last executing test programs: 5.944390711s ago: executing program 2 (id=614): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) r1 = epoll_create(0x6b800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 5.710187223s ago: executing program 2 (id=616): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readv(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) creat(0x0, 0x122) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x0, 0x107ffffffe}}}, 0x90) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f0000000100)={0x2020}, 0x2020) read$FUSE(r5, &(0x7f000000b040)={0x2020}, 0x2020) 5.710028803s ago: executing program 3 (id=617): openat$adsp1(0xffffffffffffff9c, 0x0, 0x200, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) shutdown(r0, 0x0) 5.399032033s ago: executing program 3 (id=618): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x10, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) pipe2(&(0x7f0000000040), 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) sendfile(r3, r3, 0x0, 0x40008) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 3.779595168s ago: executing program 4 (id=621): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x0) 3.190111534s ago: executing program 2 (id=624): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000007060500000000000000000005000005050001000700000008000640000000050900020073797a31"], 0x30}, 0x1, 0x0, 0x0, 0x44011}, 0x10) 3.094942204s ago: executing program 1 (id=625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc60007a000000ad6e911b51818462b4003a000001", 0x38}], 0x1}, 0x0) 2.92950219s ago: executing program 4 (id=627): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f00000003c0)={0x7, 'vlan0\x00', {0x6}, 0x4}) 2.848351687s ago: executing program 3 (id=628): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e0003000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.790035943s ago: executing program 2 (id=629): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xe) shmdt(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000040) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8811) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x5) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(r5, 0x402, 0x80000008) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0xffffffffffffffb6) syz_open_procfs(0x0, &(0x7f00000005c0)='net/softnet_stat\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x50) 2.757930386s ago: executing program 1 (id=630): r0 = inotify_init() ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="00000000b7080000000000007b8af8ff00000000bf080800000000007b8af0ff0000000000f8ffffffbfa400000000006840040000f0ffffffb7020000080000001823000000000000000000c349d963beb7ca1329ed00000000000000000200080000000000a39a274bfffac5b6a7f241b7cb3ed8e64a845f12b49c3d40a9dbb962d84893ba79997c0136920106817dc5afc79744fb282a301872b6115f75e8535b856c2e99efee1300000800000200"/185, @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r2}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) syz_io_uring_setup(0x440b, &(0x7f0000000180)={0x0, 0x6615, 0x10000, 0x2, 0xb7}, &(0x7f0000000280)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/140], 0x124}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2.730098899s ago: executing program 4 (id=631): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) unshare(0x2040600) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x521, 0x0, 0x20000, 0x0, 0x8000000000}, 0x0, 0x0) 2.666190285s ago: executing program 3 (id=632): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r1, &(0x7f0000000740)=[{&(0x7f0000000480)=""/215, 0xd7}], 0x1) close(r1) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x400a0) ioctl$KDGETMODE(0xffffffffffffffff, 0x40046676, 0xffffffffffffffff) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mmap(&(0x7f00009bf000/0x3000)=nil, 0x3000, 0xf, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 2.480730952s ago: executing program 1 (id=634): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x1) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x1, 0xb3}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x12141}) socket$alg(0x26, 0x5, 0x0) io_uring_enter(r4, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 2.391409401s ago: executing program 0 (id=635): r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0xc00000)=nil, 0xc00000, &(0x7f0000000140)=""/142) readv(r2, &(0x7f0000000200), 0x10000000000000ba) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1.750053053s ago: executing program 4 (id=636): socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="85952b177328da2f8757c9343d", 0xd, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/80, 0x50, 0x0) r5 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r5, 0xc0045103, &(0x7f0000000040)) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000480)={{0xa, 0x4e21, 0x6, @mcast1, 0x9}, {0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x3, {[0x5, 0xfffffffe, 0x8, 0x8, 0x7, 0x8, 0x22bb, 0x9]}}, 0x5c) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x7, 0xb49, 0x0, 0x8, 0xffffffff, 0x10000}, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r6, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r6, 0x1, &(0x7f0000000140)={{}, {r7, r8+60000000}}, 0x0) unshare(0x42000000) 1.749812903s ago: executing program 3 (id=637): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x0) 1.57378888s ago: executing program 0 (id=638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc6, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80001, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c9e0}, 0x4008080) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.242952841s ago: executing program 3 (id=639): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000040), &(0x7f0000000140)={'L+', 0xb}, 0x16, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x4, 0x0, 0x3}, 0x0) fsopen(&(0x7f0000000000)='overlay\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) gettid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x1) flock(r3, 0x2) dup3(r3, r2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r4, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="cf702e8cf675aaaaaaaaaabb86e56000080000283afffe880000907800000000fe8000000000000700"/64], 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) 998.519124ms ago: executing program 0 (id=640): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f15", 0xc}) 996.122895ms ago: executing program 4 (id=641): socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x2, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000000), &(0x7f00000000c0)=0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0xf, 0xffffbe0000000001, 0xfa15, 0x202}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = io_uring_setup(0x2a1b, &(0x7f0000000180)={0x0, 0xf378, 0x8, 0x2, 0x19}) io_uring_enter(r4, 0x2bae, 0x55, 0x1, &(0x7f0000000240)={[0x3]}, 0x8) recvmsg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000c80), 0x200007, 0x40acc3) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000706010300010000000000000000000005000100070000"], 0x1c}}, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3e) 702.028013ms ago: executing program 0 (id=642): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@multicast, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x100}}}}}, 0x0) 561.323806ms ago: executing program 0 (id=643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a0000fe", 0x38}], 0x1}, 0x0) 540.234729ms ago: executing program 2 (id=644): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x17, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x0, 0x0, 0x1000}}}}}}, 0x0) 366.093595ms ago: executing program 0 (id=645): r0 = inotify_init() ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="00000000b7080000000000007b8af8ff00000000bf080800000000007b8af0ff0000000000f8ffffffbfa400000000006840040000f0ffffffb7020000080000001823000000000000000000c349d963beb7ca1329ed00000000000000000200080000000000a39a274bfffac5b6a7f241b7cb3ed8e64a845f12b49c3d40a9dbb962d84893ba79997c0136920106817dc5afc79744fb282a301872b6115f75e8535b856c2e99efee1300000800000200"/185, @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r2}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) syz_io_uring_setup(0x440b, &(0x7f0000000180)={0x0, 0x6615, 0x10000, 0x2, 0xb7}, &(0x7f0000000280)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/140], 0x124}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 365.990415ms ago: executing program 1 (id=646): r0 = socket$packet(0x11, 0x3, 0x300) unshare(0xa000400) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000000)={0x0, 0x3, 0xb, 0x6}) 320.862829ms ago: executing program 2 (id=647): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x4, 0xe}, {0xfff1}}}, 0x24}}, 0x74000800) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f0000000580)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0xc0085504, &(0x7f0000000140)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) poll(&(0x7f0000000040)=[{r3, 0x1}], 0x1, 0x101) close_range(r0, 0xffffffffffffffff, 0x0) 248.602086ms ago: executing program 1 (id=648): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2b4, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffff7a, 0xffffffff, 0x220, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0xffffffff, 'veth1\x00', 'geneve1\x00', {}, {}, 0x8, 0x0, 0x41}, 0x6, 0x130, 0x150, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "e4ff0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9eb85f401b0000000000ffffff7f00", 0x7d}}]}, @unspec=@TRACE={0x20}}, {{@ip={@local, @multicast1, 0x0, 0xffffffff, 'veth1_to_batadv\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x33, 0x2, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x7, 0x7f00, 0x7f00, 0x7f00]}, {0xffff, [0x0, 0x1, 0x1, 0x0, 0x0, 0x7f00]}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x310) 90.044331ms ago: executing program 1 (id=649): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x0) 0s ago: executing program 4 (id=650): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc6, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80001, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c9e0}, 0x4008080) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 34.277195][ T3932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.294920][ T3932] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.141' (ED25519) to the list of known hosts. syzkaller login: [ 53.563324][ T4253] cgroup: Unknown subsys name 'net' [ 53.738339][ T4253] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.990832][ T4253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 56.460711][ T4271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.465592][ T4274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.473788][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.478096][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.482575][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.489910][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.497319][ T4277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.504951][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.511134][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.517815][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.524867][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.539495][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.539534][ T4277] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.547126][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.554833][ T4277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.568690][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.569365][ T4277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.576652][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.583927][ T4277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.590932][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.597697][ T4277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.605324][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.611652][ T4277] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.618194][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.625186][ T4277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.631968][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.638819][ T4277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.648597][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.654237][ T4277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.688482][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.041619][ T4263] chnl_net:caif_netlink_parms(): no params data found [ 57.151812][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 57.230285][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 57.258771][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 57.299860][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.307268][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.316654][ T4263] device bridge_slave_0 entered promiscuous mode [ 57.327298][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.334542][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.342469][ T4263] device bridge_slave_1 entered promiscuous mode [ 57.371125][ T4270] chnl_net:caif_netlink_parms(): no params data found [ 57.426398][ T4263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.435621][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.442702][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.451107][ T4272] device bridge_slave_0 entered promiscuous mode [ 57.473338][ T4263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.490013][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.497735][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.505756][ T4272] device bridge_slave_1 entered promiscuous mode [ 57.571593][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.578973][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.586853][ T4276] device bridge_slave_0 entered promiscuous mode [ 57.594689][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.601771][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.609969][ T4267] device bridge_slave_0 entered promiscuous mode [ 57.619812][ T4263] team0: Port device team_slave_0 added [ 57.635966][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.645495][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.652580][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.660955][ T4276] device bridge_slave_1 entered promiscuous mode [ 57.668667][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.675910][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.683748][ T4267] device bridge_slave_1 entered promiscuous mode [ 57.691808][ T4263] team0: Port device team_slave_1 added [ 57.705722][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.712803][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.721128][ T4270] device bridge_slave_0 entered promiscuous mode [ 57.730476][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.760229][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.767845][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.776312][ T4270] device bridge_slave_1 entered promiscuous mode [ 57.805135][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.812107][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.838473][ T4263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.866263][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.877240][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.886876][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.894194][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.920191][ T4263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.941582][ T4272] team0: Port device team_slave_0 added [ 57.949154][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.966167][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.984677][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.994839][ T4272] team0: Port device team_slave_1 added [ 58.002114][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.050333][ T4276] team0: Port device team_slave_0 added [ 58.068797][ T4267] team0: Port device team_slave_0 added [ 58.089318][ T4276] team0: Port device team_slave_1 added [ 58.104716][ T4267] team0: Port device team_slave_1 added [ 58.112528][ T4270] team0: Port device team_slave_0 added [ 58.118881][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.125982][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.152322][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.174439][ T4263] device hsr_slave_0 entered promiscuous mode [ 58.181124][ T4263] device hsr_slave_1 entered promiscuous mode [ 58.195738][ T4270] team0: Port device team_slave_1 added [ 58.207921][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.220041][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.246348][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.279473][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.286748][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.313081][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.330607][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.337637][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.363943][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.379091][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.386263][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.412246][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.431670][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.438800][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.465183][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.492177][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.499343][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.525291][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.567336][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.574395][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.600583][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.624334][ T4272] device hsr_slave_0 entered promiscuous mode [ 58.630999][ T4272] device hsr_slave_1 entered promiscuous mode [ 58.637785][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.645654][ T4272] Cannot create hsr debugfs directory [ 58.656178][ T4267] device hsr_slave_0 entered promiscuous mode [ 58.662868][ T4267] device hsr_slave_1 entered promiscuous mode [ 58.669471][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.677245][ T4267] Cannot create hsr debugfs directory [ 58.693737][ T4269] Bluetooth: hci1: command 0x0409 tx timeout [ 58.699990][ T4269] Bluetooth: hci0: command 0x0409 tx timeout [ 58.765195][ T4276] device hsr_slave_0 entered promiscuous mode [ 58.772235][ T4276] device hsr_slave_1 entered promiscuous mode [ 58.778433][ T4269] Bluetooth: hci4: command 0x0409 tx timeout [ 58.784670][ T4271] Bluetooth: hci2: command 0x0409 tx timeout [ 58.784815][ T4271] Bluetooth: hci3: command 0x0409 tx timeout [ 58.797134][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.807634][ T4276] Cannot create hsr debugfs directory [ 58.862288][ T4270] device hsr_slave_0 entered promiscuous mode [ 58.868940][ T4270] device hsr_slave_1 entered promiscuous mode [ 58.875439][ T4270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.883504][ T4270] Cannot create hsr debugfs directory [ 59.042342][ T4263] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.076373][ T4263] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.111458][ T4263] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.132640][ T4263] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.189445][ T4272] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.205649][ T4272] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.215257][ T4272] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.241826][ T4272] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.264902][ T4263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.289866][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.300762][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.317549][ T4263] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.334700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.344971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.354016][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.361234][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.369596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.378738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.387625][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.394772][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.403516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.423644][ T4267] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.439450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.448340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.461333][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.470853][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.481829][ T4267] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.490514][ T4267] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.503811][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.524901][ T4267] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.550285][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.560236][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.569331][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.579007][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.587862][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.596207][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.608728][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.711301][ T4276] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.726122][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.748741][ T4276] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.760672][ T4276] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.776383][ T4276] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.815896][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.828062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.852084][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.865126][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.899767][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.914384][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.922270][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.936471][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.947971][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.955136][ T4327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.968706][ T4270] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.979233][ T4270] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.990400][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.998669][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.008237][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.016976][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.024115][ T4327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.038285][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.045472][ T4270] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.054409][ T4270] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.066521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.113219][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.121865][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.131542][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.138678][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.147392][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.157929][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.166593][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.173706][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.181235][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.189175][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.196726][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.205332][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.214176][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.222619][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.231733][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.247840][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.256373][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.265751][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.276478][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.287923][ T4263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.320069][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.329108][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.338829][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.347830][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.356493][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.364978][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.374171][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.382495][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.390893][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.402319][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.413895][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.440701][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.452766][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.474214][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.482216][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.496685][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.507892][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.519988][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.574412][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.607350][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.621873][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.630578][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.648274][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.671838][ T4263] device veth0_vlan entered promiscuous mode [ 60.704602][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.725283][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.753569][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.760684][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.768600][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.773669][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 60.777604][ T4269] Bluetooth: hci0: command 0x041b tx timeout [ 60.783797][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.796836][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.806783][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.815386][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.822463][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.830207][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.838316][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.846439][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.853942][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 60.860147][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 60.867097][ T4269] Bluetooth: hci4: command 0x041b tx timeout [ 60.873640][ T4263] device veth1_vlan entered promiscuous mode [ 60.893225][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.901408][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.910962][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.924303][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.935476][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.953798][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.961757][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.972104][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.981656][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.995815][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.006054][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.016338][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.038770][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.053575][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.061846][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.072754][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.088496][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.117500][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.128528][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.145697][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.186528][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.211430][ T4263] device veth0_macvtap entered promiscuous mode [ 61.254387][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.270405][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.279622][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.288438][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.304133][ T4263] device veth1_macvtap entered promiscuous mode [ 61.322488][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.330275][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.351601][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.391375][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.408595][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.433710][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.442641][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.465436][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.472805][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.503435][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.518330][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.530598][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.537779][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.546056][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.565803][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.581108][ T4267] device veth0_vlan entered promiscuous mode [ 61.596134][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.605585][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.619806][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.629195][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.641391][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.653606][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.663769][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.682341][ T4267] device veth1_vlan entered promiscuous mode [ 61.691354][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.699866][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.709382][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.719914][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.729036][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.737978][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.747992][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.756611][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.768613][ T4263] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.777741][ T4263] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.787033][ T4263] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.795862][ T4263] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.823436][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.831490][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.842618][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.851742][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.860409][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.868030][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.876694][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.889485][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.902336][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.911750][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.935438][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.956317][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.965234][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.976586][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.985306][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.998314][ T4267] device veth0_macvtap entered promiscuous mode [ 62.008698][ T4267] device veth1_macvtap entered promiscuous mode [ 62.050656][ T4272] device veth0_vlan entered promiscuous mode [ 62.078800][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.089148][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.100845][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.111481][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.120557][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.131407][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.148910][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.160601][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.174353][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.197494][ T4272] device veth1_vlan entered promiscuous mode [ 62.229468][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.238091][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.246432][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.255793][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.275390][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.286010][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.297816][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.310963][ T4267] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.320335][ T4267] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.329625][ T4267] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.338597][ T4267] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.364707][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.374324][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.383142][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.391600][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.403676][ T4276] device veth0_vlan entered promiscuous mode [ 62.415493][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.443139][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.450601][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.451047][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.482624][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.499625][ T4276] device veth1_vlan entered promiscuous mode [ 62.536240][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.555619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.566917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.598886][ T4272] device veth0_macvtap entered promiscuous mode [ 62.636591][ T4272] device veth1_macvtap entered promiscuous mode [ 62.648943][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.660451][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.662082][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.680354][ T4359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.689364][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.698896][ T4359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.706255][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.706945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.722327][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.730502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.738850][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.747209][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.772571][ T4276] device veth0_macvtap entered promiscuous mode [ 62.803341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.814681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.828709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.838204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.847912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.853096][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 62.857692][ T4269] Bluetooth: hci0: command 0x040f tx timeout [ 62.868150][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.878882][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.889075][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.899721][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.911207][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.921365][ T4276] device veth1_macvtap entered promiscuous mode [ 62.933467][ T4269] Bluetooth: hci2: command 0x040f tx timeout [ 62.933483][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 62.939474][ T4269] Bluetooth: hci4: command 0x040f tx timeout [ 62.951922][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.965435][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.973619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.988070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.998316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.015341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.023928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.043872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.054540][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.070932][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.081073][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.094213][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.106103][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.117774][ T4270] device veth0_vlan entered promiscuous mode [ 63.135108][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.147248][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.157754][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.168891][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.179690][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.190423][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.204611][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.212019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.222131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.230178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.239812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.249203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.258311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.272678][ T4378] Zero length message leads to an empty skb [ 63.275192][ T4272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.290214][ T4272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.302303][ T4272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.316147][ T4272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.351213][ T4270] device veth1_vlan entered promiscuous mode [ 63.352245][ T4380] mmap: syz.0.6 (4380) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 63.371847][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.386312][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.407381][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.433014][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.452769][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.464630][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.476971][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.514410][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.533711][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.566490][ T4276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.577071][ T4276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.591740][ T4276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.601940][ T4276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.627497][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.643795][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.676764][ T4270] device veth0_macvtap entered promiscuous mode [ 63.724438][ T4270] device veth1_macvtap entered promiscuous mode [ 63.809860][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.830197][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.847191][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.861680][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.872367][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.884514][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.895948][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.906900][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.918886][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.936642][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.953294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.968345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.988301][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.989477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.029559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.039887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.050554][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.062547][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.080346][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.092336][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.107971][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.118526][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.135169][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.149632][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.161608][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.185504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.205555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.219466][ T4270] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.228649][ T4270] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.238681][ T4270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.248476][ T4270] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.305505][ T4359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.319840][ T4359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.359189][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.395701][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.409683][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.425564][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.449706][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.466446][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.477216][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.548860][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.568783][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.590167][ T4393] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.627261][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.671308][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.689289][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.710997][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.933350][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 64.934161][ T4269] Bluetooth: hci0: command 0x0419 tx timeout [ 65.014121][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 65.014185][ T4269] Bluetooth: hci2: command 0x0419 tx timeout [ 65.026300][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 65.082684][ T4411] netlink: 'syz.4.13': attribute type 1 has an invalid length. [ 65.143977][ T4411] device macvlan2 entered promiscuous mode [ 65.341117][ T4422] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 65.361334][ T4411] device macvlan2 entered promiscuous mode [ 65.593130][ T4311] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.832240][ T4311] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 65.858930][ T4311] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 65.877057][ T4324] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 65.880370][ T4311] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 65.939400][ T4311] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 65.969816][ T4311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.028367][ T4311] usb 3-1: invalid MIDI out EP 0 [ 66.075418][ T4324] usb 4-1: config index 0 descriptor too short (expected 65535, got 34) [ 66.096384][ T4324] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.107017][ T4324] usb 4-1: config 0 has no interfaces? [ 66.127767][ T4324] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 66.162789][ T4324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.186867][ T4324] usb 4-1: Product: syz [ 66.191085][ T4324] usb 4-1: Manufacturer: syz [ 66.211797][ T4311] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 66.219566][ T4324] usb 4-1: SerialNumber: syz [ 66.221227][ T4324] usb 4-1: config 0 descriptor?? [ 66.281905][ T4311] usb 3-1: USB disconnect, device number 2 [ 66.673820][ T4448] udevd[4448]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 66.691997][ T4324] usb 4-1: USB disconnect, device number 2 [ 66.849796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.992992][ T4325] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 67.029186][ T27] audit: type=1804 audit(1766747885.946:2): pid=4469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.29" name="/newroot/2/file1" dev="fuse" ino=1 res=1 errno=0 [ 67.185598][ T4325] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.262378][ T4325] usb 5-1: config 0 has no interfaces? [ 67.269459][ T4325] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 67.278932][ T4325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.292569][ T4325] usb 5-1: config 0 descriptor?? [ 67.763369][ T27] audit: type=1800 audit(1766747886.676:3): pid=4469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.29" name="/" dev="fuse" ino=1 res=0 errno=0 [ 67.929968][ T4482] netlink: 64 bytes leftover after parsing attributes in process `syz.2.32'. [ 68.066218][ T22] usb 5-1: USB disconnect, device number 2 [ 69.341904][ T27] audit: type=1804 audit(1766747888.256:4): pid=4515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.42" name="/newroot/13/file1" dev="fuse" ino=1 res=1 errno=0 [ 69.943029][ T4324] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 70.055796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.104111][ T27] audit: type=1800 audit(1766747889.016:5): pid=4515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.42" name="/" dev="fuse" ino=1 res=0 errno=0 [ 70.155507][ T4324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.177738][ T4324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.207542][ T4324] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 70.232835][ T4324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.273395][ T4324] usb 5-1: config 0 descriptor?? [ 70.700079][ T4324] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 70.717602][ T4324] hid-steam 0003:28DE:1142.0001: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 70.744703][ T4324] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 70.770903][ T4324] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 70.873864][ T4324] hid-steam 0003:28DE:1142.0001: Steam wireless receiver connected [ 70.896687][ T4324] hid-steam 0003:28DE:1142.0001: No HID_FEATURE_REPORT submitted - nothing to read [ 70.915777][ T4547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.54'. [ 70.934418][ T4548] netlink: 'syz.1.53': attribute type 12 has an invalid length. [ 70.945784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.966203][ T4548] netlink: 'syz.1.53': attribute type 29 has an invalid length. [ 70.983081][ T4548] netlink: 148 bytes leftover after parsing attributes in process `syz.1.53'. [ 71.203669][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.210288][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.423004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 71.867395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.298286][ T27] audit: type=1804 audit(1766747891.216:6): pid=4571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.58" name="/newroot/9/file1" dev="fuse" ino=1 res=1 errno=0 [ 72.440680][ T4575] device syzkaller1 entered promiscuous mode [ 72.756255][ T4325] usb 5-1: USB disconnect, device number 3 [ 72.785887][ T4325] hid-steam 0003:28DE:1142.0001: Steam wireless receiver disconnected [ 73.038021][ T27] audit: type=1800 audit(1766747891.956:7): pid=4571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.58" name="/" dev="fuse" ino=1 res=0 errno=0 [ 73.203844][ T4591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.66'. [ 73.265246][ T4591] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.300585][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.514298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.529145][ T4343] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 74.587471][ T4343] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 74.773356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.833139][ T22] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 75.024766][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 75.034613][ T22] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 75.077885][ T22] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 75.120846][ T22] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 75.136134][ T4638] netlink: 16 bytes leftover after parsing attributes in process `syz.3.76'. [ 75.162222][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.207230][ T22] usb 5-1: Product: syz [ 75.248507][ T22] usb 5-1: Manufacturer: syz [ 75.258961][ T22] usb 5-1: SerialNumber: syz [ 75.292810][ T22] usb 5-1: config 0 descriptor?? [ 75.530713][ T27] audit: type=1804 audit(1766747894.446:8): pid=4642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.77" name="/newroot/21/file1" dev="fuse" ino=1 res=1 errno=0 [ 75.550696][ C0] vkms_vblank_simulate: vblank timer overrun [ 76.169070][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.258828][ T27] audit: type=1800 audit(1766747895.176:9): pid=4642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.77" name="/" dev="fuse" ino=1 res=0 errno=0 [ 76.270645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.299351][ T128] cfg80211: failed to load regulatory.db [ 76.612553][ T27] audit: type=1326 audit(1766747895.526:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4663 comm="syz.3.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22f6f8f749 code=0x7ffc0000 [ 76.634564][ C0] vkms_vblank_simulate: vblank timer overrun [ 76.731761][ T27] audit: type=1326 audit(1766747895.556:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4663 comm="syz.3.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f22f6f2b829 code=0x7ffc0000 [ 76.753729][ C0] vkms_vblank_simulate: vblank timer overrun [ 76.819239][ T27] audit: type=1326 audit(1766747895.556:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4663 comm="syz.3.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f22f6f2b829 code=0x7ffc0000 [ 76.921433][ T27] audit: type=1326 audit(1766747895.556:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4663 comm="syz.3.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f22f6f2b829 code=0x7ffc0000 [ 76.982382][ T4669] TCP: TCP_TX_DELAY enabled [ 77.057950][ T27] audit: type=1326 audit(1766747895.556:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4663 comm="syz.3.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f22f6f2b829 code=0x7ffc0000 [ 77.178484][ T27] audit: type=1326 audit(1766747895.556:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4663 comm="syz.3.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22f6f8f749 code=0x7ffc0000 [ 77.200546][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.891648][ T4677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.95'. [ 78.113076][ T4324] usb 5-1: USB disconnect, device number 4 [ 78.307603][ T4686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.88'. [ 78.337335][ T4686] device hsr0 entered promiscuous mode [ 78.496001][ T4691] netlink: 9 bytes leftover after parsing attributes in process `syz.0.90'. [ 78.611950][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 78.611992][ T27] audit: type=1804 audit(1766747897.526:46): pid=4703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.92" name="/newroot/14/file1" dev="fuse" ino=1 res=1 errno=0 [ 79.043141][ T4325] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 79.255123][ T4325] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 79.299344][ T4325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 79.331740][ T4730] netlink: 48 bytes leftover after parsing attributes in process `syz.1.102'. [ 79.365366][ T27] audit: type=1800 audit(1766747898.286:47): pid=4703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.92" name="/" dev="fuse" ino=1 res=0 errno=0 [ 79.393244][ T4325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.434733][ T4325] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 79.510642][ T4325] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 79.536179][ T4325] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 79.559899][ T4325] usb 1-1: Manufacturer: syz [ 79.581744][ T4325] usb 1-1: config 0 descriptor?? [ 79.604920][ T4739] netlink: 16 bytes leftover after parsing attributes in process `syz.4.105'. [ 79.767405][ T4743] vivid-003: ================= START STATUS ================= [ 79.795026][ T4343] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 79.807206][ T4743] vivid-003: Radio HW Seek Mode: Bounded [ 79.833118][ T4743] vivid-003: Radio Programmable HW Seek: false [ 79.860584][ T4743] vivid-003: RDS Rx I/O Mode: Block I/O [ 79.871465][ T4743] vivid-003: Generate RBDS Instead of RDS: false [ 79.923061][ T4743] vivid-003: RDS Reception: true [ 79.928067][ T4743] vivid-003: RDS Program Type: 0 inactive [ 79.970714][ T4743] vivid-003: RDS PS Name: inactive [ 79.997761][ T4325] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 80.012097][ T4325] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 80.013025][ T4343] usb 3-1: Using ep0 maxpacket: 8 [ 80.030212][ T4743] vivid-003: RDS Radio Text: inactive [ 80.048551][ T4325] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 80.067254][ T4743] vivid-003: RDS Traffic Announcement: false inactive [ 80.075798][ T4343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 80.170673][ T4743] vivid-003: RDS Traffic Program: false inactive [ 80.186268][ T4343] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 80.236125][ T4743] vivid-003: RDS Music: false inactive [ 80.244603][ T4343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.253205][ T4743] vivid-003: ================== END STATUS ================== [ 80.309131][ T4343] usb 3-1: config 0 descriptor?? [ 80.530107][ T4324] usb 1-1: USB disconnect, device number 2 [ 80.543326][ T4343] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 81.090173][ T4324] usb 3-1: USB disconnect, device number 3 [ 81.476177][ T4774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.115'. [ 83.873091][ T4311] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 84.082969][ T4311] usb 4-1: Using ep0 maxpacket: 32 [ 84.093806][ T128] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.107114][ T4311] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 84.120283][ T4311] usb 4-1: config 0 has no interface number 0 [ 84.134709][ T4311] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 84.175282][ T4311] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 84.216657][ T4311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.243210][ T4311] usb 4-1: Product: syz [ 84.248245][ T4311] usb 4-1: Manufacturer: syz [ 84.263078][ T4311] usb 4-1: SerialNumber: syz [ 84.293520][ T128] usb 2-1: Using ep0 maxpacket: 32 [ 84.349432][ T128] usb 2-1: config 0 interface 0 has no altsetting 0 [ 84.356543][ T4311] usb 4-1: config 0 descriptor?? [ 84.457896][ T4311] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 84.496086][ T128] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 84.511771][ T128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.536960][ T4311] em28xx 4-1:0.132: Video interface 132 found: [ 84.557187][ T128] usb 2-1: Product: syz [ 84.570068][ T128] usb 2-1: Manufacturer: syz [ 84.578661][ T128] usb 2-1: SerialNumber: syz [ 84.602509][ T128] usb 2-1: config 0 descriptor?? [ 84.663409][ T4829] netlink: 384 bytes leftover after parsing attributes in process `syz.3.134'. [ 84.823175][ T4829] fuse: root generation should be zero [ 84.868453][ T4849] syz.4.139 uses obsolete (PF_INET,SOCK_PACKET) [ 85.024886][ T4311] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 85.178045][ T4311] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 85.211109][ T4311] em28xx 4-1:0.132: board has no eeprom [ 85.303027][ T4311] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 85.303086][ T4311] em28xx 4-1:0.132: analog set to bulk mode. [ 85.304679][ T4325] em28xx 4-1:0.132: Registering V4L2 extension [ 85.312674][ T4311] usb 4-1: USB disconnect, device number 3 [ 85.348535][ T4311] em28xx 4-1:0.132: Disconnecting em28xx [ 85.700392][ T4862] process 'syz.2.145' launched '/dev/fd/4/./file1' with NULL argv: empty string added [ 85.897927][ T128] gs_usb 2-1:0.0: Couldn't get device config: (err=-110) [ 85.897950][ T128] gs_usb: probe of 2-1:0.0 failed with error -110 [ 86.551580][ T4325] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 86.551629][ T4325] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 86.551637][ T4325] em28xx 4-1:0.132: No AC97 audio processor [ 86.556728][ T4325] usb 4-1: Decoder not found [ 86.556746][ T4325] em28xx 4-1:0.132: failed to create media graph [ 86.556778][ T4325] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 86.559606][ T4325] em28xx 4-1:0.132: Remote control support is not available for this card. [ 86.559780][ T4311] em28xx 4-1:0.132: Closing input extension [ 86.601844][ T4311] em28xx 4-1:0.132: Freeing device [ 86.818803][ T4881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.148'. [ 87.539812][ T4324] usb 2-1: USB disconnect, device number 2 [ 88.460211][ T4912] loop6: detected capacity change from 0 to 524288000 [ 89.331337][ T4929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.163'. [ 89.476632][ T4931] program syz.2.164 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.510396][ T4933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.165'. [ 90.013915][ T4943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.169'. [ 90.088865][ T4948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.169'. [ 90.669995][ T4963] tipc: Started in network mode [ 90.680012][ T4963] tipc: Node identity 9206f2915668, cluster identity 4711 [ 90.688973][ T4963] tipc: Enabled bearer , priority 0 [ 90.700824][ T4963] device syzkaller0 entered promiscuous mode [ 90.758505][ T4963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.176'. [ 90.794487][ T4963] tipc: Resetting bearer [ 90.934486][ T4962] tipc: Resetting bearer [ 90.999928][ T4962] tipc: Disabling bearer [ 91.305673][ T4977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.181'. [ 92.934431][ T4324] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 93.143025][ T4324] usb 5-1: Using ep0 maxpacket: 32 [ 93.151438][ T4324] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 93.201216][ T4324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.228078][ T4324] usb 5-1: config 0 descriptor?? [ 93.457217][ T4324] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 93.467990][ T4324] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 93.482154][ T4324] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 93.491588][ T4324] usb 5-1: media controller created [ 93.536326][ T4324] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.668704][ T4324] az6027: usb out operation failed. (-71) [ 93.680323][ T4324] az6027: usb out operation failed. (-71) [ 93.714307][ T4324] stb0899_attach: Driver disabled by Kconfig [ 93.721653][ T4324] az6027: no front-end attached [ 93.721653][ T4324] [ 93.738820][ T4324] az6027: usb out operation failed. (-71) [ 93.751664][ T4324] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 93.776313][ T4324] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 93.816110][ T4324] dvb-usb: schedule remote query interval to 400 msecs. [ 93.835257][ T4324] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 93.899016][ T4324] usb 5-1: USB disconnect, device number 5 [ 94.040407][ T4324] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 95.141286][ T5054] netlink: 52 bytes leftover after parsing attributes in process `syz.1.205'. [ 95.218013][ T5054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.205'. [ 95.333558][ T128] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.536666][ T128] usb 1-1: too many configurations: 47, using maximum allowed: 8 [ 95.550423][ T128] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 95.572064][ T128] usb 1-1: can't read configurations, error -61 [ 95.743192][ T128] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 95.943715][ T128] usb 1-1: too many configurations: 47, using maximum allowed: 8 [ 95.957788][ T128] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 95.974539][ T128] usb 1-1: can't read configurations, error -61 [ 95.985530][ T128] usb usb1-port1: attempt power cycle [ 96.403119][ T128] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 96.445625][ T128] usb 1-1: too many configurations: 47, using maximum allowed: 8 [ 96.461259][ T128] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 96.481453][ T128] usb 1-1: can't read configurations, error -61 [ 96.653158][ T128] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 96.704304][ T128] usb 1-1: too many configurations: 47, using maximum allowed: 8 [ 96.730389][ T128] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 96.767181][ T128] usb 1-1: can't read configurations, error -61 [ 96.802197][ T128] usb usb1-port1: unable to enumerate USB device [ 97.701855][ T5075] netlink: 'syz.1.210': attribute type 1 has an invalid length. [ 97.711155][ T5075] netlink: 'syz.1.210': attribute type 2 has an invalid length. [ 98.088571][ T5091] netlink: 64 bytes leftover after parsing attributes in process `syz.3.214'. [ 98.183124][ T5091] netlink: 64 bytes leftover after parsing attributes in process `syz.3.214'. [ 98.287008][ T5091] netlink: 64 bytes leftover after parsing attributes in process `syz.3.214'. [ 98.335807][ T5091] netlink: 64 bytes leftover after parsing attributes in process `syz.3.214'. [ 98.396175][ T5091] netlink: 64 bytes leftover after parsing attributes in process `syz.3.214'. [ 98.463299][ T5091] netlink: 64 bytes leftover after parsing attributes in process `syz.3.214'. [ 98.492857][ T5091] netlink: 64 bytes leftover after parsing attributes in process `syz.3.214'. [ 98.513490][ T5091] netlink: 64 bytes leftover after parsing attributes in process `syz.3.214'. [ 99.113170][ T128] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 99.318616][ T128] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 99.341400][ T128] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 99.367852][ T128] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 99.414094][ T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.451311][ T5117] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 101.515725][ T4326] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.702989][ T4326] usb 2-1: Using ep0 maxpacket: 16 [ 101.710756][ T4326] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.757608][ T4326] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.781788][ T4326] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.800174][ T4326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.819516][ T4326] usb 2-1: Product: syz [ 101.828235][ T4326] usb 2-1: Manufacturer: syz [ 101.838853][ T4326] usb 2-1: SerialNumber: syz [ 102.066075][ T4326] usb 2-1: 0:2 : does not exist [ 102.117797][ T4326] usb 2-1: USB disconnect, device number 3 [ 102.238676][ T4448] udevd[4448]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 102.435379][ T4345] usb 5-1: USB disconnect, device number 6 [ 102.482081][ T5106] delete_channel: no stack [ 102.591950][ T5157] __nla_validate_parse: 19 callbacks suppressed [ 102.591967][ T5157] netlink: 72 bytes leftover after parsing attributes in process `syz.0.238'. [ 102.698918][ T5162] tipc: Started in network mode [ 102.711598][ T5162] tipc: Node identity defb2ad0639a, cluster identity 4711 [ 102.731210][ T5162] tipc: Enabled bearer , priority 0 [ 102.768608][ T5165] device syzkaller0 entered promiscuous mode [ 102.941002][ T5162] tipc: Resetting bearer [ 102.992708][ T5159] tipc: Resetting bearer [ 103.062209][ T5159] tipc: Disabling bearer [ 103.194394][ T5169] netlink: 52 bytes leftover after parsing attributes in process `syz.3.241'. [ 103.251613][ T5136] syz.2.229 (5136): drop_caches: 1 [ 104.313001][ T4326] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 104.530300][ T4326] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 104.576962][ T4326] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 104.693859][ T4326] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 104.721511][ T4326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.796986][ T5195] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 105.521915][ T5212] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.529409][ T5212] IPv6: NLM_F_CREATE should be set when creating new route [ 105.536657][ T5212] IPv6: NLM_F_CREATE should be set when creating new route [ 105.810304][ T5218] device syzkaller0 entered promiscuous mode [ 107.784910][ T4324] usb 4-1: USB disconnect, device number 4 [ 107.801498][ T5194] delete_channel: no stack [ 107.951119][ T5236] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.960389][ T5236] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.969261][ T5236] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.978113][ T5236] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.454809][ T5254] device syzkaller0 entered promiscuous mode [ 108.461198][ T5255] netlink: 52 bytes leftover after parsing attributes in process `syz.1.270'. [ 109.058587][ T5274] device geneve0 entered promiscuous mode [ 109.793178][ T128] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 109.873014][ T4324] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 109.891694][ T5293] device syzkaller0 entered promiscuous mode [ 110.003061][ T128] usb 4-1: Using ep0 maxpacket: 8 [ 110.015716][ T128] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 110.060418][ T128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.082969][ T4324] usb 1-1: Using ep0 maxpacket: 32 [ 110.089984][ T4324] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 110.151754][ T128] pvrusb2: Hardware description: Terratec Grabster AV400 [ 110.176007][ T4324] usb 1-1: config 0 has no interface number 0 [ 110.198776][ T128] pvrusb2: ********** [ 110.210839][ T4324] usb 1-1: config 0 interface 196 has no altsetting 0 [ 110.225532][ T4324] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 110.243125][ T4324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.253727][ T128] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 110.272448][ T4324] usb 1-1: Product: syz [ 110.296215][ T128] pvrusb2: Important functionality might not be entirely working. [ 110.327963][ T4324] usb 1-1: Manufacturer: syz [ 110.337265][ T128] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 110.387539][ T4324] usb 1-1: SerialNumber: syz [ 110.402135][ T128] pvrusb2: ********** [ 110.431279][ T4324] usb 1-1: config 0 descriptor?? [ 110.431925][ T2305] pvrusb2: Invalid write control endpoint [ 110.655659][ T5286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.678838][ T5286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.713750][ T5286] 8021q: VLANs not supported on vcan0 [ 110.756866][ T4324] ipheth 1-1:0.196: Unable to find endpoints [ 110.818403][ T4324] usb 1-1: USB disconnect, device number 7 [ 110.909745][ T2305] pvrusb2: Invalid write control endpoint [ 110.931059][ T2305] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 110.973113][ T2305] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 111.001068][ T2305] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 111.039334][ T2305] pvrusb2: Device being rendered inoperable [ 111.048404][ T2305] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 111.072223][ T2305] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 111.102572][ T2305] pvrusb2: Attached sub-driver cx25840 [ 111.121400][ T2305] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 111.132625][ T2305] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 111.461824][ T5310] netlink: 52 bytes leftover after parsing attributes in process `syz.2.291'. [ 113.036409][ T128] usb 4-1: USB disconnect, device number 5 [ 113.494487][ T5349] device syzkaller0 entered promiscuous mode [ 114.407084][ T5364] netlink: 'syz.3.304': attribute type 4 has an invalid length. [ 114.507279][ T5367] tipc: Started in network mode [ 114.536584][ T5367] tipc: Node identity c60a93952415, cluster identity 4711 [ 114.588351][ T5367] tipc: Enabled bearer , priority 0 [ 114.618749][ T5370] device syzkaller0 entered promiscuous mode [ 114.818241][ T5370] tipc: Resetting bearer [ 114.881308][ T5365] tipc: Resetting bearer [ 114.935146][ T5365] tipc: Disabling bearer [ 115.713425][ T5420] device syzkaller0 entered promiscuous mode [ 116.296269][ T5438] IPv4: Oversized IP packet from 172.20.20.24 [ 116.303875][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 116.310603][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 117.016384][ T5460] fuse: Bad value for 'fd' [ 117.018232][ T5457] device syzkaller0 entered promiscuous mode [ 117.781518][ T5489] fuse: Bad value for 'fd' [ 118.033201][ T5501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.343'. [ 118.703145][ T4324] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.894723][ T4324] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 118.908702][ T4324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.930498][ T4324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.967620][ T4324] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 119.019708][ T4324] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 119.097134][ T4324] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 119.126764][ T4324] usb 2-1: Manufacturer: syz [ 119.150148][ T4324] usb 2-1: config 0 descriptor?? [ 119.262985][ T128] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 119.463008][ T128] usb 5-1: Using ep0 maxpacket: 8 [ 119.479508][ T128] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 119.570482][ T4324] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 119.589750][ T4324] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 119.618920][ T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.632252][ T4324] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 119.835296][ T128] pvrusb2: Hardware description: Terratec Grabster AV400 [ 119.857073][ T4345] usb 2-1: USB disconnect, device number 4 [ 119.984882][ T5538] fido_id[5538]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 119.999638][ T128] pvrusb2: ********** [ 120.013224][ T128] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 120.059180][ T128] pvrusb2: Important functionality might not be entirely working. [ 120.178225][ T128] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 120.275538][ T5543] fuse: Bad value for 'fd' [ 120.316145][ T128] pvrusb2: ********** [ 120.438358][ T2305] pvrusb2: Invalid write control endpoint [ 120.729118][ T2305] pvrusb2: Invalid write control endpoint [ 120.738905][ T2305] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 120.802862][ T2305] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 120.818768][ T2305] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 120.858608][ T2305] pvrusb2: Device being rendered inoperable [ 120.881956][ T2305] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 120.915777][ T2305] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 120.963216][ T2305] pvrusb2: Attached sub-driver cx25840 [ 120.986851][ T2305] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 121.071871][ T2305] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 121.094387][ T128] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 121.283110][ T128] usb 3-1: Using ep0 maxpacket: 32 [ 121.292677][ T128] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 121.332028][ T128] usb 3-1: config 0 has no interface number 0 [ 121.354967][ T128] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 121.387507][ T128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.426091][ T128] usb 3-1: Product: syz [ 121.449231][ T128] usb 3-1: Manufacturer: syz [ 121.463849][ T128] usb 3-1: SerialNumber: syz [ 121.484727][ T128] usb 3-1: config 0 descriptor?? [ 121.518387][ T128] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 121.553645][ T128] usb 3-1: selecting invalid altsetting 1 [ 121.574596][ T128] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 121.665080][ T128] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 121.700430][ T5560] netlink: 'syz.2.358': attribute type 1 has an invalid length. [ 121.725650][ T5560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.358'. [ 121.784479][ T128] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 121.832878][ T128] usb 3-1: media controller created [ 121.937023][ T128] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.034513][ T128] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 122.062025][ T128] zl10353_read_register: readreg error (reg=127, ret==-71) [ 122.113733][ T128] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 122.293075][ T128] usb 3-1: USB disconnect, device number 4 [ 122.376217][ T5589] netlink: 164 bytes leftover after parsing attributes in process `syz.3.366'. [ 122.676588][ T4311] usb 5-1: USB disconnect, device number 7 [ 123.713080][ T4345] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 123.913093][ T4345] usb 5-1: Using ep0 maxpacket: 16 [ 123.925799][ T4345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 123.964278][ T4345] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 123.986662][ T4345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.000860][ T4345] usb 5-1: Product: syz [ 124.013081][ T4345] usb 5-1: Manufacturer: syz [ 124.019123][ T4345] usb 5-1: SerialNumber: syz [ 124.052303][ T4345] usb 5-1: config 0 descriptor?? [ 124.079931][ T4345] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 124.090194][ T4345] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 124.277600][ T5632] usb usb8: usbfs: process 5632 (syz.3.383) did not claim interface 0 before use [ 124.674449][ T4345] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 124.763101][ T4324] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 124.962973][ T4324] usb 1-1: Using ep0 maxpacket: 8 [ 124.998253][ T4324] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 125.021199][ T4324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.095468][ T4345] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 125.121683][ T4324] pvrusb2: Hardware description: Terratec Grabster AV400 [ 125.149182][ T4345] em28xx 5-1:0.0: board has no eeprom [ 125.163132][ T4324] pvrusb2: ********** [ 125.167149][ T4324] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 125.277537][ T4324] pvrusb2: Important functionality might not be entirely working. [ 125.344016][ T4324] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 125.355621][ T4345] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 125.377104][ T4345] em28xx 5-1:0.0: dvb set to bulk mode. [ 125.429816][ T4324] pvrusb2: ********** [ 125.437191][ T4345] usb 5-1: USB disconnect, device number 8 [ 125.449346][ T4345] em28xx 5-1:0.0: Disconnecting em28xx [ 125.469839][ T2305] pvrusb2: Invalid write control endpoint [ 125.487816][ T4324] em28xx 5-1:0.0: Binding DVB extension [ 125.678095][ T2305] pvrusb2: Invalid write control endpoint [ 125.692002][ T4324] em28xx 5-1:0.0: Registering input extension [ 125.698968][ T2305] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 125.722823][ T4345] em28xx 5-1:0.0: Closing input extension [ 125.745273][ T5651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.769339][ T4345] em28xx 5-1:0.0: Freeing device [ 125.781555][ T2305] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 125.812743][ T2305] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 125.854489][ T2305] pvrusb2: Device being rendered inoperable [ 125.871594][ T2305] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 125.890756][ T2305] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 125.916011][ T2305] pvrusb2: Attached sub-driver cx25840 [ 125.940239][ T2305] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 125.960652][ T5656] tipc: Enabled bearer , priority 0 [ 125.971714][ T5656] device syzkaller0 entered promiscuous mode [ 125.982401][ T2305] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 126.127594][ T5656] tipc: Resetting bearer [ 126.163402][ T5655] tipc: Resetting bearer [ 126.216497][ T5655] tipc: Disabling bearer [ 127.732768][ T5622] Set syz1 is full, maxelem 65536 reached [ 127.772216][ T4311] usb 1-1: USB disconnect, device number 8 [ 128.176573][ T5690] tipc: Started in network mode [ 128.183019][ T5690] tipc: Node identity 024c20de6dd1, cluster identity 4711 [ 128.205520][ T5690] tipc: Enabled bearer , priority 0 [ 128.253187][ T5691] device syzkaller0 entered promiscuous mode [ 128.303172][ T4311] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 128.340163][ T5690] tipc: Resetting bearer [ 128.393142][ T5689] tipc: Resetting bearer [ 128.468755][ T5689] tipc: Disabling bearer [ 128.507032][ T4311] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 128.532055][ T4311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.549221][ T4311] usb 1-1: Product: syz [ 128.561552][ T4311] usb 1-1: Manufacturer: syz [ 128.579630][ T4311] usb 1-1: SerialNumber: syz [ 128.837748][ T4311] rtl8150 1-1:1.0: couldn't reset the device [ 128.862684][ T4311] rtl8150: probe of 1-1:1.0 failed with error -5 [ 128.939536][ T4311] usb 1-1: USB disconnect, device number 9 [ 129.083281][ T27] audit: type=1804 audit(1766747948.006:48): pid=5710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.410" name="/newroot/103/file1" dev="fuse" ino=1 res=1 errno=0 [ 129.182123][ T27] audit: type=1800 audit(1766747948.006:49): pid=5710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.410" name="/" dev="fuse" ino=1 res=0 errno=0 [ 130.336598][ T5736] tipc: Enabled bearer , priority 0 [ 130.360039][ T5736] device syzkaller0 entered promiscuous mode [ 130.467328][ T5736] tipc: Resetting bearer [ 130.482544][ T5735] tipc: Resetting bearer [ 130.524964][ T5735] tipc: Disabling bearer [ 131.322449][ T27] audit: type=1804 audit(1766747950.236:50): pid=5748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.421" name="/newroot/86/file1" dev="fuse" ino=1 res=1 errno=0 [ 131.416301][ T27] audit: type=1800 audit(1766747950.236:51): pid=5748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.421" name="/" dev="fuse" ino=1 res=0 errno=0 [ 132.446852][ T27] audit: type=1800 audit(1766747951.366:52): pid=5753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.422" name="/" dev="fuse" ino=4 res=0 errno=0 [ 132.614926][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.621249][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.653066][ T4326] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 132.864894][ T4326] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.889310][ T4326] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.972231][ T4326] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 133.008492][ T4326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 133.029123][ T4326] usb 5-1: SerialNumber: syz [ 133.258529][ T4326] usb 5-1: 0:2 : does not exist [ 133.311353][ T4326] usb 5-1: USB disconnect, device number 9 [ 133.669180][ T5784] usb usb8: usbfs: process 5784 (syz.2.430) did not claim interface 0 before use [ 133.708788][ T5788] tipc: Enabled bearer , priority 0 [ 133.733919][ T5788] device syzkaller0 entered promiscuous mode [ 133.740189][ T27] audit: type=1804 audit(1766747952.656:53): pid=5793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.432" name="/newroot/78/file1" dev="fuse" ino=1 res=1 errno=0 [ 133.772487][ T27] audit: type=1800 audit(1766747952.656:54): pid=5793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.432" name="/" dev="fuse" ino=1 res=0 errno=0 [ 133.890620][ T5791] tipc: Resetting bearer [ 133.914779][ T5787] tipc: Resetting bearer [ 133.964586][ T5787] tipc: Disabling bearer [ 134.527953][ T5813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 134.582326][ T5814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.437'. [ 136.093048][ T4264] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 136.301350][ T4264] usb 4-1: Using ep0 maxpacket: 32 [ 136.319726][ T4264] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 136.342200][ T4264] usb 4-1: config 0 has no interface number 0 [ 136.367819][ T4264] usb 4-1: config 0 interface 196 has no altsetting 0 [ 136.386716][ T4264] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 136.431202][ T4264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.470610][ T4264] usb 4-1: Product: syz [ 136.488607][ T4264] usb 4-1: Manufacturer: syz [ 136.507123][ T4264] usb 4-1: SerialNumber: syz [ 136.537386][ T5856] tipc: Enabled bearer , priority 0 [ 136.571677][ T4264] usb 4-1: config 0 descriptor?? [ 136.597501][ T5857] device syzkaller0 entered promiscuous mode [ 136.672355][ T5856] tipc: Resetting bearer [ 136.720965][ T5855] tipc: Resetting bearer [ 136.793428][ T4264] ipheth 4-1:0.196: Unable to find endpoints [ 136.832297][ T4264] usb 4-1: USB disconnect, device number 6 [ 136.869803][ T5855] tipc: Disabling bearer [ 138.443009][ T4345] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 138.639815][ T4345] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 138.661622][ T4345] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 138.894762][ T4345] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 139.144164][ T4345] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 139.268973][ T4345] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 139.365672][ T4345] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 139.386396][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'. [ 139.582158][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'. [ 139.591630][ T4345] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 139.655358][ T4345] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 139.828013][ T4345] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 140.084303][ T4345] usb 4-1: string descriptor 0 read error: -22 [ 140.154475][ T4345] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 140.229116][ T4345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.286430][ T4345] adutux 4-1:168.0: interrupt endpoints not found [ 140.929253][ T128] usb 4-1: USB disconnect, device number 7 [ 141.976913][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.475'. [ 142.038087][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.475'. [ 142.844844][ T6009] fuse: Bad value for 'fd' [ 143.063139][ T128] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 143.265592][ T128] usb 2-1: unable to get BOS descriptor or descriptor too short [ 143.303755][ T128] usb 2-1: config 13 has an invalid interface number: 177 but max is 0 [ 143.332450][ T128] usb 2-1: config 13 has no interface number 0 [ 143.353288][ T128] usb 2-1: config 13 interface 177 altsetting 4 has an invalid endpoint with address 0x99, skipping [ 143.369469][ T5975] sctp: [Deprecated]: syz.0.472 (pid 5975) Use of int in maxseg socket option. [ 143.369469][ T5975] Use struct sctp_assoc_value instead [ 143.393386][ T128] usb 2-1: config 13 interface 177 has no altsetting 0 [ 143.423422][ T128] usb 2-1: New USB device found, idVendor=15c2, idProduct=0042, bcdDevice=ef.b8 [ 143.438609][ T128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.475853][ T128] usb 2-1: Product: syz [ 143.490287][ T128] usb 2-1: Manufacturer: syz [ 143.516300][ T128] usb 2-1: SerialNumber: syz [ 143.595983][ T6027] tipc: Enabled bearer , priority 0 [ 143.612786][ T6027] device syzkaller0 entered promiscuous mode [ 143.673724][ T6027] tipc: Resetting bearer [ 143.692520][ T6026] tipc: Resetting bearer [ 143.754658][ T6026] tipc: Disabling bearer [ 143.764196][ T128] imon 2-1:13.177: unable to register, err -19 [ 143.785069][ T128] usbhid 2-1:13.177: couldn't find an input interrupt endpoint [ 143.808331][ T128] usb 2-1: USB disconnect, device number 5 [ 144.103761][ T4326] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 144.288007][ T6044] fuse: Bad value for 'fd' [ 144.295339][ T4326] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.320359][ T4326] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 144.354396][ T4326] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 144.375967][ T4326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.399806][ T4326] usb 5-1: config 0 descriptor?? [ 144.419380][ T4326] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 144.428644][ T4326] dvb-usb: bulk message failed: -22 (3/0) [ 144.448414][ T4326] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 144.466097][ T4326] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 144.490770][ T4326] usb 5-1: media controller created [ 144.511605][ T4326] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 144.554932][ T4326] dvb-usb: bulk message failed: -22 (6/0) [ 144.580485][ T4326] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 144.591758][ T4326] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 144.656455][ T4326] dvb-usb: schedule remote query interval to 150 msecs. [ 144.667067][ T4326] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 144.678623][ T4326] usb 5-1: USB disconnect, device number 10 [ 144.792229][ T4326] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 144.837087][ T6061] tipc: Enabled bearer , priority 0 [ 144.891960][ T6061] device syzkaller0 entered promiscuous mode [ 144.943431][ T6061] tipc: Resetting bearer [ 144.964433][ T6060] tipc: Resetting bearer [ 144.966863][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.503'. [ 145.051258][ T6060] tipc: Disabling bearer [ 145.400872][ T6073] tipc: Enabled bearer , priority 0 [ 145.411179][ T6078] fuse: Bad value for 'fd' [ 145.459237][ T6073] device syzkaller0 entered promiscuous mode [ 145.496919][ T6076] tipc: Resetting bearer [ 145.563227][ T6072] tipc: Resetting bearer [ 145.609595][ T6072] tipc: Disabling bearer [ 146.070409][ T6095] netlink: 'syz.0.511': attribute type 4 has an invalid length. [ 147.662703][ T6127] nvme_fabrics: missing parameter 'transport=%s' [ 147.692502][ T6127] nvme_fabrics: missing parameter 'nqn=%s' [ 148.923074][ T4326] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 149.117831][ T4326] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 149.131939][ T4326] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 149.303108][ T4326] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 149.362927][ T4326] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 149.380364][ T4326] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 149.441027][ T4326] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 149.507226][ T4326] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 149.535859][ T4326] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 149.579430][ T4326] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 149.632344][ T4326] usb 3-1: string descriptor 0 read error: -22 [ 149.689408][ T4326] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 149.734645][ T4326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.786050][ T4326] adutux 3-1:168.0: interrupt endpoints not found [ 150.060881][ T4264] usb 3-1: USB disconnect, device number 5 [ 150.093005][ T4325] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 150.282697][ T6170] tipc: Enabled bearer , priority 0 [ 150.304631][ T6170] device syzkaller0 entered promiscuous mode [ 150.323036][ T4325] usb 4-1: Using ep0 maxpacket: 16 [ 150.329588][ T4325] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.379930][ T6170] tipc: Resetting bearer [ 150.420400][ T6169] tipc: Resetting bearer [ 150.476987][ T6169] tipc: Disabling bearer [ 150.503045][ T4325] usb 4-1: config 0 interface 0 has no altsetting 0 [ 150.553198][ T4325] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 150.562589][ T4325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.575414][ T4325] usb 4-1: config 0 descriptor?? [ 151.029203][ T4325] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 151.474437][ T4324] usb 4-1: USB disconnect, device number 8 [ 151.510547][ T27] audit: type=1326 audit(1766747970.426:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3a98f749 code=0x7ffc0000 [ 151.532671][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.652186][ T27] audit: type=1326 audit(1766747970.456:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3a98f749 code=0x7ffc0000 [ 151.688999][ T6178] fido_id[6178]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 151.741151][ T27] audit: type=1326 audit(1766747970.486:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce3a98df90 code=0x7ffc0000 [ 151.767178][ T27] audit: type=1326 audit(1766747970.486:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3a98f749 code=0x7ffc0000 [ 151.801156][ T27] audit: type=1326 audit(1766747970.486:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3a98f749 code=0x7ffc0000 [ 151.855529][ T27] audit: type=1326 audit(1766747970.486:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fce3a98f749 code=0x7ffc0000 [ 151.919310][ T27] audit: type=1326 audit(1766747970.486:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3a98f749 code=0x7ffc0000 [ 151.978183][ T27] audit: type=1326 audit(1766747970.486:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3a98f749 code=0x7ffc0000 [ 152.000279][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.241907][ T27] audit: type=1326 audit(1766747970.506:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fce3a98f749 code=0x7ffc0000 [ 152.263968][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.302688][ T27] audit: type=1326 audit(1766747970.506:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3a98f749 code=0x7ffc0000 [ 152.807382][ T6210] netlink: 364 bytes leftover after parsing attributes in process `syz.2.548'. [ 152.912980][ T4324] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 153.134597][ T4324] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 153.155258][ T4324] usb 5-1: config 0 has no interface number 0 [ 153.170373][ T4324] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 153.184971][ T4324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.197361][ T4324] usb 5-1: config 0 descriptor?? [ 153.257555][ T4324] usb 5-1: selecting invalid altsetting 1 [ 153.314735][ T4324] dvb_ttusb_budget: ttusb_init_controller: error [ 153.343776][ T4324] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 153.587268][ T4324] DVB: Unable to find symbol cx22700_attach() [ 153.872822][ T4324] DVB: Unable to find symbol tda10046_attach() [ 153.879802][ T4324] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 153.919085][ T4324] usb 5-1: USB disconnect, device number 11 [ 154.283030][ T4264] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 154.472975][ T4264] usb 4-1: Using ep0 maxpacket: 16 [ 154.491144][ T4264] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.552862][ T4264] usb 4-1: config 0 interface 0 has no altsetting 0 [ 154.559781][ T4264] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 154.578123][ T4264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.611104][ T4264] usb 4-1: config 0 descriptor?? [ 154.868190][ T6256] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20001 [ 155.039270][ T4264] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 155.442767][ T4325] usb 4-1: USB disconnect, device number 9 [ 155.506427][ T6271] fido_id[6271]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 156.088385][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.566'. [ 156.149979][ T6294] device bridge0 entered promiscuous mode [ 156.161547][ T6294] device macvlan2 entered promiscuous mode [ 157.298266][ T6321] netlink: 364 bytes leftover after parsing attributes in process `syz.4.575'. [ 160.221635][ T6390] tipc: Enabled bearer , priority 0 [ 160.317342][ T6393] device syzkaller0 entered promiscuous mode [ 160.400650][ T6389] tipc: Resetting bearer [ 160.484753][ T6389] tipc: Disabling bearer [ 160.771841][ T6410] netlink: 'syz.0.600': attribute type 6 has an invalid length. [ 160.833037][ T6414] netlink: 'syz.0.600': attribute type 4 has an invalid length. [ 160.863964][ T6414] netlink: 17 bytes leftover after parsing attributes in process `syz.0.600'. [ 162.312383][ T6450] tipc: Started in network mode [ 162.350656][ T6450] tipc: Node identity 3e1ca51aec1e, cluster identity 4711 [ 162.416014][ T6450] tipc: Enabled bearer , priority 0 [ 162.588055][ T6456] device syzkaller0 entered promiscuous mode [ 162.738388][ T6448] tipc: Resetting bearer [ 162.846386][ T6448] tipc: Disabling bearer [ 164.169599][ T6494] netlink: 56 bytes leftover after parsing attributes in process `syz.3.618'. [ 165.742368][ T6515] tipc: Enabled bearer , priority 0 [ 165.817120][ T6519] device syzkaller0 entered promiscuous mode [ 165.959844][ T6512] tipc: Resetting bearer [ 166.049304][ T6512] tipc: Disabling bearer [ 166.357704][ T6530] capability: warning: `syz.0.626' uses deprecated v2 capabilities in a way that may be insecure [ 167.663962][ T6560] device syzkaller0 entered promiscuous mode [ 167.748168][ T6563] tipc: Enabled bearer , priority 0 [ 167.819373][ T6563] device syzkaller0 entered promiscuous mode [ 167.943736][ T6562] tipc: Resetting bearer [ 168.022616][ T6562] tipc: Disabling bearer [ 168.990416][ T4343] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 169.012535][ T4343] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.102771][ T6596] device syzkaller0 entered promiscuous mode [ 169.249343][ T6591] ------------[ cut here ]------------ [ 169.254997][ T6591] WARNING: CPU: 0 PID: 6591 at mm/page_alloc.c:5590 __alloc_pages+0x2f4/0x4e0 [ 169.263929][ T6591] Modules linked in: [ 169.267819][ T6591] CPU: 0 PID: 6591 Comm: syz.2.647 Not tainted syzkaller #0 [ 169.275135][ T6591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.285208][ T6591] RIP: 0010:__alloc_pages+0x2f4/0x4e0 [ 169.290581][ T6591] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 08 b5 24 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 04 75 3e 44 89 f1 81 e1 7f ff [ 169.310291][ T6591] RSP: 0018:ffffc9000375fa00 EFLAGS: 00010246 [ 169.316416][ T6591] RAX: ffffc9000375fa00 RBX: 1ffff920006ebf44 RCX: 0000000000000000 [ 169.324506][ T6591] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc9000375fa68 [ 169.332499][ T6591] RBP: ffffc9000375fb00 R08: dffffc0000000000 R09: ffffc9000375fa40 [ 169.340545][ T6591] R10: fffff520006ebf4d R11: 1ffff920006ebf48 R12: 000000000000000e [ 169.348563][ T6591] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000 [ 169.356599][ T6591] FS: 00007f6a22e876c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 169.365583][ T6591] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.372160][ T6591] CR2: 00007f6a22e85fe0 CR3: 0000000024532000 CR4: 00000000003506f0 [ 169.380157][ T6591] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 169.388171][ T6591] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 169.396180][ T6591] Call Trace: [ 169.399449][ T6591] [ 169.402369][ T6591] ? zone_statistics+0x170/0x170 [ 169.407374][ T6591] ? __might_fault+0xa6/0x120 [ 169.412074][ T6591] ? __lock_acquire+0x7c50/0x7c50 [ 169.417346][ T6591] ? do_vfs_ioctl+0xcb5/0x1d10 [ 169.422115][ T6591] __kmalloc_large_node+0x8c/0x1e0 [ 169.427259][ T6591] ? raw_ioctl+0x17f7/0x39c0 [ 169.431842][ T6591] __kmalloc+0x110/0x240 [ 169.436144][ T6591] ? _copy_from_user+0x10b/0x170 [ 169.441097][ T6591] raw_ioctl+0x17f7/0x39c0 [ 169.445554][ T6591] ? tomoyo_path_number_perm+0x4ae/0x600 [ 169.451197][ T6591] ? __kmem_cache_free+0xb6/0x1f0 [ 169.456265][ T6591] ? tomoyo_path_number_perm+0x503/0x600 [ 169.461893][ T6591] ? tomoyo_path_number_perm+0x1b6/0x600 [ 169.467561][ T6591] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 169.473064][ T6591] ? make_qualifier+0x3f0/0x3f0 [ 169.477921][ T6591] ? __fget_files+0x28/0x4d0 [ 169.482509][ T6591] ? bpf_lsm_file_ioctl+0x5/0x10 [ 169.487494][ T6591] ? security_file_ioctl+0x7c/0xa0 [ 169.492600][ T6591] ? make_qualifier+0x3f0/0x3f0 [ 169.497488][ T6591] __se_sys_ioctl+0xfa/0x170 [ 169.502078][ T6591] do_syscall_64+0x4c/0xa0 [ 169.506530][ T6591] ? clear_bhb_loop+0x60/0xb0 [ 169.511207][ T6591] ? clear_bhb_loop+0x60/0xb0 [ 169.515922][ T6591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.521820][ T6591] RIP: 0033:0x7f6a21f8f749 [ 169.526325][ T6591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.545989][ T6591] RSP: 002b:00007f6a22e87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.554480][ T6591] RAX: ffffffffffffffda RBX: 00007f6a221e5fa0 RCX: 00007f6a21f8f749 [ 169.562542][ T6591] RDX: 0000200000000140 RSI: 00000000c0085504 RDI: 0000000000000005 [ 169.570551][ T6591] RBP: 00007f6a22013f91 R08: 0000000000000000 R09: 0000000000000000 [ 169.578541][ T6591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.586533][ T6591] R13: 00007f6a221e6038 R14: 00007f6a221e5fa0 R15: 00007ffdf0de21e8 [ 169.594540][ T6591] [ 169.597565][ T6591] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 169.604824][ T6591] CPU: 0 PID: 6591 Comm: syz.2.647 Not tainted syzkaller #0 [ 169.612088][ T6591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.622130][ T6591] Call Trace: [ 169.625448][ T6591] [ 169.628380][ T6591] dump_stack_lvl+0x168/0x22e [ 169.633064][ T6591] ? memcpy+0x3c/0x60 [ 169.637032][ T6591] ? show_regs_print_info+0x12/0x12 [ 169.642313][ T6591] ? load_image+0x3b0/0x3b0 [ 169.646807][ T6591] panic+0x2c9/0x710 [ 169.650688][ T6591] ? bpf_jit_dump+0xd0/0xd0 [ 169.655184][ T6591] __warn+0x2f8/0x4f0 [ 169.659154][ T6591] ? __alloc_pages+0x2f4/0x4e0 [ 169.663914][ T6591] ? __alloc_pages+0x2f4/0x4e0 [ 169.668675][ T6591] report_bug+0x2ba/0x4f0 [ 169.672992][ T6591] ? __alloc_pages+0x2f4/0x4e0 [ 169.677740][ T6591] handle_bug+0x3a/0x70 [ 169.681882][ T6591] exc_invalid_op+0x16/0x40 [ 169.686414][ T6591] asm_exc_invalid_op+0x16/0x20 [ 169.691252][ T6591] RIP: 0010:__alloc_pages+0x2f4/0x4e0 [ 169.696625][ T6591] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 08 b5 24 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 04 75 3e 44 89 f1 81 e1 7f ff [ 169.716224][ T6591] RSP: 0018:ffffc9000375fa00 EFLAGS: 00010246 [ 169.722277][ T6591] RAX: ffffc9000375fa00 RBX: 1ffff920006ebf44 RCX: 0000000000000000 [ 169.730234][ T6591] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc9000375fa68 [ 169.738196][ T6591] RBP: ffffc9000375fb00 R08: dffffc0000000000 R09: ffffc9000375fa40 [ 169.746249][ T6591] R10: fffff520006ebf4d R11: 1ffff920006ebf48 R12: 000000000000000e [ 169.754205][ T6591] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000 [ 169.762175][ T6591] ? zone_statistics+0x170/0x170 [ 169.767105][ T6591] ? __might_fault+0xa6/0x120 [ 169.771770][ T6591] ? __lock_acquire+0x7c50/0x7c50 [ 169.776780][ T6591] ? do_vfs_ioctl+0xcb5/0x1d10 [ 169.781540][ T6591] __kmalloc_large_node+0x8c/0x1e0 [ 169.786645][ T6591] ? raw_ioctl+0x17f7/0x39c0 [ 169.791227][ T6591] __kmalloc+0x110/0x240 [ 169.795471][ T6591] ? _copy_from_user+0x10b/0x170 [ 169.800412][ T6591] raw_ioctl+0x17f7/0x39c0 [ 169.804817][ T6591] ? tomoyo_path_number_perm+0x4ae/0x600 [ 169.810435][ T6591] ? __kmem_cache_free+0xb6/0x1f0 [ 169.815447][ T6591] ? tomoyo_path_number_perm+0x503/0x600 [ 169.821074][ T6591] ? tomoyo_path_number_perm+0x1b6/0x600 [ 169.826692][ T6591] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 169.832134][ T6591] ? make_qualifier+0x3f0/0x3f0 [ 169.836994][ T6591] ? __fget_files+0x28/0x4d0 [ 169.841578][ T6591] ? bpf_lsm_file_ioctl+0x5/0x10 [ 169.846503][ T6591] ? security_file_ioctl+0x7c/0xa0 [ 169.851600][ T6591] ? make_qualifier+0x3f0/0x3f0 [ 169.856435][ T6591] __se_sys_ioctl+0xfa/0x170 [ 169.861014][ T6591] do_syscall_64+0x4c/0xa0 [ 169.865415][ T6591] ? clear_bhb_loop+0x60/0xb0 [ 169.870074][ T6591] ? clear_bhb_loop+0x60/0xb0 [ 169.874740][ T6591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.880623][ T6591] RIP: 0033:0x7f6a21f8f749 [ 169.885020][ T6591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.904616][ T6591] RSP: 002b:00007f6a22e87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.913018][ T6591] RAX: ffffffffffffffda RBX: 00007f6a221e5fa0 RCX: 00007f6a21f8f749 [ 169.920972][ T6591] RDX: 0000200000000140 RSI: 00000000c0085504 RDI: 0000000000000005 [ 169.928928][ T6591] RBP: 00007f6a22013f91 R08: 0000000000000000 R09: 0000000000000000 [ 169.936878][ T6591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.944831][ T6591] R13: 00007f6a221e6038 R14: 00007f6a221e5fa0 R15: 00007ffdf0de21e8 [ 169.952796][ T6591] [ 169.956140][ T6591] Kernel Offset: disabled [ 169.960464][ T6591] Rebooting in 86400 seconds..