last executing test programs: 16.015761125s ago: executing program 1 (id=330): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x60002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121a03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x44084) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x21, 0x5, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r4, 0x5521) ioctl$TIOCSETD(r0, 0x5423, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000f, 0x110, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = userfaultfd(0x801) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x4, 0xaf7, &(0x7f0000000380)="$eJzs3U1sXEfhAPDZtdexk/Qfp/+EmjS0CYW2fNRpHBM+IkiqREhETYW4VKq4RGlaIkKQKBJQVcLJiRutqiBx4kOceqkKQqIXFPXEpRKNVCH1VDhwIAqiEgcIJIu8nlnvTnbzdh3vvrX395OeZ+fNezszz2/f97wJwNiqNv4uLs5VQrj85qsn/vbwX2eWxxxtTjHb+DvZEquFECoxPpl93/sTK+HND1460ymshIXG3+X4luURT11vzrsthLAU9oUrYTbsuXz1lbcXnjx18eSl/e+8duTagKoPAABj5atXjizu/vMf79954/UHjoUtzfHpeH02xrfH4/5j8cA/Hf9XQ3u80jK0msqmm4xDdaZ9uokO0zXymew83WSX/Key/GtdptsS7pz/RMu4TvWGjSytx7OhUp1vi1er8/Mr5+ShcV4/VZm/cO78cy+UVFBg3f3zwRDCvpbh+KX2+CCHtLHpZ56jgyhLZWW/PuD61oe1XDfbcGx4ed2oryi9zkMa6jvK3f4AJPn9wtss5VcW7k7z2yZ7y//6E9XO88M6GPb633P+1XhRraz8kzHP/1cXbXFYP5t1bUr1Sr+j7TGe9t7pGab8+aXuv7/8Tkf72Px+RK3Hcna7j7BR7i90K+fEkMuxVt3Kn68Xm9UXY5iWw5ey9NbfT/4/3Sj/Y6Czf+XX/zfyMB0rVUbeEyNQ/4EM+0agDIa2oX0dr93Nd9VL3PYAoy1/bq6e7o9G+XN9efqWgvTpgvSZgvStBenbCtJhnP3muz8OL1dWz/Pzc/p+r4en62z3xPD/+ixPfj2y3/zz5377dbf5588Twyj73emnz37u2Weurjz/X2mu/7fi+p5ON2bjb+tKnCBdL8yvqzef/Z9tz6faZbp7s/Lc02H6xudd7dNVdq1+T2jZztxWjrn2+XZ0m25v+3Sz2XQzcZjOypsfn2zN5kvHH2m7mpbXZFbfWlaPqawcabuyM4Z5OWAt0vrY7fn/tH7OhVrluXPnzz6e7WP/MFHbsjz+4JDLDdy9Xtv/zIX29j/bm+Nr1bRdCC3717S9OBjeiN/XPn6hmU/7+EMxnvZz35iYaYyfP/Pt88+uf/VhrL3wgxe/efr8+bPf8WHNH748GsXo50M6bRmV8vTwIZ0BlVaMaih/IQzxQ4kbJWAoDvxw5SDgsXPfOv382efPXjh0+PChhYXDnz+0eKBxXH+g9ei+1VIJpQXW0+pOP0/ZXk6BAAAAAAAAAAAAgELfO3ni6rtvffa9lfb/q+3/Uvv/9ORvav//o6z9f95OPrWDT+0Ad3ZIb0yTvWB1KpuuFof/z8q7K8tndzbfh2LY7Mcvtv9P2eXvdU3luS8bX8ujMcPsdQK3vS9lKmsfnfcX+NEYXorhLwOUqDLTeXQMi95vndb11Dqr5b0U9YlxeYnyJpD+b2ltWHmPyWpPrh3f69Tyz945pHKyvgbTeHDqji0LgNHw99F7//fS4L77H6sVL7+ehq7D5HDz+2ljjaiO43pRr3frxaPXHmwA1kfZ/X+m654pvPD7r0wvD2my60+0by/z95dCP/70bnt81PufHHT+eb99w86/7PoPu//PZv93PW//sh7zsvc891q6f//s2nst2YY9veaf1z+9B3pXjxlHN2L+qTaPhN7yr/8iyz+/IdSj/2T5b+0x/9vqv3dt+f835p8W26MPFeSfLgxfXClxpdpejpmsHun+X37dOLmZ1T+92/MO9f/ai53qv8Z7DLdi/jDONko/s/3KjiOaB+2tzxeEvvr/jZbWt//fZmGzzVr+HMZnYjztCNJzDnl/J/2WPz1fkfYDu7PvrxTs3/T/u7F9IYZFv4fU/29aH2fjLr8l3liWKV7rsGw367YGNqr3R+/+37gP0yNQBkPvQ31iDfM1+4krufz1en2wF7QKlJo5pS//ss8Tys6/7OVfJO//Nz+Gb55/7uucnvf/m6fn/f/m6TPxP9QtPe//N1+eef+/efp92ffm/QPPFaR/uCB9T+f05mK7v2D+vQXpHylI399MP9o2RUp/oGD+BwvS7y1If6gg/WMF6R8vSH+4IP3RlvTWPqBT+icK5t/sUnuUTvXXpx9sbnn7vHHb/sE4S/d/uv3+dxWkAxvXT14/ePyZX399dqX9/1Tzeki6j3csxmvx/On7MZ7f9w4t8eW0t2L8L1n6qF/vgHGSvz8j378/UpAObFzpOS+/bxhDlenOo2NY9N6qbsf5bCyfjOGnYvjpGD4Ww/kYHohhuje0MKTyMRjH3/jtkZcrq+f7O7L0Xp8nz9sDtb0nKoRwqMfy5NcH+n2ePX+PX7/uNv81NgcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoTbXxd3FxrhLC5TdfPfH0qXMHlsccbU4x2/g72RKrNecL4fEYTsTw5/HDzQ9eOtMa3ophJSyESqg0x4enrjdz2hZCWAr7wpUwG/ZcvvrK2wtPnrp48tL+d147cm1wSwAAAAA2v/8FAAD//zjgCFM=") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x4010}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000df7000/0x1000)=nil, 0x800000, 0x1}) 11.944474347s ago: executing program 1 (id=336): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, 0x0) ioctl$TUNSETSNDBUF(r3, 0x400454d4, 0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04050400c900", @ANYRES32], 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000340)={0x6, 0x2, 0x3, 0x0, 0x1}, 0x8) 11.640106973s ago: executing program 4 (id=337): socket(0x10, 0x3, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x5608, 0x2) 11.547620097s ago: executing program 1 (id=338): r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x1404, 0x10, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r2 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xf, 0xe, 0x7, 0x1}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000100)={0x40, 0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RLERRORu(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000420040008002900787d040008001b0000000000080028"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884) bind$l2tp(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1, 0x1}, 0x10) 11.467698471s ago: executing program 4 (id=339): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_GATEWAY={0x8, 0x19, @broadcast}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b0400000000000000000200000048000480440001800b0001006578746864720000340002800800034000000000080001400000000005000200000000000800064000000002080004400000000008000540000019000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x40, 0x3, 0x2e, "ba0d1f976a6c3b99533131b4d4f821ba761a124f70b30a342872a5fd0a64d7c5327db164e67efdfd8ad9ad5e72a4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000004c0), 0x20a81, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000500)=0x4) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000040)={{0xf}, 0x1, 0x8, 0x7000, {0x2, 0x1}, 0xf9}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x400000, 0x0, 0xffffffffffffffff, 0x7ee, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r7) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r9, 0x8004745a, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r10, &(0x7f00000040c0)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r10, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r10, {0x2}}, './file0\x00'}) ioctl$DMA_BUF_SET_NAME_A(r11, 0x40046201, &(0x7f0000000480)='mptcp_pm\x00') ioctl$SNDCTL_MIDI_INFO(r10, 0xc074510c, &(0x7f00000003c0)={"f397fe94f95a02fc88d5d93fec71b208dfe74899685330f583f46205b265", 0x1, 0x2, 0x7, [0x6, 0x9, 0xb5, 0x80000006, 0x9, 0x235, 0x3, 0x384, 0x100, 0xff, 0x159b, 0x9, 0x3, 0x5, 0x4, 0x38000, 0x8, 0x6]}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="ffff2ae3d84a31dbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) syz_clone(0x80200000, &(0x7f00000000c0)="51a3f4470f383de3acca7c7178addfac9b6192ce6f999980a67c2068067391cc45d9c99870668833e8105e7a8e204bff01918252e840017e3a1c17d19fe08f6389507caa8862fcbb72c06cd915b19163aabe0c401eaad5f5df3e50091cd6eac35e82ac04c4e1e0375ad7b7a285dde33d1f87de051c4d7ac5494df842f29517401cde8d3f7ebae9e2d20c8bcdcc0cddf906c6c526d01bef1376775d5f83b8bc07a5a17bedda75728a42d3c84097702fa29d89ef0466cacc76fae1a8645fab742faafc2452eeab4c8cc28a3b4070a0d04894db318576d8475e9becfa70149b9d39a9fdf1ff90d7d0", 0xe7, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000c80)="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") 10.73841367s ago: executing program 3 (id=343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x14, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010083000000002ac2048538b3"], 0x0}, 0x0) r2 = syz_usb_connect$uac2(0x3, 0xc3, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1, 0x3, 0x1, 0x40, 0x50, 0x9, {0x8, 0xb, 0x2, 0x0, 0x1, 0xb, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x0, 0x12, 0x5}, [@extension_unit={0x9, 0x24, 0x9, 0x6, 0x2, 0x1, "9842"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x3, 0x3, 0x8, "b5f78c1a23103a1480"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x5b, 0x5, {0x8, 0x25, 0x1, 0x81, 0x3, 0xc, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x3, 0x15, 0x5, "", "993e"}, @as_header={0x10, 0x24, 0x1, 0xb, 0x3, 0x0, 0x585f304f092a2fae, 0x0, 0x8, 0x4}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0xfc}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x3, 0x4, 0xa, 0x1, "e9b6c9cd670d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x81, 0x5, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0x8, 0x40}}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x0, 0x9, 0xe, 0x0, 0x10, 0x4}, 0x4d, &(0x7f0000000400)=ANY=[@ANYBLOB="050f4d00061410040107b4f89024e9ef5e0e8e5aa6e8173a3e0b1001080a008300000000ff040000ff00000f00000000c0ff000710021a950600071002148b06"], 0x7, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xc1a}}, {0x0, 0x0}, {0x90, &(0x7f0000000c80)=@string={0x90, 0x3, "dfb7c21a0ff74c08a1c35014e71574117227fb6dad9b7b5de8f1e863924cf1267d17043fa872ca334d84ede86b5c310668f8f472a98b7ba6a83936b4242c6969fa56827310007e4214d314d672efbd57de3d8b71e76a7a373458c4d39e7ba9c4014096fbfcdb44527b1c9200d964e46c835ed5dd4c0da95732a036ec1901f6c16a8261bb8540bcfe10d1c9279574"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x90f3}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x81a}}, {0xf3, &(0x7f00000006c0)=@string={0xf3, 0x3, "7e63c7b277e916e5e775919d87acf746d7f2cb1915acbbb1174e22e8f51092a85e6ba5b3708c8501fc17eb8e8c18dc3af34fba390353b0c8c0794ea90e40b6b7ffa2773d003f83ab89c08cca5ceb92eadc1944d1862d865dcad66cd05a9fcb643b38c22b49bc270e2f3140644b81c995dda777e56701fddfdfc129315e5145b205dd484b76fe49a8b1b7a7baed5b9850686be60060838818370f7c06ff52471d6c29dacee6507134eeb1b90862088d07b76be78a36e32a57a8182810b77effc3ac563073a0d5db937ade12e5400eda151b0ea4b36001fe77591f1476bfbbc9e91b6f881e3328f6e6ea92027726cea30000"}}]}) syz_usb_control_io$uac2(r2, &(0x7f0000000900)={0xc, &(0x7f0000000840)={0x0, 0xb, 0x12, {0x12, 0x0, "dc738f692a393ff39d04569dc04c8143"}}, &(0x7f0000000880)={0x0, 0x3, 0x63, @string={0x63, 0x3, "3ded022572da50552a79888d723dbc824a4e88d89a5c3c625b78fa0483171e8e2e4d661c8ab50e4df8ef6d7cd59f160f86957dde42f09a4ae6bfbe951605547ac0f350b1343806615f0995a573632a7c43f26810f24608fb5279b8cf897e2e39dd"}}}, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x6e}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000b00)=ANY=[@ANYBLOB="20810304000091efa9"], &(0x7f0000000b40)={0x20, 0x82, 0x1, 'm'}, &(0x7f0000000b80)={0x20, 0x83, 0x1, "ee"}, &(0x7f0000000bc0)={0x20, 0x84, 0x1, '8'}, &(0x7f0000000c00)={0x20, 0x85, 0x3, "28b11b"}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @fallback=0xd}, 0x94) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x2000c050) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8004000) socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'gre0\x00', 0x0}) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8, 0x1000000}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="2000000076001f0b4abd7000fbdbdf25080000000400000008"], 0x20}], 0x1, 0x0, 0x0, 0x2400c814}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x30, &(0x7f0000000400)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 9.301328384s ago: executing program 4 (id=347): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 9.053814968s ago: executing program 4 (id=350): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x26, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = timerfd_create(0x1, 0x0) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/8, 0x8}], 0x10000000000000dc) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r4 = syz_open_pts(r0, 0x7e1300) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x8, 0x41, 0x4}) 8.707420296s ago: executing program 1 (id=351): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x23e002, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x27, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x86, 0x23, 0x9, 0xdedb, 0x14, "00faec694b00"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000001c0)=0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) recvmmsg(r4, &(0x7f0000000100), 0x0, 0x2000000022, &(0x7f0000000480)) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000100)=0xe) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000002580)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0xffffffff}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r6 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, 0x0) write$sndseq(r0, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0xb, @tick=0x6, {0x6, 0x4}, {0x8}, @connect={{}, {0x3}}}, {0xfe, 0x0, 0x0, 0x0, @time={0x0, 0x1000000}, {0x0, 0x6}, {}, @result}, {0x10, 0x0, 0x1, 0x0, @tick=0x7ff, {0x4}, {0x0, 0x8}, @addr={0x1f, 0x2}}, {0x4, 0x1, 0x0, 0x7a, @tick=0xf98, {0x0, 0x5}, {0x4, 0x8}, @time=@tick=0x200}], 0x70) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='hugetlb\xaa\x908\x83\xbc\x8f%\xb2\xf6\x9f\xbe7\x99?\xc1\xcb\x94\xed\xcd^\x14+\xaa\x7f\xa5*U\xa9\"g\x17\xb2>\v\x00\x1e\xe4\f%', &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = openat$vimc0(0xffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r7, 0xc0e85667, &(0x7f0000001a80)={0x0, 0x110, "24fda14159736271bafb743f2b1079afa7b627a26ba7d770a9caef734c515259", 0xa, 0xe118, 0x0, 0x8000, 0xd, 0x3, 0x1857, 0xfffff49b, [0x100, 0x5, 0x7, 0x5]}) 8.174497914s ago: executing program 0 (id=353): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.incfs.metadata\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r2}, 0x10) 7.885698449s ago: executing program 0 (id=354): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xecf86c37d53049d0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000000)={[{@grpid}, {@grpquota}, {@errors_remount}]}, 0x44, 0x4eb, &(0x7f0000001500)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_PDEATHSIG(0x1, 0x38) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000}}}, 0xb8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x20001a, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x9, 0x221100, 0x33c, 0x806, 0x42, 0x548c, 0x0, 0x0, 0x40, 0x7f}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24c01, 0x0) 7.816568612s ago: executing program 3 (id=355): r0 = dup(0xffffffffffffffff) r1 = open(0x0, 0x1298c2, 0x0) sendfile(r0, r1, 0x0, 0x80001d00c0d1) eventfd(0x800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') preadv(r2, 0x0, 0x0, 0x6, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 6.592697636s ago: executing program 0 (id=356): r0 = socket$netlink(0x10, 0x3, 0xa) bind$netlink(r0, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) unshare(0x66000080) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, 0x0, 0x0, 0xffffffffffffff9c) syz_open_dev$I2C(&(0x7f0000000040), 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r6], 0x28}}, 0x0) 6.431396485s ago: executing program 3 (id=358): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80046601, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000480), 0xfffffffffffffffa, 0x1841) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000500)="9b7385220700000000000000e57c489b51b14b7aea6ef45d0c085cb7df42ccf49eabcf03d0e97bb857dbd8d553a187d0", 0x30}, {&(0x7f0000000540)="53000000d073b0f3347edc854b4bc4db1e2e1302af076bb6c9909a18e554d5ecc9db5942dac6a182a0efc182", 0x2c}], 0x2) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x101) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x70bd2d, 0x0, {0x1c}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc040}, 0x4000000) r8 = socket(0x11, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000001240)=[{{&(0x7f0000000040)=@can, 0x80, 0x0}}], 0x1, 0x8010) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x8885) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x8000, 0x1000}, 0x20) sendmsg$sock(r0, &(0x7f0000000040)={&(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x42, 0x9}, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x18, 0x1, 0x24, 0x8}}], 0x18}, 0x4000000) 6.225401586s ago: executing program 2 (id=360): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000040000000000000000000000000000000104800000200002000a0000000000000000000000000000000000000000000000010000000d0001007564703a73"], 0x6c}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0cc5605, &(0x7f0000000300)={0x2, @pix={0x9, 0x8, 0x3147504d, 0x9, 0x4, 0xc9, 0x8, 0x0, 0x0, 0x8, 0x0, 0x5}}) socket(0x10, 0x2, 0x0) r3 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x2, 0x503fa, 0x8100014e}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x20, 0x7f, 0xee06, 0x8000000000000000, 0x7ff, 0x6, 0x3d4, 0x2}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) r5 = inotify_init() read$FUSE(r5, 0x0, 0x0) 5.631836106s ago: executing program 1 (id=361): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2368810, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x6, 0x0, &(0x7f0000000280)) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0xa000, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0)={0xa}, 0x1) 5.18166197s ago: executing program 4 (id=362): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000110001002cbd700000dcdf2500000000", @ANYRES32=r1], 0x20}}, 0x2000e844) 5.080843735s ago: executing program 2 (id=363): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x60002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x121a03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x44084) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) 4.345653724s ago: executing program 3 (id=364): r0 = socket(0xa, 0x1, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x9) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x400, 0x70bd2b, 0xfffffffc, {0x0, 0x0, 0x12, r2, {0x3, 0xfff3}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x9, 0x7}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xb1ae54093a5f73d4}, 0x4004000) connect$pppoe(r0, 0x0, 0x42) r4 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r4, &(0x7f00000082c0)={0x2020}, 0x2020) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000002c0)=0x200000, 0x4) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="2d3773cfdb3830c1fc2152fc1b7fecd661657ab5a062f502332540873b065c43d3ae90dbc26a2b29e908ca3fe836a3bda1fe0d07014a7caa5eb19567c2a34360e0", 0x41}, {&(0x7f00000001c0)="1d2490663b65c830212e4c657eaacc2b197426743fa941e929446745344a605625af455a6bb937ca605398de7b5e4922b93bb97467b7dcd7fb5b51db3a8fc91d08f2f88cdb5644373c1881159ddf211c7fa00fbbf1c617c9f1b23987e5a489d2e70bf5458c077e3a913e0e23ce8e144c77739b2e2ac57b1dd6317b66ab66ea268657a5af2db11b3d47ef7d52093c8d8f02f0fd8e42d6bb98b44275cbc084ede8d57bf986622141", 0xa7}, {&(0x7f00000003c0)="683b2454e1400c20a91251a5ed6234ae845e549e62ca9001508e9a77c90662bdb788df240f4cb0e7b99a88552159eb32233128b38eaaad4591f51df17d08bc5c9283a4b7e8eae9649bb9a79da01d360a478c5ad5622f0ad920fbe1109a14035e9bc052e058b1172fef421a82d6fe1ca952348122a39120e1b4eb8ff4a3a941", 0x7f}, {&(0x7f0000000500)="83ad7bbb6a521e8aba6b4730efc48496baa2800a19bc9328e5112997bee7d046d0f4aca66a5fdbc9c059b6b8ff91f359795bdfcbd0599de1c9b33f781834ec3a88cbc84b661cd513404298ae21917e415313679d82125a78817ff20a4193a50a3cae890f36d5977174aaa626e4330fb086efc676a24c002c85daeeb61543ea080d2477adc580850a092dbef2c4573168aa988f6d936e9d0fbb01c82f6a60a6f30d1a3f850719ba16f0c2df0620e3d4baea85e7d92bb8561c09", 0xb9}], 0x4, &(0x7f0000000600)=[@timestamping={{0x10, 0x1, 0x25, 0xffff}}], 0x10}, 0x20004041) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r6, &(0x7f0000000180)='./mnt\x00', r6, &(0x7f0000000380)='./mnt\x00', 0x155) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r5, &(0x7f0000000100), 0x10) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000380)={0x0, 0x21d000, 0x1000, 0x1, 0x2}, 0x20) recvmmsg(r6, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}, {{&(0x7f0000003d00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003ec0)=[{0x0}, {&(0x7f0000003dc0)=""/219, 0xdb}], 0x2}, 0x10001}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) read$FUSE(r4, &(0x7f0000012400)={0x2020}, 0x2020) 4.344926104s ago: executing program 2 (id=365): r0 = openat$ttyprintk(0xffffff9c, &(0x7f0000000000), 0x80882, 0x0) io_setup(0xa91, &(0x7f0000000080)=0x0) r2 = eventfd(0x3) io_submit(r1, 0x1, &(0x7f0000001380)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0)="1d110ab7062182", 0x7, 0x5, 0x0, 0x1, r2}]) 4.198427271s ago: executing program 3 (id=366): socket$netlink(0x10, 0x3, 0x15) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000002700)=""/79, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/198, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, &(0x7f0000001840)=""/242, 0xeeef0000}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000180)={0x6, 0x1, 0x101, 0x0, "27a5d9e4c879e5a6822f3295406fd6c3cf4e9950cddc11346309c6ee72e9809a"}) 4.197445421s ago: executing program 4 (id=367): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x60002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121a03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x4, 0xaf7, &(0x7f0000000380)="$eJzs3U1sXEfhAPDZtdexk/Qfp/+EmjS0CYW2fNRpHBM+IkiqREhETYW4VKq4RGlaIkKQKBJQVcLJiRutqiBx4kOceqkKQqIXFPXEpRKNVCH1VDhwIAqiEgcIJIu8nlnvTnbzdh3vvrX395OeZ+fNezszz2/f97wJwNiqNv4uLs5VQrj85qsn/vbwX2eWxxxtTjHb+DvZEquFECoxPpl93/sTK+HND1460ymshIXG3+X4luURT11vzrsthLAU9oUrYTbsuXz1lbcXnjx18eSl/e+8duTagKoPAABj5atXjizu/vMf79954/UHjoUtzfHpeH02xrfH4/5j8cA/Hf9XQ3u80jK0msqmm4xDdaZ9uokO0zXymew83WSX/Key/GtdptsS7pz/RMu4TvWGjSytx7OhUp1vi1er8/Mr5+ShcV4/VZm/cO78cy+UVFBg3f3zwRDCvpbh+KX2+CCHtLHpZ56jgyhLZWW/PuD61oe1XDfbcGx4ed2oryi9zkMa6jvK3f4AJPn9wtss5VcW7k7z2yZ7y//6E9XO88M6GPb633P+1XhRraz8kzHP/1cXbXFYP5t1bUr1Sr+j7TGe9t7pGab8+aXuv7/8Tkf72Px+RK3Hcna7j7BR7i90K+fEkMuxVt3Kn68Xm9UXY5iWw5ey9NbfT/4/3Sj/Y6Czf+XX/zfyMB0rVUbeEyNQ/4EM+0agDIa2oX0dr93Nd9VL3PYAoy1/bq6e7o9G+XN9efqWgvTpgvSZgvStBenbCtJhnP3muz8OL1dWz/Pzc/p+r4en62z3xPD/+ixPfj2y3/zz5377dbf5588Twyj73emnz37u2Weurjz/X2mu/7fi+p5ON2bjb+tKnCBdL8yvqzef/Z9tz6faZbp7s/Lc02H6xudd7dNVdq1+T2jZztxWjrn2+XZ0m25v+3Sz2XQzcZjOypsfn2zN5kvHH2m7mpbXZFbfWlaPqawcabuyM4Z5OWAt0vrY7fn/tH7OhVrluXPnzz6e7WP/MFHbsjz+4JDLDdy9Xtv/zIX29j/bm+Nr1bRdCC3717S9OBjeiN/XPn6hmU/7+EMxnvZz35iYaYyfP/Pt88+uf/VhrL3wgxe/efr8+bPf8WHNH748GsXo50M6bRmV8vTwIZ0BlVaMaih/IQzxQ4kbJWAoDvxw5SDgsXPfOv382efPXjh0+PChhYXDnz+0eKBxXH+g9ei+1VIJpQXW0+pOP0/ZXk6BAAAAAAAAAAAAgELfO3ni6rtvffa9lfb/q+3/Uvv/9ORvav//o6z9f95OPrWDT+0Ad3ZIb0yTvWB1KpuuFof/z8q7K8tndzbfh2LY7Mcvtv9P2eXvdU3luS8bX8ujMcPsdQK3vS9lKmsfnfcX+NEYXorhLwOUqDLTeXQMi95vndb11Dqr5b0U9YlxeYnyJpD+b2ltWHmPyWpPrh3f69Tyz945pHKyvgbTeHDqji0LgNHw99F7//fS4L77H6sVL7+ehq7D5HDz+2ljjaiO43pRr3frxaPXHmwA1kfZ/X+m654pvPD7r0wvD2my60+0by/z95dCP/70bnt81PufHHT+eb99w86/7PoPu//PZv93PW//sh7zsvc891q6f//s2nst2YY9veaf1z+9B3pXjxlHN2L+qTaPhN7yr/8iyz+/IdSj/2T5b+0x/9vqv3dt+f835p8W26MPFeSfLgxfXClxpdpejpmsHun+X37dOLmZ1T+92/MO9f/ai53qv8Z7DLdi/jDONko/s/3KjiOaB+2tzxeEvvr/jZbWt//fZmGzzVr+HMZnYjztCNJzDnl/J/2WPz1fkfYDu7PvrxTs3/T/u7F9IYZFv4fU/29aH2fjLr8l3liWKV7rsGw367YGNqr3R+/+37gP0yNQBkPvQ31iDfM1+4krufz1en2wF7QKlJo5pS//ss8Tys6/7OVfJO//Nz+Gb55/7uucnvf/m6fn/f/m6TPxP9QtPe//N1+eef+/efp92ffm/QPPFaR/uCB9T+f05mK7v2D+vQXpHylI399MP9o2RUp/oGD+BwvS7y1If6gg/WMF6R8vSH+4IP3RlvTWPqBT+icK5t/sUnuUTvXXpx9sbnn7vHHb/sE4S/d/uv3+dxWkAxvXT14/ePyZX399dqX9/1Tzeki6j3csxmvx/On7MZ7f9w4t8eW0t2L8L1n6qF/vgHGSvz8j378/UpAObFzpOS+/bxhDlenOo2NY9N6qbsf5bCyfjOGnYvjpGD4Ww/kYHohhuje0MKTyMRjH3/jtkZcrq+f7O7L0Xp8nz9sDtb0nKoRwqMfy5NcH+n2ePX+PX7/uNv81NgcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoTbXxd3FxrhLC5TdfPfH0qXMHlsccbU4x2/g72RKrNecL4fEYTsTw5/HDzQ9eOtMa3ophJSyESqg0x4enrjdz2hZCWAr7wpUwG/ZcvvrK2wtPnrp48tL+d147cm1wSwAAAAA2v/8FAAD//zjgCFM=") 4.092834546s ago: executing program 2 (id=368): r0 = dup(0xffffffffffffffff) r1 = open(0x0, 0x1298c2, 0x0) sendfile(r0, r1, 0x0, 0x80001d00c0d1) eventfd(0x800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') preadv(r2, 0x0, 0x0, 0x6, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3.021599702s ago: executing program 0 (id=369): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) 2.159797338s ago: executing program 2 (id=370): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x1e0, 0x1e0, 0x340, 0x340, 0x278, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x11}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x6, 0x3, 0x11, 0x1100, 0x4]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@empty, @empty, 0x0, 0xff000000, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, 0xffffff00, 0xffffffff, 'veth1_to_bond\x00', 'nr0\x00', {}, {0xff}, 0x67, 0x2}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.367067469s ago: executing program 3 (id=371): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) timer_create(0x3, 0x0, &(0x7f0000000040)) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000140)={0x1, "030000000000000023000000debd12ffff00000000000000000020000400"}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) unshare(0x42000000) 1.029498016s ago: executing program 0 (id=372): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=ANY=[@ANYBLOB="300000001000010029bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a8904004a90090008001b000000000008003d00"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 491.200125ms ago: executing program 2 (id=373): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 35.786789ms ago: executing program 1 (id=374): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) 0s ago: executing program 0 (id=375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.147' (ED25519) to the list of known hosts. [ 54.217176][ T4172] cgroup: Unknown subsys name 'net' [ 54.352387][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.732202][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.620018][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 57.683651][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 57.716487][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 57.785029][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.792958][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.801422][ T4184] device bridge_slave_0 entered promiscuous mode [ 57.809694][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 57.820177][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.827290][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.835201][ T4184] device bridge_slave_1 entered promiscuous mode [ 57.842901][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 57.917724][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.934504][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.953545][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.960825][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.969316][ T4194] device bridge_slave_0 entered promiscuous mode [ 57.985332][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.992590][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.001384][ T4194] device bridge_slave_1 entered promiscuous mode [ 58.058967][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.066130][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.074354][ T4191] device bridge_slave_0 entered promiscuous mode [ 58.090728][ T4184] team0: Port device team_slave_0 added [ 58.104179][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.115570][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.124970][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.132759][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.141043][ T4189] device bridge_slave_0 entered promiscuous mode [ 58.148896][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.155951][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.164780][ T4191] device bridge_slave_1 entered promiscuous mode [ 58.173844][ T4184] team0: Port device team_slave_1 added [ 58.179810][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.187066][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.194960][ T4185] device bridge_slave_0 entered promiscuous mode [ 58.215102][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.222261][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.230141][ T4189] device bridge_slave_1 entered promiscuous mode [ 58.254605][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.261792][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.269914][ T4185] device bridge_slave_1 entered promiscuous mode [ 58.285027][ T4194] team0: Port device team_slave_0 added [ 58.305509][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.328790][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.340611][ T4194] team0: Port device team_slave_1 added [ 58.348787][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.359437][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.370506][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.380366][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.387827][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.413942][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.433873][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.455602][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.462659][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.488971][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.535468][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.542560][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.568606][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.587416][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.594411][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.620584][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.634123][ T4189] team0: Port device team_slave_0 added [ 58.642465][ T4185] team0: Port device team_slave_0 added [ 58.662836][ T4191] team0: Port device team_slave_0 added [ 58.673316][ T4191] team0: Port device team_slave_1 added [ 58.680567][ T4189] team0: Port device team_slave_1 added [ 58.687396][ T4185] team0: Port device team_slave_1 added [ 58.696591][ T4184] device hsr_slave_0 entered promiscuous mode [ 58.703680][ T4184] device hsr_slave_1 entered promiscuous mode [ 58.742554][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.750829][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.777399][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.790168][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.797446][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.823711][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.866587][ T4194] device hsr_slave_0 entered promiscuous mode [ 58.873393][ T4194] device hsr_slave_1 entered promiscuous mode [ 58.880277][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.888420][ T4194] Cannot create hsr debugfs directory [ 58.894445][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.902008][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.928233][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.939937][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.947101][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.973277][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.000523][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.007646][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.033698][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.045255][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.052614][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.078959][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.099581][ T4191] device hsr_slave_0 entered promiscuous mode [ 59.106408][ T4191] device hsr_slave_1 entered promiscuous mode [ 59.113195][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.120918][ T4191] Cannot create hsr debugfs directory [ 59.240936][ T4189] device hsr_slave_0 entered promiscuous mode [ 59.248085][ T4189] device hsr_slave_1 entered promiscuous mode [ 59.254609][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.262288][ T4189] Cannot create hsr debugfs directory [ 59.279110][ T4185] device hsr_slave_0 entered promiscuous mode [ 59.286185][ T4185] device hsr_slave_1 entered promiscuous mode [ 59.293540][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.301256][ T4185] Cannot create hsr debugfs directory [ 59.387536][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 59.394160][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 59.400872][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 59.407225][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 59.413332][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 59.540087][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.551369][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.561274][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.570269][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.610779][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.633968][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.662850][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.675317][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.712621][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.722008][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.743080][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.762556][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.779658][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.810638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.821037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.832048][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.846388][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.855617][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.864924][ T1253] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.872141][ T1253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.885075][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.894533][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.905552][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.915702][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.926369][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.935614][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.944827][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.954987][ T1253] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.962088][ T1253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.982541][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.992785][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.019524][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.031015][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.041375][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.079157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.088809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.098070][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.106404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.115644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.124512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.135099][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.143979][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.168576][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.183514][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.195095][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.234981][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.294629][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.309607][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.317556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.341394][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.355253][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.364741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.379672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.391233][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.405076][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.420774][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.431964][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.439089][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.447466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.478247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.488208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.496587][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.503748][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.512708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.522620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.531340][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.538458][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.546133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.555090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.563835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.572172][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.579250][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.586975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.594734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.603238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.610895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.619842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.630415][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.647319][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.661096][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.673326][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.682118][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.692524][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.699630][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.708844][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.717837][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.726466][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.743302][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.770234][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.780819][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.793165][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.803360][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.812959][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.822734][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.831826][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.845822][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.854906][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.863970][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.872516][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.881040][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.889784][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.898407][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.906526][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.915934][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.925797][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.934060][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.942571][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.960684][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.972691][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.988405][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.997537][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.005802][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.015192][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.024576][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.031721][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.055154][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.079583][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.089443][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.102546][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.117974][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.137762][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.151212][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.180596][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.193383][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.204099][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.211224][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.224285][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.233311][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.247341][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.254418][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.277266][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.292998][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.305079][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.314304][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.323292][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.331815][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.352844][ T4184] device veth0_vlan entered promiscuous mode [ 61.372575][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.381861][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.391984][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.400921][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.410392][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.419437][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.428216][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.435874][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.448851][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.457522][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.466866][ T4184] device veth1_vlan entered promiscuous mode [ 61.473593][ T4236] Bluetooth: hci3: command 0x041b tx timeout [ 61.480296][ T4236] Bluetooth: hci0: command 0x041b tx timeout [ 61.486397][ T4236] Bluetooth: hci4: command 0x041b tx timeout [ 61.492564][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.501269][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.510830][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.512377][ T4236] Bluetooth: hci1: command 0x041b tx timeout [ 61.524536][ T4236] Bluetooth: hci2: command 0x041b tx timeout [ 61.538058][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.551896][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.565625][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.573997][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.588504][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.615413][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.632801][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.655205][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.682835][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.692393][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.712948][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.729667][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.743036][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.753243][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.766211][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.775567][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.784893][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.795215][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.812940][ T4184] device veth0_macvtap entered promiscuous mode [ 61.825187][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.843231][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.887456][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.925096][ T4184] device veth1_macvtap entered promiscuous mode [ 61.955255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.966046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.980376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.012973][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.040065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.053690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.063540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.079189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.096072][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.115294][ T4191] device veth0_vlan entered promiscuous mode [ 62.132896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.141620][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.151453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.159411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.166780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.175392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.183998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.194289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.205585][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.217945][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.226775][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.237528][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.246226][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.262787][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.271733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.280076][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.292282][ T4191] device veth1_vlan entered promiscuous mode [ 62.302383][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.310861][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.319742][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.380220][ T4189] device veth0_vlan entered promiscuous mode [ 62.390777][ T4191] device veth0_macvtap entered promiscuous mode [ 62.398878][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.411841][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.419612][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.427930][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.436719][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.445577][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.454522][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.463950][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.472696][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.483379][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.509509][ T4185] device veth0_vlan entered promiscuous mode [ 62.522562][ T4194] device veth0_vlan entered promiscuous mode [ 62.530575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.540106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.549546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.558858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.567481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.575262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.583734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.593548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.608242][ T4191] device veth1_macvtap entered promiscuous mode [ 62.616790][ T4189] device veth1_vlan entered promiscuous mode [ 62.645886][ T4185] device veth1_vlan entered promiscuous mode [ 62.665915][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.679129][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.690603][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.708911][ T4194] device veth1_vlan entered promiscuous mode [ 62.730247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.738802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.748704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.757106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.765231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.773744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.783571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.791896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.800771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.825864][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.838654][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.852134][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.865741][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.874898][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.885592][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.894678][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.911007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.919883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.936259][ T4185] device veth0_macvtap entered promiscuous mode [ 62.943636][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.958939][ T4189] device veth0_macvtap entered promiscuous mode [ 62.969241][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.979979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.990892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.000016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.009353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.018157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.036405][ T4194] device veth0_macvtap entered promiscuous mode [ 63.046312][ T4185] device veth1_macvtap entered promiscuous mode [ 63.069017][ T4189] device veth1_macvtap entered promiscuous mode [ 63.079547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.088513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.096593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.104963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.113301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.122289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.134008][ T4194] device veth1_macvtap entered promiscuous mode [ 63.156633][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.167825][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.177937][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.190481][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.201788][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.209929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.219473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.228229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.236722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.255080][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.271248][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.279577][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.290826][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.303856][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.318237][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.328992][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.338871][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.349412][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.360845][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.370700][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.381204][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.393117][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.404195][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.415562][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.430612][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.440905][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.450011][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.459414][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.470661][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.482405][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.492556][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.503283][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.513356][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.524043][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.536433][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.547992][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.556727][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.566586][ T4229] Bluetooth: hci2: command 0x040f tx timeout [ 63.568864][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.581970][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.586621][ T4229] Bluetooth: hci1: command 0x040f tx timeout [ 63.602071][ T4229] Bluetooth: hci4: command 0x040f tx timeout [ 63.606796][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.608218][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.608252][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.608279][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.652499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.668242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.683589][ T4229] Bluetooth: hci0: command 0x040f tx timeout [ 63.689898][ T4229] Bluetooth: hci3: command 0x040f tx timeout [ 63.693598][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.712973][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.723202][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.734419][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.744706][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.755340][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.765196][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.775718][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.786994][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.821372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.832995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.878333][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.889709][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.901862][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.908951][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.915925][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.929765][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.941608][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.953827][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.963948][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.974891][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.998982][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.200650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.268008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.332449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.530055][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.541484][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.550507][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.559375][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.571565][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.584194][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.625807][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.758835][ T1253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.767252][ T1253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.790343][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.843549][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.859098][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.885985][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.900793][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.918267][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.925786][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.947765][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.960949][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.997707][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.005269][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.017380][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.024970][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.078914][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.101530][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.113079][ T4274] Zero length message leads to an empty skb [ 65.120423][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.134441][ T4274] netlink: 'syz.1.2': attribute type 3 has an invalid length. [ 65.215765][ T4276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 65.419114][ T4284] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.472607][ T4290] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9'. [ 65.477572][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 65.496938][ T4287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10'. [ 65.617377][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 65.628553][ T4229] Bluetooth: hci1: command 0x0419 tx timeout [ 65.635247][ T4229] Bluetooth: hci2: command 0x0419 tx timeout [ 65.707572][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 65.713870][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 65.726580][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 65.732772][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.757009][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 65.772875][ T4295] device bridge_slave_0 left promiscuous mode [ 65.788929][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.838125][ T4295] bond0: (slave bridge_slave_0): Enslaving as an active interface with an up link [ 65.877409][ T23] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 65.890233][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.951639][ T23] usb 5-1: config 0 descriptor?? [ 66.008938][ T4306] netlink: 'syz.3.13': attribute type 1 has an invalid length. [ 66.028652][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.041503][ T13] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 66.054390][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.086005][ T13] usb 2-1: config 0 descriptor?? [ 66.129255][ T13] pwc: Askey VC010 type 2 USB webcam detected. [ 66.227080][ T23] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 66.244911][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 66.297585][ T23] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 66.316999][ T23] usb 5-1: media controller created [ 66.340165][ T13] pwc: send_video_command error -71 [ 66.348701][ T13] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 66.376247][ T13] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 66.388488][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 66.409914][ T13] usb 2-1: USB disconnect, device number 2 [ 66.471193][ T4272] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 66.505609][ T4321] process 'syz.2.14' launched './file0' with NULL argv: empty string added [ 66.537003][ T4260] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 66.717012][ T4262] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 66.957201][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 67.037039][ T23] az6027: usb out operation failed. (-71) [ 67.056997][ T23] az6027: usb out operation failed. (-71) [ 67.062766][ T23] stb0899_attach: Driver disabled by Kconfig [ 67.099414][ T23] az6027: no front-end attached [ 67.099414][ T23] [ 67.119563][ T23] az6027: usb out operation failed. (-71) [ 67.126776][ T23] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 67.154544][ T4260] usb 4-1: unable to get BOS descriptor or descriptor too short [ 67.162512][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 67.189644][ T23] dvb-usb: schedule remote query interval to 400 msecs. [ 67.197997][ T23] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 67.207631][ T4260] usb 4-1: not running at top speed; connect to a high speed hub [ 67.223365][ T23] usb 5-1: USB disconnect, device number 2 [ 67.314183][ T4327] device bridge0 entered promiscuous mode [ 67.320879][ T4327] device macvlan2 entered promiscuous mode [ 67.417481][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 67.423743][ T4260] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.437369][ T4262] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 67.506462][ T4260] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 67.527637][ T4262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.674771][ T4262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.731407][ T4262] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 67.789293][ T13] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 67.813501][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.914515][ T13] usb 2-1: Product: syz [ 67.919842][ T13] usb 2-1: Manufacturer: syz [ 67.924478][ T13] usb 2-1: SerialNumber: syz [ 67.935814][ T4260] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 67.947884][ T4260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.955918][ T4260] usb 4-1: Product: syz [ 67.972446][ T4260] usb 4-1: Manufacturer: syz [ 67.982647][ T4260] usb 4-1: SerialNumber: syz [ 67.988897][ T13] usb 2-1: config 0 descriptor?? [ 68.012677][ T4262] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 68.022729][ T4262] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 68.039225][ T13] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 68.055347][ T4262] usb 1-1: Manufacturer: syz [ 68.063234][ T4262] usb 1-1: config 0 descriptor?? [ 68.131397][ T4333] loop2: detected capacity change from 0 to 16 [ 68.149900][ T4333] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 68.161976][ T23] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 68.217209][ T13] gspca_vc032x: reg_r err -71 [ 68.229026][ T13] vc032x: probe of 2-1:0.0 failed with error -71 [ 68.527372][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.581220][ T4262] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 69.018265][ T4262] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 69.027481][ T13] usb 2-1: USB disconnect, device number 3 [ 69.048624][ T4262] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 69.087138][ T23] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 69.093295][ T4262] usb 1-1: USB disconnect, device number 2 [ 69.096316][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.103107][ T4260] usb 4-1: 0:1 : does not exist [ 69.118646][ T4260] usb 4-1: 0:2 : does not exist [ 69.204467][ T23] usb 5-1: Product: syz [ 69.225989][ T23] usb 5-1: Manufacturer: syz [ 69.247074][ T23] usb 5-1: SerialNumber: syz [ 69.287024][ T23] usb 5-1: config 0 descriptor?? [ 69.426272][ T4344] loop2: detected capacity change from 0 to 2048 [ 69.495241][ T4344] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 69.633587][ T4345] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.958593][ T4340] fido_id[4340]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 70.512377][ T23] usb 5-1: USB disconnect, device number 3 [ 70.623209][ T4349] loop3: detected capacity change from 0 to 256 [ 70.735683][ T4349] FAT-fs (loop3): Directory bread(block 64) failed [ 70.742438][ T4349] FAT-fs (loop3): Directory bread(block 65) failed [ 70.749154][ T4349] FAT-fs (loop3): Directory bread(block 66) failed [ 70.755674][ T4349] FAT-fs (loop3): Directory bread(block 67) failed [ 70.762244][ T4349] FAT-fs (loop3): Directory bread(block 68) failed [ 70.768789][ T4349] FAT-fs (loop3): Directory bread(block 69) failed [ 70.775337][ T4349] FAT-fs (loop3): Directory bread(block 70) failed [ 70.781875][ T4349] FAT-fs (loop3): Directory bread(block 71) failed [ 70.788426][ T4349] FAT-fs (loop3): Directory bread(block 72) failed [ 70.794931][ T4349] FAT-fs (loop3): Directory bread(block 73) failed [ 71.637405][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.644116][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.716839][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 71.726842][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 71.736841][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 71.746841][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 71.756842][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 71.766846][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.786845][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.796871][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.806843][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.816855][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 73.162772][ T4260] usb 4-1: USB disconnect, device number 2 [ 73.317465][ T4368] vivid-001: disconnect [ 73.447973][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 73.901646][ T4379] device bridge0 entered promiscuous mode [ 73.907829][ T4379] device macvlan2 entered promiscuous mode [ 73.954817][ T4362] udevd[4362]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 74.006435][ T4363] vivid-001: reconnect [ 74.664580][ T4387] loop3: detected capacity change from 0 to 16 [ 74.730165][ T4387] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 76.591237][ T4395] loop2: detected capacity change from 0 to 2048 [ 78.710082][ T4395] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 78.803537][ T4397] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.197778][ T4400] loop3: detected capacity change from 0 to 256 [ 80.249665][ T4400] FAT-fs (loop3): Directory bread(block 64) failed [ 80.256344][ T4400] FAT-fs (loop3): Directory bread(block 65) failed [ 80.263217][ T4400] FAT-fs (loop3): Directory bread(block 66) failed [ 80.269884][ T4400] FAT-fs (loop3): Directory bread(block 67) failed [ 80.276503][ T4400] FAT-fs (loop3): Directory bread(block 68) failed [ 80.283172][ T4400] FAT-fs (loop3): Directory bread(block 69) failed [ 80.289826][ T4400] FAT-fs (loop3): Directory bread(block 70) failed [ 80.296414][ T4400] FAT-fs (loop3): Directory bread(block 71) failed [ 80.303168][ T4400] FAT-fs (loop3): Directory bread(block 72) failed [ 80.310006][ T4400] FAT-fs (loop3): Directory bread(block 73) failed [ 81.407515][ T1326] cfg80211: failed to load regulatory.db [ 82.212902][ T4419] loop2: detected capacity change from 0 to 2048 [ 82.228053][ T4419] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 82.591176][ T4420] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.815518][ T4427] device bridge0 entered promiscuous mode [ 84.821473][ T4427] device macvlan2 entered promiscuous mode [ 85.313442][ T4435] loop4: detected capacity change from 0 to 16 [ 85.402583][ T4435] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 86.964054][ T4444] loop3: detected capacity change from 0 to 256 [ 87.018830][ T4443] loop0: detected capacity change from 0 to 2048 [ 87.125619][ T4443] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 88.619069][ T4445] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.646171][ T4444] FAT-fs (loop3): Directory bread(block 64) failed [ 88.652931][ T4444] FAT-fs (loop3): Directory bread(block 65) failed [ 88.659552][ T4444] FAT-fs (loop3): Directory bread(block 66) failed [ 88.666062][ T4444] FAT-fs (loop3): Directory bread(block 67) failed [ 88.672630][ T4444] FAT-fs (loop3): Directory bread(block 68) failed [ 88.679170][ T4444] FAT-fs (loop3): Directory bread(block 69) failed [ 88.685730][ T4444] FAT-fs (loop3): Directory bread(block 70) failed [ 88.692269][ T4444] FAT-fs (loop3): Directory bread(block 71) failed [ 88.698877][ T4444] FAT-fs (loop3): Directory bread(block 72) failed [ 88.705395][ T4444] FAT-fs (loop3): Directory bread(block 73) failed [ 90.943904][ T4472] device bridge0 entered promiscuous mode [ 90.949726][ T4472] device macvlan2 entered promiscuous mode [ 91.174756][ T4478] loop0: detected capacity change from 0 to 2048 [ 91.273240][ T4478] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 91.334795][ T4479] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.877212][ T4489] loop2: detected capacity change from 0 to 16 [ 94.025311][ T4489] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 95.597760][ T4498] loop0: detected capacity change from 0 to 256 [ 96.448031][ T4498] FAT-fs (loop0): Directory bread(block 64) failed [ 96.454663][ T4498] FAT-fs (loop0): Directory bread(block 65) failed [ 96.461555][ T4498] FAT-fs (loop0): Directory bread(block 66) failed [ 96.468142][ T4498] FAT-fs (loop0): Directory bread(block 67) failed [ 96.474765][ T4498] FAT-fs (loop0): Directory bread(block 68) failed [ 96.481453][ T4498] FAT-fs (loop0): Directory bread(block 69) failed [ 96.488125][ T4498] FAT-fs (loop0): Directory bread(block 70) failed [ 96.494660][ T4498] FAT-fs (loop0): Directory bread(block 71) failed [ 96.501269][ T4498] FAT-fs (loop0): Directory bread(block 72) failed [ 96.508032][ T4498] FAT-fs (loop0): Directory bread(block 73) failed [ 98.256285][ T4530] device macvlan3 entered promiscuous mode [ 99.349094][ T4546] loop3: detected capacity change from 0 to 16 [ 99.393924][ T4543] loop0: detected capacity change from 0 to 2048 [ 99.405179][ T4543] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 99.422806][ T4548] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.447686][ T4546] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 100.069666][ T4555] vivid-004: disconnect [ 100.658797][ T4550] vivid-004: reconnect [ 101.003500][ T4572] syz.3.85 uses obsolete (PF_INET,SOCK_PACKET) [ 101.120491][ T4576] loop0: detected capacity change from 0 to 256 [ 101.265258][ T4576] FAT-fs (loop0): Directory bread(block 64) failed [ 101.272121][ T4576] FAT-fs (loop0): Directory bread(block 65) failed [ 101.278840][ T4576] FAT-fs (loop0): Directory bread(block 66) failed [ 101.285399][ T4576] FAT-fs (loop0): Directory bread(block 67) failed [ 101.292869][ T4576] FAT-fs (loop0): Directory bread(block 68) failed [ 101.299488][ T4576] FAT-fs (loop0): Directory bread(block 69) failed [ 101.306105][ T4576] FAT-fs (loop0): Directory bread(block 70) failed [ 101.312760][ T4576] FAT-fs (loop0): Directory bread(block 71) failed [ 101.319418][ T4576] FAT-fs (loop0): Directory bread(block 72) failed [ 101.326408][ T4576] FAT-fs (loop0): Directory bread(block 73) failed [ 101.592582][ T4582] device macvlan3 entered promiscuous mode [ 103.005807][ T4596] loop4: detected capacity change from 0 to 2048 [ 103.095307][ T4596] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 103.185677][ T4598] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.660651][ T4600] loop3: detected capacity change from 0 to 16 [ 103.737652][ T4600] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 105.690176][ T4621] device bridge0 entered promiscuous mode [ 105.696079][ T4621] device macvlan2 entered promiscuous mode [ 105.770098][ T4627] vivid-003: disconnect [ 105.833065][ T4630] netlink: 20 bytes leftover after parsing attributes in process `syz.2.103'. [ 105.843383][ T4630] netlink: 20 bytes leftover after parsing attributes in process `syz.2.103'. [ 106.144507][ T4634] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 106.813474][ T4636] loop0: detected capacity change from 0 to 256 [ 106.877929][ T4636] FAT-fs (loop0): Directory bread(block 64) failed [ 106.884513][ T4636] FAT-fs (loop0): Directory bread(block 65) failed [ 106.891198][ T4636] FAT-fs (loop0): Directory bread(block 66) failed [ 106.897844][ T4636] FAT-fs (loop0): Directory bread(block 67) failed [ 106.904494][ T4636] FAT-fs (loop0): Directory bread(block 68) failed [ 106.911239][ T4636] FAT-fs (loop0): Directory bread(block 69) failed [ 106.917869][ T4636] FAT-fs (loop0): Directory bread(block 70) failed [ 106.924452][ T4636] FAT-fs (loop0): Directory bread(block 71) failed [ 106.931051][ T4636] FAT-fs (loop0): Directory bread(block 72) failed [ 106.937618][ T4636] FAT-fs (loop0): Directory bread(block 73) failed [ 107.035457][ T4623] vivid-003: reconnect [ 108.099065][ T4644] loop2: detected capacity change from 0 to 512 [ 108.279222][ T4644] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,errors=remount-ro,. Quota mode: writeback. [ 108.385121][ T4644] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.453478][ T4649] loop4: detected capacity change from 0 to 16 [ 108.607575][ T4649] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 108.743621][ T4653] netlink: 277 bytes leftover after parsing attributes in process `syz.2.107'. [ 110.257394][ T4665] loop2: detected capacity change from 0 to 2048 [ 110.497539][ T4665] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 110.801201][ T4174] udevd[4174]: incorrect nilfs2 checksum on /dev/loop2 [ 110.919565][ T4671] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.540614][ T4688] loop3: detected capacity change from 0 to 256 [ 111.596711][ T4673] device macvlan4 entered promiscuous mode [ 111.706835][ T4688] FAT-fs (loop3): Directory bread(block 64) failed [ 111.713457][ T4688] FAT-fs (loop3): Directory bread(block 65) failed [ 111.720231][ T4688] FAT-fs (loop3): Directory bread(block 66) failed [ 111.727088][ T4688] FAT-fs (loop3): Directory bread(block 67) failed [ 111.733708][ T4688] FAT-fs (loop3): Directory bread(block 68) failed [ 111.740299][ T4688] FAT-fs (loop3): Directory bread(block 69) failed [ 111.747013][ T4688] FAT-fs (loop3): Directory bread(block 70) failed [ 111.753560][ T4688] FAT-fs (loop3): Directory bread(block 71) failed [ 111.760217][ T4688] FAT-fs (loop3): Directory bread(block 72) failed [ 111.766778][ T4688] FAT-fs (loop3): Directory bread(block 73) failed [ 112.055929][ T4693] loop2: detected capacity change from 0 to 16 [ 112.413888][ T4693] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 113.987058][ T4229] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 114.427390][ T4229] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.480828][ T4722] loop2: detected capacity change from 0 to 2048 [ 114.495616][ T4229] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 114.517497][ T4722] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 114.636702][ T4229] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 114.655265][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.673823][ T4229] usb 1-1: config 0 descriptor?? [ 114.736195][ T4229] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 114.751275][ T4229] dvb-usb: bulk message failed: -22 (3/0) [ 114.834063][ T4724] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.861429][ T4229] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 114.889647][ T4229] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 115.121574][ T4711] dibusb: i2c wr: len=61 is too big! [ 115.121574][ T4711] [ 115.130418][ T4229] usb 1-1: media controller created [ 115.175014][ T4229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.275295][ T4229] dvb-usb: bulk message failed: -22 (6/0) [ 115.346637][ T4229] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 115.434174][ T4229] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 115.486087][ T4229] dvb-usb: schedule remote query interval to 150 msecs. [ 115.498659][ T4229] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 115.625971][ T4229] usb 1-1: USB disconnect, device number 3 [ 115.838496][ T4735] loop3: detected capacity change from 0 to 256 [ 115.845923][ T4229] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 115.883722][ T4735] FAT-fs (loop3): Directory bread(block 64) failed [ 115.890430][ T4735] FAT-fs (loop3): Directory bread(block 65) failed [ 115.897168][ T4735] FAT-fs (loop3): Directory bread(block 66) failed [ 115.903724][ T4735] FAT-fs (loop3): Directory bread(block 67) failed [ 115.910298][ T4735] FAT-fs (loop3): Directory bread(block 68) failed [ 115.916872][ T4735] FAT-fs (loop3): Directory bread(block 69) failed [ 115.923435][ T4735] FAT-fs (loop3): Directory bread(block 70) failed [ 115.930013][ T4735] FAT-fs (loop3): Directory bread(block 71) failed [ 115.936566][ T4735] FAT-fs (loop3): Directory bread(block 72) failed [ 115.943128][ T4735] FAT-fs (loop3): Directory bread(block 73) failed [ 116.542319][ T4743] device macvlan3 entered promiscuous mode [ 117.173017][ T4749] loop4: detected capacity change from 0 to 16 [ 117.298749][ T4749] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 117.643572][ T4753] loop1: detected capacity change from 0 to 2048 [ 118.504378][ T4753] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 118.575055][ T4757] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.908957][ T4231] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.407421][ T4772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.145'. [ 121.680473][ T4231] usb 1-1: Using ep0 maxpacket: 8 [ 122.043745][ T4787] device macvlan4 entered promiscuous mode [ 122.601003][ T4231] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 122.630950][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.655042][ T4231] usb 1-1: Product: syz [ 122.664577][ T4231] usb 1-1: Manufacturer: syz [ 122.672778][ T4792] loop4: detected capacity change from 0 to 512 [ 122.683453][ T4231] usb 1-1: SerialNumber: syz [ 122.758343][ T4231] usb 1-1: config 0 descriptor?? [ 122.829308][ T4792] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,errors=remount-ro,. Quota mode: writeback. [ 122.847014][ T4792] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.017226][ T4231] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 123.146626][ T4802] netlink: 277 bytes leftover after parsing attributes in process `syz.4.150'. [ 123.161103][ T4802] fuse: Bad value for 'fd' [ 123.748741][ T4804] loop4: detected capacity change from 0 to 16 [ 123.782659][ T4804] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 124.177382][ T4231] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 124.704110][ T4231] usb 1-1: USB disconnect, device number 4 [ 124.865067][ T4809] loop2: detected capacity change from 0 to 256 [ 125.022641][ T4809] FAT-fs (loop2): Directory bread(block 64) failed [ 125.242190][ T4809] FAT-fs (loop2): Directory bread(block 65) failed [ 125.252371][ T4809] FAT-fs (loop2): Directory bread(block 66) failed [ 125.297690][ T4809] FAT-fs (loop2): Directory bread(block 67) failed [ 125.304639][ T4809] FAT-fs (loop2): Directory bread(block 68) failed [ 125.315441][ T4809] FAT-fs (loop2): Directory bread(block 69) failed [ 125.324272][ T4809] FAT-fs (loop2): Directory bread(block 70) failed [ 125.335301][ T4809] FAT-fs (loop2): Directory bread(block 71) failed [ 125.344309][ T4809] FAT-fs (loop2): Directory bread(block 72) failed [ 125.354712][ T4809] FAT-fs (loop2): Directory bread(block 73) failed [ 125.383490][ T4817] loop0: detected capacity change from 0 to 2048 [ 126.244270][ T4817] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 126.902520][ T4827] device macvlan5 entered promiscuous mode [ 127.005657][ T4831] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.119630][ T4833] loop3: detected capacity change from 0 to 512 [ 127.513021][ T4841] loop2: detected capacity change from 0 to 16 [ 127.557514][ T4841] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 127.579214][ T4833] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,errors=remount-ro,. Quota mode: writeback. [ 127.600549][ T4833] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.878278][ T4849] netlink: 277 bytes leftover after parsing attributes in process `syz.3.162'. [ 127.892208][ T4849] fuse: Bad value for 'fd' [ 128.983300][ T4865] vivid-001: disconnect [ 129.047023][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 129.442730][ T4871] device macvlan6 entered promiscuous mode [ 129.518263][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 129.586055][ T4874] loop1: detected capacity change from 0 to 256 [ 129.653087][ T4874] FAT-fs (loop1): Directory bread(block 64) failed [ 129.659847][ T4874] FAT-fs (loop1): Directory bread(block 65) failed [ 129.666479][ T4874] FAT-fs (loop1): Directory bread(block 66) failed [ 129.673432][ T4874] FAT-fs (loop1): Directory bread(block 67) failed [ 129.680100][ T4874] FAT-fs (loop1): Directory bread(block 68) failed [ 129.686637][ T4874] FAT-fs (loop1): Directory bread(block 69) failed [ 129.694012][ T4874] FAT-fs (loop1): Directory bread(block 70) failed [ 129.700738][ T4874] FAT-fs (loop1): Directory bread(block 71) failed [ 129.708019][ T4874] FAT-fs (loop1): Directory bread(block 72) failed [ 129.714583][ T4874] FAT-fs (loop1): Directory bread(block 73) failed [ 129.728441][ T7] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 130.496888][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.511112][ T7] usb 4-1: config 0 descriptor?? [ 130.709883][ T4858] vivid-001: reconnect [ 130.762018][ T4853] netlink: 'syz.3.166': attribute type 1 has an invalid length. [ 130.787057][ T7] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 130.820936][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 130.857149][ T7] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 130.864344][ T7] usb 4-1: media controller created [ 130.927501][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.978201][ T4880] loop2: detected capacity change from 0 to 16 [ 130.997056][ T7] az6027: usb out operation failed. (-71) [ 131.014101][ T4880] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 131.021531][ T7] az6027: usb out operation failed. (-71) [ 131.029782][ T7] stb0899_attach: Driver disabled by Kconfig [ 131.035827][ T7] az6027: no front-end attached [ 131.035827][ T7] [ 131.076978][ T7] az6027: usb out operation failed. (-71) [ 131.082928][ T7] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 131.127901][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 132.601294][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.607832][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.061154][ T7] dvb-usb: schedule remote query interval to 400 msecs. [ 134.068569][ T7] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 134.089825][ T7] usb 4-1: USB disconnect, device number 3 [ 134.802509][ T7] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 135.021766][ T26] audit: type=1326 audit(1777113184.663:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4902 comm="syz.4.184" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fe00a4cab57 code=0x0 [ 135.256953][ T7] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 135.432987][ T4916] loop0: detected capacity change from 0 to 256 [ 135.481824][ T4916] FAT-fs (loop0): Directory bread(block 64) failed [ 135.488659][ T4916] FAT-fs (loop0): Directory bread(block 65) failed [ 135.495387][ T4916] FAT-fs (loop0): Directory bread(block 66) failed [ 135.502080][ T4916] FAT-fs (loop0): Directory bread(block 67) failed [ 135.509135][ T4916] FAT-fs (loop0): Directory bread(block 68) failed [ 135.515649][ T4916] FAT-fs (loop0): Directory bread(block 69) failed [ 135.522240][ T4916] FAT-fs (loop0): Directory bread(block 70) failed [ 135.529300][ T4916] FAT-fs (loop0): Directory bread(block 71) failed [ 135.535866][ T4916] FAT-fs (loop0): Directory bread(block 72) failed [ 135.542409][ T4916] FAT-fs (loop0): Directory bread(block 73) failed [ 136.347225][ T7] usb 4-1: config 201 has an invalid interface number: 249 but max is 0 [ 136.355673][ T7] usb 4-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config [ 136.411423][ T7] usb 4-1: config 201 has no interface number 0 [ 136.565662][ T7] usb 4-1: config 201 interface 249 altsetting 4 has an invalid endpoint with address 0xF1, skipping [ 136.661141][ T7] usb 4-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 136.712722][ T7] usb 4-1: config 201 interface 249 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.809206][ T7] usb 4-1: config 201 interface 249 has no altsetting 0 [ 137.116964][ T7] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 137.847176][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.855241][ T7] usb 4-1: Product: syz [ 137.860147][ T7] usb 4-1: Manufacturer: syz [ 137.865261][ T7] usb 4-1: SerialNumber: syz [ 137.907101][ T7] usb 4-1: can't set config #201, error -71 [ 137.941834][ T7] usb 4-1: USB disconnect, device number 4 [ 138.151227][ T4928] loop0: detected capacity change from 0 to 512 [ 138.417714][ T4928] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,errors=remount-ro,. Quota mode: writeback. [ 138.481780][ T4928] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.081983][ T4940] loop5: detected capacity change from 0 to 4095 [ 139.191269][ C0] blk_update_request: I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 139.196255][ C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 139.241090][ C0] blk_update_request: I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 139.252531][ C0] Buffer I/O error on dev loop5, logical block 480, async page read [ 139.257891][ C1] blk_update_request: I/O error, dev loop5, sector 1064 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 139.272544][ C1] blk_update_request: I/O error, dev loop5, sector 2088 op 0x0:(READ) flags 0x80700 phys_seg 59 prio class 0 [ 139.315108][ C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 139.326056][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 139.459278][ T4956] loop4: detected capacity change from 0 to 256 [ 139.526267][ T4956] FAT-fs (loop4): Directory bread(block 64) failed [ 139.533207][ T4956] FAT-fs (loop4): Directory bread(block 65) failed [ 139.539852][ T4956] FAT-fs (loop4): Directory bread(block 66) failed [ 139.546386][ T4956] FAT-fs (loop4): Directory bread(block 67) failed [ 139.553118][ T4956] FAT-fs (loop4): Directory bread(block 68) failed [ 139.559716][ T4956] FAT-fs (loop4): Directory bread(block 69) failed [ 139.566309][ T4956] FAT-fs (loop4): Directory bread(block 70) failed [ 139.572899][ T4956] FAT-fs (loop4): Directory bread(block 71) failed [ 139.577117][ T4231] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 139.579651][ T4956] FAT-fs (loop4): Directory bread(block 72) failed [ 139.593518][ T4956] FAT-fs (loop4): Directory bread(block 73) failed [ 139.866967][ T4231] usb 1-1: Using ep0 maxpacket: 16 [ 140.182382][ T4231] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 140.218094][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.442673][ T4231] usb 1-1: Product: syz [ 140.685973][ T4926] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 140.969311][ T4231] usb 1-1: Manufacturer: syz [ 140.974073][ T4231] usb 1-1: SerialNumber: syz [ 140.979999][ T4231] r8152-cfgselector 1-1: config 0 descriptor?? [ 141.181326][ T4926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.226424][ T4926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.247127][ T4926] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 141.247877][ T4200] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 141.256287][ T4926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.293096][ T4926] usb 3-1: config 0 descriptor?? [ 141.347882][ T4973] loop1: detected capacity change from 0 to 512 [ 141.428166][ T7] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 141.479025][ T4973] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,errors=remount-ro,. Quota mode: writeback. [ 141.491862][ T4231] r8152-cfgselector 1-1: Unknown version 0x0000 [ 141.498315][ T4973] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.509806][ T4231] r8152-cfgselector 1-1: bad CDC descriptors [ 141.536953][ T4231] r8152-cfgselector 1-1: Unknown version 0x0000 [ 141.554716][ T4231] r8152-cfgselector 1-1: USB disconnect, device number 5 [ 142.029284][ T4926] sony 0003:054C:0BA0.0002: unknown main item tag 0x0 [ 142.036135][ T4926] sony 0003:054C:0BA0.0002: unknown main item tag 0x0 [ 142.101127][ T4926] sony 0003:054C:0BA0.0002: unknown main item tag 0x0 [ 142.108838][ T4926] sony 0003:054C:0BA0.0002: unknown main item tag 0x0 [ 142.122113][ T4926] sony 0003:054C:0BA0.0002: unknown main item tag 0x0 [ 142.132659][ T4926] sony 0003:054C:0BA0.0002: unknown main item tag 0x0 [ 142.191539][ T7] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 142.205157][ T7] usb 4-1: config 0 has no interface number 0 [ 142.212154][ T4926] sony 0003:054C:0BA0.0002: unknown main item tag 0x0 [ 142.231982][ T7] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 12336, setting to 64 [ 142.281001][ T4926] sony 0003:054C:0BA0.0002: hidraw0: USB HID v80.00 Device [HID 054c:0ba0] on usb-dummy_hcd.2-1/input0 [ 142.295932][ T4926] sony 0003:054C:0BA0.0002: failed to claim input [ 142.450423][ T7] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 142.476401][ T7] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 142.496960][ T7] usb 4-1: Product: syz [ 142.507427][ T7] usb 4-1: Manufacturer: syz [ 142.521774][ T7] usb 4-1: SerialNumber: syz [ 142.527136][ T4231] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 142.564586][ T7] usb 4-1: config 0 descriptor?? [ 142.618570][ T7] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 142.630430][ T7] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 142.647410][ T7] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 142.662278][ T7] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 142.703783][ T7] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 142.731224][ T7] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 142.765538][ T7] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 142.784278][ T7] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 142.806091][ T7] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 142.837801][ T7] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 142.860597][ T4997] hub 9-0:1.0: USB hub found [ 142.946050][ T4997] hub 9-0:1.0: 1 port detected [ 142.977226][ T4231] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 142.996248][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.031589][ T4231] usb 2-1: config 0 descriptor?? [ 143.347237][ T23] usb 4-1: USB disconnect, device number 5 [ 143.394739][ T23] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 143.465240][ T4926] usb 3-1: USB disconnect, device number 2 [ 143.482943][ T23] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 143.710168][ T23] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 144.458222][ T23] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 144.503102][ T23] keyspan 4-1:0.107: device disconnected [ 144.676966][ T4926] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 145.117168][ T4926] usb 3-1: unable to get BOS descriptor or descriptor too short [ 145.257309][ T4926] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 145.267434][ T4231] usb 2-1: Cannot set autoneg [ 145.273347][ T4231] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 145.312495][ T4231] usb 2-1: USB disconnect, device number 4 [ 145.477665][ T4926] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 145.490732][ T4926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.500008][ T4926] usb 3-1: Product: syz [ 145.504316][ T4926] usb 3-1: Manufacturer: syz [ 145.514706][ T4926] usb 3-1: SerialNumber: syz [ 145.606937][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 145.920183][ T4926] usb 3-1: unit 4 not found! [ 146.007358][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.023560][ T4926] usb 3-1: USB disconnect, device number 3 [ 146.031023][ T23] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 146.084222][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.112120][ T23] usb 1-1: config 0 descriptor?? [ 146.262008][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 146.335907][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.487049][ T23] usbhid 1-1:0.0: can't add hid device: -71 [ 146.493200][ T23] usbhid: probe of 1-1:0.0 failed with error -71 [ 146.519452][ T23] usb 1-1: USB disconnect, device number 6 [ 146.557096][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 146.707213][ T21] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 146.716508][ T21] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 146.728451][ T21] usb 2-1: config 6 has no interface number 0 [ 146.737098][ T21] usb 2-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 146.917254][ T21] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 146.930699][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.945466][ T21] usb 2-1: Product: syz [ 146.950167][ T21] usb 2-1: Manufacturer: syz [ 146.959211][ T21] usb 2-1: SerialNumber: syz [ 146.986934][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 147.037823][ T21] hso 2-1:6.2: Failed to find INT IN ep [ 147.226863][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 147.349098][ T21] usb 2-1: USB disconnect, device number 5 [ 147.377048][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.406945][ T23] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 147.436601][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.507394][ T23] usb 1-1: config 0 descriptor?? [ 147.581242][ T23] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 147.672125][ T23] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 148.145059][ T23] usb 1-1: USB disconnect, device number 7 [ 148.165125][ T23] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 148.344770][ T5053] syz.4.230 (5053): drop_caches: 2 [ 148.556912][ T4231] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 149.519483][ T5077] loop0: detected capacity change from 0 to 256 [ 149.608694][ T5077] FAT-fs (loop0): Directory bread(block 64) failed [ 149.615263][ T5077] FAT-fs (loop0): Directory bread(block 65) failed [ 149.621900][ T5077] FAT-fs (loop0): Directory bread(block 66) failed [ 149.628588][ T5077] FAT-fs (loop0): Directory bread(block 67) failed [ 149.635158][ T5077] FAT-fs (loop0): Directory bread(block 68) failed [ 149.641692][ T5077] FAT-fs (loop0): Directory bread(block 69) failed [ 149.648253][ T5077] FAT-fs (loop0): Directory bread(block 70) failed [ 149.654763][ T5077] FAT-fs (loop0): Directory bread(block 71) failed [ 149.661654][ T5077] FAT-fs (loop0): Directory bread(block 72) failed [ 149.668190][ T5077] FAT-fs (loop0): Directory bread(block 73) failed [ 151.471809][ T5085] sg_write: process 151 (syz.2.243) changed security contexts after opening file descriptor, this is not allowed. [ 151.674886][ T5095] device syzkaller0 entered promiscuous mode [ 151.698718][ T5098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.245'. [ 152.188065][ T5117] loop2: detected capacity change from 0 to 256 [ 152.249476][ T5117] FAT-fs (loop2): Directory bread(block 64) failed [ 152.256101][ T5117] FAT-fs (loop2): Directory bread(block 65) failed [ 152.262799][ T5117] FAT-fs (loop2): Directory bread(block 66) failed [ 152.269377][ T5117] FAT-fs (loop2): Directory bread(block 67) failed [ 152.275960][ T5117] FAT-fs (loop2): Directory bread(block 68) failed [ 152.282577][ T5117] FAT-fs (loop2): Directory bread(block 69) failed [ 152.289229][ T5117] FAT-fs (loop2): Directory bread(block 70) failed [ 152.295764][ T5117] FAT-fs (loop2): Directory bread(block 71) failed [ 152.302376][ T5117] FAT-fs (loop2): Directory bread(block 72) failed [ 152.308956][ T5117] FAT-fs (loop2): Directory bread(block 73) failed [ 155.717047][ T1110] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 155.948254][ T5137] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 156.006850][ T1110] usb 2-1: Using ep0 maxpacket: 8 [ 156.319322][ T1110] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 156.337046][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.359283][ T1110] usb 2-1: Product: syz [ 156.372605][ T1110] usb 2-1: Manufacturer: syz [ 156.383938][ T1110] usb 2-1: SerialNumber: syz [ 156.418245][ T1110] usb 2-1: config 0 descriptor?? [ 156.646447][ T5150] binder: 5148:5150 ioctl 4018620d 0 returned -22 [ 156.827195][ T1110] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 157.830845][ T5163] loop3: detected capacity change from 0 to 256 [ 157.880960][ T5163] FAT-fs (loop3): Directory bread(block 64) failed [ 157.887844][ T5163] FAT-fs (loop3): Directory bread(block 65) failed [ 157.894455][ T5163] FAT-fs (loop3): Directory bread(block 66) failed [ 157.901010][ T5163] FAT-fs (loop3): Directory bread(block 67) failed [ 157.907581][ T5163] FAT-fs (loop3): Directory bread(block 68) failed [ 157.914103][ T5163] FAT-fs (loop3): Directory bread(block 69) failed [ 157.920718][ T5163] FAT-fs (loop3): Directory bread(block 70) failed [ 157.927243][ T1110] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 157.932277][ T1110] usb 2-1: USB disconnect, device number 6 [ 157.934546][ T5163] FAT-fs (loop3): Directory bread(block 71) failed [ 157.947162][ T5163] FAT-fs (loop3): Directory bread(block 72) failed [ 157.954460][ T5163] FAT-fs (loop3): Directory bread(block 73) failed [ 158.035123][ T5165] netlink: 24 bytes leftover after parsing attributes in process `syz.4.270'. [ 158.516859][ T1326] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 159.107267][ T1326] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 160.611487][ T1326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.815528][ T1326] usb 1-1: config 0 descriptor?? [ 160.968277][ T1326] usb 1-1: can't set config #0, error -71 [ 161.107326][ T1326] usb 1-1: USB disconnect, device number 8 [ 161.585260][ T5178] netlink: 'syz.2.274': attribute type 3 has an invalid length. [ 162.096030][ T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 162.511394][ T5198] loop1: detected capacity change from 0 to 512 [ 162.542450][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.582368][ T21] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 162.626931][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.687777][ T5198] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,errors=remount-ro,. Quota mode: writeback. [ 162.700920][ T5198] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.710704][ T21] usb 5-1: config 0 descriptor?? [ 163.347613][ T21] usbhid 5-1:0.0: can't add hid device: -71 [ 163.356350][ T21] usbhid: probe of 5-1:0.0 failed with error -71 [ 163.426649][ T21] usb 5-1: USB disconnect, device number 4 [ 163.877105][ T21] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 163.937200][ T23] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 163.967760][ T5218] loop2: detected capacity change from 0 to 256 [ 164.075630][ T5218] FAT-fs (loop2): Directory bread(block 64) failed [ 164.082401][ T5218] FAT-fs (loop2): Directory bread(block 65) failed [ 164.089058][ T5218] FAT-fs (loop2): Directory bread(block 66) failed [ 164.096061][ T5218] FAT-fs (loop2): Directory bread(block 67) failed [ 164.102682][ T5218] FAT-fs (loop2): Directory bread(block 68) failed [ 164.109219][ T5218] FAT-fs (loop2): Directory bread(block 69) failed [ 164.115884][ T5218] FAT-fs (loop2): Directory bread(block 70) failed [ 164.122458][ T5218] FAT-fs (loop2): Directory bread(block 71) failed [ 164.129044][ T5218] FAT-fs (loop2): Directory bread(block 72) failed [ 164.135564][ T5218] FAT-fs (loop2): Directory bread(block 73) failed [ 164.147909][ T4926] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 164.959525][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 165.076984][ T21] usb 5-1: device descriptor read/all, error -71 [ 165.127103][ T23] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 165.146932][ T23] usb 2-1: config 0 has no interface number 0 [ 165.153099][ T23] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 12336, setting to 64 [ 165.166898][ T4926] usb 1-1: Using ep0 maxpacket: 16 [ 165.287292][ T4926] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 165.347308][ T23] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 165.356431][ T23] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 165.380686][ T23] usb 2-1: Product: syz [ 165.384904][ T23] usb 2-1: Manufacturer: syz [ 165.411163][ T23] usb 2-1: SerialNumber: syz [ 165.447061][ T4926] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 165.463493][ T23] usb 2-1: config 0 descriptor?? [ 165.475518][ T4926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.506925][ T4926] usb 1-1: Product: syz [ 165.517468][ T4926] usb 1-1: Manufacturer: syz [ 165.522127][ T4926] usb 1-1: SerialNumber: syz [ 165.538291][ T23] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 165.546147][ T23] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 165.582969][ T4926] r8152-cfgselector 1-1: config 0 descriptor?? [ 165.603482][ T23] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 165.620829][ T23] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 165.641537][ T23] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 165.669762][ T23] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 165.680745][ T23] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 165.690518][ T23] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 165.707749][ T23] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 165.717397][ T23] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 166.367226][ T7] usb 2-1: USB disconnect, device number 7 [ 166.387415][ T7] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 166.421591][ T7] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 166.456932][ T7] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 166.885908][ T7] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 168.427415][ T4926] r8152-cfgselector 1-1: Unknown version 0x0000 [ 168.440260][ T4926] r8152-cfgselector 1-1: bad CDC descriptors [ 168.597143][ T4926] r8152-cfgselector 1-1: Unknown version 0x0000 [ 168.735236][ T4926] r8152-cfgselector 1-1: USB disconnect, device number 9 [ 169.173929][ T7] keyspan 2-1:0.107: device disconnected [ 169.587678][ T21] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 169.841782][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 170.128224][ T21] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 170.150613][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.173455][ T21] usb 1-1: Product: syz [ 170.186471][ T21] usb 1-1: Manufacturer: syz [ 170.214932][ T21] usb 1-1: SerialNumber: syz [ 170.260384][ T21] usb 1-1: config 0 descriptor?? [ 170.313307][ T21] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 170.344822][ T5260] loop2: detected capacity change from 0 to 256 [ 170.454807][ T5260] FAT-fs (loop2): Directory bread(block 64) failed [ 170.461492][ T5260] FAT-fs (loop2): Directory bread(block 65) failed [ 170.468169][ T5260] FAT-fs (loop2): Directory bread(block 66) failed [ 170.474722][ T5260] FAT-fs (loop2): Directory bread(block 67) failed [ 170.481394][ T5260] FAT-fs (loop2): Directory bread(block 68) failed [ 170.487962][ T5260] FAT-fs (loop2): Directory bread(block 69) failed [ 170.494545][ T5260] FAT-fs (loop2): Directory bread(block 70) failed [ 170.501135][ T5260] FAT-fs (loop2): Directory bread(block 71) failed [ 170.507778][ T5260] FAT-fs (loop2): Directory bread(block 72) failed [ 170.514338][ T5260] FAT-fs (loop2): Directory bread(block 73) failed [ 171.528337][ T21] usb 1-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 171.998035][ T7] usb 1-1: USB disconnect, device number 10 [ 172.007639][ T5278] netlink: 68 bytes leftover after parsing attributes in process `syz.1.305'. [ 172.069028][ T7] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 172.085787][ T7] visor 1-1:0.0: device disconnected [ 172.137269][ T5280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 172.147247][ T21] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 172.208558][ T4228] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 172.446910][ T4228] usb 4-1: Using ep0 maxpacket: 16 [ 172.516941][ T21] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 172.532239][ T21] usb 3-1: config 0 has no interface number 0 [ 172.558784][ T21] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 12336, setting to 64 [ 172.570522][ T4228] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.590375][ T4228] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.611951][ T4228] usb 4-1: config 0 interface 0 has no altsetting 0 [ 172.638089][ T4228] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 172.660809][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.679519][ T4228] usb 4-1: config 0 descriptor?? [ 172.690338][ T5291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.309'. [ 172.767171][ T21] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 172.776273][ T21] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 172.787944][ T5294] loop4: detected capacity change from 0 to 16 [ 172.851115][ T5294] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 172.968581][ T21] usb 3-1: Product: syz [ 172.973169][ T21] usb 3-1: Manufacturer: syz [ 172.977905][ T21] usb 3-1: SerialNumber: syz [ 172.984485][ T21] usb 3-1: config 0 descriptor?? [ 173.031128][ T21] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 173.105260][ T21] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 173.269673][ T21] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 173.454488][ T21] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 173.587570][ T4228] usb 4-1: USB disconnect, device number 6 [ 173.671053][ T21] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 173.758431][ T21] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 173.781039][ T21] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 173.818801][ T21] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 173.834315][ T21] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 173.837918][ T5302] Dead loop on virtual device ip6_vti0, fix it urgently! [ 173.853840][ T21] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 173.865820][ T21] usb 3-1: USB disconnect, device number 5 [ 173.970527][ T21] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 174.032663][ T21] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 174.094544][ T21] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 174.150979][ T21] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 174.174662][ T5308] loop4: detected capacity change from 0 to 256 [ 174.187797][ T21] keyspan 3-1:0.107: device disconnected [ 174.238188][ T5308] FAT-fs (loop4): Directory bread(block 64) failed [ 174.244808][ T5308] FAT-fs (loop4): Directory bread(block 65) failed [ 174.251475][ T5308] FAT-fs (loop4): Directory bread(block 66) failed [ 174.258047][ T5308] FAT-fs (loop4): Directory bread(block 67) failed [ 174.264595][ T5308] FAT-fs (loop4): Directory bread(block 68) failed [ 174.271162][ T5308] FAT-fs (loop4): Directory bread(block 69) failed [ 174.277827][ T5308] FAT-fs (loop4): Directory bread(block 70) failed [ 174.284376][ T5308] FAT-fs (loop4): Directory bread(block 71) failed [ 174.291035][ T5308] FAT-fs (loop4): Directory bread(block 72) failed [ 174.297611][ T5308] FAT-fs (loop4): Directory bread(block 73) failed [ 175.147731][ T21] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 175.417009][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 175.697162][ T21] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 175.716635][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.726898][ T21] usb 3-1: Product: syz [ 175.731175][ T21] usb 3-1: Manufacturer: syz [ 175.770779][ T21] usb 3-1: SerialNumber: syz [ 175.791699][ T21] usb 3-1: config 0 descriptor?? [ 175.807923][ T5323] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 175.899406][ T21] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 175.933459][ T5322] hub 9-0:1.0: USB hub found [ 175.947389][ T5322] hub 9-0:1.0: 1 port detected [ 176.116965][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 176.386922][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 176.537028][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.602360][ T7] usb 5-1: config 0 has no interfaces? [ 176.632130][ T7] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 176.677305][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.719695][ T7] usb 5-1: config 0 descriptor?? [ 177.872064][ T4926] usb 5-1: USB disconnect, device number 7 [ 178.286910][ T21] gspca_ov534_9: reg_w failed -71 [ 178.486251][ T5358] loop1: detected capacity change from 0 to 2048 [ 178.542844][ T5358] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 178.606883][ T21] gspca_ov534_9: Unknown sensor 0000 [ 178.606945][ T21] ov534_9: probe of 3-1:0.0 failed with error -22 [ 178.630813][ T5359] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.778078][ T4892] Bluetooth: hci3: command 0x0406 tx timeout [ 180.932891][ T4892] Bluetooth: hci1: command 0x0406 tx timeout [ 181.159741][ T4892] Bluetooth: hci2: command 0x0406 tx timeout [ 181.573567][ T21] usb 3-1: USB disconnect, device number 6 [ 181.584145][ T4926] Bluetooth: hci0: command 0x0406 tx timeout [ 181.592879][ T4926] Bluetooth: hci4: command 0x0406 tx timeout [ 181.876900][ T4231] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 182.247080][ T4231] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 182.265585][ T4231] usb 4-1: config 0 has no interface number 0 [ 182.291952][ T4231] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 182.365028][ T4231] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 182.647120][ T4231] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 182.656306][ T4231] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 182.705376][ T4231] usb 4-1: Product: syz [ 182.721607][ T4231] usb 4-1: Manufacturer: syz [ 182.721629][ T4231] usb 4-1: SerialNumber: syz [ 182.737014][ T4231] usb 4-1: config 0 descriptor?? [ 182.788377][ T4231] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 182.810450][ T4231] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 182.848011][ T4231] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 182.886685][ T4231] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 182.915849][ T4231] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 182.935328][ T4231] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 182.955645][ T4231] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 182.992401][ T4231] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 183.011781][ T4231] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 183.031045][ T4231] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 183.062378][ T4231] usb 4-1: USB disconnect, device number 7 [ 183.086851][ T4892] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 183.105489][ T4231] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 183.124329][ T4231] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 183.144945][ T4231] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 183.177340][ T4231] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 183.188254][ T4231] keyspan 4-1:0.107: device disconnected [ 183.198208][ T4926] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 183.253399][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806113e000: rx timeout, send abort [ 183.566969][ T4892] usb 2-1: unable to get BOS descriptor or descriptor too short [ 183.567102][ T4926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 183.597045][ T4926] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 183.607184][ T4926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 183.617350][ T4926] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 183.627853][ T4926] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 183.637227][ T4926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.655545][ T4926] usb 5-1: config 0 descriptor?? [ 183.667086][ T4892] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 183.716087][ T5392] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 183.753501][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806113e400: rx timeout, send abort [ 183.762928][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806113e000: abort rx timeout. Force session deactivation [ 183.857189][ T4892] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 183.876864][ T4231] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 183.884604][ T4892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.898226][ T4892] usb 2-1: Product: syz [ 183.902426][ T4892] usb 2-1: Manufacturer: syz [ 183.909657][ T4892] usb 2-1: SerialNumber: syz [ 183.917019][ T4926] hdpvr 5-1:0.0: firmware version 0xd dated —jl;™S11´Ôø!ºvOp³ [ 183.917019][ T4926] 4(r¥ý [ 183.917019][ T4926] d×Å2}±dæ~ýýŠÙ­^r¤ [ 184.146883][ T4231] usb 4-1: Using ep0 maxpacket: 16 [ 184.170436][ T4892] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 184.261805][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806113e400: abort rx timeout. Force session deactivation [ 184.287684][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.309832][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.346864][ T4231] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 184.456104][ T4231] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 184.527116][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.708105][ T4231] usb 4-1: config 0 descriptor?? [ 185.057041][ T4892] usb 2-1: failed to enable PITCH for EP 0x82 [ 185.077479][ T4892] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 185.091047][ T4892] usb 2-1: clock source 0 is not valid, cannot use [ 185.127192][ T4892] usb 2-1: 2:1: cannot get freq (v2/v3): err -71 [ 185.167073][ T4892] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 185.239060][ T5391] udc-core: couldn't find an available UDC or it's busy [ 185.266458][ T5391] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 185.295438][ T4892] usb 2-1: USB disconnect, device number 8 [ 185.486914][ T1326] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 185.622873][ T5391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.343'. [ 185.680105][ T4358] udevd[4358]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.000599][ T4231] usbhid 4-1:0.0: can't add hid device: -71 [ 186.017103][ T1326] usb 3-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 186.026270][ T1326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.048086][ T4231] usbhid: probe of 4-1:0.0 failed with error -71 [ 186.130741][ T4231] usb 4-1: USB disconnect, device number 8 [ 186.174564][ T1326] usb 3-1: Product: syz [ 186.196881][ T1326] usb 3-1: Manufacturer: syz [ 186.211458][ T1326] usb 3-1: SerialNumber: syz [ 186.589546][ T1326] gspca_main: pac207-2.14.0 probing 093a:2476 [ 186.646583][ T5429] loop0: detected capacity change from 0 to 512 [ 186.656917][ T1326] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 186.700048][ T1326] usb 3-1: USB disconnect, device number 7 [ 186.809086][ T5429] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,errors=remount-ro,. Quota mode: writeback. [ 186.827113][ T5429] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.216898][ T4229] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 188.586983][ T4229] usb 1-1: config 0 has no interfaces? [ 188.747100][ T4229] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 188.789083][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.942287][ T4229] usb 1-1: Product: syz [ 188.951610][ T4229] usb 1-1: Manufacturer: syz [ 188.956259][ T4229] usb 1-1: SerialNumber: syz [ 188.963852][ T4229] usb 1-1: config 0 descriptor?? [ 189.180010][ T5458] device bridge_slave_1 left promiscuous mode [ 189.278305][ T5458] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.361888][ T5458] device bridge_slave_0 left promiscuous mode [ 189.403973][ T5458] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.959417][ T4231] usb 1-1: USB disconnect, device number 11 [ 190.327363][ T4926] hdpvr 5-1:0.0: device init failed [ 190.382125][ T5473] loop4: detected capacity change from 0 to 2048 [ 190.444949][ T5473] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 190.590325][ T5475] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.702109][ T4926] hdpvr: probe of 5-1:0.0 failed with error -12 [ 193.720085][ T4926] usb 5-1: USB disconnect, device number 8 [ 193.859621][ T5484] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 193.898785][ T5484] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 193.907308][ T5486] binder: 5485:5486 ioctl c0306201 0 returned -14 [ 193.921969][ T5484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.937099][ T5484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.954843][ T5484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.969813][ T5487] binder: 5485:5487 ioctl 4018620d 0 returned -22 [ 193.987583][ T5487] binder: 5485:5487 ioctl c0306201 0 returned -14 [ 193.994348][ T5484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.034804][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.041157][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.351571][ T4200] ================================================================== [ 194.360033][ T4200] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x1324/0x3c90 [ 194.367868][ T4200] Read of size 1 at addr ffff88807814dc0a by task kworker/u5:7/4200 [ 194.375870][ T4200] [ 194.378199][ T4200] CPU: 0 PID: 4200 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 194.385738][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 194.395788][ T4200] Workqueue: hci0 hci_rx_work [ 194.400492][ T4200] Call Trace: [ 194.403800][ T4200] [ 194.406753][ T4200] dump_stack_lvl+0x188/0x250 [ 194.411458][ T4200] ? show_regs_print_info+0x20/0x20 [ 194.416653][ T4200] ? load_image+0x400/0x400 [ 194.421159][ T4200] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 194.426622][ T4200] ? mutex_lock_io_nested+0x60/0x60 [ 194.431821][ T4200] print_address_description+0x60/0x2d0 [ 194.437403][ T4200] ? hci_le_meta_evt+0x1324/0x3c90 [ 194.442505][ T4200] kasan_report+0xdf/0x130 [ 194.446931][ T4200] ? hci_le_meta_evt+0x1324/0x3c90 [ 194.452073][ T4200] hci_le_meta_evt+0x1324/0x3c90 [ 194.457061][ T4200] ? hci_remote_host_features_evt+0x280/0x280 [ 194.463161][ T4200] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 194.468843][ T4200] ? mark_lock+0x94/0x320 [ 194.473202][ T4200] ? mutex_unlock+0x10/0x10 [ 194.477770][ T4200] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 194.483787][ T4200] ? lock_chain_count+0x20/0x20 [ 194.488680][ T4200] ? __rwlock_init+0x140/0x140 [ 194.493442][ T4200] hci_event_packet+0xe48/0x1370 [ 194.498373][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 194.503573][ T4200] ? rcu_lock_release+0x20/0x20 [ 194.508441][ T4200] ? hci_send_to_monitor+0x9c/0x4a0 [ 194.513682][ T4200] hci_rx_work+0x255/0xa10 [ 194.518109][ T4200] process_one_work+0x85f/0x1010 [ 194.523048][ T4200] ? worker_detach_from_pool+0x240/0x240 [ 194.528677][ T4200] ? lockdep_hardirqs_off+0x70/0x100 [ 194.533997][ T4200] ? _raw_spin_lock_irq+0xb7/0xf0 [ 194.539015][ T4200] ? _raw_spin_lock_irqsave+0x100/0x100 [ 194.544586][ T4200] ? wq_worker_running+0x97/0x170 [ 194.549608][ T4200] worker_thread+0xaa6/0x1290 [ 194.554288][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 194.559483][ T4200] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 194.565380][ T4200] kthread+0x436/0x520 [ 194.569442][ T4200] ? rcu_lock_release+0x20/0x20 [ 194.574289][ T4200] ? kthread_blkcg+0xd0/0xd0 [ 194.578878][ T4200] ret_from_fork+0x1f/0x30 [ 194.583308][ T4200] [ 194.586320][ T4200] [ 194.588643][ T4200] Allocated by task 5491: [ 194.592998][ T4200] __kasan_kmalloc+0xb5/0xf0 [ 194.597582][ T4200] __alloc_skb+0x22c/0x750 [ 194.601993][ T4200] vhci_write+0xbc/0x450 [ 194.606234][ T4200] vfs_write+0x745/0xd60 [ 194.610474][ T4200] ksys_write+0x152/0x260 [ 194.614845][ T4200] do_syscall_64+0x4c/0xa0 [ 194.619280][ T4200] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 194.625174][ T4200] [ 194.627493][ T4200] The buggy address belongs to the object at ffff88807814d800 [ 194.627493][ T4200] which belongs to the cache kmalloc-1k of size 1024 [ 194.641626][ T4200] The buggy address is located 10 bytes to the right of [ 194.641626][ T4200] 1024-byte region [ffff88807814d800, ffff88807814dc00) [ 194.655415][ T4200] The buggy address belongs to the page: [ 194.661130][ T4200] page:ffffea0001e05200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78148 [ 194.671285][ T4200] head:ffffea0001e05200 order:3 compound_mapcount:0 compound_pincount:0 [ 194.679596][ T4200] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 194.687612][ T4200] raw: 00fff00000010200 ffffea00051e4c00 0000000300000003 ffff888016c41dc0 [ 194.696228][ T4200] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 194.704801][ T4200] page dumped because: kasan: bad access detected [ 194.711215][ T4200] page_owner tracks the page as allocated [ 194.716948][ T4200] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 9, ts 119450416813, free_ts 119391014202 [ 194.735254][ T4200] get_page_from_freelist+0x1bbd/0x1ca0 [ 194.740801][ T4200] __alloc_pages+0x1ee/0x480 [ 194.745388][ T4200] new_slab+0xc0/0x4b0 [ 194.749448][ T4200] ___slab_alloc+0x80a/0xdd0 [ 194.754034][ T4200] __kmalloc+0x1cd/0x330 [ 194.758271][ T4200] ieee802_11_parse_elems_crc+0xb3/0x10b0 [ 194.763997][ T4200] ieee80211_ibss_rx_queued_mgmt+0x370/0x2ab0 [ 194.770098][ T4200] ieee80211_iface_work+0x70e/0xc60 [ 194.775326][ T4200] cfg80211_wiphy_work+0x221/0x260 [ 194.780444][ T4200] process_one_work+0x85f/0x1010 [ 194.785376][ T4200] worker_thread+0xaa6/0x1290 [ 194.790044][ T4200] kthread+0x436/0x520 [ 194.794105][ T4200] ret_from_fork+0x1f/0x30 [ 194.798522][ T4200] page last free stack trace: [ 194.803187][ T4200] free_unref_page_prepare+0x637/0x6c0 [ 194.808659][ T4200] free_unref_page+0x8f/0x2a0 [ 194.813324][ T4200] __unfreeze_partials+0x1a5/0x200 [ 194.818427][ T4200] put_cpu_partial+0x12d/0x190 [ 194.823183][ T4200] qlist_free_all+0x35/0x90 [ 194.827681][ T4200] kasan_quarantine_reduce+0x150/0x160 [ 194.833141][ T4200] __kasan_slab_alloc+0x2f/0xd0 [ 194.837982][ T4200] slab_post_alloc_hook+0x4c/0x380 [ 194.843081][ T4200] kmem_cache_alloc+0x100/0x290 [ 194.847920][ T4200] getname_flags+0xb5/0x500 [ 194.852417][ T4200] user_path_at_empty+0x2a/0x190 [ 194.857567][ T4200] __x64_sys_umount+0xf9/0x170 [ 194.862344][ T4200] do_syscall_64+0x4c/0xa0 [ 194.866794][ T4200] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 194.872705][ T4200] [ 194.875020][ T4200] Memory state around the buggy address: [ 194.880640][ T4200] ffff88807814db00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 194.888697][ T4200] ffff88807814db80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 194.896856][ T4200] >ffff88807814dc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 194.904920][ T4200] ^ [ 194.909253][ T4200] ffff88807814dc80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 194.917305][ T4200] ffff88807814dd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 194.925378][ T4200] ================================================================== [ 194.933429][ T4200] Disabling lock debugging due to kernel taint [ 194.946191][ T4200] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 194.953490][ T4200] CPU: 0 PID: 4200 Comm: kworker/u5:7 Tainted: G B syzkaller #0 [ 194.962430][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 194.972478][ T4200] Workqueue: hci0 hci_rx_work [ 194.977158][ T4200] Call Trace: [ 194.980441][ T4200] [ 194.983395][ T4200] dump_stack_lvl+0x188/0x250 [ 194.988082][ T4200] ? show_regs_print_info+0x20/0x20 [ 194.993313][ T4200] ? load_image+0x400/0x400 [ 194.997853][ T4200] panic+0x2e5/0x810 [ 195.001783][ T4200] ? bpf_jit_dump+0xd0/0xd0 [ 195.006316][ T4200] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 195.012315][ T4200] ? _raw_spin_unlock+0x40/0x40 [ 195.017189][ T4200] ? hci_le_meta_evt+0x1324/0x3c90 [ 195.022315][ T4200] check_panic_on_warn+0x80/0xa0 [ 195.027252][ T4200] ? hci_le_meta_evt+0x1324/0x3c90 [ 195.032351][ T4200] end_report+0x6d/0xf0 [ 195.036521][ T4200] kasan_report+0x102/0x130 [ 195.041017][ T4200] ? hci_le_meta_evt+0x1324/0x3c90 [ 195.046132][ T4200] hci_le_meta_evt+0x1324/0x3c90 [ 195.051108][ T4200] ? hci_remote_host_features_evt+0x280/0x280 [ 195.057192][ T4200] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 195.062826][ T4200] ? mark_lock+0x94/0x320 [ 195.067147][ T4200] ? mutex_unlock+0x10/0x10 [ 195.071645][ T4200] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 195.077624][ T4200] ? lock_chain_count+0x20/0x20 [ 195.082477][ T4200] ? __rwlock_init+0x140/0x140 [ 195.087236][ T4200] hci_event_packet+0xe48/0x1370 [ 195.092176][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 195.097383][ T4200] ? rcu_lock_release+0x20/0x20 [ 195.102247][ T4200] ? hci_send_to_monitor+0x9c/0x4a0 [ 195.107439][ T4200] hci_rx_work+0x255/0xa10 [ 195.111857][ T4200] process_one_work+0x85f/0x1010 [ 195.116896][ T4200] ? worker_detach_from_pool+0x240/0x240 [ 195.122524][ T4200] ? lockdep_hardirqs_off+0x70/0x100 [ 195.127849][ T4200] ? _raw_spin_lock_irq+0xb7/0xf0 [ 195.132862][ T4200] ? _raw_spin_lock_irqsave+0x100/0x100 [ 195.138414][ T4200] ? wq_worker_running+0x97/0x170 [ 195.143444][ T4200] worker_thread+0xaa6/0x1290 [ 195.148118][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 195.153325][ T4200] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 195.159212][ T4200] kthread+0x436/0x520 [ 195.163274][ T4200] ? rcu_lock_release+0x20/0x20 [ 195.168118][ T4200] ? kthread_blkcg+0xd0/0xd0 [ 195.172703][ T4200] ret_from_fork+0x1f/0x30 [ 195.177115][ T4200] [ 195.180276][ T4200] Kernel Offset: disabled [ 195.184609][ T4200] Rebooting in 86400 seconds..