last executing test programs: 7.034741899s ago: executing program 2 (id=3220): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) shutdown(r0, 0x0) 6.741484394s ago: executing program 4 (id=3152): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) r3 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) syz_open_pts(r2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 6.674426235s ago: executing program 2 (id=3223): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x2, 0x0, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x80, 0x7, 0x7a7}}]}}}]}, 0x6c}}, 0x20000000) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 6.514722357s ago: executing program 4 (id=3224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x20, @private=0xa010100}, 0x10) listen(r3, 0x8) accept4(r3, 0x0, 0x0, 0x0) 5.373731065s ago: executing program 4 (id=3229): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x14}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000002"], 0x40}, 0x20000000) 5.371873715s ago: executing program 2 (id=3230): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYRES8=r2, @ANYRES16=r0], 0x0) 4.825703874s ago: executing program 4 (id=3231): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000080)={0x1d, r4}, 0x10) syz_io_uring_setup(0x225c, &(0x7f00000000c0)={0x0, 0xaff9, 0x2, 0x1, 0x32}, &(0x7f0000000140)=0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4000}, 0x3500000000000000) r7 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0xa8, &(0x7f0000000000)=ANY=[]) syz_io_uring_submit(r5, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x18, 0x0, r6, 0x0, &(0x7f00000001c0), 0x0, 0x21}) 4.125297355s ago: executing program 0 (id=3234): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) shutdown(r0, 0x0) 3.84299497s ago: executing program 3 (id=3235): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) r2 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) syz_open_pts(r1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.840264309s ago: executing program 0 (id=3236): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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") 3.731223061s ago: executing program 1 (id=3237): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000806010100000000000000fbffffff000500010007000000b4b78496a3b3c9bba3664e86cb34"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x14) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 3.410719746s ago: executing program 0 (id=3238): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="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", 0x589}], 0x1, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @generic={0x82, 0x2}, @timestamp_prespec={0x44, 0x14, 0x67, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x2cb5}, {@rand_addr=0x64010102, 0x5e}]}]}}}], 0x50}, 0x4) 2.622081708s ago: executing program 1 (id=3239): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x99, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000006c0)='./file1\x00', 0x1210008, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x20, 0x2a1, &(0x7f0000001040)="$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") socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0xa, 0x300) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x1, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x797, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x1, 0xf, 0x7, 0xfffd, 0x9, 0x7f, 0x8, 0x9, 0xb, 0x4, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x40, 0x1, 0x6], [0xfffffed2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x4, 0x7, 0x0, 0x10, 0x2, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x5, 0x4, 0x7, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x0, 0x3, 0x7, 0x8, 0x8, 0x5, 0x4, 0x9, 0x5, 0xffffffff, 0x2, 0x3, 0x0, 0x11e, 0xa4, 0x8000004, 0x5, 0x7e, 0x9, 0xf404, 0xf1, 0x3, 0x2, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x1000068], [0x1, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x405, 0x28, 0x2, 0xffc, 0x7, 0x7, 0xc, 0x7, 0xa, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x7c, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x5, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0xff, 0x1, 0x8, 0xfffd, 0xe7, 0x200, 0x7af5, 0x0, 0xb, 0x0, 0xffff, 0x7, 0x6, 0x2, 0x81, 0x7, 0x2, 0x7, 0x101, 0x8, 0x0, 0x6, 0x14], [0xffffff80, 0xd5800000, 0xffffffff, 0x4, 0x2, 0x62a, 0x2, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x4, 0x201, 0xfff, 0x3, 0x1, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x5, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x8, 0x1ff, 0x7, 0x0, 0xb755, 0x2, 0x11b, 0x996, 0x54, 0x8c1, 0x0, 0x5, 0x4, 0xf, 0x100, 0x10000400, 0x9, 0x5, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.50499157s ago: executing program 3 (id=3240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 2.378201022s ago: executing program 0 (id=3241): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000004000000fd09"], 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x80, 0x8000, 0x0, 0xb9ff, 0x15}) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRES64, @ANYRESHEX], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 2.367490882s ago: executing program 1 (id=3242): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000280)={{0x0, 0x3, 0x2, 0x0, 'syz0\x00', 0xd3}, 0x1, 0x200, 0x2, r1, 0x0, 0x3, 'syz0\x00', 0x0}) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000009c0)={{0x8, 0x0, 0x4, 0xfffeffff, '\x00', 0x7}, 0x1, [0x7, 0x1, 0x0, 0x7, 0x3, 0x8, 0xffffffff, 0x3, 0xa969, 0x4, 0xd, 0x9, 0xa, 0x7, 0xbcc, 0x0, 0xffffffffffffffff, 0x325a, 0x3, 0x1b1059c3, 0x3, 0x8, 0x1, 0x8, 0x2, 0x9, 0x5, 0x8, 0x800, 0xd35f, 0x7, 0x6, 0x0, 0xb, 0x6, 0x100000000, 0x0, 0x1, 0x1, 0x9, 0x4, 0xdd3, 0x4, 0x100, 0x9, 0xde7, 0x80, 0x93, 0x8, 0x3, 0x9, 0x7fffffff, 0x376, 0x800, 0xc4dd, 0x6, 0x9, 0x7ff, 0x0, 0x2, 0x200, 0x9, 0x200, 0x8c5, 0x1, 0x0, 0x8, 0x7f, 0x5, 0xffffffffffffffff, 0xfffffffffffffffd, 0x8, 0xbbd, 0x4d3f97e3, 0x0, 0x0, 0x7, 0x8, 0x23e, 0x6, 0x8, 0x9108, 0x3, 0x5, 0x4221, 0x40, 0x7, 0xf4d4, 0x1, 0x8, 0x8, 0x8000000000000000, 0x6, 0x6, 0xce37, 0xb81, 0x200, 0x0, 0x800000000, 0x6, 0xb, 0x8000000000000001, 0x9c4f, 0xe0000, 0xc08f, 0x8, 0xc, 0x9, 0x6, 0x5, 0x1, 0xe4, 0x6, 0x875f, 0x0, 0x9, 0x8, 0xeb, 0x70, 0x2, 0x7fffffff, 0x10000, 0xfffffffffffffff8, 0x5, 0x4, 0x4, 0x5, 0x80]}) r2 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f01000000000000000000090581032000000000090582020800000000090503", @ANYRES8=r0, @ANYRES64=r0, @ANYRES8=r0, @ANYRESHEX=r1], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) tkill(r1, 0x28) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x541b, 0x0) r4 = syz_usb_connect$cdc_ecm(0x4, 0x5b, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0x6, 0xa0, 0xc, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x57, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x9, 0x4, 0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x56, 0x6, 0x80}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x80, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xfc, 0xf0, 0x3}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x5, 0xff, 0x57, 0xff, 0xe}, 0x39, &(0x7f00000000c0)={0x5, 0xf, 0x39, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x9, 0x3, 0xb}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xb, 0x4, 0xff59}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x9, 0xb4a3}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa, 0x1, 0xfd, 0x1, 0xd3}, @ss_container_id={0x14, 0x10, 0x4, 0xe2, "78d110c74791f93e7df12c24af2522f8"}]}, 0x4, [{0x0, 0x0}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x44e}}, {0x0, 0x0}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2401}}]}) syz_usb_control_io$cdc_ecm(r4, &(0x7f00000002c0)={0x14, &(0x7f0000000380)={0x20, 0x8, 0xf7, {0xf7, 0x10, "1447f764df44a075d70d48bdc4de667622c60a91dcf5dc78f73efcdf1cdb3b56d1cb43241534fe36bc5fe7dd6b7de4cfa665cc64852681b713f9cf7bc1294933e675ad07200512bd31c3bd142b0e8ec836c6d6b7cb34997206f405cfa8fad19cc1a1da09445855918c9024c5c5a02cee2ea0a853bd9e936f0df6de6868654baccbaac49fe93c3714301e273fdb4f9224b444afdd362791a144679901dff6082e26bed6571461ee2cd24bc4554a17cee43170becbb9f411ac9b9d73ff05a2826ab9c462faedb54ab02885492bdf5ebbcaeb1f805056b7369687022985d05242d7bc79ccfb9de20310a1a4fe999200235b74a3212542"}}, 0x0}, &(0x7f0000000600)={0x1c, &(0x7f0000000480)={0x0, 0x17, 0xcd, "85936066d6262554c233ac74ecadf5829a1fc05c1ce2d23344118f43490d30ca071bd016abc4968d683b2a2ee116867ba1b63d0f602106379b234b57a7737dc7a96f4df0e5862903c9979c0a43fee0f1afa22ae264e9ee6a19c0ecd8e58567abf7aae8a3fd5e024a4a362339caf169011eed81398a2b9c359a98afdadf589c1e516dcd5a4d49361dbbcf4751360b326fb237c0f9011bf4dc243a5fc6811271c0f20e8cce37f31b049f10e7207e3ebd3d66aea6eef9027bb967f62dc5873020664a85faabfcbbac2c948bac9d2f"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x93}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x4}}) 1.998466948s ago: executing program 2 (id=3243): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x6) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2010008}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ppoll(&(0x7f0000000140)=[{r2, 0x6402}], 0x1, 0x0, 0x0, 0x0) dup2(r2, r0) 1.524824786s ago: executing program 3 (id=3244): r0 = socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) connect$tipc(r0, &(0x7f0000003100)=@id, 0x10) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) setsockopt$sock_int(r0, 0x1, 0x2d, 0x0, 0x0) 1.473546767s ago: executing program 1 (id=3245): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000340)) 1.29068338s ago: executing program 4 (id=3246): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}, 0x6}], 0x1, 0x40000021, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) 1.29021682s ago: executing program 1 (id=3247): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f00000001c0), &(0x7f0000000400)=0x4) 1.26990488s ago: executing program 3 (id=3248): r0 = socket$netlink(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10, 0x0}, 0x2000851) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.165034931s ago: executing program 0 (id=3249): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000140)=0x8b) 978.541204ms ago: executing program 2 (id=3250): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 812.192867ms ago: executing program 4 (id=3251): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, 0x0, 0xfd6c) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 294.359205ms ago: executing program 3 (id=3252): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="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", 0x589}], 0x1, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @generic={0x82, 0x8, "66581ddb3425"}, @timestamp_prespec={0x44, 0x14, 0x67, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x2cb5}, {@rand_addr=0x64010102, 0x5e}]}]}}}], 0x50}, 0x4) 242.464616ms ago: executing program 0 (id=3253): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYRES8=r2, @ANYRES16=r0], 0x0) 230.342846ms ago: executing program 1 (id=3254): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r4, 0xc018aec0, &(0x7f0000000140)={0x0, 0x3c0, 0x2c0, 0x0}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000240)=[{{&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000400)=""/132, 0x84}], 0x2, &(0x7f0000000200)=""/50, 0x32}, 0x73}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYRES16=r5, @ANYBLOB="010027bd7000fedbdf252700000008000300", @ANYRES32=r7, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRESOCT=r4, @ANYRESDEC=r0, @ANYRESOCT=r2], 0x30}, 0x1, 0x0, 0x0, 0x20000811}, 0x80) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r8 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r8, 0xc0045103, &(0x7f0000000040)) 74.181649ms ago: executing program 2 (id=3255): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000280)={{0x0, 0x3, 0x2, 0x0, 'syz0\x00', 0xd3}, 0x1, 0x200, 0x2, r1, 0x0, 0x3, 'syz0\x00', 0x0}) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000009c0)={{0x8, 0x0, 0x4, 0xfffeffff, '\x00', 0x7}, 0x1, [0x7, 0x1, 0x0, 0x7, 0x3, 0x8, 0xffffffff, 0x3, 0xa969, 0x4, 0xd, 0x9, 0xa, 0x7, 0xbcc, 0x0, 0xffffffffffffffff, 0x325a, 0x3, 0x1b1059c3, 0x3, 0x8, 0x1, 0x8, 0x2, 0x9, 0x5, 0x8, 0x800, 0xd35f, 0x7, 0x6, 0x0, 0xb, 0x6, 0x100000000, 0x0, 0x1, 0x1, 0x9, 0x4, 0xdd3, 0x4, 0x100, 0x9, 0xde7, 0x80, 0x93, 0x8, 0x3, 0x9, 0x7fffffff, 0x376, 0x800, 0xc4dd, 0x6, 0x9, 0x7ff, 0x0, 0x2, 0x200, 0x9, 0x200, 0x8c5, 0x1, 0x0, 0x8, 0x7f, 0x5, 0xffffffffffffffff, 0xfffffffffffffffd, 0x8, 0xbbd, 0x4d3f97e3, 0x0, 0x0, 0x7, 0x8, 0x23e, 0x6, 0x8, 0x9108, 0x3, 0x5, 0x4221, 0x40, 0x7, 0xf4d4, 0x1, 0x8, 0x8, 0x8000000000000000, 0x6, 0x6, 0xce37, 0xb81, 0x200, 0x0, 0x800000000, 0x6, 0xb, 0x8000000000000001, 0x9c4f, 0xe0000, 0xc08f, 0x8, 0xc, 0x9, 0x6, 0x5, 0x1, 0xe4, 0x6, 0x875f, 0x0, 0x9, 0x8, 0xeb, 0x70, 0x2, 0x7fffffff, 0x10000, 0xfffffffffffffff8, 0x5, 0x4, 0x4, 0x5, 0x80]}) r2 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f01000000000000000000090581032000000000090582020800000000090503", @ANYRES8=r0, @ANYRES64=r0, @ANYRES8=r0, @ANYRESHEX=r1], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) tkill(r1, 0x28) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x541b, 0x0) r4 = syz_usb_connect$cdc_ecm(0x4, 0x5b, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0x6, 0xa0, 0xc, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x57, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x9, 0x4, 0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x56, 0x6, 0x80}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x80, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xfc, 0xf0, 0x3}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x5, 0xff, 0x57, 0xff, 0xe}, 0x39, &(0x7f00000000c0)={0x5, 0xf, 0x39, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x9, 0x3, 0xb}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xb, 0x4, 0xff59}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x9, 0xb4a3}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa, 0x1, 0xfd, 0x1, 0xd3}, @ss_container_id={0x14, 0x10, 0x4, 0xe2, "78d110c74791f93e7df12c24af2522f8"}]}, 0x4, [{0x0, 0x0}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x44e}}, {0x0, 0x0}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2401}}]}) syz_usb_control_io$cdc_ecm(r4, &(0x7f00000002c0)={0x14, &(0x7f0000000380)={0x20, 0x8, 0xf7, {0xf7, 0x10, "1447f764df44a075d70d48bdc4de667622c60a91dcf5dc78f73efcdf1cdb3b56d1cb43241534fe36bc5fe7dd6b7de4cfa665cc64852681b713f9cf7bc1294933e675ad07200512bd31c3bd142b0e8ec836c6d6b7cb34997206f405cfa8fad19cc1a1da09445855918c9024c5c5a02cee2ea0a853bd9e936f0df6de6868654baccbaac49fe93c3714301e273fdb4f9224b444afdd362791a144679901dff6082e26bed6571461ee2cd24bc4554a17cee43170becbb9f411ac9b9d73ff05a2826ab9c462faedb54ab02885492bdf5ebbcaeb1f805056b7369687022985d05242d7bc79ccfb9de20310a1a4fe999200235b74a3212542"}}, 0x0}, &(0x7f0000000600)={0x1c, &(0x7f0000000480)={0x0, 0x17, 0xcd, "85936066d6262554c233ac74ecadf5829a1fc05c1ce2d23344118f43490d30ca071bd016abc4968d683b2a2ee116867ba1b63d0f602106379b234b57a7737dc7a96f4df0e5862903c9979c0a43fee0f1afa22ae264e9ee6a19c0ecd8e58567abf7aae8a3fd5e024a4a362339caf169011eed81398a2b9c359a98afdadf589c1e516dcd5a4d49361dbbcf4751360b326fb237c0f9011bf4dc243a5fc6811271c0f20e8cce37f31b049f10e7207e3ebd3d66aea6eef9027bb967f62dc5873020664a85faabfcbbac2c948bac9d2f"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x93}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x4}}) 0s ago: executing program 3 (id=3256): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000080)={0x1d, r4}, 0x10) syz_io_uring_setup(0x225c, &(0x7f00000000c0)={0x0, 0xaff9, 0x2, 0x1, 0x32}, &(0x7f0000000140)=0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4000}, 0x3500000000000000) r7 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0xa8, &(0x7f0000000000)=ANY=[]) syz_io_uring_submit(r5, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x18, 0x0, r6, 0x0, &(0x7f00000001c0), 0x0, 0x21}) kernel console output (not intermixed with test programs): T4336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.885439][ T4336] usb 4-1: Product: syz [ 780.902266][ T4336] usb 4-1: Manufacturer: syz [ 780.912716][ T4336] usb 4-1: SerialNumber: syz [ 780.925041][ T4336] usb 4-1: config 0 descriptor?? [ 781.237004][ T4336] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 781.408429][ T4336] usb 5-1: device descriptor read/64, error -71 [ 781.696695][ T4336] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 781.866479][ T4336] usb 5-1: device descriptor read/64, error -71 [ 781.892515][T13434] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 782.053207][T13434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.150354][ T4336] usb usb5-port1: attempt power cycle [ 782.204214][T13434] bond0: (slave rose0): Enslaving as an active interface with an up link [ 782.236235][T11448] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 782.358281][ T4309] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 782.374771][ T4309] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 782.400836][ T4309] usb 3-1: media controller created [ 782.512905][ T4309] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 782.566636][ T4336] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 782.597474][ T4309] i2c i2c-1: Added multiplexed i2c bus 2 [ 782.613754][ T4309] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 782.636904][ T4336] usb 5-1: device descriptor read/8, error -71 [ 782.646176][ T4309] usb 3-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 782.691604][ T4309] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 782.789637][ T4309] DVB: Unable to find symbol r820t_attach() [ 782.906472][ T4336] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 782.937700][ T46] device veth0_to_bond left promiscuous mode [ 782.957607][ T4336] usb 5-1: device descriptor read/8, error -71 [ 783.024354][T13445] loop1: detected capacity change from 0 to 2048 [ 783.118504][ T4336] usb usb5-port1: unable to enumerate USB device [ 783.267008][T13445] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 783.312788][T13445] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 783.795960][ T4309] usb 4-1: USB disconnect, device number 34 [ 783.884058][ T7] usb 3-1: USB disconnect, device number 38 [ 783.995717][T13467] loop2: detected capacity change from 0 to 128 [ 784.026573][ T4336] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 784.051457][T13467] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 784.226678][ T4336] usb 2-1: Using ep0 maxpacket: 32 [ 784.234849][ T4336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.266320][ T4336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.296657][ T4336] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 784.321310][ T4336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.352051][ T4336] usb 2-1: config 0 descriptor?? [ 784.367272][ T4336] hub 2-1:0.0: USB hub found [ 784.410712][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 784.567816][ T4336] hub 2-1:0.0: 1 port detected [ 784.576651][ T7] usb 5-1: device descriptor read/64, error -71 [ 784.626529][ T22] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 784.826745][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 784.837018][ T22] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 784.846752][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 784.874017][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.909375][ T22] usb 4-1: Product: syz [ 784.929781][ T22] usb 4-1: Manufacturer: syz [ 784.963371][ T22] usb 4-1: SerialNumber: syz [ 784.995043][ T22] usb 4-1: config 0 descriptor?? [ 785.006662][ T7] usb 5-1: device descriptor read/64, error -71 [ 785.127180][ T7] usb usb5-port1: attempt power cycle [ 785.177712][ T4336] hub 2-1:0.0: activate --> -90 [ 785.224073][ T22] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 785.538720][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 785.577442][ T7] usb 5-1: device descriptor read/8, error -71 [ 785.856577][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 785.907257][ T7] usb 5-1: device descriptor read/8, error -71 [ 786.027196][ T7] usb usb5-port1: unable to enumerate USB device [ 786.597895][ T4336] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 786.642756][ T22] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 786.687198][ T22] usb 4-1: USB disconnect, device number 35 [ 786.880298][ T4302] usb 2-1: USB disconnect, device number 49 [ 787.467835][T13513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2888'. [ 788.383633][T13530] netlink: 328 bytes leftover after parsing attributes in process `syz.3.2892'. [ 788.456524][ T4336] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 788.674299][ T4336] usb 1-1: config 0 has no interfaces? [ 788.743639][ T4336] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 788.763132][ T4336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.797012][ T4336] usb 1-1: Product: syz [ 788.812252][ T4336] usb 1-1: Manufacturer: syz [ 788.840370][ T4336] usb 1-1: SerialNumber: syz [ 788.862482][ T4336] usb 1-1: config 0 descriptor?? [ 789.046538][ T4309] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 789.226598][ T4309] usb 4-1: device descriptor read/64, error -71 [ 789.506552][ T4309] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 789.767317][ T4309] usb 4-1: device descriptor read/64, error -71 [ 789.896718][ T4309] usb usb4-port1: attempt power cycle [ 790.316478][ T4309] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 790.377352][ T4309] usb 4-1: device descriptor read/8, error -71 [ 790.486491][ T951] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 790.656496][ T4309] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 790.688732][ T951] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 790.701009][ T4309] usb 4-1: device descriptor read/8, error -71 [ 790.715430][ T951] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 790.726126][ T951] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 790.736757][ T951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.755533][T13549] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 790.827041][ T4309] usb usb4-port1: unable to enumerate USB device [ 791.165581][ T951] usb 5-1: USB disconnect, device number 10 [ 791.413849][ T4302] usb 1-1: USB disconnect, device number 52 [ 791.461147][T13558] libceph: resolve '4..' (ret=-3): failed [ 791.914644][ T4336] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 792.067265][ T4302] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 792.146599][ T4336] usb 2-1: device descriptor read/64, error -71 [ 793.024932][ T4302] usb 1-1: config 0 has no interfaces? [ 793.030766][ T4336] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 793.090558][ T4302] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 793.116580][ T4302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.134497][ T4302] usb 1-1: Product: syz [ 793.140191][ T4302] usb 1-1: Manufacturer: syz [ 793.145011][ T4302] usb 1-1: SerialNumber: syz [ 793.216957][ T4336] usb 2-1: device descriptor read/64, error -71 [ 793.242991][ T4302] usb 1-1: config 0 descriptor?? [ 793.346712][ T4336] usb usb2-port1: attempt power cycle [ 793.418535][T13573] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2903'. [ 793.756527][ T4336] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 793.798383][ T4336] usb 2-1: device descriptor read/8, error -71 [ 794.066727][ T4336] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 794.115893][T13582] netlink: 'syz.4.2906': attribute type 1 has an invalid length. [ 794.169718][T13582] 8021q: adding VLAN 0 to HW filter on device bond5 [ 794.320484][T13584] bond5: (slave veth7): Enslaving as an active interface with a down link [ 794.409571][T13582] bond4: (slave veth0_to_bond): Releasing active interface [ 794.476947][T13582] bond5: (slave veth0_to_bond): making interface the new active one [ 794.528153][T13582] device veth0_to_bond entered promiscuous mode [ 794.554628][T13582] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 794.635463][T11456] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 795.038720][T13591] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 795.107410][T13591] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2908'. [ 795.170325][T13591] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2908'. [ 795.450946][ T4336] usb 2-1: device descriptor read/8, error -71 [ 795.586796][ T4336] usb usb2-port1: unable to enumerate USB device [ 796.006524][ T4302] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 796.026870][ T4336] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 796.086250][ T951] usb 1-1: USB disconnect, device number 53 [ 796.155507][T13607] syz.3.2914 uses old SIOCAX25GETINFO [ 796.206784][ T4336] usb 2-1: device descriptor read/64, error -71 [ 796.221980][ T4302] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 796.244343][ T4302] usb 5-1: config 0 has no interfaces? [ 796.248138][T13609] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2915'. [ 796.282346][ T4302] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 796.420262][ T4302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.506555][ T4336] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 796.518327][T13615] netlink: 'syz.3.2918': attribute type 1 has an invalid length. [ 796.526196][ T4302] usb 5-1: Product: syz [ 796.545209][T13615] 8021q: adding VLAN 0 to HW filter on device bond6 [ 796.562508][ T4302] usb 5-1: Manufacturer: syz [ 796.585289][T13615] bond6: (slave veth5): Enslaving as an active interface with a down link [ 796.604628][ T4302] usb 5-1: SerialNumber: syz [ 796.655786][ T4302] usb 5-1: config 0 descriptor?? [ 796.676686][ T4336] usb 2-1: device descriptor read/64, error -71 [ 796.797858][ T4336] usb usb2-port1: attempt power cycle [ 796.887025][T13618] loop3: detected capacity change from 0 to 8192 [ 796.922267][T13618] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 796.944345][T13618] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 796.955653][T13618] REISERFS (device loop3): using ordered data mode [ 796.962988][T13618] reiserfs: using flush barriers [ 797.056583][T13618] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 797.147048][T13618] REISERFS (device loop3): checking transaction log (loop3) [ 797.206497][ T4336] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 797.351871][T13618] REISERFS (device loop3): Using r5 hash to sort names [ 797.359866][ T4336] usb 2-1: device descriptor read/8, error -71 [ 797.874813][T13618] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 797.932429][T13618] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 797.973586][T13627] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 797.994521][T13618] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 798.006581][ T4336] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 798.047699][ T4336] usb 2-1: device descriptor read/8, error -71 [ 798.064294][T13618] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 798.064624][T13627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2922'. [ 798.144426][T13618] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 798.169751][T13618] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 798.181652][ T4336] usb usb2-port1: unable to enumerate USB device [ 798.225375][T13618] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 798.255943][T13618] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 798.273214][T13630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2922'. [ 798.285761][T13618] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 798.342557][T13618] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 798.393770][T13618] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 798.473070][T13618] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 798.486292][T13618] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 798.506128][T13618] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 798.528711][T13618] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 798.545477][T13618] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 799.206772][T13650] loop3: detected capacity change from 0 to 512 [ 799.243622][ T4302] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 799.275623][T13650] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4558: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 799.314345][T10036] udevd[10036]: incorrect ext4 checksum on /dev/loop3 [ 799.337282][T13650] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 799.437841][ T4302] usb 1-1: Using ep0 maxpacket: 8 [ 799.447979][ T4302] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 799.463074][ T4302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.473500][ T4302] usb 1-1: Product: syz [ 799.484821][ T4302] usb 1-1: Manufacturer: syz [ 799.490797][ T4302] usb 1-1: SerialNumber: syz [ 799.520257][ T4302] usb 1-1: config 0 descriptor?? [ 799.659639][ T4309] usb 5-1: USB disconnect, device number 11 [ 799.734815][ T4302] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 801.910608][T13680] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2937'. [ 802.363169][T13692] device syzkaller1 entered promiscuous mode [ 803.037578][ T4302] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 803.059993][ T4302] usb 1-1: USB disconnect, device number 54 [ 803.077116][ T4336] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 803.092353][T13712] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 803.296788][ T4336] usb 5-1: config 0 has no interfaces? [ 803.337147][ T4336] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 803.364571][ T4336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.384777][ T4336] usb 5-1: Product: syz [ 803.395969][ T4336] usb 5-1: Manufacturer: syz [ 803.415200][ T4336] usb 5-1: SerialNumber: syz [ 803.456823][ T4336] usb 5-1: config 0 descriptor?? [ 805.003411][T13731] blktrace: Concurrent blktraces are not allowed on sg0 [ 805.449655][ T8645] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 805.470854][ T8645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 805.479694][ T8645] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 805.488052][ T8645] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 805.498632][ T8645] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 805.507300][ T8645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 805.519567][T13740] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2950'. [ 805.722903][T13745] sctp: [Deprecated]: syz.0.2953 (pid 13745) Use of int in maxseg socket option. [ 805.722903][T13745] Use struct sctp_assoc_value instead [ 806.106720][ T4336] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 806.260444][T13735] chnl_net:caif_netlink_parms(): no params data found [ 806.308219][ T4336] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.355107][ T4336] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 806.430167][ T4336] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 806.476754][ T4336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.553013][ T4336] usb 3-1: config 0 descriptor?? [ 806.585402][ T4336] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 806.807790][T13735] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.855802][T13735] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.916716][T13735] device bridge_slave_0 entered promiscuous mode [ 806.938177][T13735] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.951199][T13759] loop1: detected capacity change from 0 to 8192 [ 806.976887][T13735] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.994643][T13759] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 807.036272][T13735] device bridge_slave_1 entered promiscuous mode [ 807.065345][T13759] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 807.085694][T13759] REISERFS (device loop1): using ordered data mode [ 807.125379][T13759] reiserfs: using flush barriers [ 807.143127][T13735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.158221][T13735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.167475][T13759] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 807.188386][ T4336] usb 5-1: USB disconnect, device number 12 [ 807.247286][T13759] REISERFS (device loop1): checking transaction log (loop1) [ 807.307284][T13759] REISERFS (device loop1): Using r5 hash to sort names [ 807.323352][T13735] team0: Port device team_slave_0 added [ 807.332388][T13759] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 807.399648][T13735] team0: Port device team_slave_1 added [ 807.517933][T13735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 807.535122][T13735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 807.717203][ T8645] Bluetooth: hci2: command 0x0409 tx timeout [ 807.875076][T13735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 807.900475][T13759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2957'. [ 807.934746][T13735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 807.972039][T13735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.023549][T13735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.099474][T13735] device hsr_slave_0 entered promiscuous mode [ 808.107579][T13735] device hsr_slave_1 entered promiscuous mode [ 808.114457][T13735] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 808.133774][T13735] Cannot create hsr debugfs directory [ 808.501084][T13783] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2963'. [ 808.557341][T13735] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.680802][T13735] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.706501][ T951] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 808.782718][T13735] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.805689][T13794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2967'. [ 808.840830][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.852054][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.887185][ T4302] usb 3-1: USB disconnect, device number 39 [ 808.907554][ T951] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 808.926247][ T951] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 808.953993][ T951] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 808.967145][ T951] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 808.979460][ T951] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 809.011267][ T951] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 809.018829][T13735] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.021110][ T951] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 809.040402][ T951] usb 1-1: Product: syz [ 809.054281][ T951] usb 1-1: Manufacturer: syz [ 809.078225][ T951] cdc_wdm 1-1:1.0: skipping garbage [ 809.086531][ T951] cdc_wdm 1-1:1.0: skipping garbage [ 809.103657][ T951] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 809.112806][ T951] cdc_wdm 1-1:1.0: Unknown control protocol [ 809.162280][T11476] device veth0_to_bond left promiscuous mode [ 809.332130][T13735] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 809.364311][T13802] sctp: [Deprecated]: syz.2.2968 (pid 13802) Use of int in maxseg socket option. [ 809.364311][T13802] Use struct sctp_assoc_value instead [ 809.398587][T13735] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 809.426744][T13735] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 809.461859][T13735] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 809.548655][ C0] cdc_wdm 1-1:1.0: Unexpected error -71 [ 809.555183][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 809.561810][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 809.571593][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 809.578255][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 809.584481][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 809.595242][ T951] usb 1-1: USB disconnect, device number 55 [ 809.711278][T13735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.723811][T13808] loop1: detected capacity change from 0 to 128 [ 809.749640][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 809.796576][ T4269] Bluetooth: hci2: command 0x041b tx timeout [ 809.847380][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 809.863438][T13808] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 809.876642][T13808] ext4 filesystem being mounted at /602/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 809.905055][T13735] 8021q: adding VLAN 0 to HW filter on device team0 [ 809.995805][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 810.047047][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 810.107666][T11476] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.114896][T11476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 810.164224][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 810.171811][T13804] loop4: detected capacity change from 0 to 32768 [ 810.201864][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 810.213464][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 810.234635][ T4259] EXT4-fs (loop1): unmounting filesystem. [ 810.263699][T11488] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.270927][T11488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.274451][T13804] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2969 (13804) [ 810.387446][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 810.411043][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 810.459533][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 810.477410][T13804] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 810.491840][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 810.501258][T13804] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 810.511495][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 810.527926][T13804] BTRFS info (device loop4): force clearing of disk cache [ 810.543077][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 810.551966][T13804] BTRFS info (device loop4): enabling auto defrag [ 810.562830][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 810.572199][T13804] BTRFS info (device loop4): max_inline at 0 [ 810.578703][T13804] BTRFS info (device loop4): enabling disk space caching [ 810.587862][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 810.595755][T13804] BTRFS info (device loop4): disk space caching is enabled [ 810.610662][T13735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 810.631555][T13735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 810.640516][T13814] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 810.657142][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 810.675013][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 810.787352][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 810.976792][T13804] BTRFS info (device loop4): enabling ssd optimizations [ 811.035515][T13804] BTRFS info (device loop4): rebuilding free space tree [ 811.220834][T13804] BTRFS info (device loop4): disabling free space tree [ 811.261923][T13804] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 811.279809][T13804] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 811.796635][ T22] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 811.879789][ T4269] Bluetooth: hci2: command 0x040f tx timeout [ 812.006500][ T126] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 812.064218][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.141322][ T22] usb 2-1: config 0 has no interfaces? [ 812.239565][ T22] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 812.254011][T11486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 812.268096][ T126] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.282155][T11486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 812.303778][T13735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 812.317868][ T126] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 812.331172][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.348221][ T22] usb 2-1: Product: syz [ 812.375826][ T22] usb 2-1: Manufacturer: syz [ 812.380608][ T22] usb 2-1: SerialNumber: syz [ 812.385345][ T126] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 812.394562][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.404799][ T22] usb 2-1: config 0 descriptor?? [ 812.411880][ T4254] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 812.427354][T11486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 812.445598][ T126] usb 3-1: config 0 descriptor?? [ 812.447975][T11486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 812.485495][ T126] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 812.541884][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 812.566077][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 812.630541][T13735] device veth0_vlan entered promiscuous mode [ 812.666595][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 812.697794][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 812.744306][T13735] device veth1_vlan entered promiscuous mode [ 812.812223][T11484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 812.855203][T11484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 812.892599][T11484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 812.920294][T11484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 812.973597][T13735] device veth0_macvtap entered promiscuous mode [ 813.010055][T13735] device veth1_macvtap entered promiscuous mode [ 813.209712][T13735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.270826][T13735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.279240][T13878] loop0: detected capacity change from 0 to 1024 [ 813.379463][T13735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.423782][T13735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.457852][T13735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.636839][T13735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.056725][ T4269] Bluetooth: hci2: command 0x0419 tx timeout [ 814.299190][T13735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.312654][T13735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.325805][T13735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 814.347548][T11456] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 814.361207][T11456] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 814.437333][T11456] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 814.476948][T11456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 814.495407][T13875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2978'. [ 814.515888][T13735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.545360][T13735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.574712][T13885] loop0: detected capacity change from 0 to 512 [ 814.576005][T13735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.605990][T13735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.621830][T13735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.646829][T13885] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 814.672964][T13735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.733904][T13735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.761272][ T7] usb 3-1: USB disconnect, device number 40 [ 814.785922][T13735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.804237][T13735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 814.812082][T11456] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 814.828371][T11456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 814.861291][T13735] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.901891][T13735] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.927582][T13735] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.959475][T13735] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.049952][T11484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.087646][T11484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.103868][T11486] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 816.183931][T11476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.198789][T11476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.352684][T11486] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 816.372384][ T4309] usb 2-1: USB disconnect, device number 58 [ 816.427956][T13906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2987'. [ 816.871375][T13914] loop4: detected capacity change from 0 to 256 [ 816.905888][T13914] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 817.675475][T13914] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 818.351611][T13923] loop0: detected capacity change from 0 to 164 [ 818.358119][ T8645] Bluetooth: hci1: command 0x0c1a tx timeout [ 818.358334][T13903] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 818.858977][T13903] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 818.865791][T13903] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 819.006966][T13903] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 819.014717][T13903] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 819.023135][T13903] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 819.032029][T13903] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 819.039921][T13903] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 819.048106][T13903] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 819.056785][T13903] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 819.064122][T13903] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 819.073111][T13903] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 819.165732][ T4269] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 819.179333][ T4269] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 819.188907][ T4269] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 819.200107][ T4269] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 819.214817][ T4269] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 819.222294][ T4269] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 819.426629][T13870] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 819.434380][ T4302] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 819.445368][T11478] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.477813][T11478] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 819.617710][ T4303] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 819.659058][T13870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.669619][T13870] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 819.682833][T13870] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 819.693609][T13870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.696157][T11478] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.717741][T13870] usb 5-1: config 0 descriptor?? [ 819.745069][T13870] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 819.774228][T11478] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 819.836830][ T4303] usb 1-1: Using ep0 maxpacket: 8 [ 819.846745][ T4302] usb 4-1: device not accepting address 40, error -71 [ 819.856617][ T4303] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 819.904082][ T4303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.930415][ T4303] usb 1-1: Product: syz [ 819.934671][ T4303] usb 1-1: Manufacturer: syz [ 819.940141][ T4303] usb 1-1: SerialNumber: syz [ 819.945939][T11478] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.965628][ T4303] usb 1-1: config 0 descriptor?? [ 820.004532][T11478] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 820.140316][T11478] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.152553][T11478] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 820.188347][ T4303] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 820.201027][T13924] chnl_net:caif_netlink_parms(): no params data found [ 820.425606][T13924] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.434621][T13924] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.446614][T13924] device bridge_slave_0 entered promiscuous mode [ 820.446855][ T4269] Bluetooth: hci1: command 0x0406 tx timeout [ 820.457835][T13924] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.466939][T13924] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.477781][T13924] device bridge_slave_1 entered promiscuous mode [ 820.586084][T13924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.629172][T13924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.828510][T13924] team0: Port device team_slave_0 added [ 820.988282][T13924] team0: Port device team_slave_1 added [ 821.086903][ T4269] Bluetooth: hci2: command 0x0c1a tx timeout [ 821.093298][ T4269] Bluetooth: hci4: command 0x0c1a tx timeout [ 821.099864][ T4269] Bluetooth: hci0: command 0x0c1a tx timeout [ 821.270309][T13924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 821.285463][T13924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 821.311555][ C0] vkms_vblank_simulate: vblank timer overrun [ 821.327349][ T4269] Bluetooth: hci3: command 0x0409 tx timeout [ 821.386621][ T7] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 821.539427][T13924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 821.589900][T13924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 821.598581][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 821.611166][T13924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 821.634993][ T7] usb 3-1: config 0 has no interfaces? [ 821.666574][ T7] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 821.714150][ T4302] usb 5-1: USB disconnect, device number 13 [ 821.731296][T13924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 821.746277][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.839865][ T7] usb 3-1: Product: syz [ 821.844150][ T7] usb 3-1: Manufacturer: syz [ 821.914857][ T7] usb 3-1: SerialNumber: syz [ 822.002905][T13924] device hsr_slave_0 entered promiscuous mode [ 822.041269][ T7] usb 3-1: config 0 descriptor?? [ 822.081679][T13924] device hsr_slave_1 entered promiscuous mode [ 822.119153][T13924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 822.154400][T13924] Cannot create hsr debugfs directory [ 822.419714][ T4303] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 822.486590][ T4303] usb 1-1: USB disconnect, device number 56 [ 823.156910][ T4269] Bluetooth: hci4: command 0x0406 tx timeout [ 823.163151][ T4261] Bluetooth: hci2: command 0x0406 tx timeout [ 823.163173][ T8645] Bluetooth: hci0: command 0x0406 tx timeout [ 823.396610][ T8645] Bluetooth: hci3: command 0x041b tx timeout [ 823.743981][T13978] netlink: 'syz.4.3004': attribute type 1 has an invalid length. [ 823.879331][T13978] 8021q: adding VLAN 0 to HW filter on device bond6 [ 823.993543][T13979] bond6: (slave veth9): Enslaving as an active interface with a down link [ 824.096250][T11478] device hsr_slave_0 left promiscuous mode [ 824.138580][T11478] device hsr_slave_1 left promiscuous mode [ 824.162809][T11478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 824.207933][T11478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 824.272387][T11478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 824.289854][T11478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 824.363168][T11478] device bridge_slave_1 left promiscuous mode [ 824.397914][T11478] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.508191][T11478] device bridge_slave_0 left promiscuous mode [ 824.535701][T11478] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.781639][T13990] loop0: detected capacity change from 0 to 1024 [ 824.828662][T11478] device veth1_vlan left promiscuous mode [ 824.835108][T11478] device veth0_vlan left promiscuous mode [ 824.894968][T13990] EXT4-fs: Ignoring removed nobh option [ 824.953401][T13990] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 825.135222][T13990] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 825.256491][ T7] usb 3-1: USB disconnect, device number 41 [ 825.399204][T14000] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3008'. [ 825.410621][T13990] EXT4-fs (loop0): unmounting filesystem. [ 825.478819][ T8645] Bluetooth: hci3: command 0x040f tx timeout [ 826.222271][T11478] bond4 (unregistering): Released all slaves [ 826.289691][T11478] bond3 (unregistering): Released all slaves [ 826.310297][T11478] bond2 (unregistering): Released all slaves [ 826.650434][T11478] bond1 (unregistering): Released all slaves [ 827.556556][ T8645] Bluetooth: hci3: command 0x0419 tx timeout [ 827.902035][T11478] team0 (unregistering): Port device team_slave_1 removed [ 828.087006][T11478] team0 (unregistering): Port device team_slave_0 removed [ 828.257373][T11478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 828.559588][T11478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.155788][T11478] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 830.179225][T11478] bond0 (unregistering): Released all slaves [ 830.332174][T14019] netlink: 'syz.0.3015': attribute type 1 has an invalid length. [ 830.429947][T14019] 8021q: adding VLAN 0 to HW filter on device bond5 [ 830.463577][T13985] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 830.478983][T13985] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 830.521878][T13985] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 830.563156][T14020] bond5: (slave veth5): Enslaving as an active interface with a down link [ 830.578497][T13985] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 830.595922][T13985] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 830.606614][T13985] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 830.631949][T13985] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 830.640318][T14021] bond5: (slave vlan2): Opening slave failed [ 830.654946][T13985] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 830.688097][T13985] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 830.704375][T13985] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 830.725054][T13985] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 830.737813][T13985] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 830.745128][T13985] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 830.827453][T13985] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 830.834055][T13985] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 831.039312][T13924] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 831.102378][T13924] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 831.279895][T13924] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 831.381729][T13924] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 831.570223][T14044] loop4: detected capacity change from 0 to 256 [ 831.727220][T13945] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 831.776641][T13924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.877726][T13924] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.929928][T11480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 831.946517][T13945] usb 3-1: Using ep0 maxpacket: 32 [ 831.954962][T13945] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.978396][T11480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 832.516716][ T8645] Bluetooth: hci1: command 0x0c1a tx timeout [ 832.597093][ T8645] Bluetooth: hci0: command 0x0c1a tx timeout [ 832.636099][T13945] usb 3-1: config 0 has no interfaces? [ 832.658252][T13945] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 832.680610][T13945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.680716][T11484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 832.689357][ T8645] Bluetooth: hci4: command 0x0c1a tx timeout [ 832.703702][T13945] usb 3-1: Product: syz [ 832.708763][T13945] usb 3-1: Manufacturer: syz [ 832.713516][T13945] usb 3-1: SerialNumber: syz [ 832.721777][T13945] usb 3-1: config 0 descriptor?? [ 832.757743][ T8645] Bluetooth: hci3: command 0x0c1a tx timeout [ 832.763810][ T48] Bluetooth: hci2: command 0x0c1a tx timeout [ 832.825517][T11484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 832.920659][T11484] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.927978][T11484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.940297][ T4309] usb 3-1: USB disconnect, device number 42 [ 833.048614][T14056] libceph: resolve '4..' (ret=-3): failed [ 833.054815][T11484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 833.125695][T11484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 833.175844][T11484] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.183082][T11484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.203944][T11484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 833.234194][T11484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 833.263194][T14067] netlink: 'syz.3.3025': attribute type 1 has an invalid length. [ 833.386497][T13945] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 833.556550][T13945] usb 5-1: device descriptor read/64, error -71 [ 833.657176][T14077] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3026'. [ 833.689983][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 833.736125][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 833.786602][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 833.808158][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 833.836610][T13945] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 833.856016][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 833.931803][T13924] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 833.955430][T13924] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 833.999030][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 834.006838][T13945] usb 5-1: device descriptor read/64, error -71 [ 834.017294][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 834.043783][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 834.087144][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 834.107438][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 834.126777][T13945] usb usb5-port1: attempt power cycle [ 834.156775][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 834.506551][ T4302] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 834.586582][T13945] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 834.597449][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 834.676729][ T8645] Bluetooth: hci0: command 0x0406 tx timeout [ 834.725232][T13945] usb 5-1: device descriptor read/8, error -71 [ 834.726943][ T4302] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 834.756960][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 834.788958][ T4302] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 834.801795][ T4302] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 834.815147][ T4302] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 834.825300][ T4302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.836701][ T8645] Bluetooth: hci2: command 0x0406 tx timeout [ 834.836717][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 834.916264][ T4302] usb 4-1: invalid MIDI out EP 0 [ 835.036550][T13945] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 835.093111][T13945] usb 5-1: device descriptor read/8, error -71 [ 835.148447][ T4302] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 835.218911][T10065] udevd[10065]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 835.235455][T13945] usb usb5-port1: unable to enumerate USB device [ 835.338053][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 835.355164][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 835.408200][T13924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.525538][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 835.548789][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 835.602165][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 835.614370][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 835.628906][T13924] device veth0_vlan entered promiscuous mode [ 835.649397][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 835.665331][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 835.692991][T13924] device veth1_vlan entered promiscuous mode [ 835.824397][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 835.842107][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 835.862355][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 835.889288][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 835.907652][T13924] device veth0_macvtap entered promiscuous mode [ 835.947728][T13924] device veth1_macvtap entered promiscuous mode [ 836.032554][T13924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.130648][T13924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.174005][T13924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.268208][T13924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.297169][T13924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.322888][T13924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.368523][T13924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.393724][T13924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.437104][T13924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 836.456914][T11478] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 836.489648][T11478] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 836.533701][T11478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 836.608919][T11478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 836.689299][T13924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 836.732132][T13924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.795198][T13924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 836.876693][T13924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.908194][T13924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 836.963070][T13924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.055611][T13924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.130392][T13924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.156816][T14092] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 837.166656][ T48] Bluetooth: hci1: command 0x0c1a tx timeout [ 837.173509][T13924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 837.201575][T11478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 837.218005][T11478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 837.245109][T13924] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.284195][T13924] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.330740][T13924] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.376845][T13924] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.451914][T14092] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 837.483015][T14092] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 837.606746][T14092] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 837.635105][T14092] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 837.760435][T14092] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 837.790877][T14092] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 837.800456][T14092] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 837.811324][T14092] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 837.831324][T14092] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 837.841506][T14092] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 837.852846][T14092] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 837.860841][T14092] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 837.872273][T14092] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 837.885508][T14092] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 837.931621][T13868] usb 4-1: USB disconnect, device number 42 [ 838.008522][T14106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3031'. [ 838.073542][T14106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3031'. [ 838.099733][T11484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.156350][T11482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.169631][T11482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.176747][T11484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.196682][T13945] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 838.247371][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 838.286352][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 839.272309][ T8645] Bluetooth: hci1: command 0x0406 tx timeout [ 839.359191][T13945] usb 5-1: config 0 has no interfaces? [ 839.433485][T13945] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 839.457096][T13945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.474707][T13945] usb 5-1: Product: syz [ 839.491339][T13945] usb 5-1: Manufacturer: syz [ 839.496009][T13945] usb 5-1: SerialNumber: syz [ 839.535031][T14118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2991'. [ 839.546049][T13945] usb 5-1: config 0 descriptor?? [ 839.636736][ T48] Bluetooth: hci0: command 0x0c1a tx timeout [ 839.797073][ T48] Bluetooth: hci4: command 0x0c1a tx timeout [ 839.877010][ T48] Bluetooth: hci3: command 0x0c1a tx timeout [ 839.883187][ T48] Bluetooth: hci2: command 0x0c1a tx timeout [ 839.896811][ T4309] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 840.096578][ T4309] usb 4-1: Using ep0 maxpacket: 16 [ 840.103707][ T4309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.153224][ T4309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.189146][ T4309] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 840.270869][ T4309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.328638][ T4309] usb 4-1: config 0 descriptor?? [ 840.828626][T14133] blktrace: Concurrent blktraces are not allowed on sg0 [ 840.992703][ T8645] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 841.007640][ T8645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 841.018621][ T8645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 841.028671][ T8645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 841.036960][ T8645] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 841.044311][ T8645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 841.146533][T13868] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 841.179738][ T4309] letsketch 0003:6161:4D15.0024: Device info: ࠇ [ 841.363475][T13868] usb 2-1: config 0 has no interfaces? [ 841.381152][ T4309] letsketch 0003:6161:4D15.0024: Device info: ဉ [ 841.447669][T13868] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 841.466148][T13868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.487552][T13868] usb 2-1: Product: syz [ 841.492797][T14141] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 841.501709][T13868] usb 2-1: Manufacturer: syz [ 841.509657][T13868] usb 2-1: SerialNumber: syz [ 841.535907][T14141] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3042'. [ 841.537005][T13868] usb 2-1: config 0 descriptor?? [ 841.561765][T14141] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3042'. [ 841.581738][ T4309] letsketch 0003:6161:4D15.0024: Device info: 豧 [ 841.814920][ T4309] usb 4-1: Max retries (5) exceeded reading string descriptor 1 [ 841.876657][ T8645] Bluetooth: hci4: command 0x0406 tx timeout [ 841.906997][ T4309] letsketch: probe of 0003:6161:4D15.0024 failed with error -71 [ 841.956786][ T8645] Bluetooth: hci2: command 0x0406 tx timeout [ 841.962952][ T8645] Bluetooth: hci3: command 0x0406 tx timeout [ 841.974988][ T4309] usb 4-1: USB disconnect, device number 43 [ 843.106580][ T8645] Bluetooth: hci0: command 0x0409 tx timeout [ 843.174470][ T4302] usb 5-1: USB disconnect, device number 18 [ 843.177357][T14135] chnl_net:caif_netlink_parms(): no params data found [ 845.157936][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 845.645017][T14135] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.652627][T14135] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.661754][T14135] device bridge_slave_0 entered promiscuous mode [ 845.692115][T14135] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.699950][T14135] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.708943][T14135] device bridge_slave_1 entered promiscuous mode [ 845.769373][T14135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.797622][T14135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.024759][T14135] team0: Port device team_slave_0 added [ 846.085165][T14135] team0: Port device team_slave_1 added [ 846.327066][T14160] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 846.426778][T14135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.476742][T14160] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 846.486913][T14135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.487227][T14160] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 846.606744][ T48] Bluetooth: hci1: command 0x0c1a tx timeout [ 846.663250][T14160] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 846.706341][T14135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.776635][T14160] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 846.787359][T14135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.796622][T14160] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 846.814030][T14135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.857712][T14160] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 846.878860][T14160] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 846.935914][T14160] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 846.966892][T14135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.984237][T14160] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 847.089867][ T4309] usb 2-1: USB disconnect, device number 59 [ 847.196667][T14160] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 847.203251][T14160] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 847.237888][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 847.266703][T14160] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 847.293418][T14188] blktrace: Concurrent blktraces are not allowed on sg0 [ 847.300634][T14160] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 847.566736][T14160] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 847.826149][T11482] batman_adv: batadv0: Removing interface: dummy0 [ 848.676740][ T48] Bluetooth: hci4: command 0x0c1a tx timeout [ 848.683144][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 848.693103][T14196] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 848.759032][T11482] bond5 (unregistering): (slave veth5): Releasing active interface [ 848.916496][ T48] Bluetooth: hci2: command 0x0c1a tx timeout [ 849.006084][ T48] Bluetooth: hci3: command 0x0c1a tx timeout [ 849.036576][T13945] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 849.069984][T11482] bond5 (unregistering): Released all slaves [ 849.102243][T11482] bond4 (unregistering): (slave veth3): Releasing active interface [ 849.110621][T11482] bond4 (unregistering): (slave veth3): the permanent HWaddr of slave - d2:2b:2c:fc:ba:d4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 849.246561][T13945] usb 2-1: Using ep0 maxpacket: 32 [ 849.254164][T13945] usb 2-1: config 0 has too many interfaces: 230, using maximum allowed: 32 [ 849.263794][T13945] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.275062][T13945] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 230 [ 849.287746][T13945] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 849.300785][T13945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.309352][T13945] usb 2-1: Product: syz [ 849.313896][T13945] usb 2-1: Manufacturer: syz [ 849.316755][ T48] Bluetooth: hci0: command 0x0c1a tx timeout [ 849.319340][T13945] usb 2-1: SerialNumber: syz [ 849.339315][T13945] usb 2-1: config 0 descriptor?? [ 849.374339][T11482] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 849.385116][T11482] bond4 (unregistering): Released all slaves [ 849.552817][T13945] usb 2-1: USB disconnect, device number 60 [ 849.563433][T11482] bond3 (unregistering): Released all slaves [ 849.601594][T11482] bond2 (unregistering): Released all slaves [ 849.777744][T11482] bond1 (unregistering): Released all slaves [ 850.433270][T13868] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 850.645473][T13868] usb 2-1: Using ep0 maxpacket: 16 [ 850.652903][T13868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.664412][T13868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.675193][T13868] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 850.684606][T13868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.704838][T13868] usb 2-1: config 0 descriptor?? [ 850.756515][ T8645] Bluetooth: hci4: command 0x0406 tx timeout [ 851.000727][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 851.085889][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 851.169856][T11482] bond0 (unregistering): Released all slaves [ 851.280768][T14135] device hsr_slave_0 entered promiscuous mode [ 851.288838][T14135] device hsr_slave_1 entered promiscuous mode [ 851.297189][T14196] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3052'. [ 851.307228][T14199] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3052'. [ 851.404175][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 851.484976][T14209] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3057'. [ 851.528632][T14213] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3059'. [ 851.538641][T13868] letsketch 0003:6161:4D15.0025: Device info: ࠇ [ 851.560496][T14213] loop2: detected capacity change from 0 to 1024 [ 851.695901][T14213] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 851.739244][T13868] letsketch 0003:6161:4D15.0025: Device info: ဉ [ 851.832784][T14213] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.3059: bg 0: block 260: invalid block bitmap [ 851.859118][T14222] blktrace: Concurrent blktraces are not allowed on sg0 [ 851.924018][T14224] smc: net device bond0 applied user defined pnetid SYZ0 [ 851.940047][T13868] letsketch 0003:6161:4D15.0025: Device info: 豧 [ 851.953111][T14213] smc: net device bond0 erased user defined pnetid SYZ0 [ 852.096990][T14228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3061'. [ 852.109280][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 852.190078][T13868] usb 2-1: Max retries (5) exceeded reading string descriptor 1 [ 852.206175][T13868] letsketch: probe of 0003:6161:4D15.0025 failed with error -71 [ 852.293235][T13868] usb 2-1: USB disconnect, device number 61 [ 852.513803][T14239] sctp: [Deprecated]: syz.2.3063 (pid 14239) Use of int in maxseg socket option. [ 852.513803][T14239] Use struct sctp_assoc_value instead [ 852.836516][ T4309] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 853.133166][ T4309] usb 5-1: config 0 has no interfaces? [ 853.219650][ T4309] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 853.262237][ T4309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.292926][ T4309] usb 5-1: Product: syz [ 853.299556][ T4309] usb 5-1: Manufacturer: syz [ 853.333834][ T4309] usb 5-1: SerialNumber: syz [ 853.406909][ T4309] usb 5-1: config 0 descriptor?? [ 853.853955][T14135] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 853.897982][T14135] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 853.940512][T14135] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 854.001837][T14258] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 854.013887][T14135] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 854.157322][T14261] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3067'. [ 854.207056][T14258] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3067'. [ 854.595267][T14135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.717473][T11474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 854.747154][T11474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 854.791879][T14135] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.802771][T14276] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3071'. [ 854.854798][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 854.874080][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 854.924568][T11482] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.931743][T11482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.017141][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 855.037920][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 855.083319][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 855.172270][T11482] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.179471][T11482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 855.254410][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 855.263895][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 855.297255][T14135] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 855.307975][T14135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 855.395192][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 855.434157][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 856.325438][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 856.373463][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 856.412379][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 856.483809][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 856.506036][T14300] snd_dummy snd_dummy.0: control 3:2:0:syz0:211 is already present [ 856.536586][T13869] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 856.548689][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 856.644750][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 856.766598][T13869] usb 2-1: Using ep0 maxpacket: 16 [ 856.772366][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 856.816699][ T4336] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 856.867664][T13869] usb 2-1: config index 0 descriptor too short (expected 1828, got 36) [ 856.883152][T13869] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 856.891910][T13869] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 856.901367][T13869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 856.911626][T13869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 856.924622][T13869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 857.016190][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 857.037804][ T4336] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 857.062845][T13869] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 857.194661][ T4336] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 857.251934][T13869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.260528][ T4336] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 857.270950][T13869] usb 2-1: Product: syz [ 857.276669][T13869] usb 2-1: Manufacturer: syz [ 857.281810][ T4336] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 857.305233][T13869] usb 2-1: SerialNumber: syz [ 857.334135][T13869] usb 2-1: config 0 descriptor?? [ 857.356853][ T4336] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 857.388778][ T4336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 857.417263][T11474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 857.432756][T11474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 857.450737][ T4336] usb 4-1: SerialNumber: syz [ 857.470859][T14135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 857.511694][ T4336] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 857.541577][ T4336] usb-storage 4-1:1.0: USB Mass Storage device detected [ 857.579204][T11474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 857.602726][T13869] usb 2-1: can't set config #0, error -71 [ 857.609375][T11474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 857.618941][T13869] usb 2-1: USB disconnect, device number 62 [ 857.626943][ T4336] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 857.691636][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 857.737359][T13868] usb 5-1: USB disconnect, device number 19 [ 857.787486][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 857.819300][T14135] device veth0_vlan entered promiscuous mode [ 857.840155][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 857.868044][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 857.918386][T14135] device veth1_vlan entered promiscuous mode [ 857.995636][T11448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 858.009132][T11448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 858.030246][T14135] device veth0_macvtap entered promiscuous mode [ 858.086657][T13945] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 858.131696][T14135] device veth1_macvtap entered promiscuous mode [ 858.156221][T14319] netlink: 'syz.1.3078': attribute type 1 has an invalid length. [ 858.215874][T14135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.235485][T14135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.246458][T14135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.266500][T14135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.284674][T13945] usb 3-1: Using ep0 maxpacket: 32 [ 858.286650][T14135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.292355][T13945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.309197][T14135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.329176][T14135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.344624][T14135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.350212][T13945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.357676][T14135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.389394][T14135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.402102][T13945] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 858.407514][T14135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 858.430198][T13945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.465307][T13945] usb 3-1: config 0 descriptor?? [ 858.493174][T13945] hub 3-1:0.0: USB hub found [ 858.498178][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 858.510576][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 858.535338][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 858.563536][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 858.659531][T14135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.690780][T14135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.701016][T13945] hub 3-1:0.0: 1 port detected [ 858.733119][T14135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.757133][T14135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.779888][T14135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.822089][T14135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.852015][T14135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.896478][T14135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.926510][T14135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.958979][T14135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.998992][T14135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.020545][T11448] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 859.045701][T11448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 859.082505][T14135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.100327][T14135] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.138666][T14135] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.153877][T14135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.366042][T11448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.415788][T11448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.459886][T11474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 859.473952][T11478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.494610][T11478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.544010][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 859.568387][ T4301] usb 4-1: USB disconnect, device number 44 [ 859.619537][ T4309] hub 3-1:0.0: activate --> -90 [ 859.739429][T14345] device syzkaller1 entered promiscuous mode [ 859.815117][T14349] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3082'. [ 860.896837][ T4301] usb 3-1: USB disconnect, device number 43 [ 861.096538][T13869] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 861.316732][T13869] usb 1-1: Using ep0 maxpacket: 32 [ 861.324256][T13869] usb 1-1: config 0 has too many interfaces: 230, using maximum allowed: 32 [ 861.376703][T13869] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.436976][T13869] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 230 [ 861.499593][T13869] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 861.555250][T13869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.584776][T13869] usb 1-1: Product: syz [ 861.599513][T13869] usb 1-1: Manufacturer: syz [ 861.614519][T13869] usb 1-1: SerialNumber: syz [ 861.654615][T13869] usb 1-1: config 0 descriptor?? [ 861.892258][ T4303] usb 1-1: USB disconnect, device number 57 [ 862.050302][ T8645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 862.099556][ T8645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 862.111864][ T8645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 862.152469][ T8645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 862.160599][ T8645] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 862.172651][ T8645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 862.580034][T11486] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.727893][T14384] loop0: detected capacity change from 0 to 256 [ 862.915404][T11486] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.018970][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3090'. [ 863.219126][T11486] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.251087][ T8645] Bluetooth: hci5: command 0x0409 tx timeout [ 864.401680][T11486] bond0: (slave netdevsim0): Releasing backup interface [ 864.435900][T14403] fuse: Unknown parameter 'group_i00000000000000000000' [ 864.449178][T11486] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.570498][T14375] chnl_net:caif_netlink_parms(): no params data found [ 864.843560][T14413] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3095'. [ 865.327276][ T4301] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 865.485260][T14421] loop0: detected capacity change from 0 to 4096 [ 865.519591][ T4301] usb 4-1: Using ep0 maxpacket: 8 [ 865.526262][T14421] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 865.529421][ T4301] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 865.566166][ T4301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.575515][ T4301] usb 4-1: Product: syz [ 865.591853][ T4301] usb 4-1: Manufacturer: syz [ 865.596950][ T4301] usb 4-1: SerialNumber: syz [ 865.619466][ T4301] usb 4-1: config 0 descriptor?? [ 865.658582][T14421] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 865.842340][ T4301] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 866.281150][ T8645] Bluetooth: hci5: command 0x041b tx timeout [ 866.386686][T13869] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 866.591819][T13869] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 866.605981][T13869] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 866.618833][T13869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.634798][T13869] usb 1-1: config 0 descriptor?? [ 866.654247][T13869] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 868.164369][ T4301] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 868.174423][ T4301] usb 4-1: USB disconnect, device number 45 [ 868.367414][ T8645] Bluetooth: hci5: command 0x040f tx timeout [ 868.454739][T14430] loop4: detected capacity change from 0 to 1024 [ 868.470586][T14375] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.486794][T14375] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.518520][T14375] device bridge_slave_0 entered promiscuous mode [ 868.531767][T14375] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.543048][T14375] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.573663][T14375] device bridge_slave_1 entered promiscuous mode [ 868.608408][T14432] netlink: 'syz.1.3101': attribute type 1 has an invalid length. [ 868.697037][T11486] tipc: Left network mode [ 868.751849][T14375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.992116][T11486] bond1: (slave ip6gretap1): Releasing backup interface [ 869.038664][T14375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.194203][T13869] usb 1-1: USB disconnect, device number 58 [ 869.336521][ T4303] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 869.371407][T14375] team0: Port device team_slave_0 added [ 869.390657][T14375] team0: Port device team_slave_1 added [ 869.407125][T14451] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 869.590952][ T4303] usb 2-1: config 0 has no interfaces? [ 869.619243][ T4303] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 869.697115][ T4303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.705281][ T4303] usb 2-1: Product: syz [ 869.710606][ T4303] usb 2-1: Manufacturer: syz [ 869.720886][ T4303] usb 2-1: SerialNumber: syz [ 869.736584][ T4303] usb 2-1: config 0 descriptor?? [ 869.798216][T14375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.858135][T14375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.928283][T14458] fuse: Unknown parameter 'group_i00000000000000000000' [ 869.956235][T14375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 870.003024][T14375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 870.108471][T14375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 870.239269][T14375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 870.278906][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.287755][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.436562][ T8645] Bluetooth: hci5: command 0x0419 tx timeout [ 870.616566][ T4303] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 870.716043][T14375] device hsr_slave_0 entered promiscuous mode [ 870.729486][T14375] device hsr_slave_1 entered promiscuous mode [ 870.762643][T14375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 870.790098][T14375] Cannot create hsr debugfs directory [ 870.840707][ T4303] usb 4-1: config 0 has no interfaces? [ 870.882312][ T4303] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 870.901204][ T4303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.932848][ T4303] usb 4-1: Product: syz [ 870.980019][ T4303] usb 4-1: Manufacturer: syz [ 870.984665][ T4303] usb 4-1: SerialNumber: syz [ 871.015071][ T4303] usb 4-1: config 0 descriptor?? [ 871.322210][T14476] loop0: detected capacity change from 0 to 512 [ 871.517721][T14476] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.3110: casefold flag without casefold feature [ 871.609548][T14476] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.3110: couldn't read orphan inode 15 (err -117) [ 872.362994][T14476] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 872.571536][ T4301] usb 2-1: USB disconnect, device number 63 [ 872.965140][T14491] netlink: 'syz.1.3113': attribute type 1 has an invalid length. [ 872.997910][T14491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 873.015907][T14494] bond1: (slave veth0_to_bond): making interface the new active one [ 873.035864][T14494] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 873.048546][T14135] EXT4-fs (loop0): unmounting filesystem. [ 873.057896][T14495] device veth1 entered promiscuous mode [ 873.064068][T14495] device veth1 left promiscuous mode [ 873.073974][T14495] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 873.136617][ T4301] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 873.240105][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 873.271756][T11486] device hsr_slave_0 left promiscuous mode [ 873.299259][T14502] vim2m vim2m.0: vidioc_s_fmt queue busy [ 873.312692][T14501] loop1: detected capacity change from 0 to 256 [ 873.320873][T11486] device hsr_slave_1 left promiscuous mode [ 873.327504][ T4301] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 873.377006][ T4301] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 873.446025][ T4301] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 873.510711][ T4301] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 873.605985][ T4301] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 873.693886][T11486] batman_adv: batadv0: Interface deactivated: dummy0 [ 873.709909][T14507] fuse: Unknown parameter 'group_i00000000000000000000' [ 873.711429][T11486] batman_adv: batadv0: Removing interface: dummy0 [ 873.718404][ T4301] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 873.741276][T11486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 873.770968][T11486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 873.783190][T11486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 873.795659][T11486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 873.806217][ T4301] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 873.822780][ T4301] usb 5-1: Product: syz [ 873.827405][ T4301] usb 5-1: Manufacturer: syz [ 873.852730][T11486] device bridge_slave_1 left promiscuous mode [ 873.864895][T11486] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.893943][ T4301] cdc_wdm 5-1:1.0: skipping garbage [ 873.908099][T11486] device bridge_slave_0 left promiscuous mode [ 873.924734][T11486] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.948396][ T4301] cdc_wdm 5-1:1.0: skipping garbage [ 873.990348][ T4301] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 874.014079][ T4301] cdc_wdm 5-1:1.0: Unknown control protocol [ 874.129499][T11486] device veth1_vlan left promiscuous mode [ 874.143815][T11486] device veth0_vlan left promiscuous mode [ 874.308678][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE [ 874.372880][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 874.379558][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 874.382012][ T4303] usb 5-1: USB disconnect, device number 20 [ 874.385653][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 874.857782][T14526] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 874.877770][T11486] bond6 (unregistering): (slave veth3): Releasing active interface [ 874.942264][T11486] bond6 (unregistering): (slave veth3): the permanent HWaddr of slave - 4e:8e:6a:e9:56:65 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 874.970480][T11486] device veth0_to_bond entered promiscuous mode [ 876.423910][ T4309] usb 4-1: USB disconnect, device number 46 [ 876.817160][T11486] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 876.826733][ T4303] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 876.854489][T11486] device veth0_to_bond left promiscuous mode [ 876.865619][T11486] bond6 (unregistering): Released all slaves [ 877.056538][ T4303] usb 5-1: config 0 has no interfaces? [ 877.087252][ T4303] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 877.107993][ T4303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.116093][ T4303] usb 5-1: Product: syz [ 877.120704][ T4303] usb 5-1: Manufacturer: syz [ 877.126195][ T4303] usb 5-1: SerialNumber: syz [ 877.138535][ T4303] usb 5-1: config 0 descriptor?? [ 877.243319][T11486] bond5 (unregistering): Released all slaves [ 877.601220][T11486] bond4 (unregistering): Released all slaves [ 877.841963][T11486] bond3 (unregistering): Released all slaves [ 877.854635][T11486] bond2 (unregistering): Released all slaves [ 877.873632][T11486] bond1 (unregistering): Released all slaves [ 878.330554][T11486] team0 (unregistering): Port device team_slave_1 removed [ 878.405414][T11486] team0 (unregistering): Port device team_slave_0 removed [ 878.489147][T11486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 878.585952][T11486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 878.637570][T14553] loop1: detected capacity change from 0 to 256 [ 878.823330][T14555] loop1: detected capacity change from 0 to 128 [ 878.835504][T14555] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 878.866150][T14555] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 879.604232][ T4303] usb 5-1: USB disconnect, device number 21 [ 879.867899][T11486] bond0 (unregistering): Released all slaves [ 880.145175][T14526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3120'. [ 880.189911][T14528] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3120'. [ 880.955173][T14375] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 881.023932][T14375] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 881.093896][T14375] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 881.147729][T14375] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 881.450913][T14375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 881.557151][T11466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 881.588196][T11466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 881.646306][ T4336] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 881.679331][T14375] 8021q: adding VLAN 0 to HW filter on device team0 [ 881.778116][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 881.818485][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 881.854543][T11464] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.861713][T11464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 881.929429][ T4336] usb 1-1: config 0 has no interfaces? [ 881.944186][ T4336] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 882.027144][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 882.073955][ T4336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.145106][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 882.185849][T11464] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.193047][T11464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 882.242024][ T4336] usb 1-1: Product: syz [ 882.260590][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 882.333782][ T4336] usb 1-1: Manufacturer: syz [ 882.399592][ T4336] usb 1-1: SerialNumber: syz [ 882.529891][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 882.548492][ T4336] usb 1-1: config 0 descriptor?? [ 882.550860][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 882.684336][T11466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 882.732740][T11466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 882.772867][T11466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 882.810569][T11466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 882.854131][T11466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 882.890287][T11466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 882.932705][T14375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 882.966012][T14375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 883.027326][T11466] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 883.045558][T11466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 883.093966][T11466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 884.393725][T11472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 884.477206][T11472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 884.490754][T14375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.623575][T11486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 884.663446][T11486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 884.696062][T11486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 884.707672][T11486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 884.719639][T14375] device veth0_vlan entered promiscuous mode [ 884.729156][T11486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 884.744353][T11486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 884.759437][T14375] device veth1_vlan entered promiscuous mode [ 884.842885][T14375] device veth0_macvtap entered promiscuous mode [ 884.854527][T14375] device veth1_macvtap entered promiscuous mode [ 884.910968][T11486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 885.685909][T11486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 885.707779][T11486] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 885.723350][T11486] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 885.924532][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.939815][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.955881][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.976523][ T4303] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 886.001081][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.038911][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 886.361327][ T4303] usb 5-1: config 0 has no interfaces? [ 886.371656][ T4303] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 886.396321][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.066574][ T4303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.096502][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.107074][ T4303] usb 5-1: Product: syz [ 887.111284][ T4303] usb 5-1: Manufacturer: syz [ 887.152739][ T4303] usb 5-1: SerialNumber: syz [ 887.166562][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.179043][ T4303] usb 5-1: config 0 descriptor?? [ 887.206759][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.246526][T14645] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3144'. [ 887.276546][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.414933][T14375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 887.463490][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 887.527528][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 887.580306][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.625723][ T4303] usb 1-1: USB disconnect, device number 59 [ 887.649599][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.714716][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.724073][T14652] capability: warning: `syz.1.3146' uses deprecated v2 capabilities in a way that may be insecure [ 887.768260][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.821832][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.926840][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.937277][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.947823][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.958504][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.993728][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.797009][T14375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 888.831865][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 888.902263][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 888.938529][T14375] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.978855][T13869] usb 5-1: USB disconnect, device number 22 [ 888.996825][T14375] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.057911][T14375] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.104894][T14375] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.206677][T13868] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 889.407013][T13868] usb 1-1: Using ep0 maxpacket: 16 [ 889.410779][T11466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.415071][T13868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.447792][T11466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.463466][T13868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.511904][T13868] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 889.531065][T11472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 889.544789][T13868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.570202][T11464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.595287][T13868] usb 1-1: config 0 descriptor?? [ 889.602540][T11464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.661951][T11472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 890.376638][ T4303] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 890.434315][T13868] letsketch 0003:6161:4D15.0026: Device info: ࠇ [ 890.607840][ T4303] usb 3-1: config 0 has no interfaces? [ 890.635005][T13868] letsketch 0003:6161:4D15.0026: Device info: ဉ [ 890.660967][ T4303] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 890.686525][ T4303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.757823][ T4303] usb 3-1: Product: syz [ 890.762103][ T4303] usb 3-1: Manufacturer: syz [ 890.806463][ T4303] usb 3-1: SerialNumber: syz [ 890.836219][T13868] letsketch 0003:6161:4D15.0026: Device info: 豧 [ 890.873043][ T4303] usb 3-1: config 0 descriptor?? [ 891.267188][T13868] usb 1-1: Max retries (5) exceeded reading string descriptor 1 [ 891.316401][T13868] letsketch: probe of 0003:6161:4D15.0026 failed with error -71 [ 891.398923][T13868] usb 1-1: USB disconnect, device number 60 [ 891.778088][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 891.796975][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 891.807862][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 891.818512][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 891.826201][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 891.833955][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 891.933386][T14697] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3155'. [ 892.044351][T11466] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.111983][T14699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3154'. [ 892.219127][T11466] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.389992][T11466] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.936053][T14712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3166'. [ 893.878027][ T8645] Bluetooth: hci1: command 0x0409 tx timeout [ 894.677013][T13945] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 894.719378][T13868] usb 3-1: USB disconnect, device number 44 [ 894.889474][T13945] usb 4-1: config 0 has no interfaces? [ 895.062152][T14689] chnl_net:caif_netlink_parms(): no params data found [ 895.088219][T13945] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 895.097511][T13945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.106486][T13945] usb 4-1: Product: syz [ 895.116503][T13945] usb 4-1: Manufacturer: syz [ 895.121300][T13945] usb 4-1: SerialNumber: syz [ 895.127848][T13945] usb 4-1: config 0 descriptor?? [ 895.794849][T14741] loop2: detected capacity change from 0 to 2048 [ 895.956699][ T8645] Bluetooth: hci1: command 0x041b tx timeout [ 896.266322][T14749] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 896.315078][T11466] bond1: (slave ip6gretap1): Removing an active aggregator [ 896.361008][T11466] bond1: (slave ip6gretap1): Releasing backup interface [ 896.393466][T11466] device ip6gretap1 left promiscuous mode [ 896.682161][T14689] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.693164][T14689] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.740447][T14689] device bridge_slave_0 entered promiscuous mode [ 896.814467][T14689] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.829208][T14689] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.851238][T14689] device bridge_slave_1 entered promiscuous mode [ 897.025853][T14689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.101611][T14689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.230012][T14689] team0: Port device team_slave_0 added [ 897.294398][T14689] team0: Port device team_slave_1 added [ 897.405419][T14689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.464274][T13945] usb 4-1: USB disconnect, device number 47 [ 897.493259][T14689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.555506][T14689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.732861][T14689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.753469][T14689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.857042][T14689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 898.037067][ T8645] Bluetooth: hci1: command 0x040f tx timeout [ 898.097771][T13945] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 898.232035][T14689] device hsr_slave_0 entered promiscuous mode [ 898.250479][T14689] device hsr_slave_1 entered promiscuous mode [ 898.269714][T14689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 898.303149][T14689] Cannot create hsr debugfs directory [ 898.324530][T13945] usb 4-1: config 0 has no interfaces? [ 898.395357][T13945] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 898.413077][T13945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.474377][T13945] usb 4-1: Product: syz [ 898.493135][T13945] usb 4-1: Manufacturer: syz [ 898.506149][T13945] usb 4-1: SerialNumber: syz [ 898.533596][T13945] usb 4-1: config 0 descriptor?? [ 898.551121][T11466] device hsr_slave_0 left promiscuous mode [ 898.580561][T11466] device hsr_slave_1 left promiscuous mode [ 898.592686][T11466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 898.614457][T11466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 898.674523][T11466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 898.691702][T11466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 898.718655][T11466] device bridge_slave_1 left promiscuous mode [ 898.725220][T11466] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.755264][T11466] device bridge_slave_0 left promiscuous mode [ 898.796149][T11466] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.004301][T11466] device veth1_vlan left promiscuous mode [ 899.033038][T11466] device veth0_vlan left promiscuous mode [ 899.739556][T11466] bond6 (unregistering): (slave veth9): Releasing active interface [ 900.116865][ T8645] Bluetooth: hci1: command 0x0419 tx timeout [ 900.757836][T11466] bond6 (unregistering): Released all slaves [ 900.933689][T11466] bond5 (unregistering): (slave veth7): Releasing active interface [ 900.980187][T11466] bond5 (unregistering): (slave veth7): the permanent HWaddr of slave - 16:c2:39:79:96:dc - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 901.079086][T11466] device veth0_to_bond entered promiscuous mode [ 901.482537][T13868] usb 4-1: USB disconnect, device number 48 [ 901.681763][T14832] loop3: detected capacity change from 0 to 2048 [ 901.735533][T11466] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 901.739087][T14834] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3177'. [ 901.784748][T11466] device veth0_to_bond left promiscuous mode [ 901.803865][T14832] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 901.829835][T11466] bond5 (unregistering): Released all slaves [ 901.987088][T11466] bond4 (unregistering): (slave veth5): Releasing active interface [ 902.270735][T11466] bond4 (unregistering): Released all slaves [ 902.479562][ T26] kauditd_printk_skb: 52 callbacks suppressed [ 902.479580][ T26] audit: type=1800 audit(1749308815.801:2490): pid=14832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3176" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 902.581268][T11466] bond3 (unregistering): Released all slaves [ 902.601831][T11466] bond2 (unregistering): Released all slaves [ 902.692811][T13735] EXT4-fs (loop3): unmounting filesystem. [ 902.791594][T14842] fuse: Bad value for 'user_id' [ 902.948920][T11466] bond1 (unregistering): Released all slaves [ 903.583929][T11466] team0 (unregistering): Port device team_slave_1 removed [ 903.642794][T11466] team0 (unregistering): Port device team_slave_0 removed [ 903.733828][T11466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 903.823767][T11466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 904.162616][ T4336] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 904.387578][ T4336] usb 4-1: config 0 has no interfaces? [ 904.421120][ T4336] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 904.430999][ T4336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.439749][ T4336] usb 4-1: Product: syz [ 904.444052][ T4336] usb 4-1: Manufacturer: syz [ 904.449151][ T4336] usb 4-1: SerialNumber: syz [ 904.475738][ T4336] usb 4-1: config 0 descriptor?? [ 904.509822][T11466] bond0 (unregistering): Released all slaves [ 905.777819][T13867] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 905.993708][T14689] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 906.712570][T14689] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 906.752050][T14689] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 906.784121][T14689] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 906.836889][T14884] netlink: 'syz.2.3189': attribute type 1 has an invalid length. [ 906.885357][T14884] 8021q: adding VLAN 0 to HW filter on device bond1 [ 906.902125][T13867] usb 1-1: config 0 has no interfaces? [ 906.963300][T13867] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 906.994509][T13867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.004118][ T4309] usb 4-1: USB disconnect, device number 49 [ 907.028553][T13867] usb 1-1: Product: syz [ 907.033924][T13867] usb 1-1: Manufacturer: syz [ 907.082560][T13867] usb 1-1: SerialNumber: syz [ 907.107453][T13867] usb 1-1: config 0 descriptor?? [ 907.290122][T14689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.295647][T14891] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3191'. [ 907.332028][T14689] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.352668][T11466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 907.368965][T11466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 908.386598][T11478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 908.453635][T11478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 908.475587][T11478] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.482776][T11478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.494482][T11478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 908.506883][T14906] loop3: detected capacity change from 0 to 164 [ 908.532202][T11478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 908.571857][T11478] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.579189][T11478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.626212][T11478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 908.661386][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 908.684691][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 908.739135][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 908.807769][ T4309] usb 1-1: USB disconnect, device number 61 [ 908.815880][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 908.854037][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 908.906703][T11478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 908.940185][T11478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 908.979336][T11478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 909.011305][T11478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 909.217806][T11474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 909.235564][T11474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 909.251800][T14689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 910.088436][T14923] loop3: detected capacity change from 0 to 164 [ 910.137108][T14923] Unable to read rock-ridge attributes [ 910.329791][T14923] Unable to read rock-ridge attributes [ 911.955239][T14943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3202'. [ 912.249403][T14946] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3203'. [ 912.616303][T11474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 912.629104][T11474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 912.664969][T14689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.075532][T13867] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 913.326046][T13867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 913.436872][T13867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 913.595243][T13867] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 913.610482][T13867] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 913.626535][T13867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.651731][T13867] usb 4-1: config 0 descriptor?? [ 914.084445][T13867] usbhid 4-1:0.0: can't add hid device: -71 [ 914.092571][T13867] usbhid: probe of 4-1:0.0 failed with error -71 [ 914.127411][T13867] usb 4-1: USB disconnect, device number 50 [ 914.216636][T14975] loop2: detected capacity change from 0 to 8192 [ 914.341263][T14975] REISERFS warning (device loop2): super-6519 read_super_block: Unfinished reiserfsck --rebuild-tree run detected. Please run [ 914.341263][T14975] reiserfsck --rebuild-tree and wait for a completion. If that fails [ 914.341263][T14975] get newer reiserfsprogs package [ 914.367857][T14975] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 [ 914.952737][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 914.982697][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 915.080475][T11462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 915.120554][T11462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 915.182050][T11462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 915.218075][T11462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 915.255819][T14689] device veth0_vlan entered promiscuous mode [ 915.340426][T14689] device veth1_vlan entered promiscuous mode [ 915.527618][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 915.573664][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 915.617479][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 915.695573][T11476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 915.754530][T14689] device veth0_macvtap entered promiscuous mode [ 915.812790][T14689] device veth1_macvtap entered promiscuous mode [ 915.933521][T14689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.003613][T14689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.050642][T14689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.080551][T15008] fuse: Bad value for 'fd' [ 916.104715][T14689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.149539][T14689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.190716][T14689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.209374][T14689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.223665][T14689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.247173][T14689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.274609][T14689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.293994][T14689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 916.304679][T11456] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 916.322314][T11456] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 916.333324][T11456] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 916.359012][T11456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 916.382342][T14689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.398679][T14689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.415973][T14689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.435666][T14689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.459481][T14689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.495579][T14689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.525805][T14689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.552349][T14689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.577033][T14689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.599156][T14689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.624479][T14689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 916.643260][T11456] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 916.657476][T11456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 916.679461][T14689] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.695714][T14689] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.705804][T14689] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.722252][T14689] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.748896][T15004] loop0: detected capacity change from 0 to 32768 [ 916.781601][T15004] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.3215 (15004) [ 916.832038][T15004] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 916.867800][T15004] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 916.886843][T15004] BTRFS info (device loop0): force clearing of disk cache [ 916.923927][T15004] BTRFS info (device loop0): enabling auto defrag [ 916.942005][T15004] BTRFS info (device loop0): max_inline at 0 [ 916.948957][T11482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.968259][T11482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.988063][T15004] BTRFS info (device loop0): enabling disk space caching [ 917.017346][T15004] BTRFS info (device loop0): disk space caching is enabled [ 917.024703][T11462] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 917.301140][T15004] BTRFS info (device loop0): enabling ssd optimizations [ 917.313465][T11482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.325225][T15004] BTRFS info (device loop0): rebuilding free space tree [ 918.509537][T15044] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 918.518926][T15044] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 918.528713][T15044] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 918.543332][T15044] syz.2.3219 (15044) used greatest stack depth: 18248 bytes left [ 918.622680][ T26] audit: type=1800 audit(1749308831.831:2491): pid=15044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3219" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 918.691767][T15004] BTRFS info (device loop0): disabling free space tree [ 918.705942][T11482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.730238][T15004] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 918.764594][T11478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 918.773870][T15004] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 919.420923][T14135] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 920.475208][T10036] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 12 /dev/loop0 scanned by udevd (10036) [ 920.590082][T15075] fuse: Bad value for 'fd' [ 921.404038][T15087] "syz.0.3225" (15087) uses obsolete ecb(arc4) skcipher [ 921.462693][T13870] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 921.552360][T15094] loop3: detected capacity change from 0 to 128 [ 921.615496][T15094] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 921.634168][T15094] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 921.647173][T13870] usb 3-1: device descriptor read/64, error -71 [ 921.734836][T15094] fscrypt (loop3, inode 12): Direct key flag not allowed with different contents and filenames modes [ 921.853711][T13735] EXT4-fs (loop3): unmounting filesystem. [ 921.916489][T13870] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 921.991246][T15103] loop0: detected capacity change from 0 to 4096 [ 922.191408][T13870] usb 3-1: device descriptor read/64, error -71 [ 922.204450][T15103] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 923.069850][T13870] usb usb3-port1: attempt power cycle [ 923.087815][T14135] EXT4-fs (loop0): unmounting filesystem. [ 923.666438][T13870] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 923.729563][T15125] fuse: Bad value for 'fd' [ 923.896544][T13870] usb 3-1: device not accepting address 47, error -71 [ 925.725742][T15157] snd_dummy snd_dummy.0: control 3:2:0:syz0:211 is already present [ 926.091074][ C1] ------------[ cut here ]------------ [ 926.096699][ C1] WARNING: CPU: 1 PID: 0 at net/mac80211/tx.c:4934 __ieee80211_beacon_get+0x1952/0x1f50 [ 926.106579][ C1] Modules linked in: [ 926.110625][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.1.141-syzkaller #0 [ 926.118501][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 926.128632][ C1] RIP: 0010:__ieee80211_beacon_get+0x1952/0x1f50 [ 926.135032][ C1] Code: ff ff ff e8 a0 f6 eb f7 0f 0b 48 8b 7c 24 20 e8 b4 ae 7f fe e9 dd e9 ff ff e8 8a f6 eb f7 0f 0b e9 f1 ee ff ff e8 7e f6 eb f7 <0f> 0b e9 61 f2 ff ff e8 72 f6 eb f7 48 c7 c7 f0 99 d9 8d 4c 89 f6 [ 926.154828][ C1] RSP: 0018:ffffc900001e08a0 EFLAGS: 00010246 [ 926.160966][ C1] RAX: ffffffff8994dff2 RBX: 0000000000000000 RCX: ffff88813fef1dc0 [ 926.169119][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 926.177304][ C1] RBP: ffffc900001e0aa8 R08: ffff88813fef1dc0 R09: 0000000000000003 [ 926.185389][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: 1ffff9200003c12c [ 926.193441][ C1] R13: dffffc0000000000 R14: ffff88807c6e2258 R15: ffff88807a40f600 [ 926.201493][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 926.210518][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 926.217349][ C1] CR2: 0000001b31a0eff8 CR3: 0000000061189000 CR4: 00000000003506e0 [ 926.225543][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 926.233613][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 926.241774][ C1] Call Trace: [ 926.245101][ C1] [ 926.248031][ C1] ? verify_lock_unused+0x140/0x140 [ 926.253304][ C1] ? __ieee80211_beacon_get+0xad/0x1f50 [ 926.258936][ C1] ? ieee80211_beacon_get_template+0x40/0x40 [ 926.265017][ C1] ieee80211_beacon_get_tim+0x5b/0x4d0 [ 926.270585][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 926.276204][ C1] ? read_lock_is_recursive+0x10/0x10 [ 926.281726][ C1] __iterate_interfaces+0x243/0x500 [ 926.287104][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 926.293443][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 926.300980][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 926.307329][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 926.314422][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 926.319892][ C1] __hrtimer_run_queues+0x554/0xd60 [ 926.325161][ C1] ? hw_scan_work+0xf30/0xf30 [ 926.330002][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 926.335269][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 926.337948][T15082] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 926.341694][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 926.354372][ C1] handle_softirqs+0x2a1/0x920 [ 926.359348][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 926.364242][ C1] ? do_softirq+0x200/0x200 [ 926.368803][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 926.374022][ C1] __irq_exit_rcu+0x12f/0x220 [ 926.378734][ C1] ? irq_exit_rcu+0x20/0x20 [ 926.383289][ C1] irq_exit_rcu+0x5/0x20 [ 926.387571][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 926.393235][ C1] [ 926.396394][ C1] [ 926.399362][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 926.405444][ C1] RIP: 0010:default_idle+0xb/0x10 [ 926.410512][ C1] Code: 48 89 df e8 47 d4 b8 f7 e9 4c ff ff ff e8 bd 15 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 17 24 4d 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 926.430188][ C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6 [ 926.436262][ C1] RAX: 8cf341071295b600 RBX: ffffffff8a197f77 RCX: 8cf341071295b600 [ 926.444288][ C1] RDX: 0000000000000001 RSI: ffffffff8a6bffe0 RDI: ffffffff8abf1360 [ 926.452311][ C1] RBP: ffffc90000177f20 R08: dffffc0000000000 R09: ffffed10171e6af6 [ 926.460334][ C1] R10: ffffed10171e6af6 R11: 1ffff110171e6af5 R12: 0000000000000001 [ 926.468331][ C1] R13: dffffc0000000000 R14: ffff88813fef1dc0 R15: 1ffffffff1bfd0f6 [ 926.476314][ C1] ? default_idle_call+0x77/0xc0 [ 926.481347][ C1] default_idle_call+0x84/0xc0 [ 926.486250][ C1] do_idle+0x1fc/0x570 [ 926.490379][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 926.495603][ C1] ? schedule_idle+0x57/0x90 [ 926.500262][ C1] ? do_idle+0x55e/0x570 [ 926.504562][ C1] cpu_startup_entry+0x3f/0x60 [ 926.509366][ C1] start_secondary+0xe4/0xf0 [ 926.513991][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 926.519927][ C1] [ 926.522960][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 926.530272][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.1.141-syzkaller #0 [ 926.538218][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 926.548817][ C1] Call Trace: [ 926.552122][ C1] [ 926.554977][ C1] dump_stack_lvl+0x168/0x22e [ 926.559679][ C1] ? memcpy+0x3c/0x60 [ 926.563667][ C1] ? show_regs_print_info+0x12/0x12 [ 926.568886][ C1] ? load_image+0x3b0/0x3b0 [ 926.573577][ C1] panic+0x2c9/0x710 [ 926.577483][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 926.581992][ C1] ? secondary_startup_64_no_verify+0xcf/0xdb [ 926.588085][ C1] __warn+0x2f8/0x4f0 [ 926.592098][ C1] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 926.597856][ C1] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 926.603965][ C1] report_bug+0x2ba/0x4f0 [ 926.608321][ C1] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 926.614508][ C1] handle_bug+0x3a/0x70 [ 926.618738][ C1] exc_invalid_op+0x16/0x40 [ 926.623259][ C1] asm_exc_invalid_op+0x16/0x20 [ 926.628127][ C1] RIP: 0010:__ieee80211_beacon_get+0x1952/0x1f50 [ 926.634554][ C1] Code: ff ff ff e8 a0 f6 eb f7 0f 0b 48 8b 7c 24 20 e8 b4 ae 7f fe e9 dd e9 ff ff e8 8a f6 eb f7 0f 0b e9 f1 ee ff ff e8 7e f6 eb f7 <0f> 0b e9 61 f2 ff ff e8 72 f6 eb f7 48 c7 c7 f0 99 d9 8d 4c 89 f6 [ 926.654171][ C1] RSP: 0018:ffffc900001e08a0 EFLAGS: 00010246 [ 926.660245][ C1] RAX: ffffffff8994dff2 RBX: 0000000000000000 RCX: ffff88813fef1dc0 [ 926.668224][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 926.676261][ C1] RBP: ffffc900001e0aa8 R08: ffff88813fef1dc0 R09: 0000000000000003 [ 926.684251][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: 1ffff9200003c12c [ 926.692233][ C1] R13: dffffc0000000000 R14: ffff88807c6e2258 R15: ffff88807a40f600 [ 926.700234][ C1] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 926.705987][ C1] ? verify_lock_unused+0x140/0x140 [ 926.711207][ C1] ? __ieee80211_beacon_get+0xad/0x1f50 [ 926.716766][ C1] ? ieee80211_beacon_get_template+0x40/0x40 [ 926.722907][ C1] ieee80211_beacon_get_tim+0x5b/0x4d0 [ 926.728391][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 926.734262][ C1] ? read_lock_is_recursive+0x10/0x10 [ 926.739699][ C1] __iterate_interfaces+0x243/0x500 [ 926.745123][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 926.751483][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 926.758722][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 926.764980][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 926.772134][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 926.777375][ C1] __hrtimer_run_queues+0x554/0xd60 [ 926.782596][ C1] ? hw_scan_work+0xf30/0xf30 [ 926.787298][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 926.792554][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 926.798656][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 926.803785][ C1] handle_softirqs+0x2a1/0x920 [ 926.808602][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 926.813607][ C1] ? do_softirq+0x200/0x200 [ 926.818167][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 926.823415][ C1] __irq_exit_rcu+0x12f/0x220 [ 926.828581][ C1] ? irq_exit_rcu+0x20/0x20 [ 926.833330][ C1] irq_exit_rcu+0x5/0x20 [ 926.837776][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 926.843554][ C1] [ 926.846527][ C1] [ 926.849484][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 926.855748][ C1] RIP: 0010:default_idle+0xb/0x10 [ 926.861047][ C1] Code: 48 89 df e8 47 d4 b8 f7 e9 4c ff ff ff e8 bd 15 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 17 24 4d 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 926.880871][ C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6 [ 926.886990][ C1] RAX: 8cf341071295b600 RBX: ffffffff8a197f77 RCX: 8cf341071295b600 [ 926.895182][ C1] RDX: 0000000000000001 RSI: ffffffff8a6bffe0 RDI: ffffffff8abf1360 [ 926.903190][ C1] RBP: ffffc90000177f20 R08: dffffc0000000000 R09: ffffed10171e6af6 [ 926.911285][ C1] R10: ffffed10171e6af6 R11: 1ffff110171e6af5 R12: 0000000000000001 [ 926.919284][ C1] R13: dffffc0000000000 R14: ffff88813fef1dc0 R15: 1ffffffff1bfd0f6 [ 926.927284][ C1] ? default_idle_call+0x77/0xc0 [ 926.932252][ C1] default_idle_call+0x84/0xc0 [ 926.937158][ C1] do_idle+0x1fc/0x570 [ 926.941250][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 926.946485][ C1] ? schedule_idle+0x57/0x90 [ 926.951095][ C1] ? do_idle+0x55e/0x570 [ 926.955531][ C1] cpu_startup_entry+0x3f/0x60 [ 926.960685][ C1] start_secondary+0xe4/0xf0 [ 926.965423][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 926.971368][ C1] [ 926.974692][ C1] Kernel Offset: disabled [ 926.979218][ C1] Rebooting in 86400 seconds..