor read/64, error -71 [ 584.550026][ T5274] usb usb1-port1: attempt power cycle [ 584.960249][ T5274] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 585.095543][ T5274] usb 1-1: device descriptor read/8, error -71 [ 585.359578][ T5274] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 585.405536][ T5274] usb 1-1: device descriptor read/8, error -71 [ 585.569865][ T5274] usb usb1-port1: unable to enumerate USB device [ 585.792465][T14704] syz.1.1866 (14704): drop_caches: 2 [ 586.129099][T14725] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 586.159896][T14725] netlink: 'syz.3.1877': attribute type 10 has an invalid length. [ 586.203708][T14725] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.211087][T14725] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.270677][T14732] netlink: 'syz.3.1877': attribute type 29 has an invalid length. [ 586.318748][T14725] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.326018][T14725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.333412][T14725] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.340505][T14725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.414119][T14725] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 586.462896][ T6006] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 586.500446][T14732] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (4) [ 587.540446][T13511] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 587.680192][ T5302] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 587.714643][T13511] usb 4-1: Using ep0 maxpacket: 16 [ 587.750195][T13511] usb 4-1: config 0 has no interfaces? [ 587.755724][T13511] usb 4-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 587.801973][T13511] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.863349][T13511] usb 4-1: config 0 descriptor?? [ 587.998905][ T5302] usb 1-1: Using ep0 maxpacket: 32 [ 588.006967][ T5302] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 588.015556][ T5302] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 588.024418][ T5302] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 588.034233][ T5302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 588.049495][ T5302] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 588.059356][ T5302] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 588.072491][ T5302] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 588.081672][ T5302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.094274][ T5302] usb 1-1: config 0 descriptor?? [ 588.256476][T14779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.296816][T14779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.314020][ T5302] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 59 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 588.343126][T14779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1892'. [ 588.371595][T14782] loop9: detected capacity change from 0 to 7 [ 588.387747][T14782] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 588.393914][T14782] loop9: partition table partially beyond EOD, truncated [ 588.406572][T14782] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 588.518299][ T5302] usb 1-1: USB disconnect, device number 59 [ 588.532687][ T5302] usblp0: removed [ 588.679380][ T5274] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 588.796767][T14788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.824407][T14788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.861499][ T5274] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 588.879071][ T5274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 588.909373][ T5274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 588.939288][ T5274] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 588.958525][ T5274] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 588.968790][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.987440][ T5274] usb 2-1: config 0 descriptor?? [ 589.406070][ T5274] plantronics 0003:047F:FFFF.002B: No inputs registered, leaving [ 589.433952][ T5274] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 589.527613][T14797] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1897'. [ 590.296802][ T5302] usb 4-1: USB disconnect, device number 65 [ 590.839486][ T5302] usb 2-1: reset high-speed USB device number 64 using dummy_hcd [ 591.120133][ T5274] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 591.169389][ T5272] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 591.291430][ T5274] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 591.300651][ T5274] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 591.314366][ T5274] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 591.327932][ T5274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 1024 [ 591.340320][ T5274] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024 [ 591.357568][ T5274] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 591.368681][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 591.377177][ T5274] usb 3-1: SerialNumber: syz [ 591.377572][ T5272] usb 4-1: Using ep0 maxpacket: 32 [ 591.413119][ T5274] usb 3-1: config 0 descriptor?? [ 591.438140][ T5272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 591.469528][T14822] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 591.487080][ T5272] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 591.513431][T14822] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 591.531288][ C1] port100 3-1:0.0: NFC: Urb failure (status -71) [ 591.548122][ T5272] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 591.567360][ T5272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.576293][ C1] port100 3-1:0.0: NFC: Urb failure (status -71) [ 591.586531][ T5274] port100 3-1:0.0: NFC: Could not get supported command types [ 591.779412][ T5272] usb 4-1: Product: syz [ 591.786958][ T5272] usb 4-1: Manufacturer: syz [ 591.791648][ T5272] usb 4-1: SerialNumber: syz [ 591.799793][ T5272] usb 4-1: config 0 descriptor?? [ 591.817684][ T5272] hub 4-1:0.0: bad descriptor, ignoring hub [ 591.842521][ T5272] hub 4-1:0.0: probe with driver hub failed with error -5 [ 591.852608][ T5272] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input44 [ 591.889996][ T5272] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 591.959649][ T5272] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 592.040302][ T5272] usb 4-1: USB disconnect, device number 66 [ 592.088295][T14838] dccp_invalid_packet: P.Data Offset(100) too large [ 592.190582][ T25] usb 2-1: USB disconnect, device number 64 [ 592.614628][ T937] usb 3-1: USB disconnect, device number 42 [ 592.645192][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 593.159388][T14861] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1922'. [ 593.168422][T14861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1922'. [ 593.212198][T14868] dccp_invalid_packet: P.Data Offset(4) too small [ 593.729403][ T5274] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 593.923164][ T5274] usb 2-1: unable to get BOS descriptor or descriptor too short [ 593.948219][ T5274] usb 2-1: not running at top speed; connect to a high speed hub [ 593.958793][ T5274] usb 2-1: config 11 has an invalid interface number: 244 but max is 0 [ 593.981790][ T5274] usb 2-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 593.999594][ T5274] usb 2-1: config 11 has no interface number 0 [ 594.013603][ T5274] usb 2-1: config 11 interface 244 altsetting 133 endpoint 0x3 has invalid wMaxPacketSize 0 [ 594.037780][ T5274] usb 2-1: config 11 interface 244 altsetting 133 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 594.073945][ T5274] usb 2-1: config 11 interface 244 has no altsetting 0 [ 594.092768][ T5274] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 594.102474][ T5274] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 594.113806][ T5274] usb 2-1: Manufacturer: syz [ 594.118422][ T5274] usb 2-1: SerialNumber: syz [ 594.323187][ T2996] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.456999][ T5274] peak_usb 2-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 594.492485][ T5274] peak_usb 2-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 594.619566][ T5274] peak_usb 2-1:11.244: probe with driver peak_usb failed with error -71 [ 594.708243][ T5274] usb 2-1: USB disconnect, device number 65 [ 594.902417][ T2996] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.238773][ T4623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 595.310566][ T4623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 595.321670][ T4623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 595.333229][ T4623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 595.344050][ T2996] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.357186][ T4623] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 595.447973][ T4623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 595.469435][ T5301] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 595.597593][ T2996] batman_adv: batadv0: Removing interface: macvtap1 [ 595.679404][ T5301] usb 2-1: Using ep0 maxpacket: 16 [ 595.691275][ T5301] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 595.703708][ T5301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.719304][ T5301] usb 2-1: Product: syz [ 595.723518][ T5301] usb 2-1: Manufacturer: syz [ 595.735200][ T2996] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.751639][ T5301] usb 2-1: SerialNumber: syz [ 595.782890][ T5301] r8152-cfgselector 2-1: Unknown version 0x0000 [ 595.789194][ T5301] r8152-cfgselector 2-1: config 0 descriptor?? [ 596.013677][T14949] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1960'. [ 596.035470][T14949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1960'. [ 596.183230][ T2996] bridge_slave_1: left allmulticast mode [ 596.209609][ T2996] bridge_slave_1: left promiscuous mode [ 596.239644][ T2996] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.256531][ T2996] bridge_slave_0: left allmulticast mode [ 596.262599][ T2996] bridge_slave_0: left promiscuous mode [ 596.268395][ T2996] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.285945][ T5301] r8152-cfgselector 2-1: USB disconnect, device number 66 [ 596.743983][T14972] netlink: 'syz.0.1970': attribute type 3 has an invalid length. [ 596.752577][T14972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1970'. [ 597.039308][ T2996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.056073][ T2996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.066796][ T2996] bond0 (unregistering): Released all slaves [ 597.081457][T14929] chnl_net:caif_netlink_parms(): no params data found [ 597.200699][ T940] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 597.381274][ T940] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.400852][ T940] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 597.439442][ T940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.489863][ T940] usb 2-1: config 0 descriptor?? [ 597.507025][T14929] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.517149][ T940] pwc: Askey VC010 type 2 USB webcam detected. [ 597.530001][T14929] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.537876][T14929] bridge_slave_0: entered allmulticast mode [ 597.569657][T14929] bridge_slave_0: entered promiscuous mode [ 597.599583][ T4623] Bluetooth: hci4: command tx timeout [ 597.747251][T14929] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.774634][T14929] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.788358][T14929] bridge_slave_1: entered allmulticast mode [ 597.835718][T14929] bridge_slave_1: entered promiscuous mode [ 597.921734][T15000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1980'. [ 597.981493][ T2996] hsr_slave_0: left promiscuous mode [ 597.996699][ T2996] hsr_slave_1: left promiscuous mode [ 598.020529][ T2996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.047627][ T2996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.090264][ T2996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.107055][ T2996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.177021][T15024] program syz.4.1987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 598.198426][ T2996] veth1_macvtap: left promiscuous mode [ 598.207453][ T2996] veth0_macvtap: left promiscuous mode [ 598.223470][ T2996] veth1_vlan: left promiscuous mode [ 598.243685][ T2996] veth0_vlan: left promiscuous mode [ 598.450792][T15035] netlink: 316 bytes leftover after parsing attributes in process `syz.3.1991'. [ 599.367551][ T2996] team0 (unregistering): Port device team_slave_1 removed [ 599.427989][ T2996] team0 (unregistering): Port device team_slave_0 removed [ 599.685493][ T4623] Bluetooth: hci4: command tx timeout [ 600.083124][T14929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.105432][T15030] batadv0: entered promiscuous mode [ 600.129565][T15030] macsec1: entered promiscuous mode [ 600.135135][T15030] macsec1: entered allmulticast mode [ 600.140721][ T940] pwc: recv_control_msg error -71 req 02 val 2700 [ 600.149709][T15030] batadv0: entered allmulticast mode [ 600.155509][ T940] pwc: recv_control_msg error -71 req 02 val 2c00 [ 600.169413][ T940] pwc: recv_control_msg error -71 req 04 val 1000 [ 600.178577][ T940] pwc: recv_control_msg error -71 req 04 val 1300 [ 600.185646][T15030] batadv0: left allmulticast mode [ 600.191530][T15030] batadv0: left promiscuous mode [ 600.197187][ T940] pwc: recv_control_msg error -71 req 04 val 1400 [ 600.206083][ T940] pwc: recv_control_msg error -71 req 02 val 2000 [ 600.223597][ T940] pwc: recv_control_msg error -71 req 02 val 2100 [ 600.253395][ T940] pwc: recv_control_msg error -71 req 04 val 1500 [ 600.263645][T14929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.285356][ T940] pwc: recv_control_msg error -71 req 02 val 2500 [ 600.299972][ T940] pwc: recv_control_msg error -71 req 02 val 2400 [ 600.309907][ T940] pwc: recv_control_msg error -71 req 02 val 2600 [ 600.329588][ T940] pwc: recv_control_msg error -71 req 02 val 2900 [ 600.340587][ T940] pwc: recv_control_msg error -71 req 02 val 2800 [ 600.381204][ T940] pwc: recv_control_msg error -71 req 04 val 1100 [ 600.401132][ T940] pwc: recv_control_msg error -71 req 04 val 1200 [ 600.417110][ T940] pwc: Registered as video71. [ 600.466123][ T940] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input45 [ 600.484481][T14929] team0: Port device team_slave_0 added [ 600.522793][ T940] usb 2-1: USB disconnect, device number 67 [ 600.540395][T14929] team0: Port device team_slave_1 added [ 600.689629][ T5274] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 600.700620][T14929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.725625][T14929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.790668][T14929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.815751][T14929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.822812][T14929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.848939][T14929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.889350][ T5274] usb 1-1: Using ep0 maxpacket: 32 [ 600.896123][ T5274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.907372][ T5274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.917449][ T937] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 600.929877][ T25] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 600.943208][ T5274] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 600.955764][T14929] hsr_slave_0: entered promiscuous mode [ 600.970211][T14929] hsr_slave_1: entered promiscuous mode [ 600.976881][T14929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 600.989726][ T5274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.015668][T14929] Cannot create hsr debugfs directory [ 601.022189][ T5274] usb 1-1: config 0 descriptor?? [ 601.050789][ T5274] hub 1-1:0.0: USB hub found [ 601.091005][ T937] usb 4-1: Using ep0 maxpacket: 16 [ 601.091053][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 601.101040][ T937] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 601.129031][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 601.129406][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.142973][ T25] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 601.169736][ T937] usb 4-1: Product: syz [ 601.175446][ T937] usb 4-1: Manufacturer: syz [ 601.186291][ T937] usb 4-1: SerialNumber: syz [ 601.190092][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.198960][ T25] usb 5-1: Product: syz [ 601.220112][ T937] r8152-cfgselector 4-1: Unknown version 0x0000 [ 601.239716][ T937] r8152-cfgselector 4-1: config 0 descriptor?? [ 601.242244][ T25] usb 5-1: Manufacturer: syz [ 601.266983][ T5274] hub 1-1:0.0: 1 port detected [ 601.277209][ T25] usb 5-1: SerialNumber: syz [ 601.293596][ T25] usb 5-1: config 0 descriptor?? [ 601.299424][T15070] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 601.325018][ T25] hub 5-1:0.0: bad descriptor, ignoring hub [ 601.343644][ T25] hub 5-1:0.0: probe with driver hub failed with error -5 [ 601.364791][ T25] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input46 [ 601.460288][ T5274] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 601.486480][T15091] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 601.494765][ T5274] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 601.563787][ T5274] usbhid 1-1:0.0: can't add hid device: -71 [ 601.578235][T15091] kvm: pic: level sensitive irq not supported [ 601.578411][T15091] kvm: pic: non byte read [ 601.590516][ T5274] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 601.599036][ T4623] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 601.640637][T15091] kvm: pic: level sensitive irq not supported [ 601.640737][T15091] kvm: pic: non byte read [ 601.652725][ T5274] usb 1-1: USB disconnect, device number 60 [ 601.653799][ T937] usb 5-1: USB disconnect, device number 63 [ 601.658840][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 601.759389][ T4623] Bluetooth: hci4: command tx timeout [ 601.771115][ T25] r8152-cfgselector 4-1: USB disconnect, device number 67 [ 602.083833][T15107] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2012'. [ 602.109424][T15107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2012'. [ 602.230966][T14929] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 602.295868][T14929] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 602.350033][T14929] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 602.371835][T14929] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 602.578882][T15124] batadv0: entered promiscuous mode [ 602.594600][T15124] macsec1: entered promiscuous mode [ 602.600814][T15130] netlink: 'syz.3.2019': attribute type 6 has an invalid length. [ 602.610307][T15124] macsec1: entered allmulticast mode [ 602.615632][T15124] batadv0: entered allmulticast mode [ 602.630534][T15130] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2019'. [ 602.659743][T15124] batadv0: left allmulticast mode [ 602.665373][T15124] batadv0: left promiscuous mode [ 602.731555][T14929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.783925][T14929] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.861732][ T2996] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.868920][ T2996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.917061][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.924252][ T6006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.291912][ T78] syzkaller0: tun_net_xmit 76 [ 603.323814][ T940] syzkaller0: tun_net_xmit 76 [ 603.326622][ T78] syzkaller0: tun_net_xmit 48 [ 603.839873][ T4623] Bluetooth: hci4: command tx timeout [ 606.378044][T15175] @: renamed from veth0_vlan (while UP) [ 606.395056][T15186] batadv0: entered promiscuous mode [ 606.414718][T15186] macsec1: entered promiscuous mode [ 606.422150][T15186] macsec1: entered allmulticast mode [ 606.427485][T15186] batadv0: entered allmulticast mode [ 606.490467][T15186] batadv0: left allmulticast mode [ 606.495704][T15186] batadv0: left promiscuous mode [ 606.626633][T14929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.639610][T15238] netlink: 'syz.1.2037': attribute type 3 has an invalid length. [ 606.696983][T15240] netlink: 'syz.0.2038': attribute type 2 has an invalid length. [ 606.735934][T15240] netlink: 'syz.0.2038': attribute type 8 has an invalid length. [ 606.744045][T15240] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2038'. [ 606.824002][T14929] veth0_vlan: entered promiscuous mode [ 606.877637][T14929] veth1_vlan: entered promiscuous mode [ 606.904261][T14929] veth0_macvtap: entered promiscuous mode [ 606.927372][T14929] veth1_macvtap: entered promiscuous mode [ 606.946133][T14929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.971956][T14929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.984928][T14929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.997568][T14929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.017955][T14929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.028583][ T940] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 607.042643][T14929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.056341][T14929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.084096][T14929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.130430][T14929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.148874][T14929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.186406][T14929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.191318][ T940] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 607.213475][ T940] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 607.229502][ T937] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 607.256477][ T940] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 607.274803][T14929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.319358][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 607.327630][T14929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.341128][ T940] usb 5-1: SerialNumber: syz [ 607.355508][T14929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.429828][T14929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.447162][ T937] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 607.461496][ T937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.474360][ T937] usb 2-1: Product: syz [ 607.478665][ T937] usb 2-1: Manufacturer: syz [ 607.481726][T14929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.497372][ T937] usb 2-1: SerialNumber: syz [ 607.520001][ T937] usb 2-1: config 0 descriptor?? [ 607.527304][T14929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.561021][ T940] usb 5-1: 0:2 : does not exist [ 607.570886][ T940] usb 5-1: unit 255 not found! [ 607.581631][T14929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.603841][ T940] usb 5-1: 5:0: cannot get min/max values for control 16 (id 5) [ 607.712047][ T940] usb 5-1: 5:0: cannot get min/max values for control 17 (id 5) [ 607.729810][T14929] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.797986][ T940] usb 5-1: 5:0: cannot get min/max values for control 18 (id 5) [ 607.824137][T14929] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.901005][T14929] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.904224][ T25] usb 2-1: USB disconnect, device number 68 [ 607.910268][T14929] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.956074][ T940] usb 5-1: USB disconnect, device number 64 [ 608.150419][ T6004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.185401][ T6004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.249516][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.258017][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.803890][T15283] batadv0: entered promiscuous mode [ 608.857589][T15283] macsec1: entered promiscuous mode [ 608.872477][T15283] macsec1: entered allmulticast mode [ 608.898381][T15283] batadv0: entered allmulticast mode [ 608.926538][T15283] batadv0: left allmulticast mode [ 608.952782][T15283] batadv0: left promiscuous mode [ 609.139585][T13511] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 609.249740][ T25] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 609.309365][T13511] usb 5-1: Using ep0 maxpacket: 8 [ 609.317053][T13511] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 609.339620][T13511] usb 5-1: config 0 has no interface number 0 [ 609.345866][T13511] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 609.356706][T13511] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 609.366597][T13511] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 609.376413][T13511] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 609.386272][T13511] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 609.399535][T13511] usb 5-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82 [ 609.409538][T13511] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.417725][T13511] usb 5-1: Product: syz [ 609.420758][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 609.422966][T13511] usb 5-1: Manufacturer: syz [ 609.431712][T13511] usb 5-1: SerialNumber: syz [ 609.455365][T13511] usb 5-1: config 0 descriptor?? [ 609.456288][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.479565][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 609.488875][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.498324][ T25] usb 2-1: config 0 descriptor?? [ 609.507382][ T25] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 609.649859][ T5302] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 609.756731][T13511] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 2 is not bulk. [ 609.807563][T13511] microtek usb (rev 0.4.3): can only deal with one output endpoints. Bailing out. [ 609.821879][T13511] usb 5-1: USB disconnect, device number 65 [ 609.882096][ T5302] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 609.924875][ T5302] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 609.949480][ T5302] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 609.958892][ T5302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.978107][T15294] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 609.989078][ T5302] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 610.138731][ T25] gspca_vc032x: reg_r err -32 [ 610.138774][ T25] vc032x 2-1:0.0: probe with driver vc032x failed with error -32 [ 610.410240][ T25] usb 2-1: USB disconnect, device number 69 [ 610.557376][T15294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.620872][T15294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.937924][T13511] usb 1-1: USB disconnect, device number 61 [ 610.981136][T15313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2064'. [ 611.289449][ T25] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 611.308180][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 611.356160][T15329] batadv0: entered promiscuous mode [ 611.374647][T15329] macsec1: entered promiscuous mode [ 611.401310][T15329] macsec1: entered allmulticast mode [ 611.406664][T15329] batadv0: entered allmulticast mode [ 611.435188][T15329] batadv0: left allmulticast mode [ 611.442293][T15329] batadv0: left promiscuous mode [ 611.451752][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 611.475187][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 611.489620][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 611.503144][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 611.517310][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 611.529318][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.578505][ T25] usb 5-1: config 0 descriptor?? [ 612.033988][ T25] plantronics 0003:047F:FFFF.002C: ignoring exceeding usage max [ 612.054769][ T25] plantronics 0003:047F:FFFF.002C: No inputs registered, leaving [ 612.090254][ T25] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 612.476798][T15353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2078'. [ 612.688353][T15361] netlink: 'syz.1.2081': attribute type 10 has an invalid length. [ 612.705671][T15361] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 612.728087][T15361] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 612.974575][T13511] usb 5-1: USB disconnect, device number 66 [ 613.107347][T15366] batadv0: entered promiscuous mode [ 613.149425][T15366] macsec1: entered promiscuous mode [ 613.181985][T15366] macsec1: entered allmulticast mode [ 613.215390][T15366] batadv0: entered allmulticast mode [ 613.280195][T15366] batadv0: left allmulticast mode [ 613.299138][T15366] batadv0: left promiscuous mode [ 613.727551][T15396] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2095'. [ 614.872213][T15436] batadv0: entered promiscuous mode [ 614.915270][T15436] macsec1: entered promiscuous mode [ 614.950679][T15436] macsec1: entered allmulticast mode [ 614.956067][T15436] batadv0: entered allmulticast mode [ 615.004545][T15436] batadv0: left allmulticast mode [ 615.024360][T15436] batadv0: left promiscuous mode [ 616.053921][T15481] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 616.175691][T15481] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 616.709432][ T25] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 616.739453][ T940] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 616.879613][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 616.887475][ T25] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 616.912928][ T25] usb 4-1: config 0 has no interface number 0 [ 616.923703][ T25] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 616.933489][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.941719][ T940] usb 3-1: Using ep0 maxpacket: 16 [ 616.978997][ T940] usb 3-1: New USB device found, idVendor=110a, idProduct=1653, bcdDevice=5e.a7 [ 616.988181][ T940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.006421][ T25] usb 4-1: Product: syz [ 617.016546][ T940] usb 3-1: Product: syz [ 617.022795][ T25] usb 4-1: Manufacturer: syz [ 617.027458][ T25] usb 4-1: SerialNumber: syz [ 617.041057][ T940] usb 3-1: Manufacturer: syz [ 617.045711][ T940] usb 3-1: SerialNumber: syz [ 617.061488][ T25] usb 4-1: config 0 descriptor?? [ 617.069083][ T940] usb 3-1: config 0 descriptor?? [ 617.077758][ T25] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 617.088265][ T25] usb 4-1: selecting invalid altsetting 1 [ 617.095644][ T25] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 617.105077][T15513] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 617.115028][ T25] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 617.150857][T15513] PKCS7: Only support pkcs7_signedData type [ 617.199645][ T25] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 617.227190][ T25] usb 4-1: media controller created [ 617.338281][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 617.365077][T15491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.461112][T15491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.506430][ T940] mxuport 3-1:0.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 617.561928][ T940] mxuport 3-1:0.0: probe with driver mxuport failed with error -5 [ 617.575262][ T940] usb 3-1: USB disconnect, device number 43 [ 617.584170][T15491] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2134'. [ 617.645014][ T25] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 617.652743][ T25] zl10353_read_register: readreg error (reg=127, ret==-71) [ 617.669740][ T25] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 617.718125][ T25] usb 4-1: USB disconnect, device number 68 [ 618.369811][T15544] program syz.1.2157 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 618.583158][T15552] netlink: 'syz.1.2160': attribute type 11 has an invalid length. [ 618.879505][ T25] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 618.930433][ T29] audit: type=1326 audit(1728957182.924:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15555 comm="syz.2.2164" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x0 [ 619.095835][T15568] loop9: detected capacity change from 0 to 7 [ 619.099342][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 619.110385][ T25] usb 4-1: config 0 has an invalid interface number: 111 but max is 1 [ 619.121261][ T25] usb 4-1: config 0 has no interface number 1 [ 619.137467][ T25] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 619.146747][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.155374][ T25] usb 4-1: Product: syz [ 619.160508][ T25] usb 4-1: Manufacturer: syz [ 619.165142][ T25] usb 4-1: SerialNumber: syz [ 619.194179][ T25] usb 4-1: config 0 descriptor?? [ 619.199529][T15568] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 619.206727][T15568] loop9: partition table partially beyond EOD, truncated [ 619.215304][T15568] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 619.442680][ T25] snd-usb-6fire 4-1:0.111: unable to receive device firmware state. [ 619.469358][ T25] snd-usb-6fire 4-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 619.482469][ T25] usb 4-1: USB disconnect, device number 69 [ 619.822477][T15581] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2170'. [ 619.959654][T15581] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2170'. [ 620.205995][T15592] netlink: 'syz.2.2175': attribute type 6 has an invalid length. [ 620.959518][ T5234] Bluetooth: hci4: command 0x0405 tx timeout [ 621.205894][T15626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2187'. [ 621.409187][T15635] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2191'. [ 621.706830][T15654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2201'. [ 622.198373][T13511] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 622.358555][T15685] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 622.368326][ T29] audit: type=1326 audit(1728957186.374:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15666 comm="syz.2.2207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 622.383017][T15685] netlink: 'syz.4.2214': attribute type 10 has an invalid length. [ 622.399757][ T29] audit: type=1326 audit(1728957186.414:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15666 comm="syz.2.2207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 622.400453][T13511] usb 1-1: Using ep0 maxpacket: 16 [ 622.421757][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.436489][T15689] program syz.3.2215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 622.448052][T15685] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.455734][T15685] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.483202][T15685] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.490432][T15685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.497877][T15685] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.505067][T15685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.515084][T13511] usb 1-1: config 0 has no interfaces? [ 622.516006][T15685] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 622.525190][T13511] usb 1-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice=ac.00 [ 622.530883][ T29] audit: type=1326 audit(1728957186.544:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15666 comm="syz.2.2207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 622.552206][T13511] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.573734][ T29] audit: type=1326 audit(1728957186.544:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15666 comm="syz.2.2207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 622.596004][ T29] audit: type=1326 audit(1728957186.544:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15666 comm="syz.2.2207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 622.596868][ T78] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 622.618449][ T29] audit: type=1326 audit(1728957186.544:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15666 comm="syz.2.2207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=309 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 622.638696][T15685] netlink: 'syz.4.2214': attribute type 29 has an invalid length. [ 622.663245][T13511] usb 1-1: config 0 descriptor?? [ 622.696127][ T29] audit: type=1326 audit(1728957186.704:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15666 comm="syz.2.2207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=309 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 622.734341][ T29] audit: type=1326 audit(1728957186.704:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15666 comm="syz.2.2207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 622.763977][ T29] audit: type=1326 audit(1728957186.704:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15666 comm="syz.2.2207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 622.815418][T15685] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (4) [ 622.830484][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2218'. [ 623.095401][T15667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.136332][T15667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.151260][T15707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.205094][T15667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2206'. [ 623.235541][T15667] vlan3: entered promiscuous mode [ 623.251465][ T25] usb 1-1: USB disconnect, device number 62 [ 623.649391][ T5302] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 623.799630][ T5302] usb 4-1: Using ep0 maxpacket: 8 [ 623.820369][ T5302] usb 4-1: unable to get BOS descriptor or descriptor too short [ 623.840872][ T5302] usb 4-1: string descriptor 0 read error: -22 [ 623.855106][ T5302] usb 4-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 623.866012][ T5302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.884237][ T5302] usb 4-1: config 0 descriptor?? [ 624.062454][T15743] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 624.603679][ T5302] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 624.642841][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.649253][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.670260][ T5302] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 624.697540][ T5302] dib0700: firmware download failed at 7 with -22 [ 624.748137][ T5302] usb 4-1: USB disconnect, device number 70 [ 624.947061][T15767] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2241'. [ 625.435271][T15783] pim6reg: entered allmulticast mode [ 625.725621][T15790] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 626.508519][T15780] pim6reg: left allmulticast mode [ 626.721386][ T5234] Bluetooth: hci0: command 0x0406 tx timeout [ 627.197031][T15819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2259'. [ 627.206020][ T2996] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.297368][T15819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2259'. [ 627.452370][ T2996] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.651783][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 627.681173][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 627.694132][ T2996] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.708471][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 627.769611][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 627.900618][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 627.908139][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 628.026298][ T2996] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.472792][ T2996] bridge_slave_1: left allmulticast mode [ 628.481442][ T2996] bridge_slave_1: left promiscuous mode [ 628.487144][ T2996] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.501964][ T2996] bridge_slave_0: left allmulticast mode [ 628.507902][ T2996] bridge_slave_0: left promiscuous mode [ 628.702412][ T2996] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.266400][ T2996] xfrm0: left allmulticast mode [ 629.271641][ T2996] xfrm0: left promiscuous mode [ 629.781420][ T2996] team0: Port device vlan2 removed [ 629.999501][ T4623] Bluetooth: hci0: command tx timeout [ 630.558027][ T2996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.577837][ T2996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.591918][ T2996] bond0 (unregistering): Released all slaves [ 630.610626][ T2996] bond1 (unregistering): Released all slaves [ 630.629833][ T5272] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 630.743327][T15869] pim6reg: entered allmulticast mode [ 630.769539][ T5272] usb 2-1: device descriptor read/64, error -71 [ 630.972752][T15864] pim6reg: left allmulticast mode [ 631.009342][ T5272] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 631.233610][ T5234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 631.246832][ T5234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 631.266308][ T5234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 631.278133][ T5234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 631.289774][ T5234] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 631.297831][ T5234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 631.304997][ T5272] usb 2-1: device descriptor read/64, error -71 [ 631.419797][ T5272] usb usb2-port1: attempt power cycle [ 631.426257][ T2996] hsr_slave_0: left promiscuous mode [ 631.480017][ T2996] hsr_slave_1: left promiscuous mode [ 631.494604][ T2996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.515667][ T2996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.524203][ T2996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 631.535762][ T2996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.573930][ T2996] veth1_macvtap: left promiscuous mode [ 631.598143][ T2996] veth0_macvtap: left promiscuous mode [ 631.606110][ T2996] veth1_vlan: left promiscuous mode [ 631.614941][ T2996] veth0_vlan: left promiscuous mode [ 631.759546][ T5272] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 631.779784][ T5272] usb 2-1: device descriptor read/8, error -71 [ 632.019438][ T5272] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 632.062183][ T5272] usb 2-1: device descriptor read/8, error -71 [ 632.079380][ T4623] Bluetooth: hci0: command tx timeout [ 632.183635][ T5272] usb usb2-port1: unable to enumerate USB device [ 632.743682][ T2996] team0 (unregistering): Port device team_slave_1 removed [ 632.840637][ T2996] team0 (unregistering): Port device team_slave_0 removed [ 633.362526][ T4623] Bluetooth: hci3: command tx timeout [ 634.097024][T15920] netlink: 'syz.1.2287': attribute type 3 has an invalid length. [ 634.136291][T15833] chnl_net:caif_netlink_parms(): no params data found [ 634.159677][ T4623] Bluetooth: hci0: command tx timeout [ 634.295626][T15883] chnl_net:caif_netlink_parms(): no params data found [ 634.540141][T15833] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.566428][T15833] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.600695][T15833] bridge_slave_0: entered allmulticast mode [ 634.617975][T15833] bridge_slave_0: entered promiscuous mode [ 634.682374][T15833] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.698161][T15833] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.733992][T15833] bridge_slave_1: entered allmulticast mode [ 634.761379][T15833] bridge_slave_1: entered promiscuous mode [ 634.959904][T15833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.075166][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 635.087597][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 635.099243][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 635.107704][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 635.128414][ T5234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 635.137983][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 635.259576][ T2996] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.291454][T15833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.357457][T15883] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.378998][T15883] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.427228][T15883] bridge_slave_0: entered allmulticast mode [ 635.438899][T15883] bridge_slave_0: entered promiscuous mode [ 635.449420][ T4623] Bluetooth: hci3: command tx timeout [ 635.532614][ T2996] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.809364][T15883] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.853750][T15883] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.879444][T15883] bridge_slave_1: entered allmulticast mode [ 635.886189][T15883] bridge_slave_1: entered promiscuous mode [ 635.962424][ T2996] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.077094][T15833] team0: Port device team_slave_0 added [ 636.243758][ T4623] Bluetooth: hci0: command tx timeout [ 636.304808][ T2996] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.358751][T15833] team0: Port device team_slave_1 added [ 636.511024][T15883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.593147][T15883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.738500][T15833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.746538][T15833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.772469][ C0] vkms_vblank_simulate: vblank timer overrun [ 636.786340][T15833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.809551][T15833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.816550][T15833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.842436][ C0] vkms_vblank_simulate: vblank timer overrun [ 636.884271][T15833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.920291][T15955] chnl_net:caif_netlink_parms(): no params data found [ 636.958041][T15883] team0: Port device team_slave_0 added [ 637.040858][T15883] team0: Port device team_slave_1 added [ 637.141466][T15883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.148650][T15883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.174734][ C0] vkms_vblank_simulate: vblank timer overrun [ 637.181266][ T5272] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 637.191174][T15883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.202487][ T4623] Bluetooth: hci4: command tx timeout [ 637.292105][ T2996] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.347209][T15833] hsr_slave_0: entered promiscuous mode [ 637.354371][ T5272] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 637.367244][ T5272] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.388868][ T5272] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 637.398658][T15833] hsr_slave_1: entered promiscuous mode [ 637.411763][ T5272] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.427428][T15833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 637.436034][T15833] Cannot create hsr debugfs directory [ 637.443915][ T5272] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 637.454062][ T5272] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 637.464903][T15883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.472207][ T5272] usb 4-1: Product: syz [ 637.477936][T15883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.503881][ C0] vkms_vblank_simulate: vblank timer overrun [ 637.512843][ T5272] usb 4-1: Manufacturer: syz [ 637.530335][ T4623] Bluetooth: hci3: command tx timeout [ 637.534518][ T5272] cdc_wdm 4-1:1.0: skipping garbage [ 637.541036][ T5272] cdc_wdm 4-1:1.0: skipping garbage [ 637.547413][ T5272] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 637.558164][ T5272] cdc_wdm 4-1:1.0: Unknown control protocol [ 637.571736][T15883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.721738][ T2996] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.780720][T15883] hsr_slave_0: entered promiscuous mode [ 637.790447][T15883] hsr_slave_1: entered promiscuous mode [ 637.805284][T15883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 637.817878][T15883] Cannot create hsr debugfs directory [ 637.828011][T15955] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.839902][T15955] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.847135][T15955] bridge_slave_0: entered allmulticast mode [ 637.870800][T15955] bridge_slave_0: entered promiscuous mode [ 637.879599][T15955] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.890526][T15955] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.897788][T15955] bridge_slave_1: entered allmulticast mode [ 637.911585][T15955] bridge_slave_1: entered promiscuous mode [ 637.935044][ T2996] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.065666][ T2996] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.150796][T15955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.184679][T15955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.345284][T15955] team0: Port device team_slave_0 added [ 638.433305][T15955] team0: Port device team_slave_1 added [ 638.658026][T15955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.700307][T15955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.799368][T15955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.888435][ T2996] bridge_slave_1: left allmulticast mode [ 638.910820][ T2996] bridge_slave_1: left promiscuous mode [ 638.916660][ T2996] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.937842][ T2996] bridge_slave_0: left allmulticast mode [ 638.955632][ T2996] bridge_slave_0: left promiscuous mode [ 638.962289][ T2996] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.974415][ T2996] bridge_slave_1: left allmulticast mode [ 638.981845][ T2996] bridge_slave_1: left promiscuous mode [ 638.987525][ T2996] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.002023][ T2996] bridge_slave_0: left allmulticast mode [ 639.007836][ T2996] bridge_slave_0: left promiscuous mode [ 639.013806][ T2996] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.030739][ T12] [ 639.030944][ T2996] ------------[ cut here ]------------ [ 639.033373][ T12] ============================= [ 639.038812][ T2996] DEBUG_LOCKS_WARN_ON(1) [ 639.038878][ T2996] WARNING: CPU: 1 PID: 2996 at kernel/locking/lockdep.c:232 __lock_acquire+0x58c/0x2050 [ 639.043857][ T12] WARNING: suspicious RCU usage [ 639.047913][ T2996] Modules linked in: [ 639.057657][ T12] 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 Not tainted [ 639.062432][ T2996] CPU: 1 UID: 0 PID: 2996 Comm: kworker/u8:7 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 639.066311][ T12] ----------------------------- [ 639.073388][ T2996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 639.073403][ T2996] Workqueue: netns cleanup_net [ 639.073441][ T2996] RIP: 0010:__lock_acquire+0x58c/0x2050 [ 639.084334][ T12] net/sched/sch_generic.c:1284 suspicious rcu_dereference_protected() usage! [ 639.089077][ T2996] Code: 00 00 83 3d 25 c7 ac 0e 00 75 23 90 48 c7 c7 60 c9 0a 8c 48 c7 c6 00 cc 0a 8c e8 3f 7f e5 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 639.099230][ T12] [ 639.099230][ T12] other info that might help us debug this: [ 639.099230][ T12] [ 639.103881][ T2996] RSP: 0018:ffffc90009e673f0 EFLAGS: 00010046 [ 639.103903][ T2996] RAX: f48febd04b59f600 RBX: 000000000000129c RCX: ffff88802f233c00 [ 639.109484][ T12] [ 639.109484][ T12] rcu_scheduler_active = 2, debug_locks = 1 [ 639.118153][ T2996] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 639.118170][ T2996] RBP: 0000000000000014 R08: ffffffff8155e402 R09: 1ffffffff1d02660 [ 639.138185][ T12] 8 locks held by kworker/u8:1/12: [ 639.147964][ T2996] R10: dffffc0000000000 R11: fffffbfff1d02661 R12: ffff88802f233c00 [ 639.147981][ T2996] R13: 000000000000129c R14: 1ffff11005e468f4 R15: ffff88802f2347a0 [ 639.147995][ T2996] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 639.148011][ T2996] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 639.148025][ T2996] CR2: 0000555c83ddf131 CR3: 0000000061112000 CR4: 00000000003526f0 [ 639.148043][ T2996] Call Trace: [ 639.148050][ T2996] [ 639.148060][ T2996] ? __warn+0x168/0x4e0 [ 639.148083][ T2996] ? __lock_acquire+0x58c/0x2050 [ 639.148107][ T2996] ? report_bug+0x2b3/0x500 [ 639.148128][ T2996] ? __lock_acquire+0x58c/0x2050 [ 639.148157][ T2996] ? handle_bug+0x60/0x90 [ 639.148174][ T2996] ? exc_invalid_op+0x1a/0x50 [ 639.148191][ T2996] ? asm_exc_invalid_op+0x1a/0x20 [ 639.148216][ T2996] ? __warn_printk+0x292/0x360 [ 639.148237][ T2996] ? __lock_acquire+0x58c/0x2050 [ 639.148265][ T2996] lock_acquire+0x1ed/0x550 [ 639.148288][ T2996] ? down+0x39/0xc0 [ 639.148306][ T2996] ? ib_device_get_by_netdev+0x85/0x5e0 [ 639.148329][ T2996] ? __pfx_lock_acquire+0x10/0x10 [ 639.148359][ T2996] _raw_spin_lock_irqsave+0xd5/0x120 [ 639.148383][ T2996] ? down+0x39/0xc0 [ 639.148400][ T2996] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 639.148424][ T2996] down+0x39/0xc0 [ 639.154526][ T12] #0: [ 639.162427][ T2996] __dev_close_many+0x107/0x300 [ 639.170512][ T12] ffff88802dd0a948 [ 639.178431][ T2996] ? __pfx___dev_close_many+0x10/0x10 [ 639.186426][ T12] ( [ 639.191468][ T2996] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 639.191500][ T2996] dev_close_many+0x24e/0x4c0 [ 639.199556][ T12] (wq_completion)bond0 [ 639.207480][ T2996] ? lockdep_hardirqs_on+0x99/0x150 [ 639.216439][ T12] #62 [ 639.222965][ T2996] ? __pfx_dev_close_many+0x10/0x10 [ 639.222996][ T2996] unregister_netdevice_many_notify+0x530/0x1da0 [ 639.231343][ T12] ){+.+.}-{0:0} [ 639.234200][ T2996] ? net_generic+0x1f/0x240 [ 639.234228][ T2996] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 639.234250][ T2996] ? unregister_netdevice_queue+0x26b/0x370 [ 639.234269][ T2996] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 639.234291][ T2996] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 639.234311][ T2996] cleanup_net+0x75d/0xcc0 [ 639.234345][ T2996] ? __pfx_cleanup_net+0x10/0x10 [ 639.234371][ T2996] ? process_scheduled_works+0x976/0x1850 [ 639.234395][ T2996] process_scheduled_works+0xa63/0x1850 [ 639.234427][ T2996] ? __pfx_process_scheduled_works+0x10/0x10 [ 639.234453][ T2996] ? assign_work+0x364/0x3d0 [ 639.234477][ T2996] worker_thread+0x870/0xd30 [ 639.234504][ T2996] ? __kthread_parkme+0x169/0x1d0 [ 639.237427][ T12] , at: process_scheduled_works+0x93b/0x1850 [ 639.241554][ T2996] ? __pfx_worker_thread+0x10/0x10 [ 639.241577][ T2996] kthread+0x2f0/0x390 [ 639.241594][ T2996] ? __pfx_worker_thread+0x10/0x10 [ 639.246509][ T12] #1: [ 639.250981][ T2996] ? __pfx_kthread+0x10/0x10 [ 639.251002][ T2996] ret_from_fork+0x4b/0x80 [ 639.251024][ T2996] ? __pfx_kthread+0x10/0x10 [ 639.251041][ T2996] ret_from_fork_asm+0x1a/0x30 [ 639.255954][ T12] ffffc90000117d00 [ 639.260253][ T2996] [ 639.260267][ T2996] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 639.260280][ T2996] CPU: 1 UID: 0 PID: 2996 Comm: kworker/u8:7 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 639.260301][ T2996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 639.260315][ T2996] Workqueue: netns cleanup_net [ 639.260341][ T2996] Call Trace: [ 639.260350][ T2996] [ 639.260357][ T2996] dump_stack_lvl+0x241/0x360 [ 639.260379][ T2996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 639.260397][ T2996] ? __pfx__printk+0x10/0x10 [ 639.260419][ T2996] ? _printk+0xd5/0x120 [ 639.260442][ T2996] ? __init_begin+0x41000/0x41000 [ 639.260463][ T2996] ? vscnprintf+0x5d/0x90 [ 639.260484][ T2996] panic+0x349/0x880 [ 639.260508][ T2996] ? __warn+0x177/0x4e0 [ 639.260526][ T2996] ? __pfx_panic+0x10/0x10 [ 639.260547][ T2996] ? show_trace_log_lvl+0x3b2/0x410 [ 639.260570][ T2996] ? ret_from_fork_asm+0x1a/0x30 [ 639.260594][ T2996] __warn+0x34b/0x4e0 [ 639.260613][ T2996] ? __lock_acquire+0x58c/0x2050 [ 639.260638][ T2996] report_bug+0x2b3/0x500 [ 639.260660][ T2996] ? __lock_acquire+0x58c/0x2050 [ 639.260685][ T2996] handle_bug+0x60/0x90 [ 639.260704][ T2996] exc_invalid_op+0x1a/0x50 [ 639.260722][ T2996] asm_exc_invalid_op+0x1a/0x20 [ 639.260746][ T2996] RIP: 0010:__lock_acquire+0x58c/0x2050 [ 639.260771][ T2996] Code: 00 00 83 3d 25 c7 ac 0e 00 75 23 90 48 c7 c7 60 c9 0a 8c 48 c7 c6 00 cc 0a 8c e8 3f 7f e5 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 639.260788][ T2996] RSP: 0018:ffffc90009e673f0 EFLAGS: 00010046 [ 639.260804][ T2996] RAX: f48febd04b59f600 RBX: 000000000000129c RCX: ffff88802f233c00 [ 639.260819][ T2996] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 639.260831][ T2996] RBP: 0000000000000014 R08: ffffffff8155e402 R09: 1ffffffff1d02660 [ 639.260845][ T2996] R10: dffffc0000000000 R11: fffffbfff1d02661 R12: ffff88802f233c00 [ 639.260860][ T2996] R13: 000000000000129c R14: 1ffff11005e468f4 R15: ffff88802f2347a0 [ 639.260876][ T2996] ? __warn_printk+0x292/0x360 [ 639.260904][ T2996] lock_acquire+0x1ed/0x550 [ 639.260926][ T2996] ? down+0x39/0xc0 [ 639.260945][ T2996] ? ib_device_get_by_netdev+0x85/0x5e0 [ 639.260967][ T2996] ? __pfx_lock_acquire+0x10/0x10 [ 639.260998][ T2996] _raw_spin_lock_irqsave+0xd5/0x120 [ 639.261020][ T2996] ? down+0x39/0xc0 [ 639.261037][ T2996] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 639.261064][ T2996] down+0x39/0xc0 [ 639.261082][ T2996] __dev_close_many+0x107/0x300 [ 639.261105][ T2996] ? __pfx___dev_close_many+0x10/0x10 [ 639.261126][ T2996] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 639.261159][ T2996] dev_close_many+0x24e/0x4c0 [ 639.261181][ T2996] ? lockdep_hardirqs_on+0x99/0x150 [ 639.261205][ T2996] ? __pfx_dev_close_many+0x10/0x10 [ 639.261230][ T2996] unregister_netdevice_many_notify+0x530/0x1da0 [ 639.261256][ T2996] ? net_generic+0x1f/0x240 [ 639.261281][ T2996] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 639.261304][ T2996] ? unregister_netdevice_queue+0x26b/0x370 [ 639.261324][ T2996] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 639.261347][ T2996] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 639.261370][ T2996] cleanup_net+0x75d/0xcc0 [ 639.261395][ T2996] ? __pfx_cleanup_net+0x10/0x10 [ 639.261422][ T2996] ? process_scheduled_works+0x976/0x1850 [ 639.261444][ T2996] process_scheduled_works+0xa63/0x1850 [ 639.261477][ T2996] ? __pfx_process_scheduled_works+0x10/0x10 [ 639.261503][ T2996] ? assign_work+0x364/0x3d0 [ 639.261526][ T2996] worker_thread+0x870/0xd30 [ 639.261553][ T2996] ? __kthread_parkme+0x169/0x1d0 [ 639.261578][ T2996] ? __pfx_worker_thread+0x10/0x10 [ 639.261600][ T2996] kthread+0x2f0/0x390 [ 639.261617][ T2996] ? __pfx_worker_thread+0x10/0x10 [ 639.261639][ T2996] ? __pfx_kthread+0x10/0x10 [ 639.261656][ T2996] ret_from_fork+0x4b/0x80 [ 639.261679][ T2996] ? __pfx_kthread+0x10/0x10 [ 639.261696][ T2996] ret_from_fork_asm+0x1a/0x30 [ 639.261722][ T2996] [ 639.265163][ T2996] Kernel Offset: disabled