last executing test programs: 9.029454196s ago: executing program 2 (id=390): bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map, 0x4, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 8.844513871s ago: executing program 2 (id=392): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x400000, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x400000000008, 0xfffffffd, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) flistxattr(r3, &(0x7f00000005c0)=""/202, 0xca) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r6, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) 8.619462469s ago: executing program 1 (id=394): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) socket$nl_crypto(0x10, 0x3, 0x15) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000003180), 0x200, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 8.36087817s ago: executing program 1 (id=398): openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x4400, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a5108000200"], 0x44}}, 0x0) socket(0x10, 0x2, 0xb) r2 = socket$netlink(0x10, 0x3, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) io_setup(0xea, &(0x7f00000000c0)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') io_submit(r3, 0x1, &(0x7f0000000940)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8, r4, 0x0}]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x8, 0x4000, @fd_index=0x6, 0xefe7, &(0x7f0000000440), 0x0, 0x3, 0x1}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r8, @ANYBLOB="0524060000000001300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x0) 7.343117983s ago: executing program 0 (id=401): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5f24c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x5, 0xbdb, 0x44}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x40) 7.098427563s ago: executing program 2 (id=402): syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x7fff, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd3e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xc41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff951d, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x76e, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x7, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x45d0852c, 0xffffffff, 0x4, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x80000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x6, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400, 0xd}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040), &(0x7f0000000080)) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r0, 0x0, 0x0, 0x0, 0x80000}) 7.00404699s ago: executing program 0 (id=403): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0xf9fd, 0x0) 6.111209993s ago: executing program 1 (id=407): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.038175019s ago: executing program 2 (id=408): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r1, 0x0, 0x0) 6.037415099s ago: executing program 0 (id=418): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="c05abb4dfb91204d4546", @ANYRES32=r1, @ANYBLOB="0c00018005000300030000000c0001800500030003000000100001800c0004800800010078f820000c000180060002000f0000000c00018005000300010000000c0001800500030004000000"], 0x64}, 0x1, 0x0, 0x0, 0x4801}, 0x4891c) socket$rds(0x15, 0x5, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000000001010400000000141a0000020000002400018014020c8008000100e000000108000200640101000c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000"], 0x80}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue1\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380)={0x0, 0x1f3}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904", @ANYRESOCT=r2], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.911926369s ago: executing program 3 (id=410): writev(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x218, 0x0) socket(0x22, 0x2, 0x24) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000018140100000000000000000008"], 0x20}, 0x1, 0xf00, 0x0, 0x40}, 0x10) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x802222, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000000)=0x1) 5.842740105s ago: executing program 3 (id=411): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0x67}, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) 5.720866195s ago: executing program 1 (id=412): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) exit(0x7) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x8}, 0x1) 4.871064754s ago: executing program 3 (id=419): openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x4400, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a5108000200"], 0x44}}, 0x0) socket(0x10, 0x2, 0xb) r2 = socket$netlink(0x10, 0x3, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) io_setup(0xea, &(0x7f00000000c0)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') io_submit(r3, 0x1, &(0x7f0000000940)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8, r4, 0x0}]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x8, 0x4000, @fd_index=0x6, 0xefe7, &(0x7f0000000440), 0x0, 0x3, 0x1}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r8, @ANYBLOB="0524060000000001300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x0) 4.563991989s ago: executing program 4 (id=421): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) memfd_create(0x0, 0x3) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000"], 0xc8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0), r4}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) 4.117524725s ago: executing program 1 (id=422): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000080)={0x3, 0xffffffff, 0x2, 0x5, 0x400, 0x560}) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) 3.925565641s ago: executing program 2 (id=423): syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4731, 0x10100, 0x1, 0x24d, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1200}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r6, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r6, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0003840000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_ep_read(r6, 0x1, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000001680)="f3", 0x1) 3.596380148s ago: executing program 0 (id=424): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r2, 0x0, 0xa0028000}, 0x38) 2.371772767s ago: executing program 3 (id=425): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000007200)=[{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001380)="9f5de9f8b0366dfb7f65ba4fe4f6b07a03417207744e0f8e2ae000e935578d6b0d3fd7f7a5ae4220d534ac72e896c48dfeba9e560a4e70419852b505c98d89520eea9f96c84dcb8b67c97370f1b34dd8854c03f1db60c37af0966696881f6dfd4324d471563d0085f179e12ddc303d56bfcca38e3399d601ea533473e691539ed98dd621f6705960096249b7702bb39308bbf646d5d630b8e703d437f236f9a23dc095822424245c639d8c386e5f0c4b6b2afd8e2d92ec57563f1247a71a61dcf03887fffeac9e613192bc84e3671209e87d32ac8a67901964", 0xd9}, {&(0x7f0000001480)="2f2c0c008fbafec443ac36eb9797f3520ef472e99534f0b28d1d39f36da48232091ebf89523185", 0x27}, {&(0x7f00000014c0)="cf761e5699ca", 0x6}], 0x3, 0x0, 0x0, 0x460}], 0x1, 0x4800) 2.207978841s ago: executing program 3 (id=426): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000180)=0x6e) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, 0x0, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.207787301s ago: executing program 4 (id=427): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) 2.153691005s ago: executing program 4 (id=428): unshare(0x8040400) r0 = socket(0x200000000000011, 0x2, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) 2.043470355s ago: executing program 4 (id=429): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0x67}, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) 1.049801115s ago: executing program 4 (id=430): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 947.948924ms ago: executing program 1 (id=431): socket$inet(0x2, 0x4000000000000001, 0x0) io_uring_setup(0x4f01, &(0x7f00000002c0)={0x0, 0x5a14, 0x400, 0x0, 0xffffffff}) socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_io_uring_setup(0x3f, &(0x7f0000000040)={0x0, 0x0, 0x80, 0xffffff7f, 0x3c0}, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, 0x0, 0xfe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000100), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x10fe8, "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"}, 0x11000}) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x100, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$inet(0x2, 0x1, 0x0) 875.417719ms ago: executing program 0 (id=432): r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 381.271ms ago: executing program 2 (id=433): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$vicodec0(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1, 0x3c, 0x4c, 0x20, 0x15c2, 0xffdc, 0xa41b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9d, 0x0, 0x0, 0x1f, 0x98, 0x8e}}]}}]}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='erofs\x00', 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x4) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000180)={&(0x7f0000001b00)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x140cc014) 175.249646ms ago: executing program 0 (id=434): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, 'vcan0\x00'}}, 0x1e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000296000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xb, 0x0) sendmmsg(r2, 0x0, 0x0, 0x4080) 150.033229ms ago: executing program 4 (id=435): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 0s ago: executing program 3 (id=436): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x4c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x18, 0x51, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x4}]}, {0x4}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x2040000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.164' (ED25519) to the list of known hosts. [ 57.761535][ T4171] cgroup: Unknown subsys name 'net' [ 57.899040][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.377917][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.853863][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 60.921659][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 60.934928][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 60.949576][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 61.013146][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 61.076653][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.084669][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.093180][ T4184] device bridge_slave_0 entered promiscuous mode [ 61.123256][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.130429][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.139080][ T4184] device bridge_slave_1 entered promiscuous mode [ 61.146901][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.154235][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.162197][ T4189] device bridge_slave_0 entered promiscuous mode [ 61.192294][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.200192][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.208245][ T4189] device bridge_slave_1 entered promiscuous mode [ 61.258530][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.265810][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.274366][ T4185] device bridge_slave_0 entered promiscuous mode [ 61.285411][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.292830][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.300837][ T4185] device bridge_slave_1 entered promiscuous mode [ 61.310465][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.328295][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.335866][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.344342][ T4186] device bridge_slave_0 entered promiscuous mode [ 61.369862][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.388579][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.398162][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.405457][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.413384][ T4186] device bridge_slave_1 entered promiscuous mode [ 61.445262][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.470244][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.477788][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.486512][ T4187] device bridge_slave_0 entered promiscuous mode [ 61.496526][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.508039][ T4184] team0: Port device team_slave_0 added [ 61.516373][ T4184] team0: Port device team_slave_1 added [ 61.539012][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.548918][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.556370][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.564348][ T4187] device bridge_slave_1 entered promiscuous mode [ 61.573155][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.600007][ T4189] team0: Port device team_slave_0 added [ 61.608577][ T4189] team0: Port device team_slave_1 added [ 61.615968][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.672159][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.682420][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.689410][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.715861][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.746632][ T4185] team0: Port device team_slave_0 added [ 61.755697][ T4185] team0: Port device team_slave_1 added [ 61.763545][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.773289][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.780271][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.806905][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.818646][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.825914][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.851874][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.866628][ T4186] team0: Port device team_slave_0 added [ 61.897379][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.904746][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.931559][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.944410][ T4186] team0: Port device team_slave_1 added [ 61.972493][ T4187] team0: Port device team_slave_0 added [ 61.997144][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.004260][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.030398][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.043041][ T4187] team0: Port device team_slave_1 added [ 62.049778][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.056924][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.083469][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.095740][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.103155][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.129561][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.166089][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.173398][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.199675][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.227358][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.234434][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.260393][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.285112][ T4184] device hsr_slave_0 entered promiscuous mode [ 62.292026][ T4184] device hsr_slave_1 entered promiscuous mode [ 62.299813][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.307116][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.333827][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.349354][ T4189] device hsr_slave_0 entered promiscuous mode [ 62.356435][ T4189] device hsr_slave_1 entered promiscuous mode [ 62.363489][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.371301][ T4189] Cannot create hsr debugfs directory [ 62.448649][ T4186] device hsr_slave_0 entered promiscuous mode [ 62.455981][ T4186] device hsr_slave_1 entered promiscuous mode [ 62.462846][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.470434][ T4186] Cannot create hsr debugfs directory [ 62.477047][ T1326] Bluetooth: hci0: command 0x0409 tx timeout [ 62.482545][ T2303] Bluetooth: hci1: command 0x0409 tx timeout [ 62.492026][ T4185] device hsr_slave_0 entered promiscuous mode [ 62.498977][ T4185] device hsr_slave_1 entered promiscuous mode [ 62.506265][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.513917][ T4185] Cannot create hsr debugfs directory [ 62.552442][ T1326] Bluetooth: hci2: command 0x0409 tx timeout [ 62.562701][ T2303] Bluetooth: hci4: command 0x0409 tx timeout [ 62.568764][ T2303] Bluetooth: hci3: command 0x0409 tx timeout [ 62.610896][ T4187] device hsr_slave_0 entered promiscuous mode [ 62.617824][ T4187] device hsr_slave_1 entered promiscuous mode [ 62.624666][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.632253][ T4187] Cannot create hsr debugfs directory [ 62.881848][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.894421][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.904762][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.917915][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.980142][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.996960][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.006731][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.016256][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.105670][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.116607][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.129470][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.138715][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.160305][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.190337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.201550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.219435][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.254194][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.264324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.275162][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.284623][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.291830][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.304990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.321810][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.331212][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.343296][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.352261][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.361666][ T3074] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.369161][ T3074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.377971][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.404160][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.419151][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.429973][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.438956][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.452133][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.496963][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.508125][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.519964][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.529257][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.538977][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.547677][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.557520][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.566165][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.576163][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.586086][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.600704][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.624832][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.636688][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.649397][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.665927][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.675408][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.688259][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.711192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.723343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.731762][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.738862][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.751974][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.783319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.791730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.805266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.814685][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.821870][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.830318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.845935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.884198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.892199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.924898][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.934610][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.944496][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.953680][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.962202][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.970152][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.981356][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.993557][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.001880][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.010340][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.021161][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.048687][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.056632][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.070931][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.091379][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.117015][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.131824][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.142170][ T1226] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.149335][ T1226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.192129][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.201252][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.211951][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.221615][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.228784][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.244020][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.253571][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.267524][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.276440][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.289932][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.299565][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.309863][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.322918][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.337306][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.348314][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.359411][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.367960][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.376077][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.399041][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.408401][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.417285][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.430307][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.439179][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.459773][ T4184] device veth0_vlan entered promiscuous mode [ 64.477190][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.485097][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.494459][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.504010][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.512768][ T1226] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.519838][ T1226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.527679][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.536455][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.545014][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.553241][ T4240] Bluetooth: hci0: command 0x041b tx timeout [ 64.559381][ T4249] Bluetooth: hci1: command 0x041b tx timeout [ 64.566441][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.575953][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.583203][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.591037][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.600230][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.608758][ T1226] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.615879][ T1226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.624005][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.632830][ T4240] Bluetooth: hci4: command 0x041b tx timeout [ 64.633116][ T4249] Bluetooth: hci3: command 0x041b tx timeout [ 64.639309][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.653219][ T4240] Bluetooth: hci2: command 0x041b tx timeout [ 64.656547][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.666671][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.674881][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.684137][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.698332][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.706675][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.716103][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.724403][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.745703][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.757049][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.766398][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.780133][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.795292][ T4184] device veth1_vlan entered promiscuous mode [ 64.805866][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.814776][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.824042][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.832868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.869462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.879518][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.888500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.899570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.909532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.918623][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.927958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.936871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.971840][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.000884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.010945][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.027839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.040899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.051046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.060541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.069630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.079191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.088140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.097130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.106557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.116236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.127243][ T4184] device veth0_macvtap entered promiscuous mode [ 65.151677][ T4189] device veth0_vlan entered promiscuous mode [ 65.166615][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.187215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.204308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.218841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.228774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.243367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.251298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.261474][ T4184] device veth1_macvtap entered promiscuous mode [ 65.280793][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.289147][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.316867][ T4189] device veth1_vlan entered promiscuous mode [ 65.355265][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.383474][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.412165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.423615][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.431947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.442311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.460744][ T4189] device veth0_macvtap entered promiscuous mode [ 65.502237][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.518854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.544279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.558210][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.567483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.580559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.589684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.602753][ T4189] device veth1_macvtap entered promiscuous mode [ 65.613912][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.624393][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.633750][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.643555][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.652295][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.665527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.675513][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.691121][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.702183][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.721720][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.754339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.765061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.774429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.783924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.793092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.801783][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.825453][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.836234][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.847719][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.877685][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.887565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.899517][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.909990][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.919290][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.928678][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.955284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.965849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.979941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.989464][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.999142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.007556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.018254][ T4186] device veth0_vlan entered promiscuous mode [ 66.044992][ T4187] device veth0_vlan entered promiscuous mode [ 66.055043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.065414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.078108][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.114767][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.125765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.138465][ T4187] device veth1_vlan entered promiscuous mode [ 66.179429][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.189129][ T4186] device veth1_vlan entered promiscuous mode [ 66.198401][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.215524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.225418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.235930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.279036][ T4281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.285857][ T4187] device veth0_macvtap entered promiscuous mode [ 66.299185][ T4281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.320242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.337110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.346650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.355790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.364522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.373892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.383225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.404254][ T4185] device veth0_vlan entered promiscuous mode [ 66.415584][ T4187] device veth1_macvtap entered promiscuous mode [ 66.426987][ T4186] device veth0_macvtap entered promiscuous mode [ 66.440372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.449745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.458674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.467056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.475589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.498316][ T4185] device veth1_vlan entered promiscuous mode [ 66.505245][ T4281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.514990][ T4281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.529055][ T4186] device veth1_macvtap entered promiscuous mode [ 66.539069][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.549977][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.560016][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.567404][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.568281][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.589790][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.598172][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.615719][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.627111][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.632684][ T4240] Bluetooth: hci1: command 0x040f tx timeout [ 66.639259][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.647297][ T4240] Bluetooth: hci0: command 0x040f tx timeout [ 66.655233][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.671145][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.691572][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.701159][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.712818][ T4240] Bluetooth: hci2: command 0x040f tx timeout [ 66.713812][ T4290] Bluetooth: hci3: command 0x040f tx timeout [ 66.719236][ T4240] Bluetooth: hci4: command 0x040f tx timeout [ 66.758121][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.775272][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.785818][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.797345][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.809146][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.819662][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.829896][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.840565][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.852000][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.880492][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.913576][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.928202][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.939768][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.954964][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.980366][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.990848][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.000150][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.011125][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.022101][ T4185] device veth0_macvtap entered promiscuous mode [ 67.030638][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.041862][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.052076][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.063110][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.073286][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.084531][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.096081][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.111102][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.160237][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.187683][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.202619][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.222123][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.241588][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.269448][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.287409][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.299863][ T4301] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.312451][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.331088][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.339897][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.360122][ T4185] device veth1_macvtap entered promiscuous mode [ 67.458055][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.485334][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.496848][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.509008][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.521959][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.541307][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.574325][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.588344][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.604841][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.652306][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.661772][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.698249][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.709647][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.721841][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.734831][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.745818][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.756910][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.767460][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.778138][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.789487][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.811298][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.822048][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.838850][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.848776][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.857970][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.868531][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.901139][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.931515][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.956116][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.006049][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.015341][ T1226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.022971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.042275][ T1226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.066139][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.081026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.096588][ T4317] netlink: 566 bytes leftover after parsing attributes in process `syz.1.12'. [ 68.171111][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.203539][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.207089][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.258671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.284695][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.323376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.386294][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.433071][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.468160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.624326][ T4326] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 68.671471][ T4326] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 68.730262][ T1326] Bluetooth: hci0: command 0x0419 tx timeout [ 68.751298][ T1326] Bluetooth: hci1: command 0x0419 tx timeout [ 68.794851][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 68.803572][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 68.816099][ T4290] Bluetooth: hci3: command 0x0419 tx timeout [ 69.044619][ T13] hid-generic 0000:0D17:0000.0001: item fetching failed at offset 0/2 [ 69.067975][ T13] hid-generic: probe of 0000:0D17:0000.0001 failed with error -22 [ 69.623251][ T4366] Zero length message leads to an empty skb [ 69.652589][ T4249] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.821751][ T4372] netlink: 'syz.3.27': attribute type 10 has an invalid length. [ 69.944977][ T4372] team0: Port device wlan1 added [ 69.982466][ T4249] usb 1-1: Using ep0 maxpacket: 32 [ 70.018534][ T4372] syz.3.27 (4372) used greatest stack depth: 20384 bytes left [ 70.125517][ T4249] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 70.162603][ T4249] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.219502][ T4249] usb 1-1: config 0 descriptor?? [ 70.285177][ T4249] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 70.832564][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.932563][ T4290] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.136120][ T4248] usb 1-1: USB disconnect, device number 2 [ 71.182462][ T4290] usb 3-1: Using ep0 maxpacket: 8 [ 71.208335][ T23] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 71.252004][ T23] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 71.272233][ T23] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 71.287276][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.293934][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.302921][ T4290] usb 3-1: config 0 has an invalid descriptor of length 65, skipping remainder of the config [ 71.313662][ T4290] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 71.325389][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.334230][ T4290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 98, changing to 10 [ 71.351217][ T4290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 57907, setting to 1024 [ 71.363591][ T4390] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 71.371762][ T4290] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.553503][ T4290] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 71.573460][ T4290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.586119][ T4290] usb 3-1: Product: syz [ 71.591447][ T4290] usb 3-1: Manufacturer: syz [ 71.602752][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 71.632480][ T4290] usb 3-1: SerialNumber: syz [ 71.704931][ T4290] usb 3-1: config 0 descriptor?? [ 71.723469][ T4393] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 71.767659][ T4290] ati_remote_probe: Unexpected desc.bNumEndpoints [ 71.887346][ T4390] fuse: Unknown parameter 'rootmod' [ 71.997449][ T4248] usb 3-1: USB disconnect, device number 2 [ 72.082590][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.129231][ T4417] netlink: 28 bytes leftover after parsing attributes in process `syz.4.39'. [ 72.147118][ T4390] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.175411][ T4417] netlink: 32 bytes leftover after parsing attributes in process `syz.4.39'. [ 72.236783][ T4390] udc-core: couldn't find an available UDC or it's busy [ 72.251080][ T4390] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 72.352549][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 72.472766][ T13] usb 4-1: config 0 has an invalid interface number: 9 but max is 2 [ 72.481235][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.481284][ T4290] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 72.497657][ T13] usb 4-1: config 0 has an invalid interface number: 9 but max is 2 [ 72.517464][ T13] usb 4-1: config 0 has an invalid interface number: 157 but max is 2 [ 72.569263][ T13] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 72.592648][ T13] usb 4-1: config 0 has no interface number 0 [ 72.598885][ T13] usb 4-1: config 0 has no interface number 1 [ 72.606327][ T13] usb 4-1: config 0 interface 9 has no altsetting 0 [ 72.614151][ T13] usb 4-1: config 0 interface 9 has no altsetting 1 [ 72.621118][ T13] usb 4-1: config 0 interface 157 has no altsetting 0 [ 72.812815][ T13] usb 4-1: New USB device found, idVendor=1199, idProduct=6891, bcdDevice=89.a0 [ 72.832131][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.840933][ T13] usb 4-1: Product: syz [ 72.845794][ T13] usb 4-1: Manufacturer: syz [ 72.850553][ T13] usb 4-1: SerialNumber: syz [ 72.852709][ T23] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 72.868249][ T13] usb 4-1: config 0 descriptor?? [ 72.883331][ T4290] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 72.904056][ T4290] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.916595][ T23] usb 5-1: config 0 has no interface number 0 [ 72.924538][ T23] usb 5-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 72.936958][ T4290] usb 1-1: config 0 has no interface number 0 [ 72.955129][ T23] usb 5-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 72.971747][ T23] usb 5-1: config 0 interface 48 has no altsetting 0 [ 72.990751][ T23] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 73.005357][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.029360][ T23] usb 5-1: config 0 descriptor?? [ 73.142781][ T4290] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 73.162931][ T4290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.184433][ T4290] usb 1-1: Product: syz [ 73.190248][ T4290] usb 1-1: Manufacturer: syz [ 73.206155][ T4290] usb 1-1: SerialNumber: syz [ 73.224664][ T13] usb 4-1: selecting invalid altsetting 1 [ 73.237141][ T13] sierra 4-1:0.9: Sierra USB modem converter detected [ 73.247476][ T4290] usb 1-1: config 0 descriptor?? [ 73.286266][ T13] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 73.305900][ T4290] usb 1-1: Found UVC 0.00 device syz (046d:0823) [ 73.318325][ T4290] usb 1-1: No valid video chain found. [ 73.370099][ T13] usb 4-1: USB disconnect, device number 2 [ 73.441567][ T13] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 73.492011][ T13] sierra 4-1:0.9: device disconnected [ 73.522637][ T23] usb 5-1: string descriptor 0 read error: -71 [ 73.563686][ T4248] usb 1-1: USB disconnect, device number 3 [ 73.566906][ T23] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 73.740117][ T23] usb 5-1: USB disconnect, device number 2 [ 73.788488][ T4290] usb 2-1: USB disconnect, device number 2 [ 74.182469][ T4248] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 74.438742][ T4449] netlink: 56 bytes leftover after parsing attributes in process `syz.0.46'. [ 74.466466][ T4449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.46'. [ 74.499772][ T4449] chnl_net:caif_netlink_parms(): no params data found [ 74.553347][ T4248] usb 4-1: not running at top speed; connect to a high speed hub [ 74.643049][ T4248] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 74.658106][ T4248] usb 4-1: config 95 has no interface number 0 [ 74.711268][ T4248] usb 4-1: config 95 interface 1 has no altsetting 0 [ 74.738626][ T4453] crypto_alloc_aead failed rc=-4 [ 74.942927][ T4248] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 74.966601][ T4248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.994079][ T4248] usb 4-1: Product: syz [ 75.006612][ T4248] usb 4-1: Manufacturer: syz [ 75.022284][ T4248] usb 4-1: SerialNumber: syz [ 75.070267][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 75.079808][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 75.482477][ T4290] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 75.563421][ T4248] usb 4-1: USB disconnect, device number 3 [ 75.732457][ T4290] usb 3-1: Using ep0 maxpacket: 32 [ 75.852663][ T4290] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.903900][ T4290] usb 3-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 76.002503][ T4290] usb 3-1: config 0 interface 0 has no altsetting 0 [ 76.022734][ T4290] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 76.032570][ T4290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.063795][ T4290] usb 3-1: config 0 descriptor?? [ 76.114497][ T4290] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 76.322482][ T4290] usb 3-1: USB disconnect, device number 3 [ 76.383083][ T4248] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 76.702498][ T4248] usb 4-1: Using ep0 maxpacket: 8 [ 76.970700][ T4492] input: syz1 as /devices/virtual/input/input5 [ 77.012938][ T4248] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 77.030188][ T4248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.054701][ T4248] usb 4-1: Product: syz [ 77.060187][ T4248] usb 4-1: Manufacturer: syz [ 77.088640][ T4248] usb 4-1: SerialNumber: syz [ 77.122218][ T4248] usb 4-1: config 0 descriptor?? [ 77.394735][ T4248] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 77.459294][ T4499] Cannot find set identified by id 0 to match [ 78.086424][ T4517] tipc: Started in network mode [ 78.112627][ T4517] tipc: Node identity 628df4b9ce54, cluster identity 4711 [ 78.163168][ T4517] tipc: Enabled bearer , priority 0 [ 78.297295][ T4517] tipc: Resetting bearer [ 78.327246][ T2303] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 78.350766][ T4514] tipc: Disabling bearer [ 78.443274][ T4248] gspca_sunplus: reg_w_riv err -110 [ 78.448756][ T4248] sunplus: probe of 4-1:0.0 failed with error -110 [ 78.496643][ T4403] udevd[4403]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.537202][ T2303] usb 1-1: device descriptor read/64, error -71 [ 78.654259][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 78.832584][ T2303] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 78.859080][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 79.032665][ T2303] usb 1-1: device descriptor read/64, error -71 [ 79.172742][ T2303] usb usb1-port1: attempt power cycle [ 79.370978][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 79.380331][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 79.780622][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 79.789834][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!! [ 79.798955][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!! [ 80.332559][ T2303] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 80.551941][ T2303] usb 1-1: device descriptor read/8, error -71 [ 81.269536][ T1326] usb 4-1: USB disconnect, device number 4 [ 81.496503][ T4562] netlink: 56 bytes leftover after parsing attributes in process `syz.3.70'. [ 81.609488][ T4563] tipc: Enabled bearer , priority 0 [ 81.657676][ T4563] tipc: Resetting bearer [ 81.687861][ T4559] tipc: Disabling bearer [ 82.142535][ T4290] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.742657][ T4290] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 82.761498][ T4290] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.791755][ T4290] usb 5-1: config 0 has no interface number 0 [ 83.032840][ T4290] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 83.041998][ T4290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.355814][ T4290] usb 5-1: Product: syz [ 83.377400][ T4290] usb 5-1: Manufacturer: syz [ 83.410095][ T4290] usb 5-1: SerialNumber: syz [ 83.462763][ T4290] usb 5-1: config 0 descriptor?? [ 83.523408][ T4290] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 83.529916][ T4290] usb 5-1: No valid video chain found. [ 83.768491][ T4290] usb 5-1: USB disconnect, device number 3 [ 84.752528][ T4290] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 84.960358][ T4598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.83'. [ 84.969767][ T4598] netlink: 32 bytes leftover after parsing attributes in process `syz.3.83'. [ 85.082576][ T4290] usb 5-1: not running at top speed; connect to a high speed hub [ 85.172754][ T4290] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 85.202517][ T4290] usb 5-1: config 95 has no interface number 0 [ 85.245664][ T4290] usb 5-1: config 95 interface 1 has no altsetting 0 [ 85.262586][ T2303] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 85.292688][ T4289] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 85.420313][ T4616] tipc: Enabled bearer , priority 0 [ 85.437188][ T4616] tipc: Resetting bearer [ 85.442753][ T4290] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 85.452750][ T4290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.460779][ T4290] usb 5-1: Product: syz [ 85.465477][ T4290] usb 5-1: Manufacturer: syz [ 85.466400][ T4615] tipc: Disabling bearer [ 85.470102][ T4290] usb 5-1: SerialNumber: syz [ 85.532417][ T4289] usb 1-1: Using ep0 maxpacket: 16 [ 85.642535][ T2303] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 85.650821][ T2303] usb 4-1: config 0 has no interface number 0 [ 85.660987][ T4289] usb 1-1: config 0 has an invalid interface number: 9 but max is 2 [ 85.669126][ T2303] usb 4-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 85.680256][ T4289] usb 1-1: config 0 has an invalid interface number: 9 but max is 2 [ 85.688444][ T4289] usb 1-1: config 0 has an invalid interface number: 157 but max is 2 [ 85.696800][ T2303] usb 4-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 85.710794][ T4289] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 85.720378][ T2303] usb 4-1: config 0 interface 48 has no altsetting 0 [ 85.727195][ T4289] usb 1-1: config 0 has no interface number 0 [ 85.733497][ T2303] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 85.742862][ T4289] usb 1-1: config 0 has no interface number 1 [ 85.749089][ T4289] usb 1-1: config 0 interface 9 has no altsetting 0 [ 85.756333][ T2303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.765078][ T4289] usb 1-1: config 0 interface 9 has no altsetting 1 [ 85.771978][ T4289] usb 1-1: config 0 interface 157 has no altsetting 0 [ 85.781205][ T2303] usb 4-1: config 0 descriptor?? [ 85.932908][ T4290] usb 5-1: USB disconnect, device number 4 [ 85.947471][ T4289] usb 1-1: New USB device found, idVendor=1199, idProduct=6891, bcdDevice=89.a0 [ 85.962429][ T4289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.985769][ T4403] udevd[4403]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.002873][ T4289] usb 1-1: Product: syz [ 86.007158][ T4289] usb 1-1: Manufacturer: syz [ 86.011768][ T4289] usb 1-1: SerialNumber: syz [ 86.034420][ T4289] usb 1-1: config 0 descriptor?? [ 86.242498][ T2303] usb 4-1: string descriptor 0 read error: -71 [ 86.250593][ T2303] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 86.335609][ T2303] usb 4-1: USB disconnect, device number 5 [ 86.363676][ T4289] usb 1-1: selecting invalid altsetting 1 [ 86.369886][ T4289] sierra 1-1:0.9: Sierra USB modem converter detected [ 86.409802][ T4289] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 86.471951][ T4289] usb 1-1: USB disconnect, device number 8 [ 86.509139][ T4289] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 86.551666][ T4289] sierra 1-1:0.9: device disconnected [ 86.582548][ T4290] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 86.635547][ T1108] cfg80211: failed to load regulatory.db [ 86.842450][ T4290] usb 2-1: Using ep0 maxpacket: 8 [ 86.848116][ T2303] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 86.972631][ T4290] usb 2-1: config 0 has an invalid descriptor of length 65, skipping remainder of the config [ 87.043284][ T4290] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 87.108570][ T4290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 98, changing to 10 [ 87.140199][ T4290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 57907, setting to 1024 [ 87.165914][ T4290] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.186280][ T1326] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 87.242579][ T2303] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 87.261835][ T2303] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 87.279936][ T2303] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 87.296741][ T2303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.336774][ T4630] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 87.402589][ T4290] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 87.422298][ T4290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.453316][ T4290] usb 2-1: Product: syz [ 87.463831][ T4290] usb 2-1: Manufacturer: syz [ 87.474079][ T4290] usb 2-1: SerialNumber: syz [ 87.490933][ T4290] usb 2-1: config 0 descriptor?? [ 87.523481][ T1326] usb 3-1: not running at top speed; connect to a high speed hub [ 87.529608][ T4624] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 87.546990][ T4290] ati_remote_probe: Unexpected desc.bNumEndpoints [ 87.616675][ T1326] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 87.626839][ T1326] usb 3-1: config 95 has no interface number 0 [ 87.637968][ T1326] usb 3-1: config 95 interface 1 has no altsetting 0 [ 87.686638][ T4630] fuse: Unknown parameter 'rootmod' [ 87.776303][ T4290] usb 2-1: USB disconnect, device number 3 [ 87.802646][ T1326] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 87.813473][ T1326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.821492][ T1326] usb 3-1: Product: syz [ 87.825995][ T1326] usb 3-1: Manufacturer: syz [ 87.830939][ T1326] usb 3-1: SerialNumber: syz [ 87.912122][ T4630] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 87.951696][ T4630] udc-core: couldn't find an available UDC or it's busy [ 87.962702][ T4630] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 88.164559][ T4651] tipc: Enabling of bearer rejected, failed to enable media [ 88.311828][ T1326] usb 3-1: USB disconnect, device number 4 [ 88.704907][ T1326] usb 5-1: USB disconnect, device number 5 [ 88.801864][ T4667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.108'. [ 88.885869][ T4667] netlink: 32 bytes leftover after parsing attributes in process `syz.2.108'. [ 89.252459][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 89.612594][ T7] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 89.625140][ T4692] tipc: Enabling of bearer rejected, failed to enable media [ 89.634325][ T7] usb 3-1: config 0 has no interface number 0 [ 89.640566][ T7] usb 3-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 89.651818][ T4690] netlink: 'syz.0.116': attribute type 10 has an invalid length. [ 89.652472][ T7] usb 3-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 89.698067][ T7] usb 3-1: config 0 interface 48 has no altsetting 0 [ 89.712611][ T7] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 89.720758][ T4690] team0: Port device wlan1 added [ 89.732536][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.742477][ T13] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 89.771314][ T7] usb 3-1: config 0 descriptor?? [ 89.992523][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 90.122519][ T13] usb 2-1: config 0 has an invalid interface number: 9 but max is 2 [ 90.137705][ T13] usb 2-1: config 0 has an invalid interface number: 9 but max is 2 [ 90.150660][ T13] usb 2-1: config 0 has an invalid interface number: 157 but max is 2 [ 90.163676][ T13] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 90.175042][ T13] usb 2-1: config 0 has no interface number 0 [ 90.187619][ T13] usb 2-1: config 0 has no interface number 1 [ 90.200494][ T13] usb 2-1: config 0 interface 9 has no altsetting 0 [ 90.209307][ T13] usb 2-1: config 0 interface 9 has no altsetting 1 [ 90.218375][ T13] usb 2-1: config 0 interface 157 has no altsetting 0 [ 90.242521][ T7] usb 3-1: string descriptor 0 read error: -71 [ 90.250169][ T7] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 90.312941][ T4290] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 90.342545][ T1108] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 90.346108][ T7] usb 3-1: USB disconnect, device number 5 [ 90.393384][ T13] usb 2-1: New USB device found, idVendor=1199, idProduct=6891, bcdDevice=89.a0 [ 90.408183][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.416490][ T13] usb 2-1: Product: syz [ 90.428268][ T13] usb 2-1: Manufacturer: syz [ 90.433749][ T13] usb 2-1: SerialNumber: syz [ 90.457047][ T13] usb 2-1: config 0 descriptor?? [ 90.592538][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 90.712697][ T4290] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 90.723976][ T1108] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 90.733166][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.741669][ T4290] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 90.773301][ T1108] usb 5-1: config 0 descriptor?? [ 90.779290][ T4290] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 90.793606][ T13] usb 2-1: selecting invalid altsetting 1 [ 90.814992][ T13] sierra 2-1:0.9: Sierra USB modem converter detected [ 90.824050][ T1108] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 90.830616][ T4290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.867902][ T13] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 90.922842][ T4706] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 90.977837][ T13] usb 2-1: USB disconnect, device number 4 [ 91.049140][ T13] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 91.088504][ T13] sierra 2-1:0.9: device disconnected [ 91.327880][ T4706] fuse: Unknown parameter 'rootmod' [ 91.682188][ T4290] usb 5-1: USB disconnect, device number 6 [ 91.702057][ T4739] tipc: Enabling of bearer rejected, failed to enable media [ 92.031032][ T13] usb 1-1: USB disconnect, device number 9 [ 92.183163][ T4753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.133'. [ 92.222519][ T4753] netlink: 32 bytes leftover after parsing attributes in process `syz.3.133'. [ 92.534835][ T4290] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 92.932756][ T4290] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 92.940939][ T4290] usb 4-1: config 0 has no interface number 0 [ 92.977656][ T4290] usb 4-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 93.003017][ T4290] usb 4-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 93.031284][ T4290] usb 4-1: config 0 interface 48 has no altsetting 0 [ 93.033740][ T4789] tipc: Enabling of bearer rejected, failed to enable media [ 93.077639][ T4290] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 93.096361][ T4290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.136332][ T4290] usb 4-1: config 0 descriptor?? [ 93.592638][ T4290] usb 4-1: string descriptor 0 read error: -71 [ 93.611033][ T4290] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 93.704203][ T4290] usb 4-1: USB disconnect, device number 6 [ 94.000610][ T4806] netlink: 'syz.2.147': attribute type 1 has an invalid length. [ 94.349401][ T4813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.150'. [ 94.598535][ T4823] tipc: Enabling of bearer rejected, failed to enable media [ 94.930835][ T4848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.161'. [ 94.940662][ T4848] netlink: 32 bytes leftover after parsing attributes in process `syz.3.161'. [ 95.222609][ T4290] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 95.519319][ T4861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168'. [ 95.548621][ T4861] IPv6: Can't replace route, no match found [ 95.584989][ T4290] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 95.619711][ T4290] usb 4-1: config 0 has no interface number 0 [ 95.648584][ T4290] usb 4-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 95.675384][ T4290] usb 4-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 95.701614][ T4290] usb 4-1: config 0 interface 48 has no altsetting 0 [ 95.714800][ T4290] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 95.741798][ T4290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.761154][ T4867] syz.4.170 uses obsolete (PF_INET,SOCK_PACKET) [ 95.778843][ T4290] usb 4-1: config 0 descriptor?? [ 95.785235][ T4867] device syzkaller1 entered promiscuous mode [ 96.242560][ T4290] usb 4-1: string descriptor 0 read error: -71 [ 96.258588][ T4290] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 96.620944][ T4290] usb 4-1: USB disconnect, device number 7 [ 96.754164][ T4878] tipc: Enabling of bearer rejected, failed to enable media [ 98.049382][ T4920] netlink: 28 bytes leftover after parsing attributes in process `syz.3.186'. [ 98.121718][ T4920] netlink: 32 bytes leftover after parsing attributes in process `syz.3.186'. [ 98.309828][ T4927] tipc: Enabled bearer , priority 0 [ 98.324966][ T4927] device syzkaller0 entered promiscuous mode [ 98.363111][ T4289] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 98.386191][ T4927] tipc: Resetting bearer [ 98.426772][ T4926] tipc: Resetting bearer [ 98.460655][ T4926] tipc: Disabling bearer [ 98.732783][ T4289] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 98.744177][ T4289] usb 4-1: config 0 has no interface number 0 [ 98.765105][ T4289] usb 4-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 98.798095][ T4289] usb 4-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 98.839574][ T4289] usb 4-1: config 0 interface 48 has no altsetting 0 [ 98.861807][ T4289] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 98.893950][ T4289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.938565][ T4289] usb 4-1: config 0 descriptor?? [ 99.432870][ T4289] usb 4-1: string descriptor 0 read error: -71 [ 99.447266][ T4289] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 99.547974][ T4289] usb 4-1: USB disconnect, device number 8 [ 100.001828][ T4956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.198'. [ 100.929153][ T4991] netlink: 28 bytes leftover after parsing attributes in process `syz.3.208'. [ 101.074913][ T4991] netlink: 32 bytes leftover after parsing attributes in process `syz.3.208'. [ 101.422740][ T1326] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 101.792986][ T1326] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 101.819401][ T1326] usb 4-1: config 0 has no interface number 0 [ 101.859307][ T1326] usb 4-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 101.900860][ T1326] usb 4-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 101.944456][ T1326] usb 4-1: config 0 interface 48 has no altsetting 0 [ 101.964382][ T1326] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 101.991431][ T1326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.023914][ T1326] usb 4-1: config 0 descriptor?? [ 102.512794][ T1326] usb 4-1: string descriptor 0 read error: -71 [ 102.594134][ T1326] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 102.750866][ T1326] usb 4-1: USB disconnect, device number 9 [ 102.930385][ T5005] vivid-000: disconnect [ 102.968936][ T5004] vivid-000: reconnect [ 103.115725][ T23] hid-generic 0000:0D17:0000.0002: item fetching failed at offset 0/2 [ 103.135209][ T23] hid-generic: probe of 0000:0D17:0000.0002 failed with error -22 [ 103.506381][ T5032] kvm: pic: non byte write [ 103.752558][ T23] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 104.142570][ T23] usb 3-1: config 1 interface 0 has no altsetting 0 [ 104.312757][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 104.346129][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.374579][ T23] usb 3-1: Product: syz [ 104.394986][ T23] usb 3-1: Manufacturer: syz [ 104.409829][ T23] usb 3-1: SerialNumber: syz [ 105.002112][ T5058] netlink: 28 bytes leftover after parsing attributes in process `syz.4.228'. [ 105.060852][ T5058] netlink: 32 bytes leftover after parsing attributes in process `syz.4.228'. [ 105.150701][ T23] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 105.399708][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 105.772591][ T7] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 105.785530][ T7] usb 5-1: config 0 has no interface number 0 [ 105.793676][ T7] usb 5-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 105.806290][ T7] usb 5-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 105.821942][ T7] usb 5-1: config 0 interface 48 has no altsetting 0 [ 105.838860][ T7] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 105.850282][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.891817][ T7] usb 5-1: config 0 descriptor?? [ 106.362507][ T7] usb 5-1: string descriptor 0 read error: -71 [ 106.375137][ T7] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 106.455494][ T7] usb 5-1: USB disconnect, device number 7 [ 106.621633][ T13] usb 3-1: USB disconnect, device number 6 [ 106.650014][ T13] usblp0: removed [ 106.962042][ T5088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.238'. [ 107.124515][ T5092] ptrace attach of "./syz-executor exec"[4185] was attempted by "./syz-executor exec"[5092] [ 107.472197][ T5107] tipc: Enabling of bearer rejected, failed to enable media [ 107.974025][ T5124] program syz.4.257 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.211051][ T5153] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 111.527647][ T5163] tipc: Enabling of bearer rejected, failed to enable media [ 112.087618][ T5186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.266'. [ 112.130181][ T5186] netlink: 32 bytes leftover after parsing attributes in process `syz.1.266'. [ 112.482430][ T13] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 112.882647][ T13] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 112.912360][ T13] usb 2-1: config 0 has no interface number 0 [ 112.993547][ T13] usb 2-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 113.052499][ T13] usb 2-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 113.228285][ T13] usb 2-1: config 0 interface 48 has no altsetting 0 [ 113.289898][ T5211] loop6: detected capacity change from 0 to 524287999 [ 113.301568][ T13] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 113.362508][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.388714][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.400035][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.442783][ T13] usb 2-1: config 0 descriptor?? [ 113.470494][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.481502][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.597340][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 113.608828][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 113.620599][ C0] blk_update_request: I/O error, dev loop6, sector 1082 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 0 [ 113.632277][ C0] blk_update_request: I/O error, dev loop6, sector 1082 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 0 [ 113.646367][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.657279][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.665146][ C0] blk_update_request: I/O error, dev loop6, sector 2106 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 113.676816][ C0] blk_update_request: I/O error, dev loop6, sector 2106 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 113.688531][ C0] blk_update_request: I/O error, dev loop6, sector 3210 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 0 [ 113.722421][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.752824][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.760990][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.770179][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.785231][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.793599][ T4716] ldm_validate_partition_table(): Disk read failed. [ 113.806157][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.848690][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.859086][ T4716] Dev loop6: unable to read RDB block 0 [ 113.875457][ T4716] loop6: unable to read partition table [ 114.042552][ T13] usb 2-1: string descriptor 0 read error: -71 [ 114.050103][ T5211] ldm_validate_partition_table(): Disk read failed. [ 114.074232][ T13] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 114.115245][ T5211] Dev loop6: unable to read RDB block 0 [ 114.180002][ T13] usb 2-1: USB disconnect, device number 5 [ 114.187390][ T5211] loop6: unable to read partition table [ 114.212742][ T5211] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 114.250130][ T3563] ldm_validate_partition_table(): Disk read failed. [ 114.250895][ T5219] tipc: Enabling of bearer rejected, failed to enable media [ 114.273575][ T3563] Dev loop6: unable to read RDB block 0 [ 114.299507][ T3563] loop6: unable to read partition table [ 116.914826][ T5264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.288'. [ 117.058534][ T5264] netlink: 32 bytes leftover after parsing attributes in process `syz.1.288'. [ 117.232482][ T2303] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 117.257884][ T5267] tipc: Started in network mode [ 117.277546][ T5267] tipc: Node identity e625606f9599, cluster identity 4711 [ 117.293886][ T5267] tipc: Enabled bearer , priority 0 [ 117.392178][ T5267] tipc: Resetting bearer [ 117.455894][ T5266] tipc: Disabling bearer [ 117.632874][ T2303] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 117.650147][ T2303] usb 2-1: config 0 has no interface number 0 [ 117.709751][ T2303] usb 2-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 117.872192][ T2303] usb 2-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 117.894590][ T2303] usb 2-1: config 0 interface 48 has no altsetting 0 [ 117.901592][ T2303] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 117.920762][ T2303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.932270][ T2303] usb 2-1: config 0 descriptor?? [ 118.278557][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 118.472962][ T2303] usb 2-1: string descriptor 0 read error: -71 [ 118.481792][ T2303] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 118.533585][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 118.574619][ T2303] usb 2-1: USB disconnect, device number 6 [ 118.644775][ T5296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'. [ 118.658085][ T23] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 118.672410][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.682132][ T5296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'. [ 118.737254][ T23] pvrusb2: Hardware description: Terratec Grabster AV400 [ 118.744080][ T5301] tipc: Started in network mode [ 118.749326][ T5301] tipc: Node identity f28a2fc5c1a5, cluster identity 4711 [ 118.756866][ T5301] tipc: Enabled bearer , priority 0 [ 118.770812][ T23] pvrusb2: ********** [ 118.776244][ T23] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 118.790735][ T23] pvrusb2: Important functionality might not be entirely working. [ 118.796829][ T5301] tipc: Resetting bearer [ 118.800597][ T23] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 118.821156][ T5300] tipc: Disabling bearer [ 118.840869][ T23] pvrusb2: ********** [ 118.965229][ T2427] pvrusb2: Invalid write control endpoint [ 119.168189][ T5277] pvrusb2: Invalid write control endpoint [ 119.184146][ T13] usb 4-1: USB disconnect, device number 10 [ 119.190625][ T2427] pvrusb2: Invalid write control endpoint [ 119.211283][ T2427] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 119.226716][ T2427] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 119.235812][ T2427] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 119.252260][ T2427] pvrusb2: Device being rendered inoperable [ 119.265336][ T2427] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 119.345550][ T2427] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 119.359451][ T2427] pvrusb2: Attached sub-driver cx25840 [ 119.380145][ T2427] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 119.434864][ T2427] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 119.452642][ T2303] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 119.754753][ T5325] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 119.812564][ T2303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 119.825069][ T2303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.860139][ T2303] usb 2-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 119.914097][ T2303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.955388][ T2303] usb 2-1: config 0 descriptor?? [ 120.380051][ T5336] netlink: 28 bytes leftover after parsing attributes in process `syz.3.316'. [ 120.439988][ T2303] glorious 0003:258A:0036.0003: item fetching failed at offset 0/2 [ 120.449386][ T5336] netlink: 32 bytes leftover after parsing attributes in process `syz.3.316'. [ 120.461825][ T2303] glorious: probe of 0003:258A:0036.0003 failed with error -22 [ 120.637400][ T2303] usb 2-1: USB disconnect, device number 7 [ 120.722429][ T4240] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 121.204846][ T4240] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 121.267749][ T4240] usb 4-1: config 0 has no interface number 0 [ 121.277987][ T4240] usb 4-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 121.289458][ T4240] usb 4-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 121.302862][ T4240] usb 4-1: config 0 interface 48 has no altsetting 0 [ 121.309699][ T4240] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 121.335995][ T4240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.388449][ T4240] usb 4-1: config 0 descriptor?? [ 121.952423][ T4240] usb 4-1: string descriptor 0 read error: -71 [ 121.960474][ T4240] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 122.335642][ T4240] usb 4-1: USB disconnect, device number 11 [ 123.003219][ T4290] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 123.382681][ T4290] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 123.406739][ T4290] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 123.458170][ T4290] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 123.487454][ T4290] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 123.652556][ T4290] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 123.662456][ T4290] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 123.672659][ T4290] usb 3-1: Product: syz [ 123.677019][ T4290] usb 3-1: Manufacturer: syz [ 123.702815][ T5398] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 123.723339][ T4290] cdc_wdm 3-1:1.0: skipping garbage [ 123.730068][ T4290] cdc_wdm 3-1:1.0: skipping garbage [ 123.749525][ T4290] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 123.926851][ T1326] usb 3-1: USB disconnect, device number 7 [ 124.382512][ T4290] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 124.412611][ T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 124.652625][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 124.740496][ T5422] device syzkaller0 entered promiscuous mode [ 124.752804][ T4290] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.769396][ T4290] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 124.778933][ T23] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 124.802068][ T4290] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 124.816485][ T4290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.828525][ T4290] usb 4-1: config 0 descriptor?? [ 124.952623][ T23] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 124.979744][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.995744][ T23] usb 1-1: Product: syz [ 125.000377][ T23] usb 1-1: Manufacturer: syz [ 125.005648][ T23] usb 1-1: SerialNumber: syz [ 125.018274][ T23] usb 1-1: config 0 descriptor?? [ 125.066297][ T23] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 125.123719][ T23] usb 1-1: setting power ON [ 125.157600][ T5432] program syz.2.353 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.169913][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 125.217483][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.267198][ T5411] dvb-usb: bulk message failed: -22 (3/0) [ 125.284689][ T23] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 125.292807][ T5411] dvb-usb: bulk message failed: -22 (5/0) [ 125.325318][ T5411] cxusb: i2c wr: len=79 is too big! [ 125.325318][ T5411] [ 125.418176][ T23] usb 1-1: media controller created [ 125.633461][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.696492][ T4248] usb 4-1: USB disconnect, device number 12 [ 125.756348][ T23] usb 1-1: selecting invalid altsetting 6 [ 125.781172][ T23] usb 1-1: digital interface selection failed (-22) [ 125.802633][ T23] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 125.852857][ T23] usb 1-1: setting power OFF [ 125.858993][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 125.865580][ T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 125.892387][ T23] (NULL device *): no alternate interface [ 125.959213][ T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 126.068575][ T23] usb 1-1: USB disconnect, device number 10 [ 126.132478][ T5456] device syzkaller0 entered promiscuous mode [ 127.212503][ T4248] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 127.433604][ T5497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.375'. [ 127.462856][ T5497] netlink: 32 bytes leftover after parsing attributes in process `syz.0.375'. [ 127.762499][ T1326] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 127.852472][ T4248] usb 4-1: config 0 has no interfaces? [ 127.938432][ T5500] device syzkaller0 entered promiscuous mode [ 128.132898][ T1326] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 128.141046][ T1326] usb 1-1: config 0 has no interface number 0 [ 128.162568][ T1326] usb 1-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 128.212544][ T4248] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 128.242441][ T1326] usb 1-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 128.259856][ T4248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.296296][ T4248] usb 4-1: Product: syz [ 128.320717][ T1326] usb 1-1: config 0 interface 48 has no altsetting 0 [ 128.328177][ T4248] usb 4-1: Manufacturer: syz [ 128.348224][ T4248] usb 4-1: SerialNumber: syz [ 128.356062][ T1326] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 128.367132][ T1326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.376032][ T4248] usb 4-1: config 0 descriptor?? [ 128.407800][ T1326] usb 1-1: config 0 descriptor?? [ 128.873906][ T1326] usb 1-1: string descriptor 0 read error: -71 [ 128.888454][ T1326] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 129.004888][ T1326] usb 1-1: USB disconnect, device number 11 [ 129.802406][ T4248] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 130.092560][ T4248] usb 1-1: Using ep0 maxpacket: 8 [ 130.232746][ T4248] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 130.255988][ T4248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.274244][ T5537] device syzkaller0 entered promiscuous mode [ 130.334176][ T4248] pvrusb2: Hardware description: Terratec Grabster AV400 [ 130.352501][ T4248] pvrusb2: ********** [ 130.366521][ T4248] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 130.407529][ T4248] pvrusb2: Important functionality might not be entirely working. [ 130.441038][ T4248] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 130.481610][ T4248] pvrusb2: ********** [ 130.556464][ T2427] pvrusb2: Invalid write control endpoint [ 130.718941][ T2427] pvrusb2: Invalid write control endpoint [ 130.732426][ T2427] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 130.786277][ T2427] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 130.835751][ T2427] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 130.856136][ T2427] pvrusb2: Device being rendered inoperable [ 130.871408][ T5528] pvrusb2: Attempted to execute control transfer when device not ok [ 130.902619][ T2427] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 130.910562][ T4248] usb 1-1: USB disconnect, device number 12 [ 130.930808][ T2427] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 130.949491][ T5544] device netdevsim0 entered promiscuous mode [ 130.969153][ T2427] pvrusb2: Attached sub-driver cx25840 [ 131.015778][ T2427] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 131.032710][ T2427] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 131.056255][ T5542] device netdevsim0 left promiscuous mode [ 131.226355][ T4289] usb 4-1: USB disconnect, device number 13 [ 131.539748][ T5559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.396'. [ 131.577980][ T5559] netlink: 32 bytes leftover after parsing attributes in process `syz.3.396'. [ 131.775304][ T5566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.398'. [ 131.794157][ T5566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.398'. [ 132.092512][ T4289] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 132.487578][ T4289] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 132.527233][ T4289] usb 4-1: config 0 has no interface number 0 [ 132.549273][ T4289] usb 4-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 132.586206][ T4289] usb 4-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 132.593565][ T5576] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 132.645873][ T4289] usb 4-1: config 0 interface 48 has no altsetting 0 [ 132.665679][ T4289] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 132.695800][ T4289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.716620][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.723763][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.760708][ T4289] usb 4-1: config 0 descriptor?? [ 132.968699][ T5582] ======================================================= [ 132.968699][ T5582] WARNING: The mand mount option has been deprecated and [ 132.968699][ T5582] and is ignored by this kernel. Remove the mand [ 132.968699][ T5582] option from the mount to silence this warning. [ 132.968699][ T5582] ======================================================= [ 133.222537][ T4289] usb 4-1: string descriptor 0 read error: -71 [ 133.238308][ T4289] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 133.334177][ T4289] usb 4-1: USB disconnect, device number 14 [ 133.897296][ T5597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.418'. [ 133.934065][ T5598] delete_channel: no stack [ 133.939144][ T5597] netlink: 32 bytes leftover after parsing attributes in process `syz.0.418'. [ 134.229417][ T13] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 134.247906][ T5608] device syzkaller0 entered promiscuous mode [ 134.392546][ T4240] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 134.492612][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 134.652753][ T13] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 134.666432][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.776138][ T13] pvrusb2: Hardware description: Terratec Grabster AV400 [ 134.810311][ T13] pvrusb2: ********** [ 134.814998][ T4240] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 134.834847][ T4240] usb 1-1: config 0 has no interface number 0 [ 134.845391][ T13] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 134.874751][ T4240] usb 1-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 134.896656][ T13] pvrusb2: Important functionality might not be entirely working. [ 134.994688][ T4240] usb 1-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 135.023999][ T5622] delete_channel: no stack [ 135.059064][ T13] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 135.101086][ T4240] usb 1-1: config 0 interface 48 has no altsetting 0 [ 135.108397][ T13] pvrusb2: ********** [ 135.118324][ T4240] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 135.145806][ T4240] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.162492][ T2427] pvrusb2: Invalid write control endpoint [ 135.213018][ T4240] usb 1-1: config 0 descriptor?? [ 135.227820][ T5628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.419'. [ 135.327672][ T5628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 135.346874][ T5632] pvrusb2: Invalid write control endpoint [ 135.368243][ T1326] usb 3-1: USB disconnect, device number 8 [ 135.450744][ T2427] pvrusb2: Invalid write control endpoint [ 135.461089][ T2427] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 135.552444][ T2427] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 135.609769][ T2427] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 135.662347][ T2427] pvrusb2: Device being rendered inoperable [ 135.690537][ T2427] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 135.698328][ T4240] usb 1-1: string descriptor 0 read error: -71 [ 135.711802][ T4240] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 135.729270][ T2427] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 135.774745][ T2427] pvrusb2: Attached sub-driver cx25840 [ 135.821069][ T2427] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 135.831963][ T2427] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 135.844936][ T4240] usb 1-1: USB disconnect, device number 13 [ 136.072566][ T13] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 136.432593][ T13] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 136.457306][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.470625][ T1326] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 136.541440][ T13] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.636044][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.666846][ T13] usb 2-1: config 0 descriptor?? [ 136.725041][ T13] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 136.873282][ T1326] usb 3-1: config 1 interface 0 has no altsetting 0 [ 137.112693][ T1326] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 137.192370][ T1326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.218678][ T1326] usb 3-1: Product: syz [ 137.262261][ T1326] usb 3-1: Manufacturer: syz [ 137.288338][ T1326] usb 3-1: SerialNumber: syz [ 138.045927][ T1326] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 138.837953][ T4289] usb 2-1: USB disconnect, device number 8 [ 138.936579][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 138.985177][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.018639][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.044749][ T5661] device bridge_slave_0 left promiscuous mode [ 139.061469][ T5661] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.116947][ T5661] device bridge_slave_1 left promiscuous mode [ 139.137606][ T5661] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.180844][ T5661] bond0: (slave bond_slave_0): Releasing backup interface [ 139.234776][ T5661] bond0: (slave bond_slave_1): Releasing backup interface [ 139.337051][ T5661] team0: Port device team_slave_0 removed [ 139.370315][ T5661] team0: Port device team_slave_1 removed [ 139.393440][ T5661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.417988][ T5661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.436961][ T4240] usb 3-1: USB disconnect, device number 9 [ 139.455623][ T4240] usblp0: removed [ 139.487893][ T5661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.518008][ T5661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.799534][ T5674] [ 139.801920][ T5674] ====================================================== [ 139.808944][ T5674] WARNING: possible circular locking dependency detected [ 139.815967][ T5674] 5.15.189-syzkaller #0 Not tainted [ 139.821188][ T5674] ------------------------------------------------------ [ 139.828197][ T5674] syz.4.435/5674 is trying to acquire lock: [ 139.834085][ T5674] ffff888025b6a520 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_sk_diag_fill+0xef6/0x1b50 [ 139.843822][ T5674] [ 139.843822][ T5674] but task is already holding lock: [ 139.851199][ T5674] ffffc900017d7928 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x911/0x1290 [ 139.860787][ T5674] [ 139.860787][ T5674] which lock already depends on the new lock. [ 139.860787][ T5674] [ 139.871198][ T5674] [ 139.871198][ T5674] the existing dependency chain (in reverse order) is: [ 139.880225][ T5674] [ 139.880225][ T5674] -> #1 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 139.888136][ T5674] _raw_spin_lock+0x2a/0x40 [ 139.893190][ T5674] __inet_hash+0xe3/0x960 [ 139.898047][ T5674] inet_csk_listen_start+0x22f/0x320 [ 139.903878][ T5674] inet_listen+0x2e1/0x590 [ 139.908828][ T5674] __sys_listen+0x19d/0x220 [ 139.913881][ T5674] __x64_sys_listen+0x56/0x60 [ 139.919195][ T5674] do_syscall_64+0x4c/0xa0 [ 139.924268][ T5674] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.930947][ T5674] [ 139.930947][ T5674] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 139.932440][ T4240] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 139.938693][ T5674] __lock_acquire+0x2c33/0x7c60 [ 139.938723][ T5674] lock_acquire+0x197/0x3f0 [ 139.938742][ T5674] mptcp_diag_get_info+0x1db/0x990 [ 139.962524][ T5674] inet_sk_diag_fill+0xef6/0x1b50 [ 139.968300][ T5674] mptcp_diag_dump+0xcca/0x1290 [ 139.973680][ T5674] __inet_diag_dump+0x1f6/0x380 [ 139.979053][ T5674] inet_diag_dump_compat+0x161/0x200 [ 139.984861][ T5674] netlink_dump+0x676/0xcd0 [ 139.989923][ T5674] __netlink_dump_start+0x523/0x700 [ 139.995667][ T5674] inet_diag_rcv_msg_compat+0x1e9/0x3c0 [ 140.001740][ T5674] sock_diag_rcv_msg+0x164/0x3e0 [ 140.007213][ T5674] netlink_rcv_skb+0x1e0/0x430 [ 140.012497][ T5674] sock_diag_rcv+0x26/0x40 [ 140.017428][ T5674] netlink_unicast+0x774/0x920 [ 140.022712][ T5674] netlink_sendmsg+0x8ab/0xbc0 [ 140.028004][ T5674] ____sys_sendmsg+0x5a2/0x8c0 [ 140.033286][ T5674] ___sys_sendmsg+0x1f0/0x260 [ 140.038476][ T5674] __se_sys_sendmsg+0x190/0x250 [ 140.043845][ T5674] do_syscall_64+0x4c/0xa0 [ 140.048781][ T5674] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.055193][ T5674] [ 140.055193][ T5674] other info that might help us debug this: [ 140.055193][ T5674] [ 140.065409][ T5674] Possible unsafe locking scenario: [ 140.065409][ T5674] [ 140.072850][ T5674] CPU0 CPU1 [ 140.078208][ T5674] ---- ---- [ 140.083579][ T5674] lock(&h->lhash2[i].lock); [ 140.088252][ T5674] lock(sk_lock-AF_INET6); [ 140.095267][ T5674] lock(&h->lhash2[i].lock); [ 140.102455][ T5674] lock(sk_lock-AF_INET6); [ 140.106950][ T5674] [ 140.106950][ T5674] *** DEADLOCK *** [ 140.106950][ T5674] [ 140.115080][ T5674] 6 locks held by syz.4.435/5674: [ 140.120093][ T5674] #0: ffffffff8d23fa28 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 140.129408][ T5674] #1: ffffffff8d23f8e8 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x14a/0x3e0 [ 140.139777][ T5674] #2: ffff88807cb7c690 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700 [ 140.150476][ T5674] #3: ffffffff8d319d08 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380 [ 140.160767][ T5674] #4: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 140.170074][ T5674] #5: ffffc900017d7928 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x911/0x1290 [ 140.180077][ T5674] [ 140.180077][ T5674] stack backtrace: [ 140.185997][ T5674] CPU: 1 PID: 5674 Comm: syz.4.435 Not tainted 5.15.189-syzkaller #0 [ 140.194057][ T5674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.204118][ T5674] Call Trace: [ 140.207411][ T5674] [ 140.210333][ T5674] dump_stack_lvl+0x168/0x230 [ 140.215011][ T5674] ? load_image+0x3b0/0x3b0 [ 140.219509][ T5674] ? show_regs_print_info+0x20/0x20 [ 140.224705][ T5674] ? print_circular_bug+0x12b/0x1a0 [ 140.229919][ T5674] check_noncircular+0x274/0x310 [ 140.234870][ T5674] ? add_chain_block+0x940/0x940 [ 140.239803][ T5674] ? lockdep_lock+0xdc/0x1e0 [ 140.244411][ T5674] ? __lock_acquire+0x13ad/0x7c60 [ 140.249430][ T5674] ? verify_lock_unused+0x140/0x140 [ 140.254624][ T5674] ? mark_lock+0x94/0x320 [ 140.258951][ T5674] __lock_acquire+0x2c33/0x7c60 [ 140.263806][ T5674] ? mark_lock+0x94/0x320 [ 140.268139][ T5674] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 140.274124][ T5674] ? verify_lock_unused+0x140/0x140 [ 140.279317][ T5674] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 140.285310][ T5674] ? __local_bh_enable_ip+0xcb/0x1b0 [ 140.290589][ T5674] ? __local_bh_enable_ip+0x12a/0x1b0 [ 140.295954][ T5674] ? lockdep_hardirqs_on+0x94/0x140 [ 140.301157][ T5674] ? __local_bh_enable_ip+0x12a/0x1b0 [ 140.306524][ T5674] ? _local_bh_enable+0xa0/0xa0 [ 140.311368][ T5674] ? skb_put+0x117/0x210 [ 140.315606][ T5674] lock_acquire+0x197/0x3f0 [ 140.320110][ T5674] ? inet_sk_diag_fill+0xef6/0x1b50 [ 140.325310][ T5674] ? read_lock_is_recursive+0x10/0x10 [ 140.330695][ T5674] ? rcu_preempt_deferred_qs_irqrestore+0x836/0xc10 [ 140.337295][ T5674] ? inet_sk_diag_fill+0xef6/0x1b50 [ 140.342500][ T5674] mptcp_diag_get_info+0x1db/0x990 [ 140.347634][ T5674] ? inet_sk_diag_fill+0xef6/0x1b50 [ 140.352969][ T5674] inet_sk_diag_fill+0xef6/0x1b50 [ 140.358100][ T5674] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 140.363821][ T5674] ? rcu_lock_release+0x5/0x20 [ 140.368587][ T5674] ? do_raw_spin_lock+0x11d/0x280 [ 140.373603][ T5674] ? inet_diag_bc_sk+0x187/0x10c0 [ 140.378624][ T5674] ? preempt_schedule_thunk+0x16/0x18 [ 140.383997][ T5674] mptcp_diag_dump+0xcca/0x1290 [ 140.388855][ T5674] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 140.395468][ T5674] __inet_diag_dump+0x1f6/0x380 [ 140.400320][ T5674] inet_diag_dump_compat+0x161/0x200 [ 140.405613][ T5674] ? inet_diag_dump_start_compat+0x20/0x20 [ 140.411435][ T5674] ? memset+0x1e/0x40 [ 140.415432][ T5674] ? __alloc_skb+0x473/0x750 [ 140.420027][ T5674] netlink_dump+0x676/0xcd0 [ 140.424538][ T5674] ? netlink_lookup+0x1d0/0x1d0 [ 140.429391][ T5674] ? __inet_diag_dump_start+0x805/0x970 [ 140.434931][ T5674] __netlink_dump_start+0x523/0x700 [ 140.440136][ T5674] inet_diag_rcv_msg_compat+0x1e9/0x3c0 [ 140.445691][ T5674] ? inet_diag_unregister+0xb0/0xb0 [ 140.450907][ T5674] ? mutex_lock_io_nested+0x60/0x60 [ 140.456113][ T5674] ? __inet_diag_dump+0x380/0x380 [ 140.461139][ T5674] ? inet_diag_dump_start_compat+0x20/0x20 [ 140.466943][ T5674] ? inet_diag_dump+0x50/0x50 [ 140.471619][ T5674] ? dev_queue_xmit+0x20/0x20 [ 140.476319][ T5674] ? memcpy+0x3c/0x60 [ 140.480302][ T5674] ? sock_diag_rcv+0x17/0x40 [ 140.484895][ T5674] ? sock_diag_rcv+0x17/0x40 [ 140.489513][ T5674] ? inet_diag_unregister+0xb0/0xb0 [ 140.494755][ T5674] sock_diag_rcv_msg+0x164/0x3e0 [ 140.499718][ T5674] netlink_rcv_skb+0x1e0/0x430 [ 140.504514][ T5674] ? sock_diag_bind+0xa0/0xa0 [ 140.509193][ T5674] ? netlink_ack+0xb60/0xb60 [ 140.513788][ T5674] ? __lock_acquire+0x7c60/0x7c60 [ 140.518831][ T5674] sock_diag_rcv+0x26/0x40 [ 140.523251][ T5674] netlink_unicast+0x774/0x920 [ 140.528017][ T5674] netlink_sendmsg+0x8ab/0xbc0 [ 140.532802][ T5674] ? netlink_getsockopt+0x560/0x560 [ 140.537997][ T5674] ? preempt_schedule_common+0xa5/0xd0 [ 140.543453][ T5674] ? aa_sock_msg_perm+0x94/0x150 [ 140.548384][ T5674] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 140.553665][ T5674] ? security_socket_sendmsg+0x7c/0xa0 [ 140.559124][ T5674] ? netlink_getsockopt+0x560/0x560 [ 140.564345][ T5674] ____sys_sendmsg+0x5a2/0x8c0 [ 140.569139][ T5674] ? memset+0x1e/0x40 [ 140.573118][ T5674] ? __sys_sendmsg_sock+0x30/0x30 [ 140.578142][ T5674] ? import_iovec+0x6f/0xa0 [ 140.582659][ T5674] ___sys_sendmsg+0x1f0/0x260 [ 140.587333][ T5674] ? __sys_sendmsg+0x250/0x250 [ 140.592094][ T5674] ? percpu_counter_add_batch+0x13b/0x160 [ 140.597827][ T5674] ? __context_tracking_exit+0x4c/0x80 [ 140.603281][ T5674] ? __fdget+0x150/0x210 [ 140.607532][ T5674] __se_sys_sendmsg+0x190/0x250 [ 140.612406][ T5674] ? __x64_sys_sendmsg+0x80/0x80 [ 140.617337][ T5674] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 140.623321][ T5674] ? lockdep_hardirqs_on+0x94/0x140 [ 140.628517][ T5674] do_syscall_64+0x4c/0xa0 [ 140.632930][ T5674] ? clear_bhb_loop+0x30/0x80 [ 140.637708][ T5674] ? clear_bhb_loop+0x30/0x80 [ 140.642388][ T5674] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.648289][ T5674] RIP: 0033:0x7f67036f19a9 [ 140.652702][ T5674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.672313][ T5674] RSP: 002b:00007f6701559038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.680743][ T5674] RAX: ffffffffffffffda RBX: 00007f6703918fa0 RCX: 00007f67036f19a9 [ 140.688721][ T5674] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 140.696690][ T5674] RBP: 00007f6703773d69 R08: 0000000000000000 R09: 0000000000000000 [ 140.704664][ T5674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.712632][ T5674] R13: 0000000000000000 R14: 00007f6703918fa0 R15: 00007ffefe41ae78 [ 140.720617][ T5674] [ 140.724732][ T5674] BUG: sleeping function called from invalid context at net/core/sock.c:3283 [ 140.733816][ T5674] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5674, name: syz.4.435 [ 140.742895][ T5674] INFO: lockdep is turned off. [ 140.747647][ T5674] Preemption disabled at: [ 140.747654][ T5674] [<0000000000000000>] 0x0 [ 140.756401][ T5674] CPU: 1 PID: 5674 Comm: syz.4.435 Not tainted 5.15.189-syzkaller #0 [ 140.764456][ T5674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.774524][ T5674] Call Trace: [ 140.777800][ T5674] [ 140.780740][ T5674] dump_stack_lvl+0x168/0x230 [ 140.785445][ T5674] ? show_regs_print_info+0x20/0x20 [ 140.790687][ T5674] ? load_image+0x3b0/0x3b0 [ 140.795220][ T5674] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 140.801398][ T5674] ___might_sleep+0x47c/0x600 [ 140.806180][ T5674] ? __might_sleep+0xf0/0xf0 [ 140.810793][ T5674] ? read_lock_is_recursive+0x10/0x10 [ 140.816186][ T5674] __lock_sock_fast+0x2f/0xe0 [ 140.820862][ T5674] ? inet_sk_diag_fill+0xef6/0x1b50 [ 140.826147][ T5674] mptcp_diag_get_info+0x1e7/0x990 [ 140.831376][ T5674] inet_sk_diag_fill+0xef6/0x1b50 [ 140.836411][ T5674] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 140.842132][ T5674] ? rcu_lock_release+0x5/0x20 [ 140.846899][ T5674] ? do_raw_spin_lock+0x11d/0x280 [ 140.852040][ T5674] ? inet_diag_bc_sk+0x187/0x10c0 [ 140.857065][ T5674] ? preempt_schedule_thunk+0x16/0x18 [ 140.862439][ T5674] mptcp_diag_dump+0xcca/0x1290 [ 140.867295][ T5674] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 140.873996][ T5674] __inet_diag_dump+0x1f6/0x380 [ 140.878858][ T5674] inet_diag_dump_compat+0x161/0x200 [ 140.884148][ T5674] ? inet_diag_dump_start_compat+0x20/0x20 [ 140.889957][ T5674] ? memset+0x1e/0x40 [ 140.893946][ T5674] ? __alloc_skb+0x473/0x750 [ 140.898539][ T5674] netlink_dump+0x676/0xcd0 [ 140.903045][ T5674] ? netlink_lookup+0x1d0/0x1d0 [ 140.907898][ T5674] ? __inet_diag_dump_start+0x805/0x970 [ 140.913447][ T5674] __netlink_dump_start+0x523/0x700 [ 140.918667][ T5674] inet_diag_rcv_msg_compat+0x1e9/0x3c0 [ 140.924212][ T5674] ? inet_diag_unregister+0xb0/0xb0 [ 140.929404][ T5674] ? mutex_lock_io_nested+0x60/0x60 [ 140.934654][ T5674] ? __inet_diag_dump+0x380/0x380 [ 140.939678][ T5674] ? inet_diag_dump_start_compat+0x20/0x20 [ 140.945493][ T5674] ? inet_diag_dump+0x50/0x50 [ 140.950169][ T5674] ? dev_queue_xmit+0x20/0x20 [ 140.954846][ T5674] ? memcpy+0x3c/0x60 [ 140.958855][ T5674] ? sock_diag_rcv+0x17/0x40 [ 140.963455][ T5674] ? sock_diag_rcv+0x17/0x40 [ 140.968045][ T5674] ? inet_diag_unregister+0xb0/0xb0 [ 140.973239][ T5674] sock_diag_rcv_msg+0x164/0x3e0 [ 140.978190][ T5674] netlink_rcv_skb+0x1e0/0x430 [ 140.982955][ T5674] ? sock_diag_bind+0xa0/0xa0 [ 140.987640][ T5674] ? netlink_ack+0xb60/0xb60 [ 140.992235][ T5674] ? __lock_acquire+0x7c60/0x7c60 [ 140.997264][ T5674] sock_diag_rcv+0x26/0x40 [ 141.001678][ T5674] netlink_unicast+0x774/0x920 [ 141.006446][ T5674] netlink_sendmsg+0x8ab/0xbc0 [ 141.011211][ T5674] ? netlink_getsockopt+0x560/0x560 [ 141.016407][ T5674] ? preempt_schedule_common+0xa5/0xd0 [ 141.021945][ T5674] ? aa_sock_msg_perm+0x94/0x150 [ 141.026903][ T5674] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 141.032195][ T5674] ? security_socket_sendmsg+0x7c/0xa0 [ 141.037654][ T5674] ? netlink_getsockopt+0x560/0x560 [ 141.042852][ T5674] ____sys_sendmsg+0x5a2/0x8c0 [ 141.047639][ T5674] ? memset+0x1e/0x40 [ 141.051674][ T5674] ? __sys_sendmsg_sock+0x30/0x30 [ 141.056704][ T5674] ? import_iovec+0x6f/0xa0 [ 141.061211][ T5674] ___sys_sendmsg+0x1f0/0x260 [ 141.066016][ T5674] ? __sys_sendmsg+0x250/0x250 [ 141.070801][ T5674] ? percpu_counter_add_batch+0x13b/0x160 [ 141.076540][ T5674] ? __context_tracking_exit+0x4c/0x80 [ 141.082094][ T5674] ? __fdget+0x150/0x210 [ 141.086356][ T5674] __se_sys_sendmsg+0x190/0x250 [ 141.091325][ T5674] ? __x64_sys_sendmsg+0x80/0x80 [ 141.096364][ T5674] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 141.102368][ T5674] ? lockdep_hardirqs_on+0x94/0x140 [ 141.107576][ T5674] do_syscall_64+0x4c/0xa0 [ 141.111993][ T5674] ? clear_bhb_loop+0x30/0x80 [ 141.116670][ T5674] ? clear_bhb_loop+0x30/0x80 [ 141.122164][ T5674] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.128071][ T5674] RIP: 0033:0x7f67036f19a9 [ 141.132485][ T5674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.152191][ T5674] RSP: 002b:00007f6701559038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.160619][ T5674] RAX: ffffffffffffffda RBX: 00007f6703918fa0 RCX: 00007f67036f19a9 [ 141.168606][ T5674] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 141.176587][ T5674] RBP: 00007f6703773d69 R08: 0000000000000000 R09: 0000000000000000 [ 141.184555][ T5674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.192531][ T5674] R13: 0000000000000000 R14: 00007f6703918fa0 R15: 00007ffefe41ae78 [ 141.200502][ T5674] [ 141.472392][ T4240] usb 3-1: Using ep0 maxpacket: 32 [ 141.592613][ T4240] usb 3-1: config 2 has an invalid interface number: 157 but max is 0 [ 141.606580][ T4240] usb 3-1: config 2 has no interface number 0 [ 141.772505][ T4240] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 141.781599][ T4240] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.791269][ T4240] usb 3-1: Product: syz [ 141.795492][ T4240] usb 3-1: Manufacturer: syz [ 141.800107][ T4240] usb 3-1: SerialNumber: syz [ 141.844324][ T4240] imon 3-1:2.157: unable to register, err -19 [ 142.114784][ T4290] usb 3-1: USB disconnect, device number 10