last executing test programs: 1m21.587887368s ago: executing program 4 (id=3651): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset(&(0x7f0000000040)={0x4089, 0x3}, 0x18, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key(&(0x7f0000000000)='id_legacy\x00', 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) syz_io_uring_setup(0x4090, 0x0, &(0x7f00000006c0), &(0x7f00000001c0)) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="48c5"], 0x69) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000180)={'comedi_bond\x00', [0x4, 0xe, 0x8, 0xfffffffb, 0x1000, 0x101, 0x6623, 0x6, 0x8b, 0x0, 0xfffffffa, 0x2, 0xfffffffe, 0x8, 0x6, 0x7, 0x1, 0x7, 0x4, 0xa261, 0x10, 0x5, 0x9, 0x9, 0x5, 0x4, 0x1, 0xc005, 0x59, 0x7, 0x4]}) r9 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x2c, r9, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_DOMAIN={0xfffffffffffffdcd, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x0, 0x8, @loopback}]}, 0x2c}}, 0x0) 1m20.709223302s ago: executing program 4 (id=3655): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="02"], 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="02"], 0x10) 1m18.768479482s ago: executing program 4 (id=3660): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x20, 0xf, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x11}, 0x0, 0x0}) 1m18.442213233s ago: executing program 2 (id=3664): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x8, 0x40}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @empty}, 0x27) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b", 0x13}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r3, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xfa}], 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x3, 0x0, 0x1fc, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4000}) 1m18.216397568s ago: executing program 4 (id=3666): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40090}, 0x14) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) socket(0x25, 0x803, 0xffffff00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x2}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) lseek(0xffffffffffffffff, 0x8, 0x0) io_pgetevents(0x0, 0x4, 0xa, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x4]}, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 1m16.939169106s ago: executing program 2 (id=3670): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="02"], 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="02"], 0x10) 1m16.561837171s ago: executing program 2 (id=3671): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0x10000, 0x4) 1m15.976419215s ago: executing program 2 (id=3674): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c00168008000f00"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 43.976823053s ago: executing program 2 (id=3674): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c00168008000f00"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 39.175247826s ago: executing program 4 (id=3666): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40090}, 0x14) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) socket(0x25, 0x803, 0xffffff00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x2}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) lseek(0xffffffffffffffff, 0x8, 0x0) io_pgetevents(0x0, 0x4, 0xa, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x4]}, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 16.20290095s ago: executing program 2 (id=3674): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c00168008000f00"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 14.532716162s ago: executing program 4 (id=3666): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40090}, 0x14) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) socket(0x25, 0x803, 0xffffff00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x2}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) lseek(0xffffffffffffffff, 0x8, 0x0) io_pgetevents(0x0, 0x4, 0xa, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x4]}, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 9.14419574s ago: executing program 0 (id=3817): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) write$dsp(r0, &(0x7f0000000200)="dce480", 0x3) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 8.541250941s ago: executing program 0 (id=3818): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x62b8, 0x4) 8.447897873s ago: executing program 0 (id=3819): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000140)={0x20, 0x3}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000500)={0x20, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 6.139025917s ago: executing program 1 (id=3823): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x84, 0x0, @rand_addr=0x8, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x4, 0x0, 0x1c}, {"7302ae64596acd1b0c85f79e959ba407dfe2680a9f3a5624b94b05eb30a8db4c40666ac03a878052cd6f34b42454ed6a1125e62675b21d5a1fba5cf3bedbddc95b7e41e2f08bc48db0daee34e764ee3ee41a0c7047"}}}}}, 0x8b) 5.180543464s ago: executing program 1 (id=3824): socket$packet(0x11, 0x2, 0x300) getsockopt(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 4.951316962s ago: executing program 3 (id=3825): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0xa8202, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x180, 0x0, 0x200, 0x0, 0x0, 0x250, 0x2e8, 0x2e8, 0x250, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x180, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0xffff, 0xf5f}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @empty, [], [], 'ip6_vti0\x00', 'veth0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 4.395572506s ago: executing program 0 (id=3826): syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20048800) syz_io_uring_setup(0x2287, 0x0, &(0x7f0000000080), 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 3.607677459s ago: executing program 1 (id=3827): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() timer_create(0x7, 0x0, 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000000206010100000000000000000500000005000400000000000900020073797e31000000000500010007000000050005000a000000140007800800114000000000050015000000000016000300686173683a6e65742c706f72742c6e6576000000854edca7df7c8482b7b46acce8"], 0x64}}, 0x0) socket(0x11, 0x80a, 0x1) syz_clone(0x10022000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000500)="d1bc900d8a00c336af2a52816b757b56260c0944c4f341e9c85c040cff9c5cb201188344ec2fc3fffae0c36426d9228eba2b3c8b42a11f14833b25ea6bd3247a6b565adec5c3a506f5018d06d35efdbb76355936726d1060e638d7e8038ab2e6a23d5c4e1d00d5e8e0b94a252398a320916396ce6999aa2c04557443ff35fd4f7b6a2a2c4717dd2840936d0c43556b3e98f3cb949293cae52be2488aad3b51be28d5751ffa75c3e2fd85e7044b798fe8cb4c4d14f11f4465acc5507d1e3176218958d23fff776ff00f0afb37cd50d13dbf57db8b0d743b59779a6f8008c1e0d354d666417953545575356d5618b956117d1314e5") creat(&(0x7f0000000000)='./bus\x00', 0x0) socket$xdp(0x2c, 0x3, 0x0) 2.881354217s ago: executing program 0 (id=3828): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d0000090401010202"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000080)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.537247912s ago: executing program 3 (id=3829): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x62b8, 0x4) 2.310817977s ago: executing program 3 (id=3830): syz_usb_connect$cdc_ecm(0x0, 0x5a, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x7, 0x1, {0x0}}) 1.915341587s ago: executing program 1 (id=3831): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.730871481s ago: executing program 1 (id=3832): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='smbus_result\x00', r1, 0x0, 0x6}, 0x18) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x9, "90f541a5e64f61c7b2986eb5e52829e7cb839300"}}) fcntl$setownex(r1, 0xf, 0x0) ioctl$CEC_ADAP_G_PHYS_ADDR(0xffffffffffffffff, 0x80026101, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) r4 = socket$kcm(0x2d, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x50, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_settime(r5, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) close(r4) 1.204719648s ago: executing program 3 (id=3833): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) sendmsg$kcm(r0, 0x0, 0x800) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x894b, 0x0) 1.074647977s ago: executing program 3 (id=3834): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x1, 0xf0, 0x4}, 0xff}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r2, &(0x7f00000004c0)={0x1d, r3, 0x0, {0x0, 0x0, 0x1}, 0xfe}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r5, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 1.040882792s ago: executing program 1 (id=3835): r0 = syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_ep_read(r0, 0x80, 0xc4, &(0x7f0000000240)=""/196) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x7955, &(0x7f0000000500)={0x0, 0x8007ffd, 0x1, 0x0, 0xf5fffffd}, &(0x7f0000000040), 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 255.048937ms ago: executing program 0 (id=3836): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x6) 0s ago: executing program 3 (id=3837): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Interval 0, changing to 10 [ 1089.391079][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1089.407059][ T9] usb 1-1: string descriptor 0 read error: -22 [ 1089.414014][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1089.425061][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.520706][ T9] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1089.689572][T11284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1089.703661][T11284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1089.713112][T11284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1089.727360][T11284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1089.737875][T11284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1089.775732][ T5846] usb 1-1: USB disconnect, device number 30 [ 1089.899107][T16753] dummy0 speed is unknown, defaulting to 1000 [ 1089.991540][T16737] adutux: No device or device unplugged -19 [ 1090.317325][T16753] chnl_net:caif_netlink_parms(): no params data found [ 1090.599182][T16753] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.612336][T16753] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.626443][T16753] bridge_slave_0: entered allmulticast mode [ 1090.634572][T16753] bridge_slave_0: entered promiscuous mode [ 1090.646463][T16753] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.654172][T16753] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.661809][T16753] bridge_slave_1: entered allmulticast mode [ 1090.676457][T16753] bridge_slave_1: entered promiscuous mode [ 1090.794319][ T9] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 1090.895547][T16753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1090.932062][T16753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1090.975046][ T9] usb 2-1: config index 0 descriptor too short (expected 31, got 27) [ 1090.983668][ T9] usb 2-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1091.019317][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1091.052572][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 1091.073419][ T9] usb 2-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 1091.101336][ T9] usb 2-1: Product: syz [ 1091.118616][ T9] usb 2-1: Manufacturer: syz [ 1091.133041][ T9] usb 2-1: SerialNumber: syz [ 1091.251576][T16753] team0: Port device team_slave_0 added [ 1091.393349][T16753] team0: Port device team_slave_1 added [ 1091.660986][T16768] dummy0 speed is unknown, defaulting to 1000 [ 1091.782921][T11284] Bluetooth: hci5: command tx timeout [ 1091.997834][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1092.570042][ T9] usb 2-1: USB disconnect, device number 32 [ 1092.653265][ T9] usblp0: removed [ 1093.127784][T16753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.135070][T16753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.171707][T16753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.193233][T16753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.212820][T16753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.246467][T16753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1093.825674][T16753] hsr_slave_0: entered promiscuous mode [ 1093.848874][T16753] hsr_slave_1: entered promiscuous mode [ 1093.864454][T11284] Bluetooth: hci5: command tx timeout [ 1093.871060][T16753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1093.893023][T16753] Cannot create hsr debugfs directory [ 1095.893000][T16541] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1095.933073][T11284] Bluetooth: hci5: command tx timeout [ 1096.443676][T16753] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.512848][T16541] usb 5-1: Using ep0 maxpacket: 16 [ 1096.530967][T16541] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.554359][T16541] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1096.566253][T16541] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1096.654073][T16541] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1096.666757][T16541] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1096.682700][T16541] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1096.715357][T16541] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1096.740719][T16753] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.767726][T16541] usb 5-1: Manufacturer: syz [ 1096.880850][T16806] misc userio: The device must be registered before sending interrupts [ 1097.016104][T16541] usb 5-1: config 0 descriptor?? [ 1097.349657][T16753] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.601726][T16753] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.673254][T16812] input input17: cannot allocate more than FF_MAX_EFFECTS effects [ 1098.358259][T11284] Bluetooth: hci5: command tx timeout [ 1098.932908][T16541] rc_core: IR keymap rc-hauppauge not found [ 1098.943664][T16541] Registered IR keymap rc-empty [ 1098.958779][T16541] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1099.083226][T16541] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1099.447112][T16541] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1099.529902][T16541] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input18 [ 1099.560583][T16753] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1099.610212][T16541] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1099.614211][T16753] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1099.669461][T16541] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1099.818950][T16541] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1099.843387][T16753] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1099.869213][T16541] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1100.387830][T16541] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1100.401912][T16829] syzkaller0: entered promiscuous mode [ 1100.412035][T16829] syzkaller0: entered allmulticast mode [ 1100.423462][T16541] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1100.471619][T16541] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1100.482601][T16753] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1100.573629][T16541] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1100.598992][T16541] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1100.623055][T16541] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1100.646767][T16541] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1100.656555][T16541] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1100.709290][T16541] usb 5-1: USB disconnect, device number 44 [ 1101.017904][T16846] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1101.834660][T16852] input input19: cannot allocate more than FF_MAX_EFFECTS effects [ 1101.868391][ T24] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1102.164934][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1102.365741][T16753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1102.807265][ T24] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1102.920603][ T24] usb 5-1: config 0 has no interface number 0 [ 1102.930371][ T24] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1102.941694][ T24] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1102.953264][ T24] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1102.962411][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1102.980783][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.988689][T16753] 8021q: adding VLAN 0 to HW filter on device team0 [ 1102.993422][ T24] usb 5-1: Product: syz [ 1103.013375][ T24] usb 5-1: Manufacturer: syz [ 1103.018010][ T24] usb 5-1: SerialNumber: syz [ 1103.030213][ T24] usb 5-1: config 0 descriptor?? [ 1103.044714][T13837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.051912][T13837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1103.571875][ T24] appletouch 5-1:0.85: Failed to read mode from device. [ 1103.577444][T13837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.583460][ T24] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 1103.586039][T13837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1103.617327][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 1104.179708][ T24] usb 5-1: USB disconnect, device number 45 [ 1106.511472][T16753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1107.050417][T16753] veth0_vlan: entered promiscuous mode [ 1107.112339][T16753] veth1_vlan: entered promiscuous mode [ 1107.159319][T16753] veth0_macvtap: entered promiscuous mode [ 1107.177324][T16753] veth1_macvtap: entered promiscuous mode [ 1108.238140][T16753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1108.333523][T16753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1108.460303][T16753] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.541871][ T5956] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1108.629451][T16914] comedi comedi0: Minor 14 could not be opened [ 1108.667933][T16753] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.677748][T16753] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.693801][T16753] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.856557][ T5956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.977343][ T5956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.039223][ T5956] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1109.051830][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.092146][ T5956] usb 2-1: config 0 descriptor?? [ 1109.205575][T13835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.246299][T13835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.291983][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.325656][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.550233][ T5956] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 1109.631485][ T5956] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 1109.706831][ T5956] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 1109.745132][ T43] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1109.780249][ T5956] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 1109.851204][ T5956] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 1109.973949][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 1110.024516][ T43] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1110.046555][ T5956] playstation 0003:054C:0DF2.0017: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 1111.183056][ T43] usb 3-1: config 0 has no interface number 0 [ 1111.189307][ T43] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1111.432955][ T43] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1111.443686][ T43] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1111.454092][ T43] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1111.463222][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.471330][ T43] usb 3-1: Product: syz [ 1111.480617][ T43] usb 3-1: Manufacturer: syz [ 1111.486541][ T43] usb 3-1: SerialNumber: syz [ 1111.496245][ T43] usb 3-1: config 0 descriptor?? [ 1111.523443][ T5956] playstation 0003:054C:0DF2.0017: Failed to retrieve feature with reportID 9: -71 [ 1111.533960][ T5956] playstation 0003:054C:0DF2.0017: Failed to retrieve DualSense pairing info: -71 [ 1111.544169][ T5956] playstation 0003:054C:0DF2.0017: Failed to get MAC address from DualSense [ 1111.557071][ T5956] playstation 0003:054C:0DF2.0017: Failed to create dualsense. [ 1111.567614][ T5956] playstation 0003:054C:0DF2.0017: probe with driver playstation failed with error -71 [ 1111.582525][ T5956] usb 2-1: USB disconnect, device number 33 [ 1111.630166][T16929] fido_id[16929]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1111.839601][ T43] appletouch 3-1:0.85: Failed to read mode from device. [ 1111.871826][ T43] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 1111.937463][ T43] usb 3-1: USB disconnect, device number 14 [ 1112.138555][T16937] 9p: Unknown Cache mode or invalid value fscach [ 1113.053425][ T5846] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1113.392817][ T5846] usb 2-1: Using ep0 maxpacket: 8 [ 1113.444850][T16951] comedi comedi0: Minor 14 could not be opened [ 1113.538975][ T5846] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1113.570520][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.601042][ T5846] usb 2-1: Product: syz [ 1113.611371][ T5846] usb 2-1: Manufacturer: syz [ 1113.622927][ T5846] usb 2-1: SerialNumber: syz [ 1113.680796][ T5846] usb 2-1: config 0 descriptor?? [ 1113.724203][ T44] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.918382][ T5846] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1113.967126][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1113.992904][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1114.010095][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1114.037080][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1114.051766][ T44] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.075393][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1114.206059][T16957] dummy0 speed is unknown, defaulting to 1000 [ 1114.349174][ T44] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.538596][ T5846] usb write operation failed. (-71) [ 1114.850563][ T5846] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1114.880982][ T5846] dvbdev: DVB: registering new adapter (Terratec H7) [ 1115.018623][ T5846] usb 2-1: media controller created [ 1115.032928][ T5846] usb read operation failed. (-71) [ 1115.041473][ T5846] usb write operation failed. (-71) [ 1115.064331][ T5846] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1115.301244][ T44] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.605602][ T5846] usb 2-1: USB disconnect, device number 34 [ 1115.778747][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.172864][ T5853] Bluetooth: hci0: command tx timeout [ 1116.290371][T16982] ALSA: mixer_oss: invalid index 40000 [ 1116.532335][T16957] chnl_net:caif_netlink_parms(): no params data found [ 1117.142675][ T44] bridge_slave_0: left allmulticast mode [ 1117.243513][ T44] bridge_slave_0: left promiscuous mode [ 1117.289682][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.837886][T17006] comedi comedi0: Minor 14 could not be opened [ 1118.260219][ T5853] Bluetooth: hci0: command tx timeout [ 1119.372364][T17024] 9p: Unknown Cache mode or invalid value fscach [ 1119.383198][ T44] dvmrp1 (unregistering): left allmulticast mode [ 1119.835725][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1119.852428][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1119.901161][ T44] bond0 (unregistering): Released all slaves [ 1119.989663][T17003] vlan0: entered promiscuous mode [ 1120.009887][T17003] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1120.076053][T17003] vlan0: entered allmulticast mode [ 1120.126021][T17003] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1120.332908][ T5853] Bluetooth: hci0: command tx timeout [ 1120.411230][T16957] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.411293][ T44] tipc: Left network mode [ 1120.673713][T16957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.681181][T16957] bridge_slave_0: entered allmulticast mode [ 1120.691403][T16957] bridge_slave_0: entered promiscuous mode [ 1120.743799][ T977] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1122.116215][ T44] IPVS: stopping master sync thread 8476 ... [ 1122.195377][T16957] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.205756][ T977] usb 3-1: Using ep0 maxpacket: 8 [ 1122.211347][T16957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.230460][ T977] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1122.244828][T16957] bridge_slave_1: entered allmulticast mode [ 1122.250842][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.273194][T16957] bridge_slave_1: entered promiscuous mode [ 1122.279059][ T977] usb 3-1: Product: syz [ 1122.293561][ T977] usb 3-1: Manufacturer: syz [ 1122.317773][ T977] usb 3-1: SerialNumber: syz [ 1122.386535][ T977] usb 3-1: config 0 descriptor?? [ 1122.417402][ T5853] Bluetooth: hci0: command tx timeout [ 1122.678270][ T977] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1125.186832][ T977] usb write operation failed. (-71) [ 1125.221951][ T977] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1125.273697][ T977] dvbdev: DVB: registering new adapter (Terratec H7) [ 1125.322877][ T977] usb 3-1: media controller created [ 1125.368390][ T977] usb read operation failed. (-71) [ 1125.448634][ T977] usb write operation failed. (-71) [ 1125.545147][T16957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1125.567061][ T977] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1125.635574][ T977] usb 3-1: USB disconnect, device number 15 [ 1126.993985][T17079] comedi comedi0: Minor 14 could not be opened [ 1127.322799][T17073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3175'. [ 1127.393400][T16957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1128.817528][T17101] 9pnet_fd: Insufficient options for proto=fd [ 1129.148323][T16957] team0: Port device team_slave_0 added [ 1129.301339][T16957] team0: Port device team_slave_1 added [ 1129.522853][ T44] hsr_slave_0: left promiscuous mode [ 1129.564935][ T44] hsr_slave_1: left promiscuous mode [ 1129.599406][ T977] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1129.948244][ T977] usb 3-1: Using ep0 maxpacket: 8 [ 1129.989161][ T44] veth1_vlan: left promiscuous mode [ 1130.062263][ T977] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1130.108073][ T44] veth0_vlan: left promiscuous mode [ 1130.121448][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.150580][ T977] usb 3-1: Product: syz [ 1130.160702][ T977] usb 3-1: Manufacturer: syz [ 1130.177518][ T977] usb 3-1: SerialNumber: syz [ 1130.205561][ T977] usb 3-1: config 0 descriptor?? [ 1130.434906][ T977] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1131.040566][ T977] usb write operation failed. (-71) [ 1131.173103][ T977] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1131.183909][ T977] dvbdev: DVB: registering new adapter (Terratec H7) [ 1131.193170][ T977] usb 3-1: media controller created [ 1131.198963][ T977] usb read operation failed. (-71) [ 1131.219645][ T977] usb write operation failed. (-71) [ 1131.249699][ T977] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1131.262271][ T977] usb 3-1: USB disconnect, device number 16 [ 1131.608192][T17120] comedi comedi0: Minor 14 could not be opened [ 1133.143046][T17128] comedi comedi0: Minor 14 could not be opened [ 1134.830075][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1134.880759][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1135.157981][T16541] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1135.324749][T16957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1135.331776][T16957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1135.332820][T16541] usb 4-1: Using ep0 maxpacket: 32 [ 1135.366012][T16957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1135.369668][T16541] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1135.506169][T16541] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.514409][T16957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1135.532329][T16957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1135.542776][T16541] usb 4-1: Product: syz [ 1135.573966][T16541] usb 4-1: Manufacturer: syz [ 1135.578633][T16541] usb 4-1: SerialNumber: syz [ 1135.614150][T16541] usb 4-1: config 0 descriptor?? [ 1135.652427][T16541] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1135.680955][T16957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1136.148482][T16957] hsr_slave_0: entered promiscuous mode [ 1136.157167][T16957] hsr_slave_1: entered promiscuous mode [ 1136.183646][T16957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1136.204721][T16957] Cannot create hsr debugfs directory [ 1136.242317][ T5956] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1136.615630][T17161] 9pnet_fd: Insufficient options for proto=fd [ 1136.802927][ T5956] usb 3-1: Using ep0 maxpacket: 8 [ 1137.207791][ T5956] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1137.284532][T17170] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1138.294855][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.456716][T16541] gspca_stk1135: reg_w 0x200 err -110 [ 1138.463504][T16541] gspca_stk1135: serial bus timeout: status=0x00 [ 1138.528366][T16541] gspca_stk1135: Sensor write failed [ 1138.541607][ T5956] usb 3-1: Product: syz [ 1138.552849][T16541] gspca_stk1135: serial bus timeout: status=0x00 [ 1138.559392][ T5956] usb 3-1: Manufacturer: syz [ 1138.564742][T16541] gspca_stk1135: Sensor write failed [ 1138.570202][ T5956] usb 3-1: SerialNumber: syz [ 1138.582374][T16541] gspca_stk1135: serial bus timeout: status=0x00 [ 1138.601898][ T5956] usb 3-1: config 0 descriptor?? [ 1138.613699][T16541] gspca_stk1135: Sensor read failed [ 1138.688274][T16541] gspca_stk1135: serial bus timeout: status=0x00 [ 1138.805582][T17177] comedi comedi0: Minor 14 could not be opened [ 1139.244099][ T5956] usb read operation failed. (-71) [ 1139.249284][T16541] gspca_stk1135: Sensor read failed [ 1139.361967][T16541] gspca_stk1135: Detected sensor type unknown (0x0) [ 1139.372844][ T5956] usb write operation failed. (-71) [ 1139.446747][T16541] gspca_stk1135: serial bus timeout: status=0x00 [ 1139.454856][ T5956] usb write operation failed. (-71) [ 1139.486127][ T5956] usb write operation failed. (-71) [ 1139.498886][T16541] gspca_stk1135: Sensor read failed [ 1139.514223][ T5956] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 1139.524926][T16541] gspca_stk1135: serial bus timeout: status=0x00 [ 1139.542041][ T5956] usb 3-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1140.301578][T16541] gspca_stk1135: Sensor read failed [ 1140.376789][T16541] gspca_stk1135: serial bus timeout: status=0x00 [ 1140.399252][ T5956] usb 3-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1140.439848][T16541] gspca_stk1135: Sensor write failed [ 1140.486768][T16541] gspca_stk1135: serial bus timeout: status=0x00 [ 1140.502825][T16541] gspca_stk1135: Sensor write failed [ 1140.520661][T16541] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 1140.589751][T16541] usb 4-1: USB disconnect, device number 33 [ 1142.161783][T16957] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1142.625465][T16957] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1142.692702][T16957] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1142.907720][T17215] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1143.146861][T16957] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1143.562960][T17232] comedi comedi0: Minor 14 could not be opened [ 1143.812823][T16541] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1143.907980][T16957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1144.014140][T16957] 8021q: adding VLAN 0 to HW filter on device team0 [ 1144.023197][T16541] usb 4-1: Using ep0 maxpacket: 8 [ 1144.055543][T16541] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1144.083278][T16541] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.101872][T13848] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.109071][T13848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1144.116884][T16541] usb 4-1: Product: syz [ 1144.121332][T16541] usb 4-1: Manufacturer: syz [ 1144.128649][T16541] usb 4-1: SerialNumber: syz [ 1144.161316][T13848] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.168567][T13848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1144.184431][T16541] usb 4-1: config 0 descriptor?? [ 1144.433873][T16541] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1145.076435][T16541] usb write operation failed. (-71) [ 1145.488236][T16541] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1145.499138][T16541] dvbdev: DVB: registering new adapter (Terratec H7) [ 1145.507225][T16541] usb 4-1: media controller created [ 1145.523082][T16541] usb read operation failed. (-71) [ 1145.528659][T16541] usb write operation failed. (-71) [ 1145.547480][T16541] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1145.573565][T16541] usb 4-1: USB disconnect, device number 34 [ 1147.161154][T17259] block nbd0: shutting down sockets [ 1148.129717][T16957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1149.495988][T17293] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd3": -EINTR [ 1151.148437][T17316] ALSA: mixer_oss: invalid index 40000 [ 1152.014512][T16957] veth0_vlan: entered promiscuous mode [ 1152.065135][T16957] veth1_vlan: entered promiscuous mode [ 1152.547483][T17335] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1153.471029][T17339] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1154.320546][T16957] veth0_macvtap: entered promiscuous mode [ 1154.350651][T16957] veth1_macvtap: entered promiscuous mode [ 1154.477133][T16957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1154.554290][T16957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1154.601833][T16957] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.637141][T16957] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.692318][T16957] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.721066][T16957] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.845146][ T30] audit: type=1800 audit(1752158592.115:1434): pid=17359 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3237" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1155.378466][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.385128][T17361] block nbd1: shutting down sockets [ 1155.453298][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.631683][ T1312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.652047][ T1312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1158.292387][T17385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3242'. [ 1159.075572][ T43] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1159.529351][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1159.634600][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1159.657829][ T43] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1159.696745][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.724428][ T43] usb 5-1: config 0 descriptor?? [ 1159.908105][T11284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1159.919336][T11284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1159.929645][T11284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1159.957636][T11284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1159.968503][T11284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1160.064114][T13827] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.263718][ T43] playstation 0003:054C:0DF2.0018: unknown main item tag 0x0 [ 1160.278738][ T43] playstation 0003:054C:0DF2.0018: unknown main item tag 0x0 [ 1160.288455][ T43] playstation 0003:054C:0DF2.0018: unknown main item tag 0x0 [ 1160.302633][ T43] playstation 0003:054C:0DF2.0018: unknown main item tag 0x0 [ 1160.324792][ T43] playstation 0003:054C:0DF2.0018: unknown main item tag 0x0 [ 1160.330491][T13827] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.353016][ T43] playstation 0003:054C:0DF2.0018: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 1160.380540][T17417] dummy0 speed is unknown, defaulting to 1000 [ 1160.473619][T17429] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3249'. [ 1160.474014][ T43] playstation 0003:054C:0DF2.0018: Invalid reportID received, expected 9 got 152 [ 1160.521425][ T43] playstation 0003:054C:0DF2.0018: Failed to retrieve DualSense pairing info: -22 [ 1160.551552][ T43] playstation 0003:054C:0DF2.0018: Failed to get MAC address from DualSense [ 1160.603230][ T43] playstation 0003:054C:0DF2.0018: Failed to create dualsense. [ 1160.693559][ T43] playstation 0003:054C:0DF2.0018: probe with driver playstation failed with error -22 [ 1160.787687][ T9] usb 5-1: USB disconnect, device number 46 [ 1160.806158][T13827] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.001114][T13827] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.106226][T17435] syzkaller0: entered promiscuous mode [ 1161.111747][T17435] syzkaller0: entered allmulticast mode [ 1161.937423][T17417] chnl_net:caif_netlink_parms(): no params data found [ 1162.013128][T11284] Bluetooth: hci1: command tx timeout [ 1162.882367][T13827] bridge_slave_0: left allmulticast mode [ 1162.938862][T13827] bridge_slave_0: left promiscuous mode [ 1162.961794][T13827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.122844][T11284] Bluetooth: hci1: command tx timeout [ 1166.236207][T11284] Bluetooth: hci1: command tx timeout [ 1166.409257][T17494] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1167.740567][T13827] dvmrp1 (unregistering): left allmulticast mode [ 1167.743928][T17501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3264'. [ 1168.264053][ T5853] Bluetooth: hci1: command tx timeout [ 1168.892483][T13827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1168.937178][T13827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1168.957747][T13827] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1168.990488][T13827] bond0 (unregistering): Released all slaves [ 1169.437447][T11284] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1170.572033][T13827] tipc: Disabling bearer [ 1170.596202][T13827] tipc: Left network mode [ 1170.623921][T17417] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.640251][T17417] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.669467][T17417] bridge_slave_0: entered allmulticast mode [ 1170.714469][T17417] bridge_slave_0: entered promiscuous mode [ 1170.740483][T17417] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.773895][T17417] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.798881][T17417] bridge_slave_1: entered allmulticast mode [ 1170.875153][T17417] bridge_slave_1: entered promiscuous mode [ 1171.353878][T17546] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1171.784882][T17417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1172.118692][T17417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1172.660630][T17561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3276'. [ 1172.889184][T17563] comedi comedi0: Minor 14 could not be opened [ 1173.280929][T17417] team0: Port device team_slave_0 added [ 1173.319063][T17417] team0: Port device team_slave_1 added [ 1175.184755][T13827] hsr_slave_0: left promiscuous mode [ 1175.878187][T13827] hsr_slave_1: left promiscuous mode [ 1175.895718][T13827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1175.913684][T13827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1175.979534][T13827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1176.013774][T13827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1176.244212][T13827] veth1_macvtap: left promiscuous mode [ 1176.877479][T13827] veth0_macvtap: left promiscuous mode [ 1176.906988][T13827] veth1_vlan: left promiscuous mode [ 1176.912402][T13827] veth0_vlan: left promiscuous mode [ 1177.216349][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.844270][T17615] comedi comedi0: Minor 14 could not be opened [ 1178.441280][ T30] audit: type=1800 audit(1752158615.705:1435): pid=17620 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3290" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1179.571378][T13827] team0 (unregistering): Port device team_slave_1 removed [ 1179.616601][T13827] team0 (unregistering): Port device team_slave_0 removed [ 1180.201045][T17417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1180.219939][T17417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1180.259355][T17417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1180.282379][ T977] dummy0 speed is unknown, defaulting to 1000 [ 1180.289922][ T977] infiniband syz2: ib_query_port failed (-19) [ 1180.383056][T17417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1180.415136][T17417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1180.455670][T17417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1180.684223][T17417] hsr_slave_0: entered promiscuous mode [ 1180.754478][T17417] hsr_slave_1: entered promiscuous mode [ 1181.159707][T17417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1181.169600][T17417] Cannot create hsr debugfs directory [ 1182.680515][T17668] comedi comedi0: Minor 14 could not be opened [ 1183.205111][T17675] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1183.652886][T13837] bridge_slave_0: left allmulticast mode [ 1183.720978][T13837] bridge_slave_0: left promiscuous mode [ 1183.786489][T13837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.708364][T13837] team0: Port device geneve0 removed [ 1185.894086][T13837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1185.909364][T13837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1185.925641][T13837] bond0 (unregistering): Released all slaves [ 1186.587970][T17712] comedi comedi0: Minor 14 could not be opened [ 1188.276174][T13837] tipc: Left network mode [ 1189.058421][T17417] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1189.101042][T17746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1189.177395][T17417] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1189.363779][T17752] comedi comedi0: Minor 14 could not be opened [ 1189.590092][T17417] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1189.624541][T17417] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1191.224111][T13837] hsr_slave_0: left promiscuous mode [ 1191.329359][T13837] hsr_slave_1: left promiscuous mode [ 1191.405294][T13837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1191.480848][T13837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1192.744904][T13837] team0 (unregistering): Port device team_slave_1 removed [ 1192.787216][T13837] team0 (unregistering): Port device team_slave_0 removed [ 1193.263025][T17791] vlan2: entered promiscuous mode [ 1193.268111][T17791] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1193.303078][T17791] vlan2: entered allmulticast mode [ 1193.308213][T17791] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1194.150231][T17417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1194.214617][T17417] 8021q: adding VLAN 0 to HW filter on device team0 [ 1194.383513][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.390652][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1195.267037][T17818] comedi comedi0: Minor 14 could not be opened [ 1195.277536][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.284966][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1196.120755][T17417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1197.936780][T17834] Can't find ip_set type hash:net,port,nev [ 1198.215545][T17417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1198.330918][T17417] veth0_vlan: entered promiscuous mode [ 1198.364217][T17417] veth1_vlan: entered promiscuous mode [ 1198.637561][T17417] veth0_macvtap: entered promiscuous mode [ 1198.875728][T17417] veth1_macvtap: entered promiscuous mode [ 1199.111929][T17417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1199.158547][T17417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1199.194650][T17417] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.223941][T17417] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.278639][T17417] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.302389][T17417] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.548543][T17866] input input24: cannot allocate more than FF_MAX_EFFECTS effects [ 1200.321594][T13837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1200.333900][T13837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1200.583889][T13835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1200.610312][T13835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.815878][ T5956] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1202.852993][ T5956] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 1202.927657][ T5956] usb 3-1: USB disconnect, device number 17 [ 1204.874979][T11284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1204.884711][T11284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1204.893404][T11284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1204.902505][T11284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1204.910874][T11284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1205.856093][ T1312] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.079501][ T1312] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.972886][T11284] Bluetooth: hci2: command tx timeout [ 1207.306146][ T1312] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.589107][ T1312] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.707653][T17915] chnl_net:caif_netlink_parms(): no params data found [ 1209.052932][T11284] Bluetooth: hci2: command tx timeout [ 1210.289597][T17915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.297891][T17915] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.590361][T17915] bridge_slave_0: entered allmulticast mode [ 1210.724020][T17915] bridge_slave_0: entered promiscuous mode [ 1210.976296][T17915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.013091][T17915] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.020344][T17915] bridge_slave_1: entered allmulticast mode [ 1211.057624][T17915] bridge_slave_1: entered promiscuous mode [ 1211.134797][ T5893] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1211.213475][T11284] Bluetooth: hci2: command tx timeout [ 1211.403095][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 1211.430061][ T5893] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.097609][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1212.256028][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1212.279620][ T5893] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1212.402792][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1212.541862][T17915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1212.556791][ T5893] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1212.589831][ T5893] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1212.624270][ T5893] usb 3-1: Manufacturer: syz [ 1212.629209][ T1312] bridge_slave_0: left allmulticast mode [ 1212.641012][ T5893] usb 3-1: config 0 descriptor?? [ 1212.649488][ T1312] bridge_slave_0: left promiscuous mode [ 1212.661411][ T1312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.093354][ T5893] rc_core: IR keymap rc-hauppauge not found [ 1213.099281][ T5893] Registered IR keymap rc-empty [ 1213.108295][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1213.165313][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1213.253624][ T5893] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1213.281040][ T5893] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input25 [ 1213.300084][ T5853] Bluetooth: hci2: command tx timeout [ 1213.357325][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1213.413285][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1213.474791][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1213.520254][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1213.626031][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1213.992480][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1214.044757][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1214.082906][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1214.144303][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1214.191753][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1214.236110][ T5893] mceusb 3-1:0.0: Registered Є with mce emulator interface version 1 [ 1214.264314][ T5893] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1214.298079][ T5893] usb 3-1: USB disconnect, device number 18 [ 1215.155230][ T5853] Bluetooth: hci5: command 0x0406 tx timeout [ 1215.514143][T18017] comedi comedi0: Minor 14 could not be opened [ 1217.863336][T18033] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1217.869914][T18033] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1217.948261][T18033] vhci_hcd vhci_hcd.0: Device attached [ 1218.244568][ T5893] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 1218.359066][T18036] vhci_hcd: connection reset by peer [ 1218.370946][T13843] vhci_hcd: stop threads [ 1218.395701][T13843] vhci_hcd: release socket [ 1218.407824][T13843] vhci_hcd: disconnect device [ 1218.695517][ T1312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1219.611595][ T1312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1219.646127][ T1312] bond0 (unregistering): Released all slaves [ 1220.301259][T17915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1221.293289][ T1312] tipc: Disabling bearer [ 1221.304054][ T1312] tipc: Left network mode [ 1221.318490][T17915] team0: Port device team_slave_0 added [ 1221.329217][T17915] team0: Port device team_slave_1 added [ 1221.510774][T17915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1221.601646][T17915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1221.627700][ C1] vkms_vblank_simulate: vblank timer overrun [ 1221.807238][T17915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1222.044762][T17915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1222.054986][T17915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1222.096998][T17915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1222.432915][T18085] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1222.582628][T18093] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1222.790848][T17915] hsr_slave_0: entered promiscuous mode [ 1223.503952][T17915] hsr_slave_1: entered promiscuous mode [ 1223.510295][T17915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1223.536422][T17915] Cannot create hsr debugfs directory [ 1223.552860][ T5893] vhci_hcd: vhci_device speed not set [ 1223.894194][T18103] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1224.547336][T18112] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1224.877771][ T1312] hsr_slave_0: left promiscuous mode [ 1224.899133][ T1312] hsr_slave_1: left promiscuous mode [ 1224.924113][ T1312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1224.934987][ T1312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1224.943527][ T1312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1224.952229][ T1312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1225.004906][ T1312] veth1_vlan: left promiscuous mode [ 1225.012583][ T1312] veth0_vlan: left promiscuous mode [ 1227.567537][ T1312] team0 (unregistering): Port device team_slave_1 removed [ 1227.621582][ T1312] team0 (unregistering): Port device team_slave_0 removed [ 1231.203656][T18177] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1231.956470][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1232.956954][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1232.969957][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.991464][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1233.012979][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1233.033019][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1233.046526][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1233.073705][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1233.117791][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1233.137858][ T9] usb 3-1: Manufacturer: syz [ 1233.158375][ T9] usb 3-1: config 0 descriptor?? [ 1233.912789][ T9] rc_core: IR keymap rc-hauppauge not found [ 1233.918735][ T9] Registered IR keymap rc-empty [ 1233.934885][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1233.951479][T18208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3429'. [ 1233.983299][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1234.034352][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1234.054601][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input26 [ 1234.077704][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1234.125797][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1234.159102][T17915] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1234.167421][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1234.190375][T17915] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1234.197773][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1234.236532][T17915] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1234.252896][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1234.270145][T17915] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1234.282998][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1234.347299][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1234.797280][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1234.836910][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1234.883283][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1234.956807][ T9] mceusb 3-1:0.0: Registered Є with mce emulator interface version 1 [ 1235.036838][T17915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1235.055535][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1235.095504][T17915] 8021q: adding VLAN 0 to HW filter on device team0 [ 1235.738298][ T9] usb 3-1: USB disconnect, device number 19 [ 1235.837265][T13835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.844505][T13835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1236.026122][T13827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.033311][T13827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1237.252461][T18264] loop6: detected capacity change from 0 to 524287999 [ 1237.272820][T18264] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3441'. [ 1238.853518][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.634200][T17915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1239.713098][ T5846] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1239.774926][T17915] veth0_vlan: entered promiscuous mode [ 1239.838714][T17915] veth1_vlan: entered promiscuous mode [ 1239.878583][ T5846] usb 2-1: Using ep0 maxpacket: 16 [ 1240.079466][ T5846] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.095515][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1240.121700][T17915] veth0_macvtap: entered promiscuous mode [ 1240.132888][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1240.142623][ T5846] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1240.169117][T17915] veth1_macvtap: entered promiscuous mode [ 1240.175283][ T5846] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1240.332623][ T5846] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1240.354591][T17915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1240.362372][ T5846] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1240.378315][ T5846] usb 2-1: Manufacturer: syz [ 1240.403967][T17915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1240.414953][ T5846] usb 2-1: config 0 descriptor?? [ 1240.458315][T17915] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.473259][T17915] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.487405][T17915] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.504150][T17915] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.038117][T11284] Bluetooth: hci0: command 0x0406 tx timeout [ 1241.363490][ T5846] rc_core: IR keymap rc-hauppauge not found [ 1241.378665][ T5846] Registered IR keymap rc-empty [ 1241.397670][ T5846] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1241.463941][ T5846] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1241.488186][ T5846] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1241.502351][ T5846] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input27 [ 1241.519816][ T5846] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1241.543418][ T5846] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1241.544362][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.582973][ T5846] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1241.598585][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.632986][ T5846] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1241.673537][ T5846] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1241.688130][T13835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.704111][ T5846] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1241.725636][T13835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.741930][ T5846] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1241.795222][ T5846] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1241.852928][ T5846] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1241.892909][ T5846] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1241.926376][ T5846] mceusb 2-1:0.0: Registered Є with mce emulator interface version 1 [ 1241.965160][ T5846] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1242.031096][ T5846] usb 2-1: USB disconnect, device number 35 [ 1243.505456][T18346] ALSA: mixer_oss: invalid index 40000 [ 1246.172830][ T5853] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1246.649095][T18392] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3469'. [ 1249.451245][T18427] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1252.994525][T18471] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3491'. [ 1253.346093][T18480] dummy0 speed is unknown, defaulting to 1000 [ 1253.355677][T18480] dummy0 speed is unknown, defaulting to 1000 [ 1253.419417][T18480] dummy0 speed is unknown, defaulting to 1000 [ 1253.446788][T18487] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3494'. [ 1253.470290][T18480] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1253.880571][T18480] dummy0 speed is unknown, defaulting to 1000 [ 1254.003269][T18485] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.156886][T18480] dummy0 speed is unknown, defaulting to 1000 [ 1254.345956][T18480] dummy0 speed is unknown, defaulting to 1000 [ 1254.395223][T18480] dummy0 speed is unknown, defaulting to 1000 [ 1254.512306][T18485] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.733110][T18480] dummy0 speed is unknown, defaulting to 1000 [ 1254.883980][T18485] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.079534][T18485] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.549384][T18485] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.916392][T18485] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.038738][T18485] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.831045][T18485] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.241515][T18532] loop6: detected capacity change from 0 to 524287999 [ 1257.259200][T18532] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3507'. [ 1258.222779][T18537] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3509'. [ 1263.810305][T18575] siw: device registration error -23 [ 1263.941601][T18577] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3521'. [ 1265.792793][ T5956] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1266.547698][ T5956] usb 4-1: too many endpoints for config 0 interface 0 altsetting 1: 33, using maximum allowed: 30 [ 1266.566954][ T5956] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1266.587933][ T5956] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1266.616600][ T5956] usb 4-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 1266.640168][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.676988][ T5956] usb 4-1: config 0 descriptor?? [ 1267.307238][ T5956] logitech 0003:046D:C20A.0019: hidraw0: USB HID v8.00 Device [HID 046d:c20a] on usb-dummy_hcd.3-1/input0 [ 1267.346998][ T5956] logitech 0003:046D:C20A.0019: no inputs found [ 1267.469445][ T5893] usb 4-1: USB disconnect, device number 35 [ 1274.753634][T18660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1275.087037][T18666] netlink: 'syz.3.3543': attribute type 4 has an invalid length. [ 1275.130793][T18671] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3546'. [ 1275.171945][T18668] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3546'. [ 1275.275844][T18671] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3546'. [ 1279.692468][T18715] netlink: 'syz.4.3559': attribute type 4 has an invalid length. [ 1279.770444][T18716] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1279.881610][T18718] loop6: detected capacity change from 0 to 524287999 [ 1279.897630][T18718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3557'. [ 1282.572121][T18743] netlink: 'syz.1.3566': attribute type 29 has an invalid length. [ 1282.583381][T18743] netlink: 'syz.1.3566': attribute type 29 has an invalid length. [ 1286.301806][T18776] comedi comedi0: Minor 14 could not be opened [ 1286.712061][T18784] netlink: 'syz.2.3575': attribute type 2 has an invalid length. [ 1286.762868][T18784] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3575'. [ 1286.799150][T18784] netlink: 'syz.2.3575': attribute type 2 has an invalid length. [ 1286.828241][T18784] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3575'. [ 1287.092921][ T5920] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 1287.524540][ T5920] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1287.532125][ T5920] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1287.550079][ T5920] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1287.562222][ T5920] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1287.583277][ T5920] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1287.606651][ T5920] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1287.615231][T18794] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3580'. [ 1287.620306][ T5920] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1287.662126][ T5920] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1287.676455][ T5920] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1287.688380][ T5920] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1287.701674][T18794] openvswitch: netlink: Flow key attr not present in new flow. [ 1287.712451][ T5920] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1287.723083][ T5920] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1287.766296][ T5920] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1287.785441][ T5920] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1287.814023][ T5920] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1291.170216][ T5920] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1291.181841][T18808] tipc: Started in network mode [ 1291.196693][T18808] tipc: Node identity 168a727d4735, cluster identity 4711 [ 1291.204434][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.227346][T18808] tipc: Enabled bearer , priority 0 [ 1291.237936][ T5920] usb 4-1: can't set config #168, error -71 [ 1291.260833][ T5920] usb 4-1: USB disconnect, device number 36 [ 1291.271307][T18819] syzkaller0: entered promiscuous mode [ 1291.282780][T18819] syzkaller0: entered allmulticast mode [ 1291.312398][T18808] tipc: Resetting bearer [ 1291.346534][T18807] tipc: Resetting bearer [ 1291.406727][T18826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3589'. [ 1291.439334][T18807] tipc: Disabling bearer [ 1291.472997][T16541] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1291.654464][T16541] usb 3-1: too many endpoints for config 0 interface 0 altsetting 1: 33, using maximum allowed: 30 [ 1291.694872][T18833] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1291.772316][T16541] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1291.857843][T16541] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1291.877726][T16541] usb 3-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 1291.896314][T16541] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.059840][T16541] usb 3-1: config 0 descriptor?? [ 1292.637159][T16541] logitech 0003:046D:C20A.001A: hidraw0: USB HID v8.00 Device [HID 046d:c20a] on usb-dummy_hcd.2-1/input0 [ 1292.855182][T16541] logitech 0003:046D:C20A.001A: no inputs found [ 1293.155313][T16541] usb 3-1: USB disconnect, device number 20 [ 1294.611178][T18850] fido_id[18850]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1294.662806][ T977] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 1294.898608][ T977] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1295.731103][ T977] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1295.743282][ T977] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1295.755382][ T977] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1295.766746][ T977] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1295.851153][ T977] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1295.872761][ T977] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1295.902768][ T977] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1295.936752][ T977] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1295.948793][ T977] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1296.105787][ T977] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1296.161849][ T977] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1296.933878][ T977] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1296.990522][ T977] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1297.085436][ T977] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1297.109223][ T977] usb 1-1: string descriptor 0 read error: -71 [ 1297.117494][ T977] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1297.126817][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.171293][ T977] usb 1-1: can't set config #168, error -71 [ 1297.208990][ T977] usb 1-1: USB disconnect, device number 31 [ 1297.704630][ T977] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1298.127078][ T977] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1298.139319][ T977] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1298.754740][ T977] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1298.763894][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.784135][ T977] usb 1-1: config 0 descriptor?? [ 1298.903223][ T977] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1300.035254][ T977] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 1300.104263][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.495833][ T977] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1300.506536][ T977] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1300.519517][ T977] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1300.547165][ T977] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1300.596605][ T977] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1300.666436][ T977] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1300.713546][ T977] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1300.764623][ T977] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1300.814669][ T977] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1300.859114][ T977] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1300.901730][ T977] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1300.921881][ T977] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1300.972055][ T977] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1301.024601][ T977] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1301.058980][ T977] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1301.699877][ T977] usb 5-1: string descriptor 0 read error: -22 [ 1301.708906][ T977] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1301.738729][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.784098][ T5920] usb 1-1: USB disconnect, device number 32 [ 1301.809361][ T977] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1304.059775][ T977] usb 5-1: USB disconnect, device number 47 [ 1307.294864][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 1308.716416][T19017] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3642'. [ 1309.588079][T19032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3649'. [ 1310.196578][T19042] comedi comedi0: Minor 14 could not be opened [ 1311.955784][T19060] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3657'. [ 1313.520140][T13744] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.001196][T13744] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.197426][T13744] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.294817][T13744] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.383818][T19085] dummy0 speed is unknown, defaulting to 1000 [ 1314.616872][T19094] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1315.411745][T13744] bridge_slave_1: left allmulticast mode [ 1315.417537][T13744] bridge_slave_1: left promiscuous mode [ 1315.432925][T13744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.521026][T13744] bridge_slave_0: left allmulticast mode [ 1315.539919][T13744] bridge_slave_0: left promiscuous mode [ 1315.547297][T13744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.656838][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1315.666899][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1315.675591][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1315.699964][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1315.710210][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1316.298272][T11284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1316.326941][T11284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1316.341337][T11284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1316.349426][T11284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1316.359228][T11284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1316.627353][T13744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1316.660467][T13744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1316.689155][T13744] bond0 (unregistering): Released all slaves [ 1316.877315][T19104] dummy0 speed is unknown, defaulting to 1000 [ 1316.884186][T13744] tipc: Left network mode [ 1317.013412][T19116] dummy0 speed is unknown, defaulting to 1000 [ 1317.530601][T13744] hsr_slave_0: left promiscuous mode [ 1317.559040][T13744] hsr_slave_1: left promiscuous mode [ 1317.574234][T13744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1317.592997][T13744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1317.618445][T13744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1317.633128][T13744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1317.753384][T13744] veth1_macvtap: left promiscuous mode [ 1317.774262][T13744] veth0_macvtap: left promiscuous mode [ 1317.774984][ T5853] Bluetooth: hci0: command tx timeout [ 1317.788173][T13744] veth1_vlan: left promiscuous mode [ 1318.085668][T13744] veth0_vlan: left promiscuous mode [ 1318.412913][ T5853] Bluetooth: hci3: command tx timeout [ 1318.498909][T19139] loop6: detected capacity change from 0 to 63 [ 1318.512057][T19139] Buffer I/O error on dev loop6, logical block 0, async page read [ 1318.527198][T19139] Buffer I/O error on dev loop6, logical block 1, async page read [ 1318.538728][T19139] Buffer I/O error on dev loop6, logical block 2, async page read [ 1318.637558][T19139] Buffer I/O error on dev loop6, logical block 3, async page read [ 1318.668795][T17197] Buffer I/O error on dev loop6, logical block 0, async page read [ 1319.232922][T17197] Buffer I/O error on dev loop6, logical block 1, async page read [ 1319.253086][T17197] Buffer I/O error on dev loop6, logical block 2, async page read [ 1319.266941][T17197] Buffer I/O error on dev loop6, logical block 3, async page read [ 1319.280990][T19139] Buffer I/O error on dev loop6, logical block 0, async page read [ 1319.298162][T19139] Buffer I/O error on dev loop6, logical block 1, async page read [ 1319.562186][T19152] siw: device registration error -23 [ 1319.867289][ T5853] Bluetooth: hci0: command tx timeout [ 1320.060596][T19158] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3683'. [ 1320.495097][ T5853] Bluetooth: hci3: command tx timeout [ 1321.230206][T13744] team0 (unregistering): Port device team_slave_1 removed [ 1321.350844][T13744] team0 (unregistering): Port device team_slave_0 removed [ 1321.942768][ T5853] Bluetooth: hci0: command tx timeout [ 1322.764855][ T5853] Bluetooth: hci3: command tx timeout [ 1322.962874][T19156] tipc: Started in network mode [ 1322.981840][T19156] tipc: Node identity e60db3cc8dcf, cluster identity 4711 [ 1323.001801][T19156] tipc: Enabled bearer , priority 0 [ 1323.220834][T19159] syzkaller0: entered promiscuous mode [ 1323.229735][T19159] syzkaller0: entered allmulticast mode [ 1323.274693][T19151] tipc: Resetting bearer [ 1323.350381][T19195] loop6: detected capacity change from 0 to 524287999 [ 1323.366227][T19195] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3692'. [ 1323.709934][T19151] tipc: Disabling bearer [ 1324.024829][ T5853] Bluetooth: hci0: command tx timeout [ 1324.151931][T19207] program syz.3.3695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1324.467192][T19116] chnl_net:caif_netlink_parms(): no params data found [ 1324.812626][T19230] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1324.823518][ T5853] Bluetooth: hci3: command tx timeout [ 1325.438932][T19104] chnl_net:caif_netlink_parms(): no params data found [ 1327.569317][T19116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.602001][T19116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.642168][T19116] bridge_slave_0: entered allmulticast mode [ 1327.654831][T19116] bridge_slave_0: entered promiscuous mode [ 1327.786748][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 1327.841617][T13744] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.867489][T19116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.874813][T19116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.883523][T19116] bridge_slave_1: entered allmulticast mode [ 1327.891397][T19116] bridge_slave_1: entered promiscuous mode [ 1327.939836][T19253] tipc: Started in network mode [ 1327.944987][T19253] tipc: Node identity 0a6f0e513515, cluster identity 4711 [ 1327.955164][T19253] tipc: Enabled bearer , priority 0 [ 1328.027553][T19251] syzkaller0: entered promiscuous mode [ 1328.033207][T19251] syzkaller0: entered allmulticast mode [ 1328.054994][T19104] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.072498][T19104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.084096][T19104] bridge_slave_0: entered allmulticast mode [ 1328.104251][T19104] bridge_slave_0: entered promiscuous mode [ 1328.149865][T19116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1328.202745][T19116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1328.253223][T13744] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.274146][T19250] tipc: Resetting bearer [ 1328.321625][T19250] tipc: Disabling bearer [ 1328.379910][T19104] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.426726][T19104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.443003][T19104] bridge_slave_1: entered allmulticast mode [ 1328.471710][T19104] bridge_slave_1: entered promiscuous mode [ 1328.818403][T19104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1328.849963][T19116] team0: Port device team_slave_0 added [ 1328.878380][T13744] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.943158][T19104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.490622][T19116] team0: Port device team_slave_1 added [ 1329.561312][T13744] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.601835][T19292] vlan2: entered promiscuous mode [ 1329.617010][T19292] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1329.632929][T19292] vlan2: entered allmulticast mode [ 1329.650568][T19292] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1329.711075][T19104] team0: Port device team_slave_0 added [ 1329.799738][T19104] team0: Port device team_slave_1 added [ 1330.935625][T19104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1330.959834][T19104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1331.022147][T19104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1331.150255][T19116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1331.218518][T19116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1331.283203][T19116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1331.320458][T19116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1331.338794][T19116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1331.457770][T19116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1331.489398][T19104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1331.502691][T19104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1331.592741][T19104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1332.530041][T19104] hsr_slave_0: entered promiscuous mode [ 1332.564666][T19104] hsr_slave_1: entered promiscuous mode [ 1332.591351][T19104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1332.603286][T19104] Cannot create hsr debugfs directory [ 1332.671565][T19116] hsr_slave_0: entered promiscuous mode [ 1332.751277][T19116] hsr_slave_1: entered promiscuous mode [ 1332.793428][T19116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1332.837358][T19116] Cannot create hsr debugfs directory [ 1332.984894][T19319] tipc: Enabled bearer , priority 0 [ 1333.162896][T19321] syzkaller0: entered promiscuous mode [ 1333.188846][T19321] syzkaller0: entered allmulticast mode [ 1333.237786][T19314] tipc: Resetting bearer [ 1333.319103][T19314] tipc: Disabling bearer [ 1333.376577][T13744] bridge_slave_0: left allmulticast mode [ 1333.382243][T13744] bridge_slave_0: left promiscuous mode [ 1333.393043][T13744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.201303][T13744] dvmrp1 (unregistering): left allmulticast mode [ 1334.504636][T19358] ALSA: mixer_oss: invalid index 40000 [ 1335.231933][T13744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1335.280536][T13744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1335.327392][T13744] bond0 (unregistering): Released all slaves [ 1335.734010][T19363] vlan2: entered promiscuous mode [ 1335.739078][T19363] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1335.754937][T19363] vlan2: entered allmulticast mode [ 1335.760251][T19363] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1336.587100][T19372] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1336.946555][T19375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3730'. [ 1337.392067][T13744] hsr_slave_0: left promiscuous mode [ 1337.411947][T13744] hsr_slave_1: left promiscuous mode [ 1337.424400][T13744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1337.436942][T13744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1337.635622][T13744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1337.858994][T13744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1338.011761][T13744] veth1_macvtap: left promiscuous mode [ 1338.019413][T13744] veth0_macvtap: left promiscuous mode [ 1338.649040][T13744] team0 (unregistering): Port device team_slave_1 removed [ 1338.703103][T13744] team0 (unregistering): Port device team_slave_0 removed [ 1339.107538][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1339.186421][T19384] tipc: Enabling of bearer rejected, failed to enable media [ 1339.267461][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1339.312485][ T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1339.348140][ T9] usb 1-1: config 0 has no interface number 0 [ 1339.359134][ T9] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1339.388116][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1339.429268][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.447218][ T9] usb 1-1: Product: syz [ 1339.457027][ T9] usb 1-1: Manufacturer: syz [ 1339.468640][ T9] usb 1-1: SerialNumber: syz [ 1339.495287][ T9] usb 1-1: config 0 descriptor?? [ 1339.508743][ T9] smsc75xx v1.0.0 [ 1339.803060][ T5920] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1339.993304][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 1340.017700][ T5920] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1340.049970][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1340.077372][ T5920] usb 2-1: Product: syz [ 1340.086948][T19116] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1340.097360][ T5920] usb 2-1: Manufacturer: syz [ 1340.104933][ T5920] usb 2-1: SerialNumber: syz [ 1340.117042][T19116] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1340.128959][ T5920] usb 2-1: config 0 descriptor?? [ 1340.130319][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1340.158474][T19116] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1340.172689][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1340.341169][T19116] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1340.389974][ T5920] usb 2-1: USB disconnect, device number 36 [ 1340.826238][T19434] ALSA: mixer_oss: invalid index 40000 [ 1341.764577][T19116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1341.780063][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1341.814387][T19104] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1341.821469][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1341.836339][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1341.850941][T19104] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1341.859512][ T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 1341.870456][T19104] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1341.889974][T19116] 8021q: adding VLAN 0 to HW filter on device team0 [ 1341.897991][ T9] usb 1-1: USB disconnect, device number 33 [ 1341.917079][T19104] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1342.023982][T13851] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.031182][T13851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1342.053168][ T5956] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1342.063087][T13851] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.070260][T13851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1342.243573][ T5956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.268465][ T5956] usb 4-1: config 0 has no interfaces? [ 1342.278137][T19104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1342.290949][ T5956] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1342.301595][ T5956] usb 4-1: New USB device strings: Mfr=16, Product=0, SerialNumber=0 [ 1342.356725][T19104] 8021q: adding VLAN 0 to HW filter on device team0 [ 1342.364474][ T5956] usb 4-1: Manufacturer: syz [ 1342.384670][ T5956] usb 4-1: config 0 descriptor?? [ 1342.416743][T13843] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.423938][T13843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1342.464661][T13843] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.471834][T13843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1342.629347][T19104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1343.592003][T19116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1344.185953][T19116] veth0_vlan: entered promiscuous mode [ 1344.225755][T19116] veth1_vlan: entered promiscuous mode [ 1344.391263][T19116] veth0_macvtap: entered promiscuous mode [ 1344.418110][T19104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1344.446282][T19116] veth1_macvtap: entered promiscuous mode [ 1344.556006][T19116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1344.592193][T19116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1344.774783][T19485] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1345.110610][T19116] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.141891][T19116] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.162763][T19116] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.166950][ T5956] usb 4-1: USB disconnect, device number 37 [ 1345.202285][T19116] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.260179][T13827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1346.292308][T13827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1346.434114][T13851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1346.452073][T13851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1346.789367][T19104] veth0_vlan: entered promiscuous mode [ 1347.184765][T19104] veth1_vlan: entered promiscuous mode [ 1347.577789][T13849] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.682173][T19104] veth0_macvtap: entered promiscuous mode [ 1347.725329][T19104] veth1_macvtap: entered promiscuous mode [ 1347.785569][T13849] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.843396][T19104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1347.954770][T13849] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.010257][T19104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1348.052222][T19104] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.081425][T19104] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.101587][T19104] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.123056][T19104] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.266386][T13849] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.618368][T13851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.679606][T13851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1348.787471][T13744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.837387][T13744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1349.287838][T13849] bridge_slave_1: left allmulticast mode [ 1349.298462][T13849] bridge_slave_1: left promiscuous mode [ 1349.307881][T13849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.336949][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1349.370724][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1349.385236][T13849] bridge_slave_0: left allmulticast mode [ 1349.394383][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1349.405520][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1349.414973][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1349.436832][T13849] bridge_slave_0: left promiscuous mode [ 1349.442690][T13849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.459529][ T5853] Bluetooth: hci3: command tx timeout [ 1351.708829][T13849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1351.763905][T13849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1351.784785][T13849] bond0 (unregistering): Released all slaves [ 1352.354389][T19554] dummy0 speed is unknown, defaulting to 1000 [ 1352.772763][T13849] hsr_slave_0: left promiscuous mode [ 1352.784353][T13849] hsr_slave_1: left promiscuous mode [ 1352.796307][T13849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1352.854854][T13849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1352.901258][T13849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1352.938810][T13849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1352.965342][T19610] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3763'. [ 1353.053803][T13849] veth1_macvtap: left promiscuous mode [ 1353.077231][T13849] veth0_macvtap: left promiscuous mode [ 1353.105345][T13849] veth1_vlan: left promiscuous mode [ 1353.133287][T13849] veth0_vlan: left promiscuous mode [ 1353.614409][ T5853] Bluetooth: hci3: command tx timeout [ 1354.123727][T11284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1354.134552][T11284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1354.151336][T11284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1354.166095][T11284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1354.178448][T11284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1354.652750][T13849] team0 (unregistering): Port device team_slave_1 removed [ 1354.702781][T13849] team0 (unregistering): Port device team_slave_0 removed [ 1355.549255][T19632] dummy0 speed is unknown, defaulting to 1000 [ 1355.752891][T11284] Bluetooth: hci3: command tx timeout [ 1356.263036][ T5853] Bluetooth: hci0: command tx timeout [ 1356.469197][T19554] chnl_net:caif_netlink_parms(): no params data found [ 1357.580260][T19632] chnl_net:caif_netlink_parms(): no params data found [ 1357.601089][T19554] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.623615][T19554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.630874][T19554] bridge_slave_0: entered allmulticast mode [ 1357.642813][T16541] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1357.643922][T19554] bridge_slave_0: entered promiscuous mode [ 1357.698491][T19554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.708991][T19554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.717486][T19554] bridge_slave_1: entered allmulticast mode [ 1357.728951][T19554] bridge_slave_1: entered promiscuous mode [ 1357.772837][ T5853] Bluetooth: hci3: command tx timeout [ 1357.797019][T19697] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1357.832815][T16541] usb 2-1: Using ep0 maxpacket: 16 [ 1357.860839][T16541] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1357.912928][T16541] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1357.928607][T13849] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.970844][T16541] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1358.011765][T16541] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.029795][T16541] usb 2-1: Product: syz [ 1358.034226][T16541] usb 2-1: Manufacturer: syz [ 1358.038917][T16541] usb 2-1: SerialNumber: syz [ 1358.113640][T16541] usb 2-1: config 0 descriptor?? [ 1358.150542][T16541] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1358.209715][T16541] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1358.272151][T19554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1358.329460][T13849] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.340910][ T5853] Bluetooth: hci0: command tx timeout [ 1358.504072][T19554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1358.520139][T19632] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.539916][T19632] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.560547][T19632] bridge_slave_0: entered allmulticast mode [ 1358.570683][T19632] bridge_slave_0: entered promiscuous mode [ 1358.606419][T19632] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.613813][T19632] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.621215][T19632] bridge_slave_1: entered allmulticast mode [ 1358.630337][T19632] bridge_slave_1: entered promiscuous mode [ 1358.728761][T13849] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.752969][T16541] em28xx 2-1:0.0: chip ID is em2870 [ 1358.998550][ T5956] usb 2-1: USB disconnect, device number 37 [ 1359.051143][ T5956] em28xx 2-1:0.0: Disconnecting em28xx [ 1359.133904][ T5956] em28xx 2-1:0.0: Freeing device [ 1359.150899][T13849] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.259396][T19554] team0: Port device team_slave_0 added [ 1359.272537][T19554] team0: Port device team_slave_1 added [ 1359.285681][T19632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1359.300844][T19632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1359.469411][T19554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1359.476657][T19554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1359.512743][T19554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1359.556333][T19632] team0: Port device team_slave_0 added [ 1359.599886][T19632] team0: Port device team_slave_1 added [ 1359.624837][T19554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1359.641921][T19554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1359.669848][T19554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1360.017320][T19632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1360.030774][T19632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1360.060605][T19632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1360.116008][T19554] hsr_slave_0: entered promiscuous mode [ 1360.123602][T19554] hsr_slave_1: entered promiscuous mode [ 1360.135014][T19632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1360.143702][T19632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1360.176269][T19632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1360.220669][T13849] bridge_slave_1: left allmulticast mode [ 1360.227020][T13849] bridge_slave_1: left promiscuous mode [ 1360.238869][T13849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1360.255116][T13849] bridge_slave_0: left allmulticast mode [ 1360.260942][T13849] bridge_slave_0: left promiscuous mode [ 1360.267139][T13849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.412873][ T5853] Bluetooth: hci0: command tx timeout [ 1361.563749][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.196654][T13849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1362.220257][T13849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1362.230912][T13849] bond0 (unregistering): Released all slaves [ 1362.502808][ T5853] Bluetooth: hci0: command tx timeout [ 1362.522053][T19745] input input32: cannot allocate more than FF_MAX_EFFECTS effects [ 1362.567823][T19632] hsr_slave_0: entered promiscuous mode [ 1362.599077][T19632] hsr_slave_1: entered promiscuous mode [ 1362.615959][T19632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1362.637600][T19632] Cannot create hsr debugfs directory [ 1362.710726][ T977] dummy0 speed is unknown, defaulting to 1000 [ 1363.703827][T13849] hsr_slave_0: left promiscuous mode [ 1363.717427][T13849] hsr_slave_1: left promiscuous mode [ 1363.733401][T13849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1363.751315][T13849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1363.764641][T13849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1363.782364][T13849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1363.830794][T13849] veth1_macvtap: left promiscuous mode [ 1363.843430][T13849] veth0_macvtap: left promiscuous mode [ 1363.854793][T13849] veth1_vlan: left promiscuous mode [ 1363.866937][T13849] veth0_vlan: left promiscuous mode [ 1364.150539][T19768] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1364.702753][T18312] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1364.791845][T13849] team0 (unregistering): Port device team_slave_1 removed [ 1364.846926][T13849] team0 (unregistering): Port device team_slave_0 removed [ 1364.875411][T18312] usb 4-1: Using ep0 maxpacket: 32 [ 1364.892179][T18312] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1364.917691][T18312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.937474][T18312] usb 4-1: config 0 descriptor?? [ 1364.962520][T18312] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1365.953588][T19777] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3788'. [ 1367.093659][ T5956] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1367.264974][ T5956] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1367.318921][ T5956] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1367.372702][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.432884][ T5956] usb 2-1: config 0 descriptor?? [ 1367.464961][ T5956] pwc: Askey VC010 type 2 USB webcam detected. [ 1367.703354][ T5956] pwc: send_video_command error -71 [ 1367.723038][ T5956] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1367.731086][ T5956] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1368.280153][T18312] gspca_vc032x: reg_r err -110 [ 1368.358486][T18312] gspca_vc032x: I2c Bus Busy Wait 00 [ 1368.374670][ T5956] usb 2-1: USB disconnect, device number 38 [ 1368.396927][T18312] gspca_vc032x: I2c Bus Busy Wait 00 [ 1368.402253][T18312] gspca_vc032x: I2c Bus Busy Wait 00 [ 1368.430592][T18312] gspca_vc032x: I2c Bus Busy Wait 00 [ 1368.453270][T18312] gspca_vc032x: I2c Bus Busy Wait 00 [ 1368.472697][T18312] gspca_vc032x: I2c Bus Busy Wait 00 [ 1368.478100][T18312] gspca_vc032x: I2c Bus Busy Wait 00 [ 1368.499682][T18312] gspca_vc032x: I2c Bus Busy Wait 00 [ 1368.512918][T18312] gspca_vc032x: I2c Bus Busy Wait 00 [ 1368.518240][T18312] gspca_vc032x: I2c Bus Busy Wait 00 [ 1368.546552][T18312] gspca_vc032x: I2c Bus Busy Wait 00 [ 1368.551872][T18312] gspca_vc032x: I2c Bus Busy Wait 00 [ 1368.564178][T18312] gspca_vc032x: I2c Bus Busy Wait 00 [ 1368.569683][T18312] gspca_vc032x: I2c Bus Busy Wait 00 [ 1368.582662][T18312] gspca_vc032x: I2c Bus Busy Wait 00 [ 1368.587968][T18312] gspca_vc032x: I2c Bus Busy Wait 00 [ 1368.598586][T18312] gspca_vc032x: I2c Bus Busy Wait 00 [ 1368.605428][T18312] gspca_vc032x: Unknown sensor... [ 1368.610648][T18312] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 1369.022992][ T5956] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1369.264537][T19554] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1369.312377][T18312] usb 4-1: USB disconnect, device number 38 [ 1369.419709][T19554] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1369.464669][ T5956] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1369.479074][ T5956] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1369.489137][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.495207][T19554] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1369.513407][ T5956] usb 2-1: config 0 descriptor?? [ 1369.545415][ T5956] pwc: Askey VC010 type 2 USB webcam detected. [ 1369.575984][T19554] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1369.704071][T19632] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1369.717835][T19632] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1369.737046][T19632] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1369.758413][T19632] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1369.818544][T19816] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1370.020853][ T5956] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1370.096920][ T5956] pwc: recv_control_msg error -32 req 02 val 2700 [ 1370.170496][ T5956] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1370.263647][ T5956] pwc: recv_control_msg error -32 req 04 val 1000 [ 1370.289131][ T5956] pwc: recv_control_msg error -32 req 04 val 1300 [ 1370.301848][ T5956] pwc: recv_control_msg error -32 req 04 val 1400 [ 1370.312397][ T5956] pwc: recv_control_msg error -32 req 02 val 2000 [ 1370.324942][ T5956] pwc: recv_control_msg error -32 req 02 val 2100 [ 1370.332566][ T5956] pwc: recv_control_msg error -32 req 04 val 1500 [ 1370.343535][ T5956] pwc: recv_control_msg error -32 req 02 val 2500 [ 1370.361295][ T5956] pwc: recv_control_msg error -32 req 02 val 2400 [ 1370.369533][ T5956] pwc: recv_control_msg error -32 req 02 val 2600 [ 1370.383396][ T5956] pwc: recv_control_msg error -32 req 02 val 2900 [ 1370.390789][ T5956] pwc: recv_control_msg error -32 req 02 val 2800 [ 1370.404981][ T5956] pwc: recv_control_msg error -32 req 04 val 1100 [ 1370.426812][ T5956] pwc: Registered as video103. [ 1370.466120][ T5956] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input33 [ 1370.605590][T19554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1370.673549][ T5846] usb 2-1: USB disconnect, device number 39 [ 1370.714985][T19554] 8021q: adding VLAN 0 to HW filter on device team0 [ 1370.767961][T19632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1370.779477][T13827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1370.786694][T13827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1370.817049][T13827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1370.824261][T13827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1370.882278][T19554] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1370.893823][T19554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1370.947196][T19632] 8021q: adding VLAN 0 to HW filter on device team0 [ 1371.021032][T13827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.028274][T13827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1371.070985][T13827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.078197][T13827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1372.159437][T19554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1372.214613][ T5920] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1372.289946][T19554] veth0_vlan: entered promiscuous mode [ 1372.318636][T19632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1372.330914][T19554] veth1_vlan: entered promiscuous mode [ 1372.402571][T19554] veth0_macvtap: entered promiscuous mode [ 1372.411961][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 1372.438239][ T5920] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1372.451152][T19554] veth1_macvtap: entered promiscuous mode [ 1372.458062][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.478871][ T5920] usb 1-1: Product: syz [ 1372.488261][ T5920] usb 1-1: Manufacturer: syz [ 1372.495485][T19554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1372.508130][ T5920] usb 1-1: SerialNumber: syz [ 1372.525837][ T5920] usb 1-1: config 0 descriptor?? [ 1372.551752][T19554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1372.604495][T19554] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.616830][T19554] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.627811][T19554] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.638176][T19554] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.788892][ T5920] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1372.962608][T13835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1373.002471][T13835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1373.286059][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1373.307015][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1373.456059][T19632] veth0_vlan: entered promiscuous mode [ 1373.848040][T19632] veth1_vlan: entered promiscuous mode [ 1374.197830][T19632] veth0_macvtap: entered promiscuous mode [ 1374.226522][T19632] veth1_macvtap: entered promiscuous mode [ 1374.250883][T19632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1374.277638][T19632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1374.306808][T19632] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.323579][T19632] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.335130][T19632] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.345051][T19632] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.974541][ T5920] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1375.138966][ T5920] usb 1-1: USB disconnect, device number 34 [ 1375.339198][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.466674][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1375.498532][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1375.513609][ T5846] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1375.575328][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.632003][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1375.651748][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1375.684276][ T5846] usb 4-1: Using ep0 maxpacket: 32 [ 1375.728299][ T5846] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 1375.748700][ T5846] usb 4-1: config 0 has no interface number 0 [ 1375.756764][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.779061][ T5846] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1376.004377][ T5920] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1376.005252][ T5846] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1376.265760][ T5920] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1376.275172][ T5846] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1376.312695][ T5846] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1376.313401][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.342683][ T5846] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1376.354634][ T5920] usb 2-1: Product: syz [ 1376.354653][ T5920] usb 2-1: Manufacturer: syz [ 1376.354667][ T5920] usb 2-1: SerialNumber: syz [ 1376.358300][ T5920] usb 2-1: config 0 descriptor?? [ 1376.416052][ T5846] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1376.458882][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.469749][ T5846] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1376.502373][ T5846] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1376.538485][ T5846] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1376.582561][ T5846] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1376.630736][ T5846] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1376.642211][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.660977][ T5846] usb 4-1: Product: syz [ 1376.670509][ T5846] usb 4-1: Manufacturer: syz [ 1376.671546][ T5920] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1376.715318][ T5846] usb 4-1: SerialNumber: syz [ 1376.740622][ T5846] usb 4-1: config 0 descriptor?? [ 1376.777937][T19902] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1376.811711][T19902] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1376.853507][ T5846] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1376.901970][ T5846] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1376.948896][ T5846] scsi host1: microtekX6 [ 1376.952350][ T36] bridge_slave_1: left allmulticast mode [ 1376.970643][ T36] bridge_slave_1: left promiscuous mode [ 1377.009950][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.068861][ T36] bridge_slave_0: left allmulticast mode [ 1377.082059][ T36] bridge_slave_0: left promiscuous mode [ 1377.096359][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.172381][ T5846] usb 4-1: USB disconnect, device number 39 [ 1377.334130][T11284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1377.348645][T11284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1377.362347][T11284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1377.372371][T11284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1377.381969][T11284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1378.097198][ T5920] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1378.140293][ T5920] usb 2-1: USB disconnect, device number 40 [ 1378.674646][T11284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1378.712058][T11284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1378.722245][T11284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1378.748723][T11284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1378.757973][T11284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1379.010707][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1379.066683][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1379.129035][ T36] bond0 (unregistering): Released all slaves [ 1379.464195][ T5853] Bluetooth: hci0: command tx timeout [ 1380.178515][T19923] dummy0 speed is unknown, defaulting to 1000 [ 1380.824346][ T5853] Bluetooth: hci3: command tx timeout [ 1381.012696][T19939] dummy0 speed is unknown, defaulting to 1000 [ 1381.340846][ T36] hsr_slave_0: left promiscuous mode [ 1381.361011][ T36] hsr_slave_1: left promiscuous mode [ 1381.381480][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1381.397509][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1381.427858][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1381.446271][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1381.521077][ T36] veth1_macvtap: left promiscuous mode [ 1381.532962][ T5853] Bluetooth: hci0: command tx timeout [ 1381.551326][ T36] veth0_macvtap: left promiscuous mode [ 1381.560965][ T36] veth1_vlan: left promiscuous mode [ 1381.569111][ T36] veth0_vlan: left promiscuous mode [ 1382.318152][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1382.393313][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1382.896180][ T5853] Bluetooth: hci3: command tx timeout [ 1383.129859][T18312] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1383.299989][T18312] usb 1-1: Using ep0 maxpacket: 8 [ 1383.331362][T18312] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1383.381209][T18312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.511038][T18312] usb 1-1: Product: syz [ 1383.516786][T18312] usb 1-1: Manufacturer: syz [ 1383.613234][ T5853] Bluetooth: hci0: command tx timeout [ 1383.628487][T18312] usb 1-1: SerialNumber: syz [ 1383.764717][T18312] usb 1-1: config 0 descriptor?? [ 1384.189470][T18312] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1384.457889][T19939] chnl_net:caif_netlink_parms(): no params data found [ 1384.533225][T20002] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3822'. [ 1384.982785][ T5853] Bluetooth: hci3: command tx timeout [ 1385.241118][T19923] chnl_net:caif_netlink_parms(): no params data found [ 1385.325047][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.650862][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.703520][ T5853] Bluetooth: hci0: command tx timeout [ 1385.858744][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.152482][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.239264][T18312] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1386.344881][T18312] usb 1-1: USB disconnect, device number 35 [ 1386.486994][T19939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.519036][T19939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.538164][T19939] bridge_slave_0: entered allmulticast mode [ 1386.555845][T19939] bridge_slave_0: entered promiscuous mode [ 1386.574790][T19939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.602776][T19939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.610189][T19939] bridge_slave_1: entered allmulticast mode [ 1386.624489][T19939] bridge_slave_1: entered promiscuous mode [ 1386.836780][T19923] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.852956][T19923] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.866788][T19923] bridge_slave_0: entered allmulticast mode [ 1386.901018][T19923] bridge_slave_0: entered promiscuous mode [ 1386.927522][T19939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1386.980489][T19923] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.988850][T19923] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.012137][T19923] bridge_slave_1: entered allmulticast mode [ 1387.030658][T19923] bridge_slave_1: entered promiscuous mode [ 1387.062146][ T5853] Bluetooth: hci3: command tx timeout [ 1387.546026][T19939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1387.949086][T19923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1388.076687][T20037] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1388.307204][T19939] team0: Port device team_slave_0 added [ 1388.444396][T19923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1388.712188][T19939] team0: Port device team_slave_1 added [ 1388.772345][T19923] team0: Port device team_slave_0 added [ 1388.858353][ T36] bridge_slave_1: left allmulticast mode [ 1388.874907][ T36] bridge_slave_1: left promiscuous mode [ 1388.903355][ T5956] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1388.933272][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.954019][ T36] bridge_slave_0: left allmulticast mode [ 1388.959696][ T36] bridge_slave_0: left promiscuous mode [ 1388.966152][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.085575][ T5956] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.122714][ T5956] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1389.164637][ T5956] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1389.228976][ T5956] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1389.261191][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.277963][ T5956] usb 1-1: Product: syz [ 1389.282153][ T5956] usb 1-1: Manufacturer: syz [ 1389.321168][ T5956] usb 1-1: SerialNumber: syz [ 1389.372332][ T5956] cdc_mbim 1-1:1.0: skipping garbage [ 1390.302560][T20069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3834'. [ 1390.372148][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1390.386158][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1390.396776][ T36] bond0 (unregistering): Released all slaves [ 1390.413451][T19923] team0: Port device team_slave_1 added [ 1390.434996][ T5956] cdc_mbim 1-1:1.0: bind() failure [ 1390.450852][ T5956] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 1390.476304][ T5956] usb 1-1: USB disconnect, device number 36 [ 1390.552979][T18312] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 1390.580332][T19939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1390.588571][T19939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.614450][ C0] vkms_vblank_simulate: vblank timer overrun [ 1390.620630][T19939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1390.633134][T19939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1390.640066][T19939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.666002][ C0] vkms_vblank_simulate: vblank timer overrun [ 1390.672954][T19939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1390.714939][T18312] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1390.722393][T18312] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1390.734789][T18312] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1390.741451][T19923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1390.754590][T18312] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1390.763823][T19923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.766044][T18312] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1390.799139][T19923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1390.817190][T18312] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1390.827907][T18312] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1390.839090][T18312] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1390.852977][T18312] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1390.865676][T18312] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1390.889166][T18312] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1390.896828][T18312] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1390.908300][T18312] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1390.920412][T18312] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1390.923340][T19923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1390.944646][T18312] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1390.956041][T19923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.981948][ C0] vkms_vblank_simulate: vblank timer overrun [ 1390.989678][T19923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1390.993395][T18312] usb 2-1: string descriptor 0 read error: -22 [ 1391.021380][T18312] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1391.021418][T19939] hsr_slave_0: entered promiscuous mode [ 1391.041980][T18312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.044462][T19939] hsr_slave_1: entered promiscuous mode [ 1391.079749][T18312] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1391.112535][T20074] Bluetooth: hci4: Frame reassembly failed (-84) [ 1391.137211][T13851] Bluetooth: hci4: Frame reassembly failed (-84) [ 1391.210072][ T36] hsr_slave_0: left promiscuous mode [ 1391.216936][ T36] hsr_slave_1: left promiscuous mode [ 1391.222973][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1391.230364][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1391.239386][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1391.247174][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1391.268298][ T36] veth1_macvtap: left promiscuous mode [ 1391.282916][ T36] veth0_macvtap: left promiscuous mode [ 1391.288618][ T36] veth1_vlan: left promiscuous mode [ 1391.300092][ T36] veth0_vlan: left promiscuous mode [ 1391.458590][T20077] ------------[ cut here ]------------ [ 1391.464480][T20077] WARNING: CPU: 1 PID: 20077 at ./include/linux/memcontrol.h:371 folio_memcg+0x1a8/0x310 [ 1391.475226][T20077] Modules linked in: [ 1391.479389][T20077] CPU: 1 UID: 0 PID: 20077 Comm: syz.3.3837 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 1391.492292][T20077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1391.502426][T20077] RIP: 0010:folio_memcg+0x1a8/0x310 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1391.507808][T20077] Code: 80 3c 28 00 74 08 4c 89 f7 e8 b4 cc 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 bf 21 65 09 cc e8 a9 74 ba ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 1391.527718][T20077] RSP: 0018:ffffc900042e7250 EFLAGS: 00010287 [ 1391.534042][T20077] RAX: ffffffff8205b0a7 RBX: 0000000000000000 RCX: 0000000000080000 [ 1391.542039][T20077] RDX: ffffc900154c8000 RSI: 0000000000000754 RDI: 0000000000000755 [ 1391.550147][T20077] RBP: 0000000000000000 R08: ffffea00018df147 R09: 1ffffd400031be28 [ 1391.558595][T20077] R10: dffffc0000000000 R11: fffff9400031be29 R12: ffffea00018df170 [ 1391.567158][T20077] R13: dffffc0000000000 R14: ffff88802f2ccc80 R15: 0000000000000002 [ 1391.576232][T20077] FS: 00007fefd9b5e6c0(0000) GS:ffff888125d4f000(0000) knlGS:0000000000000000 [ 1391.586351][T20077] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1391.593598][T20077] CR2: 0000000000000000 CR3: 000000005b9e8000 CR4: 00000000003526f0 [ 1391.601571][T20077] Call Trace: [ 1391.605332][T20077] [ 1391.608290][T20077] workingset_activation+0x5f/0x4a0 [ 1391.613977][T20077] ? folio_mark_accessed+0x2a1/0x4a0 [ 1391.619272][T20077] folio_mark_accessed+0x3b5/0x4a0 [ 1391.624713][T20077] kvm_release_page_clean+0x9a/0xe0 [ 1391.629912][T20077] kvm_tdp_page_fault+0x2dd/0x370 [ 1391.634959][T20077] kvm_mmu_do_page_fault+0x2c5/0x640 [ 1391.640256][T20077] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 1391.646133][T20077] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 1391.651690][T20077] ? __pfx_current_save_fsgs+0x10/0x10 [ 1391.657326][T20077] kvm_mmu_page_fault+0x22f/0xb70 [ 1391.662373][T20077] ? __pfx_handle_ept_violation+0x10/0x10 [ 1391.668149][T20077] vmx_handle_exit+0x1093/0x18a0 [ 1391.673108][T20077] ? vcpu_run+0x361c/0x6f70 [ 1391.678242][T20077] vcpu_run+0x432e/0x6f70 [ 1391.682596][T20077] ? vcpu_run+0x361c/0x6f70 [ 1391.687643][T20077] ? __pfx_vcpu_run+0x10/0x10 [ 1391.692324][T20077] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1391.698262][T20077] ? rcu_is_watching+0x15/0xb0 [ 1391.703064][T20077] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 1391.708627][T20077] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1391.714370][T20077] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1391.720353][T20077] ? rcu_is_watching+0x15/0xb0 [ 1391.725160][T20077] ? trace_contention_end+0x39/0x120 [ 1391.730445][T20077] ? __mutex_lock+0x330/0xe80 [ 1391.735145][T20077] ? kasan_quarantine_put+0xdd/0x220 [ 1391.740432][T20077] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 1391.745312][T20077] ? __pfx___mutex_lock+0x10/0x10 [ 1391.750332][T20077] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1391.756001][T20077] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1391.761639][T20077] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1391.767648][T20077] ? kvm_vcpu_ioctl+0xb82/0xe90 [ 1391.772500][T20077] kvm_vcpu_ioctl+0x95c/0xe90 [ 1391.777866][T20077] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1391.783534][T20077] ? __lock_acquire+0xab9/0xd20 [ 1391.788383][T20077] ? __asan_memset+0x22/0x50 [ 1391.792993][T20077] ? smack_file_ioctl+0x302/0x340 [ 1391.798018][T20077] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1391.803548][T20077] ? __fget_files+0x2a/0x420 [ 1391.808132][T20077] ? __fget_files+0x3a0/0x420 [ 1391.812836][T20077] ? __fget_files+0x2a/0x420 [ 1391.817419][T20077] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1391.822348][T20077] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1391.827560][T20077] __se_sys_ioctl+0xf9/0x170 [ 1391.832149][T20077] do_syscall_64+0xfa/0x3b0 [ 1391.836732][T20077] ? lockdep_hardirqs_on+0x9c/0x150 [ 1391.841941][T20077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.848067][T20077] ? clear_bhb_loop+0x60/0xb0 [ 1391.852841][T20077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.858739][T20077] RIP: 0033:0x7fefd8d8e929 [ 1391.863247][T20077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1391.883584][T20077] RSP: 002b:00007fefd9b5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1391.892025][T20077] RAX: ffffffffffffffda RBX: 00007fefd8fb6080 RCX: 00007fefd8d8e929 [ 1391.900605][T20077] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1391.908635][T20077] RBP: 00007fefd8e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1391.916639][T20077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1391.924658][T20077] R13: 0000000000000000 R14: 00007fefd8fb6080 R15: 00007ffc6561b718 [ 1391.933147][T20077] [ 1391.936178][T20077] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1391.943453][T20077] CPU: 1 UID: 0 PID: 20077 Comm: syz.3.3837 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 1391.955515][T20077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1391.965561][T20077] Call Trace: [ 1391.968833][T20077] [ 1391.971755][T20077] dump_stack_lvl+0x99/0x250 [ 1391.976344][T20077] ? __asan_memcpy+0x40/0x70 [ 1391.980926][T20077] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1391.986123][T20077] ? __pfx__printk+0x10/0x10 [ 1391.990720][T20077] panic+0x2db/0x790 [ 1391.994613][T20077] ? __pfx_panic+0x10/0x10 [ 1391.999038][T20077] __warn+0x31b/0x4b0 [ 1392.003011][T20077] ? folio_memcg+0x1a8/0x310 [ 1392.007612][T20077] ? folio_memcg+0x1a8/0x310 [ 1392.012236][T20077] report_bug+0x2be/0x4f0 [ 1392.016570][T20077] ? folio_memcg+0x1a8/0x310 [ 1392.021158][T20077] ? folio_memcg+0x1a8/0x310 [ 1392.025741][T20077] ? folio_memcg+0x1aa/0x310 [ 1392.030326][T20077] handle_bug+0x84/0x160 [ 1392.034572][T20077] exc_invalid_op+0x1a/0x50 [ 1392.039076][T20077] asm_exc_invalid_op+0x1a/0x20 [ 1392.043927][T20077] RIP: 0010:folio_memcg+0x1a8/0x310 [ 1392.049123][T20077] Code: 80 3c 28 00 74 08 4c 89 f7 e8 b4 cc 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 bf 21 65 09 cc e8 a9 74 ba ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 1392.068727][T20077] RSP: 0018:ffffc900042e7250 EFLAGS: 00010287 [ 1392.074804][T20077] RAX: ffffffff8205b0a7 RBX: 0000000000000000 RCX: 0000000000080000 [ 1392.082783][T20077] RDX: ffffc900154c8000 RSI: 0000000000000754 RDI: 0000000000000755 [ 1392.090755][T20077] RBP: 0000000000000000 R08: ffffea00018df147 R09: 1ffffd400031be28 [ 1392.098738][T20077] R10: dffffc0000000000 R11: fffff9400031be29 R12: ffffea00018df170 [ 1392.106721][T20077] R13: dffffc0000000000 R14: ffff88802f2ccc80 R15: 0000000000000002 [ 1392.114712][T20077] ? folio_memcg+0x1a7/0x310 [ 1392.119311][T20077] workingset_activation+0x5f/0x4a0 [ 1392.124515][T20077] ? folio_mark_accessed+0x2a1/0x4a0 [ 1392.129804][T20077] folio_mark_accessed+0x3b5/0x4a0 [ 1392.134914][T20077] kvm_release_page_clean+0x9a/0xe0 [ 1392.140108][T20077] kvm_tdp_page_fault+0x2dd/0x370 [ 1392.145133][T20077] kvm_mmu_do_page_fault+0x2c5/0x640 [ 1392.150420][T20077] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 1392.156237][T20077] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 1392.161783][T20077] ? __pfx_current_save_fsgs+0x10/0x10 [ 1392.167248][T20077] kvm_mmu_page_fault+0x22f/0xb70 [ 1392.172287][T20077] ? __pfx_handle_ept_violation+0x10/0x10 [ 1392.178001][T20077] vmx_handle_exit+0x1093/0x18a0 [ 1392.182931][T20077] ? vcpu_run+0x361c/0x6f70 [ 1392.187440][T20077] vcpu_run+0x432e/0x6f70 [ 1392.191777][T20077] ? vcpu_run+0x361c/0x6f70 [ 1392.196317][T20077] ? __pfx_vcpu_run+0x10/0x10 [ 1392.201003][T20077] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1392.206721][T20077] ? rcu_is_watching+0x15/0xb0 [ 1392.211483][T20077] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 1392.217030][T20077] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1392.222742][T20077] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1392.228718][T20077] ? rcu_is_watching+0x15/0xb0 [ 1392.233472][T20077] ? trace_contention_end+0x39/0x120 [ 1392.238751][T20077] ? __mutex_lock+0x330/0xe80 [ 1392.243432][T20077] ? kasan_quarantine_put+0xdd/0x220 [ 1392.248716][T20077] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 1392.253566][T20077] ? __pfx___mutex_lock+0x10/0x10 [ 1392.258588][T20077] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1392.264219][T20077] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1392.269850][T20077] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1392.275832][T20077] ? kvm_vcpu_ioctl+0xb82/0xe90 [ 1392.280689][T20077] kvm_vcpu_ioctl+0x95c/0xe90 [ 1392.285364][T20077] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1392.290552][T20077] ? __lock_acquire+0xab9/0xd20 [ 1392.295403][T20077] ? __asan_memset+0x22/0x50 [ 1392.299986][T20077] ? smack_file_ioctl+0x302/0x340 [ 1392.305011][T20077] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1392.310388][T20077] ? __fget_files+0x2a/0x420 [ 1392.314966][T20077] ? __fget_files+0x3a0/0x420 [ 1392.319641][T20077] ? __fget_files+0x2a/0x420 [ 1392.324220][T20077] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1392.329151][T20077] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1392.334343][T20077] __se_sys_ioctl+0xf9/0x170 [ 1392.338930][T20077] do_syscall_64+0xfa/0x3b0 [ 1392.343425][T20077] ? lockdep_hardirqs_on+0x9c/0x150 [ 1392.348624][T20077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1392.354681][T20077] ? clear_bhb_loop+0x60/0xb0 [ 1392.359350][T20077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1392.365231][T20077] RIP: 0033:0x7fefd8d8e929 [ 1392.369641][T20077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1392.389239][T20077] RSP: 002b:00007fefd9b5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1392.397656][T20077] RAX: ffffffffffffffda RBX: 00007fefd8fb6080 RCX: 00007fefd8d8e929 [ 1392.405621][T20077] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1392.413583][T20077] RBP: 00007fefd8e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1392.421544][T20077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1392.429507][T20077] R13: 0000000000000000 R14: 00007fefd8fb6080 R15: 00007ffc6561b718 [ 1392.437483][T20077] [ 1392.440737][T20077] Kernel Offset: disabled [ 1392.445047][T20077] Rebooting in 86400 seconds..